If a scammer got a gift-card number or PIN, act before organizing a perfect evidence file. Call the gift-card issuer using the number on the card or the issuer's official website. Then notify the bank, card company, or payment service used for the purchase. Keep the card, receipt, messages, and balance information, and report the fraud.
Recovery isn't guaranteed. Still, a prompt report may give the issuer a chance to protect funds that haven't been spent.
The Federal Trade Commission's gift card guidance describes scams that begin with calls, texts, emails, social media messages, or impersonation. The story may involve an emergency, a prize, a government agency, or a business. The demand is the warning sign: legitimate government agencies and businesses don't require gift cards as payment.
The first steps after a gift card scam
-
End the conversation with the scammer. Don't buy another card, send another code, or pay someone who promises to recover the money. Save the messages before blocking the number or account.
-
Call the gift-card issuer. Use the contact information printed on the card or find the issuer's website by typing the address yourself. Tell the representative that you bought or used the card after being deceived. Give the card details only through the issuer's official, secure process. Ask whether the issuer can freeze remaining funds, review redemption activity, or open a fraud case.
-
Notify the payment provider. Contact the bank, credit card company, credit union, or online payment service used to buy the card. Explain exactly what happened. There's a difference between buying a card yourself after being tricked and having someone use your account without permission; don't describe an authorized purchase as unauthorized.
-
Secure any exposed accounts. Change a password if you gave the scammer login information, and turn on multifactor authentication where available. If the scammer received bank or account details, contact the financial institution immediately and check for transactions you don't recognize.
-
Save the evidence. Keep the receipt, card images, messages, call logs, emails, account details, and balance results together. Don't post the full card number or PIN in a public complaint, social media post, or ordinary email.
-
File reports. Report the incident to the FTC. If it involved email, a website, social media, online impersonation, or another internet-based element, file with the FBI's Internet Crime Complaint Center, or IC3. Local police and the platform where the contact occurred may also need a report.
Evidence to collect
Different organizations will ask for different records. The issuer generally needs to identify the card and confirm the purchase, while a police or online-crime report benefits from a clear timeline.
| Evidence | What to save | Why it helps |
|---|---|---|
| Purchase records | Receipt, activation receipt, order confirmation, store or website, date, time, amount, and payment method | Links the card to the purchase |
| Card information | Photos of the front and back, brand, serial number, card number, and balance result | Helps the issuer locate and review the card |
| Scam communications | Screenshots, original emails, texts, voicemails, call logs, phone numbers, caller ID, profiles, and attachments | Shows what the person claimed and demanded |
| Online identifiers | Profile name, account URL, email address, website address, payment instructions, and transaction IDs | Preserves the digital trail |
| Account and payment records | Bank or card statement, payment confirmation, unauthorized-transaction notice, and account-security alerts | Shows how the purchase was paid for and whether another transaction occurred |
| Reports and recovery attempts | Issuer case number, claim confirmation, emails, balance checks, written decisions, and police or agency report numbers | Documents the steps you took |
| Timeline and statement | A short account of who contacted you, what they said, what you did, and when you recognized the fraud | Gives the issuer or agency a readable summary |
If the receipt is gone, report the scam anyway. Tell the issuer the brand, approximate purchase date, store or website, amount, card number, serial number, and any bank or credit card statement showing the purchase.
Preserve the records without changing them
Create one folder with sections for purchases, communications, account activity, reports, and recovery attempts. Names such as 2026-03-03-issuer-case-email.pdf and 2026-03-03-text-message-1.png make the file easier to sort.
A few details matter:
- Keep the original email, message, attachment, or downloaded file when possible.
- Take screenshots that include the surrounding conversation, sender information, date, time, and account name. A cropped image can be a convenient copy, but keep the uncropped version too.
- Export emails or save them as files rather than relying only on screenshots.
- Note the time zone. If the exact time isn't known, mark it as an estimate instead of guessing.
- Separate what happened from what you assume. For example, write “the caller claimed to be from my utility company,” not “my utility company called,” unless you verified the caller independently.
- Keep a backup in a secure location. Don't send your only copy to the issuer, bank, or agency.
- Existing voicemails and call logs can be useful. Don't secretly record a new call unless you know recording is lawful where you and the other person are located.
- Don't log in to the scammer's accounts, threaten the person, or try to retrieve the money yourself.
The file doesn't need to look like a legal brief. A dated, consistent record is more useful than a collection of dramatic screenshots with no context.
A basic scam timeline
Write down the events while they're still fresh. This format is enough:
| Date and time | Event | Supporting record |
|---|---|---|
| [Date, time, time zone] | [The caller, account, or email claimed to be a relative, agency, employer, or business] | [Call log, message, email, or profile] |
| [Date and time] | [You bought a card at a store or online] | [Receipt, order confirmation, or statement] |
| [Date and time] | [You sent, read, or entered the card number or PIN] | [Message, email, call log, or website record] |
| [Date and time] | [You checked the balance or learned the card had been used] | [Issuer page, email, or screenshot] |
| [Date and time] | [You contacted the issuer, bank, police, FTC, or IC3] | [Case number, confirmation, or call notes] |
If you don't know an exact time, say “approximately” or leave the time uncertain. An honest estimate is better than a precise guess.
Where to report the scam
These reports serve different purposes. Filing with one organization doesn't replace contacting the gift-card issuer or the payment provider.
