Urgency, secrecy, changed payment instructions, and an unverified recipient are strong reasons to stop. Before sending anything, close the message and call your bank through its app or a number you already trust. Pause there.
Emails can be fake. So can caller ID, logos, social profiles, familiar voices, and investment dashboards. Scammers also spoof calls, take over accounts, and send false invoices. The payment route matters too: an unauthorized electronic transfer, an approved wire, and an international remittance can involve different procedures. This information is for U.S. consumers.
Start with these bank transfer scam red flags
One warning sign may have an innocent explanation. Several together deserve a full stop. Use the table as a reason to verify, not as a test you have to pass.
| Warning sign | Typical version | Safer response |
|---|---|---|
| Urgency or secrecy | "Send it in the next 10 minutes" or "Don't tell anyone yet" | Stop and verify through a separate channel |
| New payment details | A vendor, landlord, relative, or employer suddenly changes account information | Call a known number before using the new details |
| Unfamiliar recipient | A new name, foreign account, personal account, or wallet appears in the instructions | Confirm who owns the destination account |
| Overpayment or refund request | Someone sends too much and asks you to return the difference | Don't refund money based on a screenshot or pending credit |
| Unusual payment route | A bank transfer replaces an ordinary invoice or protected checkout | Ask why and use a documented payment process |
| Login or code request | A message asks for your password, one-time passcode, or remote access | Close the message and open your bank app yourself |
Why these signs deserve a pause
Pressure dressed up as an emergency
Pressure is a tactic, not proof. The story may involve a hospital bill, missed closing, frozen account, or angry manager.
A real emergency can still be real. The demand still needs verification. A legitimate business or family member should tolerate a brief check through a trusted number.
A familiar name is not proof
Caller ID is not identity. Neither is a social profile, display name, or text message. Accounts can be taken over, too.
Turns out, a voice that sounds right is still not independent verification. Call the person or business using a number from an old statement, contract, official website, or your own contacts. Don't use the number in the new message.
Payment details that suddenly change
Treat a revised payment instruction as a new request. Scammers may pose as a supplier and claim the regular account is closed, under review, or unavailable.
Compare the new details with the original invoice or agreement. Check the name, account number, routing information, amount, and purpose. One changed digit can redirect the money.
Overpayments and "test" payments
An unexpected credit may not be final. It could be fraudulent, disputed, or pending.
Never return part of an overpayment to another account, wallet, gift card, or courier. Contact your bank first and follow its instructions.
Guaranteed returns and crypto detours
Investment pitches often promise unusually high or fixed returns with little risk. A private "broker" may show a balance growing on a fake dashboard, then demand a tax, fee, or extra deposit before you can withdraw.
A personal account or crypto wallet used to "unlock" funds is a serious warning sign. Don't send more money to recover money already sent.
How to verify a transfer request before paying
The sender shouldn't supervise the verification. Work through the request independently, even if the payment seems urgent.
- End the exchange. Stop replying, close the message, and don't click links or attachments. If you're on a call, hang up before checking anything.
- Open the original record. Compare the name, account number, routing details, amount, and purpose with a contract, earlier invoice, or prior payment.
- Use a known contact method. Call the business, relative, or employer using a number found independently. Don't reply to the suspicious message.
- Bring in another person. A trusted colleague or family member may spot a mismatch that pressure helped you miss.
- Ask your bank about its process. It may explain approval controls, available safeguards, or recall options. It can't guarantee that the recipient is honest.
- Choose the payment method carefully. For a purchase or contractor, consider escrow or a method with a dispute process if it fits the transaction. Don't accept an irreversible method without a clear reason.
- Save the records. Keep the invoice, messages, phone numbers, account details, receipts, and notes about how you verified the request.
A video call from the same suspicious conversation proves little. Use an independent channel.
The payment method changes your options
"Bank transfer" can describe several payment rails. Their fraud procedures and legal protections aren't interchangeable.
| Payment method | What to know | Immediate step |
|---|---|---|
| ACH or another electronic transfer | Certain unauthorized electronic transfers from consumer accounts may fall under Regulation E. A payment you approved after deception can be treated differently. | Notify the bank quickly and explain exactly what happened |
| Bank wire | A processed wire may be difficult to reverse, but the bank can tell you whether a recall or trace remains possible | Contact the sending bank's fraud department immediately |
| P2P app such as Venmo or Zelle | The app, linked bank account, and funding card may each have different reporting procedures | Report the transaction in the app and contact the linked financial institution |
| International remittance | Certain consumer remittance transfers have cancellation procedures and required disclosures | Check the receipt and ask the provider about cancellation immediately |
For certain international remittances, the CFPB's cancellation and refund rule requires the provider to put an abbreviated cancellation notice on the receipt and make a fuller notice available on request. A cancellation request must identify the sender and the particular transfer. Eligibility and timing still matter.
