Someone drains your bank account. You have two jobs now. Stop the bleeding. Then dispute the charge on the payment rail that controls the refund.

That rail matters more than the account label. Debit cards and electronic bank transfers follow Regulation E. Credit cards follow the Fair Credit Billing Act and Regulation Z. PayPal follows its user agreement. If you funded that PayPal payment with a card or bank account, you may also have a claim through the funding source.

Lock down access first

Change the password on your bank and email accounts. Turn on two-factor authentication. Freeze your credit with Equifax, Experian, and TransUnion so nobody opens new accounts in your name. If you still have access, look for unknown devices and linked phone numbers.

Call your bank or card issuer from the number on the back of your card or inside the official app. Do not call a number from a text, email, or search ad. Scammers buy ads that look like bank fraud lines.

Do that before you argue about the charge. Locking access narrows the damage while you work the dispute.

Which rule controls your refund?

Thing is, the rule follows the money, not the account name. A debit card dispute is not a credit card billing dispute. A PayPal balance dispute is not automatically a bank dispute.

One messy overlap sits outside that table. Debit and credit claims can both exist if you funded a PayPal payment with a card. Ask each company how it handles a claim another company is already reviewing.

A dispute process that holds up

1. Lock it down. New passwords. Two-factor on. Credit frozen.
2. Build a file. Statements, dates, amounts, emails, and messages with the merchant. An FTC identity theft affidavit can help. A police report can help too. It is not required for every claim.
3. Use an official channel. The bank's fraud line. The card issuer's dispute portal. PayPal's Resolution Center.
4. Put it in writing when the rail requires it. Credit card billing errors usually need a written dispute. For debit and EFT claims, phone or app can start the clock. Follow up in writing.
5. Ask about provisional credit. Debit and EFT banks may credit the disputed amount during the investigation. Ask when the money lands and what could reverse it.
6. Log every contact. Date, representative name, reference number, and what you sent.
7. Fight a denial. Get the reason in writing. Complain to the CFPB. A national bank also answers to the OCC. State-chartered banks answer to state regulators. The paper trail helps at every level.

How identity theft refund scams work

Scammers don't invent new tricks. They reuse the dispute system you're using. One play is a fake unauthorized transaction claim with stolen account details. Another is a recovery service that appears after you've already lost money.

Turns out, the recovery play often does more damage. You're stressed. A caller offers to get your money back for an upfront fee. They ask for your bank login, a one-time code, or your full Social Security number. Then they vanish.

Watch for these red flags:

• Someone contacts you first about a refund you did not request.
• They promise a guaranteed refund or a specific payout date.
• They ask for your full SSN, bank password, PIN, or one-time code.
• They want payment by gift card, crypto, wire transfer, or payment app.
• They tell you to lie to your bank or send a fake police report.
• They pressure you to act now or keep the conversation secret.

A real bank may ask for documents. It does not need your password. It does not ask you to pay to get your own money back.

If a scammer filed a claim in your name

Sometimes the fraud shows up as a dispute on your own account. A notice says a claim was filed. You didn't file it. Call the fraud line right away. Ask them to close the claim and flag the account for account takeover. Change passwords. Remove unknown devices. Check the email address and phone number on the account.

Then request your free credit reports. Look for unfamiliar accounts or inquiries. Freeze your credit again if you had thawed it. Report the identity theft to the FTC at IdentityTheft.gov. If money was stolen, a police report can help with the paper trail.

PayPal claims are a different lane

PayPal is not a bank. Its Resolution Center handles disputes under its user agreement. The outcome can turn on the transaction type and the payment status. A friends-and-family payment often has fewer dispute options than a goods-and-services payment. That is a policy choice, not a federal rule.

If you paid with a credit card, you can also dispute the charge with your card issuer, and if you paid from a bank account, the bank side may fall under Regulation E, and those two paths may not move at the same speed or reach the same answer. Do not assume one claim cancels the other. Ask PayPal and your card issuer how they handle overlapping disputes.

Documents that make a claim easier to win

Your file should tell a clean story. Include the account statement with the fraudulent line, the date, the amount, and any messages with the merchant. Add the FTC identity theft affidavit if you have one. If you filed a police report, include the report number.

Redact your Social Security number on documents unless the bank asks for it through a secure channel. Send documents through the bank's secure portal or upload tool. Do not email full account numbers or passwords. If a representative asks for remote access to your computer, hang up and call the official fraud line.

What not to do

Do not pay a recovery company upfront. Do not use a template police report or fake affidavit. Do not ignore a denial letter. Do not miss the written dispute window for a credit card. Do not file a chargeback and a PayPal dispute at the same time without telling both sides.

To be honest, the waiting is often the hardest part, and it can stretch for weeks, and during that stretch the only thing you can control is the record you keep.

A realistic next step

Start with your bank's official fraud line or your card issuer's dispute portal. Write down the date, the amount, and the representative's name. If you get a denial, ask for the reason in writing. Then escalate. That paper trail is what moves a claim.

This is general information, not legal advice. Rules can differ for small banks, prepaid cards, wire transfers, and business accounts.