An identity theft report doesn't create a universal refund. In the U.S., recovery depends on what happened and how the money moved: an unauthorized credit card charge, an unauthorized debit or electronic transfer, a fraudulent account opened in your name, or a payment you were tricked into authorizing.

Act quickly, contact the company that handled the payment, and use the correct dispute process. A retailer's refund policy is separate from your rights with a bank or card issuer.

Quick steps to recover money after identity theft

1. Secure the affected accounts. Call your bank, card issuer, payment app, or retailer using a number from an official statement or website. Lock cards, change exposed passwords, sign out unknown devices, and enable multifactor authentication.
2. Report the identity theft. File at IdentityTheft.gov to create a free recovery plan and obtain an identity theft report you can share with businesses.
3. Dispute each unauthorized transaction. Tell the payment provider exactly which charge or transfer you didn't authorize. Follow up in writing and keep copies.
4. Freeze your credit. Place a security freeze with Equifax, Experian, and TransUnion. Review all three reports for new accounts, inquiries, and unfamiliar addresses.
5. Contact merchants and creditors. Ask retailers to cancel fraudulent orders and creditors to close accounts that aren't yours.
6. Track deadlines and case numbers. A report to the FTC or police doesn't replace a bank's dispute notice, and it doesn't stop the applicable deadline.
7. Escalate a denial. Request the decision and supporting evidence in writing, then use the institution's complaint process and the appropriate regulator.

What kind of identity theft refund claim do you have?

The payment method usually determines the first step and the available protections.

These are different processes. Don't assume that a retailer's customer-service decision determines whether your bank must investigate an unauthorized charge.

Report the identity theft and preserve evidence

Use IdentityTheft.gov even if the loss came from a familiar retailer or financial institution. The FTC's report and recovery plan can help show businesses that someone used your information without permission. It isn't a court ruling, and the FTC doesn't guarantee that a bank or retailer will issue a refund.

Report online crime to the Internet Crime Complaint Center when appropriate. A local police report may also help if a business, creditor, insurer, or law-enforcement agency asks for one.

Create a timeline containing:

• The date you discovered the problem
• Each unauthorized charge, transfer, account, or order
• The dates and names of everyone you contacted
• Claim, case, and confirmation numbers
• Copies of emails, letters, statements, screenshots, and account alerts
• Evidence that your account, email, phone number, or device was compromised

Keep original documents and send copies unless the recipient specifically requires an original. Don't email passwords, one-time codes, or a complete Social Security number unless a legitimate organization gives you a secure and necessary method.

Dispute an unauthorized credit card charge

Call the card issuer immediately to block the card and report the charge. Then send a written dispute to the issuer's billing inquiries address, which may be different from the payment address on your statement.

For a strong dispute, include:

• Your name and account number, or the last four digits
• The transaction date and amount
• The merchant name
• A clear statement that you didn't authorize the charge
• The date you discovered it
• Copies of relevant evidence, such as an FTC identity theft report

The federal credit card billing-error process generally requires written notice within 60 days after the statement containing the disputed charge was sent. The issuer generally must acknowledge a written notice within 30 days and resolve the investigation within two billing cycles, with a 90-day maximum in many cases.

You can use the FTC sample letter for disputing credit and debit card charges as a starting point. Continue paying the part of the bill you don't dispute. Ask the issuer whether any temporary credit is provisional; it may be reversed if the investigation concludes that the charge was valid.

Many card networks and issuers advertise zero-liability policies, but those policies aren't the same as federal law and may have conditions. Report the charge promptly anyway.

Dispute unauthorized debit, ACH, and electronic transfers

Contact your bank or credit union as soon as you notice an unauthorized debit, ATM withdrawal, ACH transaction, or other electronic transfer. Ask the bank to:

• Freeze or close the affected account if account credentials were exposed
• Replace the debit card or access device
• Open an electronic-transfer error investigation
• Explain whether it needs written confirmation
• Tell you whether any temporary credit is available
• Provide a case number and the deadline for additional documents

Timing matters under federal electronic-transfer rules. If a lost or stolen access device is involved, reporting within two business days can limit potential liability. The 60-day period after the statement showing an unauthorized electronic transfer is another deadline. Waiting can increase the amount at risk, so report the problem even if you don't yet have every document.

A debit card's Visa or Mastercard logo doesn't guarantee that the credit card rules apply. Debit cards, ACH transfers, prepaid accounts, and payment apps can follow different federal rules and account agreements.

When a scam payment may not be considered unauthorized

A scammer may impersonate a bank employee, government agency, or relative and persuade you to send money yourself. That transaction can be treated differently from a transfer made without your permission.

Tell the bank and payment provider exactly what happened. Don't describe an authorized payment as unauthorized just to improve the claim. Ask whether the provider can recall or reverse the transfer and what dispute process applies. Recovery isn't guaranteed, particularly after a wire or a completed payment-app transfer, but an immediate report may give the provider more options.