What Regulation E does and does not decide
Regulation E is not a blanket refund promise. It covers certain unauthorized electronic fund transfers from consumer accounts, so the payment rail and facts matter.
If you notify the financial institution within two business days after learning that an access device was lost or stolen, the CFPB's Regulation E liability rule generally limits liability to the lesser of $50 or the unauthorized transfers made before notice. Report it quickly.
Notice after two business days can raise the exposure. Under the rule's conditions, a separate cap can be as high as $500 for transfers before notice.
The rule also uses a 60-day statement window. After a statement shows an unauthorized transfer, later transfers may become the consumer's responsibility if the institution establishes that earlier notice would have prevented them.
Those deadlines don't decide every scam. If you approved a payment because someone deceived you, the bank may classify it as authorized. Thing is, waiting to choose the most favorable label wastes time. Tell the bank exactly what happened and ask which process applies.
Scam patterns by situation
Scammers change the story, but their payment requests often repeat. Verify the recipient and the reason for payment separately.
| Situation | Common warning signs | What to verify |
|---|---|---|
| Romance or online relationship | A new partner needs money for medical care, travel, customs, legal fees, or an emergency | The person's identity, location, and story through sources unrelated to the relationship |
| Investment or crypto offer | Guaranteed returns, a private "broker," a fake balance, or a fee required before withdrawal | The firm, registration, account owner, and destination of the funds |
| Business email impersonation | A boss or vendor demands a secret wire or changes bank details | The request through a known phone number and your normal approval process |
| Marketplace overpayment | A buyer sends too much, asks for a refund, or wants you to pay a shipper | Whether the payment has cleared and whether the transaction is genuine |
| Family emergency | A caller claims to be a relative and asks for immediate help | A private question, a second contact, or a call to the relative's known number |
A polished message can still point to a fake recipient. Familiarity cannot verify ownership.
If you already sent the money
Call the sending institution now. Embarrassment can wait.
The FTC's scam-payment guidance advises contacting your bank or credit union promptly and asking what recovery steps are available. Use the official app, your card, or a statement to find the number.
| Action | What to do |
|---|---|
| Call the sending institution | Say whether you approved the payment, whether someone accessed the account, and when the transfer occurred. Ask about a recall, freeze, reversal, or fraud claim. |
| Contact the receiving service | For a remittance, ask the provider about cancellation. For cryptocurrency, contact the exchange or service used to send the funds. |
| Secure exposed accounts | Change banking and email passwords from a trusted device, sign out of unfamiliar sessions, and turn on multifactor authentication. If you gave someone remote access, have the device checked. |
| Preserve the evidence | Keep messages, emails with full headers, receipts, account details, wallet addresses, caller information, screenshots, and a timeline. |
| Report the scam | File a report with the FTC and consider contacting local law enforcement. Give the bank the report details if it requests them. |
| Ignore recovery offers | Someone may promise to recover your money for an upfront fee. Don't pay or share more account information. |
To be honest, recovery is never guaranteed. The sooner the institution gets the details, the sooner it can tell you which process applies.
Common questions
Can a bank transfer be reversed?
Sometimes. Don't assume it can.
Contact the sending institution immediately and ask whether it can place a recall, stop, or fraud review on the transfer. A processed wire may be difficult to reverse.
Does being scammed make a payment unauthorized?
Not automatically. The key question is often whether someone accessed the account or payment method without permission, or whether you approved the transfer after being deceived.
Tell the bank exactly what happened. Don't choose the label that sounds most favorable.
Should I send a small test payment first?
A test payment doesn't prove the recipient is legitimate. It may show only that the account accepts money.
Verify the recipient and the full payment request before sending anything.
What should I do if a message asks for my one-time code?
Don't share it. Close the message and open the official banking app yourself. Call the bank if you suspect an attempted account takeover.
Take this step now
Before approving a new or changed transfer, end the conversation and call a known number. Verify both the recipient and the payment details separately.
If money has already moved, contact the sending institution now, describe the transaction accurately, and write down the case number. Keep the supporting records.