Gift-card issuer
The issuer is the first recovery contact because it manages the card account. Have the card and purchase information ready, and ask for:
- A fraud case or reference number
- A review of the card's redemption activity
- A hold or block on any remaining balance, if available
- Instructions for sending the receipt and card images
- The next step if the balance has already been redeemed
A retailer may have its own fraud process, especially when the card was bought in a store or appeared to have been tampered with. Report to the retailer as well, but don't rely on that report instead of contacting the issuer.
Federal Trade Commission
File at ReportFraud.ftc.gov. Include the scammer's story, contact details, dates, amounts, card brand, payment method, and the steps you've already taken. Follow the form's instructions about supporting documents.
An FTC report helps identify patterns and supports enforcement work. It isn't a refund request, and you shouldn't expect the FTC to investigate your individual loss or provide a case update. Contact the issuer and financial institution separately.
For additional recovery steps, see the FTC's guidance on what to do after being scammed.
Internet Crime Complaint Center
Use the IC3 complaint site when the scam included email, a website, social media, online impersonation, or another internet-based element. Include the timeline, payment information, digital account details, and records you've kept. IC3 doesn't guarantee a response or recovery.
Type the address yourself rather than following a link from a stranger or search result. IC3 has warned about AI-generated videos impersonating FBI personnel and fake sites that collect complaints. Its warning about impersonation schemes and spoofed IC3 sites explains why the address needs to be checked carefully.
Local police
Contact your local police department if you need an incident number, the loss is substantial, the scam involved theft or an account intrusion, or the person is known to you. Bring copies of the receipt, timeline, communications, and issuer records. Ask for the report or incident number and the correct follow-up contact.
A police report creates a record, but police procedures and investigative decisions vary by location. It doesn't guarantee an arrest or refund.
Retailer or online platform
Report the phone number, account, listing, message, or website to the company where you encountered the scam. Save the confirmation. The platform may remove the account or preserve a report, but its process doesn't replace reports to the issuer, bank, FTC, or IC3.
How recovery requests work
Start with the gift-card issuer
You can use wording like this:
On [date], I bought a [brand] gift card for [$ amount] at [store or website]. A person who claimed to be [identity] pressured me to share the card number or PIN. I realized it was a scam on [date]. Please open a fraud case, check whether any balance remains, and tell me what documents you need for a recovery review. I have the receipt and card images.
The issuer may be able to investigate or recover money that hasn't been spent. It may decline a refund if the balance was already redeemed or if its review doesn't support recovery. Ask for the decision in writing and keep the case number.
Tell the bank or card company how the purchase happened
The payment rail affects the next step:
- Credit card: Ask the card issuer whether its billing-dispute process applies. A purchase you made yourself after being deceived isn't automatically the same as an unauthorized card transaction.
- Debit card: Contact the bank or credit union immediately. If someone used the debit card or account without permission, say that plainly. If you personally bought the gift card, describe the deception instead of mislabeling the transaction.
- Cash: There generally isn't a card transaction for the bank to reverse. The gift-card issuer, retailer, and law-enforcement reports become especially important.
- Online account or payment service: Use the provider's official app or website and ask about its fraud process. Don't use a recovery link supplied by the scammer.
Send only the documents the bank or card company requests, and keep copies of everything you submit. Note the date of each call and ask for a claim or confirmation number. There is no universal chargeback guarantee simply because a scammer received the gift-card code.
Reporting templates
Message to the issuer or bank
I am reporting a gift card scam. On [date and time], I purchased [brand and amount] at [merchant]. The person contacting me claimed to be [description] and instructed me to [what they demanded]. I shared [card number, PIN, or other information] on [date and time]. I have [receipt, card photos, messages, and balance information]. Please open a fraud case and tell me the secure process for submitting evidence.
Summary for the FTC, IC3, or police
On [date], I was contacted through [phone, email, website, or social media] by a person using [name, number, email, profile, or website]. The person claimed [short factual description] and demanded payment with gift cards. I purchased [number and value of cards] at [merchant] and shared the codes by [method]. I discovered the fraud when [event]. I reported it to [issuer or bank] on [date], and the case number is [number]. I have retained the related records.
Don't guess at the scammer's real identity. Report the name, phone number, email, profile, website, or other identifier exactly as it appeared.
What won't guarantee a refund
A police report, FTC complaint, IC3 complaint, screenshot, or payment dispute can support a claim, but none guarantees repayment. The gift-card issuer makes its own recovery decision. The bank or card issuer separately decides whether the payment dispute fits its process and the facts you provide.
Be wary of anyone who offers to recover the money for an upfront fee. A demand for another gift card, cryptocurrency, wire transfer, or bank login is often a second scam.
Common questions
Should I report the scam if the gift-card balance is already zero?
Yes. Contact the issuer, save the balance result and any redemption information, notify the payment provider, and file the appropriate reports. A zero balance doesn't prove that recovery is impossible, but waiting can make the review harder.
Do I need the scammer's real name?
No. Use the identity the person claimed, along with the phone number, email, profile, website, payment instructions, and other identifiers. Don't delay a report while trying to identify the person.
Can I get a chargeback for a gift-card scam?
You can ask the bank or card issuer about a dispute, but approval isn't automatic. The result can depend on how the payment was made, whether you authorized the purchase, the merchant and issuer's procedures, and the evidence available. Describe the transaction accurately.
What if the scammer used a fake FBI or IC3 website?
Save the fake address, messages, screenshots, and account details. Then enter the official IC3 site yourself and submit the report there. Don't provide more information through the suspicious site.