Deal with fraudulent retailer orders and refunds

Contact the retailer through its official website or app. Ask it to:

• Cancel an unshipped fraudulent order
• Close or secure the compromised customer account
• Remove saved payment details and unauthorized addresses
• Confirm in writing that the order and account activity were reported as fraud
• Send any approved refund back to the original payment method

Don't accept instructions from an unknown caller or email address to move a refund to a new account. If the retailer says it already issued a refund, request the date, amount, and refund reference number. Give that information to your card issuer or bank if the credit doesn't appear.

A retailer may investigate the order under its own fraud and refund policy. That decision doesn't replace your right to dispute an unauthorized transaction with the payment provider. Conversely, filing a bank dispute doesn't authorize you to keep merchandise or make a false claim. Follow the retailer's legitimate return or recovery instructions.

Remove accounts and debts created with your information

If someone opened a credit card, loan, utility account, phone account, or shopping account in your name, contact the business's fraud department. Ask for the account to be closed, the balance to be removed, and written confirmation that you aren't responsible.

Check your credit reports for:

• Accounts you never opened
• Hard inquiries you don't recognize
• Incorrect names, addresses, or employers
• Collection accounts tied to fraudulent accounts
• New payment histories or balances

Dispute inaccurate information with the credit bureau and the company that supplied it. The FTC's guidance on disputing credit-report errors explains what to include and why documentation matters. A credit-report dispute is separate from a charge dispute, so complete both when necessary.

A credit freeze helps stop new creditors from accessing your report, but it won't remove existing accounts or reverse charges. Place the freeze separately with all three nationwide credit bureaus, and continue checking your reports after the immediate problem is resolved.

What to include in a written dispute

Use plain, specific language. Here's an example:

On [date], I identified a transaction of [$amount] from [merchant] on my account ending in [last four digits]. I didn't authorize this transaction and didn't receive any benefit from it. Please investigate the error, remove the charge or transfer if appropriate, and confirm the result in writing. I've enclosed copies of my supporting documents.

Attach copies of the statement page, identity theft report, police report if relevant, and any account or delivery records that support your timeline. Send the dispute through the issuer's required channel and keep proof of submission.

If you were tricked into approving the payment, change the wording to describe the deception accurately. The provider needs to know whether the transaction was made without your involvement or whether you were manipulated into sending it.

If the bank or retailer denies the refund

A denial isn't the end of the process, but don't let an appeal delay you past another deadline.

1. Ask for the denial in writing. Request the reason, the evidence relied on, and the date of the decision.
2. Check the facts. Look for an incorrect transaction date, an account-access record you can explain, or a missed document.
3. Submit a focused response. Include a short timeline and only the evidence that addresses the reason for denial.
4. Ask for a supervisor or formal reconsideration. Follow the institution's appeal instructions.
5. File a regulator complaint if appropriate. For a bank matter, the FDIC Consumer Complaint Process explains how to contact the bank, verify its regulator, and submit a complaint. FDIC says its Consumer Response Unit generally responds within 14 days; that's a complaint-handling timeframe, not a promise that the money will be refunded.
6. Consider professional help for a major loss. A consumer-protection attorney or legal-aid organization may help evaluate a disputed liability claim.

A regulatory complaint can encourage a response, but it doesn't replace the original dispute, guarantee a particular result, or extend a statutory deadline.

Avoid identity theft recovery scams

People who've already lost money are often targeted again. Be suspicious of anyone who:

• Guarantees a full refund or claims special access to the FTC, FBI, or your bank
• Demands an upfront fee, gift card, cryptocurrency, or wire transfer
• Requests your bank password, one-time code, or remote access to your device
• Tells you to use a stolen card, create a false dispute, or lie to an investigator
• Sells a "refund kit" containing stolen account information

IdentityTheft.gov is free. A legitimate bank, government agency, or retailer won't need your password or ask you to send money to release a refund.

Frequently asked questions

Does an FTC identity theft report guarantee a refund?

No. It supports your recovery effort and may help prove the theft to a business, but the bank, card issuer, payment provider, or creditor still investigates the specific claim.

How quickly should I report an identity theft charge?

Immediately. Credit card billing-error rules generally use a 60-day window tied to the statement date. Electronic-transfer protections can depend on even shorter notice periods, especially when a card or access device was lost or stolen.

Can I get a refund if I authorized a payment because of a scam?

Possibly, but not under the same analysis as a transaction made without your permission. Report it immediately, request a recall or reversal, and explain exactly how the scam worked. The provider's policy, the payment type, and the facts will matter.

Should I contact the retailer or the bank first?

Contact the bank or payment provider immediately to protect the dispute deadline. Contact the retailer as well if there was a fraudulent order, compromised account, or promised merchant refund.

Is there a standard identity theft refund success rate?

No reliable universal percentage applies to every identity theft claim. Results vary by payment method, notice timing, evidence, account agreement, and whether the transaction was unauthorized or scam-induced. Treat anonymous forum claims and "guaranteed recovery" offers as warning signs.