Scammers often show their hand before a payment goes out: they create urgency, change recipient details, send a fake bank alert, or tell you to move funds to a "safe account."
If the money is gone, call the institution that sent it now. Ask whether it can stop, recall, or return the transfer. Do not wait for the sender to explain.
The payment rail and your authorization status shape what happens next. Regulation E may cover some unauthorized electronic fund transfers from consumer accounts. A payment you approved after a scammer persuaded you may be reviewed under a different standard.
The information here is for U.S. consumers. Business accounts, commercial wires, and some international payments may follow different rules.
Red flags before you send money
Urgency cuts off your chance to check the story. A scammer may also try to isolate you from your bank or family.
Pause when you see any of these signs:
- A caller, seller, employer, romantic contact, or supposed official says payment must happen immediately.
- The recipient's account or routing details change at the last minute.
- Someone directs you to move money to a "safe account."
- You must pay a tax, fee, deposit, or processing charge before receiving money.
- A sender makes an overpayment and asks you to send the extra amount back.
- A familiar logo appears in a message from an unrelated email address or phone number.
- The sender tells you not to call your bank or discuss the transfer with anyone.
- An emailed confirmation arrives, but the transaction does not appear in your banking app or statement.
A polished PDF proves very little. Verify the recipient independently through a phone number or website you already trust, not through the message that requested payment.
Identify the payment rail first
Start with the transaction record. The label can affect the procedure.
Turns out, an ACH debit and a traditional wire do not follow the same path.
| Payment rail | What usually matters | First step |
|---|---|---|
| ACH debit or another electronic transfer from a personal account | Whether you authorized it, when you noticed it, and whether Regulation E applies | Call the bank or credit union |
| P2P app payment | Whether you approved the payment, how the account was accessed, and the app's dispute process | Report it to the app and the bank |
| Domestic or international wire | Whether the wire is still pending, the beneficiary details, and the sending bank's recall process | Call the sending bank's wire or fraud team |
| Business or commercial account | The account agreement and commercial fraud procedures | Contact the bank's commercial fraud team |
Read the entry before filing a claim. If you cannot identify the rail, ask the institution to identify it and explain the dispute procedure it is applying. Don't apply ACH timing automatically to a traditional wire.
Report the transfer before debating the scam
Call the financial institution that sent the money first, using the number on your card, statement, or official banking website. A number in the suspicious message may lead straight back to the scammer.
- Stop further payments. Do not send another payment to release a refund or unlock an account.
- Give the transaction facts. Provide the date, amount, recipient, transaction number, and when you realized something was wrong.
- Ask about available action. Depending on the rail, ask whether the institution can seek a return, recall the payment, place a hold request, or contact the receiving institution.
- Notify the payment app too. If a P2P service handled the payment, use its in-app fraud process as well as notifying your bank.
- Secure connected accounts. From a clean device, change banking and email passwords, end unfamiliar sessions, and turn on multifactor authentication.
- Make other reports when appropriate. The FTC's scam guidance describes reporting options. You can also file with the FBI's Internet Crime Complaint Center and contact local police if identity theft or a substantial loss is involved.
Write down the claim number and representative's name. Move quickly, but keep notes.
The Regulation E deadlines that may matter
Regulation E is narrower than many scam warnings suggest. It can limit liability for an unauthorized electronic fund transfer, but the rule must fit both the transaction and the account.
Timing matters.
| When you notify the institution | Possible effect under the rule |
|---|---|
| Within two business days after learning that an access device was lost or stolen | Liability generally cannot exceed the lesser of $50 or the unauthorized transfers made before notice |
| After two business days but within 60 days after the statement showing the transfer | Potential liability can rise, generally subject to the lesser-of-$500 calculation and the rule's conditions |
| More than 60 days after the statement | Later unauthorized transfers may become your responsibility if the institution can show that timely notice would have prevented them |
That first deadline is specific. It concerns learning that an access device was lost or stolen, not every bank scam.
The CFPB's Regulation E liability rule describes these limits. A bank may also ask you to confirm an error in writing. If you fail to provide requested written confirmation within 10 business days, the bank may not have to provide temporary credit during its investigation. The CFPB explanation of unauthorized transactions covers additional investigation and temporary-credit rules.
These provisions address liability and error resolution. They do not guarantee a refund for every scam payment.
Describe exactly what happened
Tell the bank what happened in plain terms. If you did not authorize the electronic fund transfer, say so directly.
If you pressed send because someone deceived you, explain that sequence instead. Thing is, describing an authorized payment as unauthorized can weaken your credibility.
Ask whether the institution is treating the report as an unauthorized transaction, an authorized scam payment, an account takeover, or another claim type. That category may change the review.
Build an evidence file
Start while the details are fresh. A dated timeline should show when contact began, when payment was requested, when you sent the money, and when you reported the problem.
| Evidence | What to save |
|---|---|
| Transaction record | Statement page, confirmation, amount, date, time, and reference number |
| Recipient information | Name, account or routing details, phone number, email, website, and any wallet address |
| Communications | Full email threads, text messages, chat history, call logs, and message headers when available |
| Your timeline | When contact began, when payment was requested, when you sent it, and when you reported it |
| Bank communications | Claim number, representative names, written responses, and instructions you followed |
| Account-security details | Login alerts, password changes, unusual devices, and evidence that someone accessed the account |
Keep the original files and make copies for working notes. Export complete conversations where possible, because a cropped screenshot can hide transaction details or the surrounding message. Label the files by date if the folder starts getting crowded.
Recovery depends on the payment type
Recovery depends heavily on the rail, the timing, and whether the funds remain available. To be honest, nobody can give a reliable recovery percentage from reporting speed alone.
| Situation | Ask for | Main limitation |
|---|---|---|
| Unauthorized ACH debit or account takeover | A formal fraud or Regulation E review | Eligibility, notice timing, account type, and the facts matter |
| Wire sent to a scammer | A wire recall, return request, or hold inquiry | The bank cannot guarantee that funds remain in the receiving account |
| P2P payment approved after deception | A review by the app and the funding bank | The provider may classify the payment as authorized |
| Cryptocurrency used in the scheme | Immediate contact with the exchange or service | A bank generally cannot reverse a blockchain transaction |
| Gift card used to pay | Immediate contact with the gift card issuer | The issuer may need the card number and purchase receipt |
An approved payment can be difficult to recover. If the bank denies the claim, request the decision in writing. Ask which facts or policy controlled the decision, then send a concise chronology with supporting records.
Common questions after a suspicious transfer
Does every bank transfer have a 24-hour dispute deadline?
No. Federal law does not set one 24-hour dispute deadline for every transfer type.
Call immediately anyway. A recall or hold may depend on where the funds are in the payment process.
Can I dispute a transfer I approved because of a scam?
Yes, report it and ask for a review. Because you approved the payment, the bank or app may classify it as authorized, so the same protections may not apply as they would after an account takeover or unauthorized ACH debit.
Does Regulation E automatically cover Zelle or another P2P app?
Not every P2P payment receives the same Regulation E treatment. The funding source, account type, access method, and whether you approved the payment can all matter. Report it to both the app and your bank, then ask which dispute category they are using.
Is an emailed transfer confirmation proof that payment went through?
No. Check the bank app or statement, then call through an official number. Do not send more money because someone says the first transfer failed.
What if a recovery company contacts me?
Be cautious if it asks for an upfront fee, your banking password, or remote access to your device. A second payment request does not show that the company can recover the first loss.
If money left your account today, open the account record, copy the transaction number, and call the official number for the sending institution. Ask which payment rail and claim category apply, then write down the claim number before the call ends.