Fraud isn't only an unfamiliar card charge. A scammer may talk you into authorizing a transfer, steal a login code, or use your personal information to open an account. For U.S. consumers, the payment method usually decides which options you still have.

If you've already sent money or shared a password, one-time code, or other sensitive details, contact the bank, card issuer, payment app, or exchange through an official channel right away. Save the messages and receipts, lock down your accounts, and report the incident. Recovery isn't guaranteed. Acting quickly still gives the provider more to work with and may preserve a freeze, recall, or dispute that wouldn't be available later.

This is general U.S. consumer information, not legal advice. Dispute procedures and protections vary by payment method, provider, and the facts of the transaction.

What fraud, scams, and identity theft actually are

Fraud is intentional deception used to obtain money, property, account access, or personal information. A scam is usually the story or contact that makes that deception work. Identity theft is the unauthorized use of your personal information. They often overlap.

An impersonator may pretend to be your bank, collect a one-time login code, enter the account, and move money. Another scammer may persuade you to send the payment yourself. Banks can treat those events differently from an unauthorized card charge, so describe exactly what happened. Saying you were "hacked" can send the report down the wrong path.

Scams consumers run into most often

Phishing arrives by email, text, phone, social media, or a fake website. The sender may claim to be a bank, delivery company, government agency, relative, or tech-support desk. The usual ask is a password, Social Security number, card number, or verification code; remote-access software; a fake login page; or a rushed payment.

AI can make a voice, video, or email sound familiar. That still isn't proof of identity. Call or sign in through a channel you find yourself, not one supplied in the unexpected message.

Wire fraud often starts with a false invoice, a changed closing instruction, or a note that looks like it came from a real estate agent, title company, employer, or family member. Business email compromise can involve a stolen or imitated mailbox. If bank details change without warning, stop. Call the recipient on a number from a contract, prior statement, or official website, and confirm the account number, name, amount, and purpose. For a home closing or other high-value transfer, have a second trusted person review the instructions. Don't use the phone number or email address inside the new message.

Peer-to-peer apps and bank transfers move money quickly, which is why fake bank-fraud calls, marketplace sellers, rental ads, and "safe account" requests show up there. A demand that you move your own money to protect it is a serious warning. End the conversation and reach your bank or app through its official app, website, or statement. Don't send a second payment to reverse, unlock, or correct the first one.

Card fraud can be an unauthorized purchase, a stolen number, or a compromised online checkout. Account takeover is different: someone gets into an existing bank, email, shopping, or payment account. Watch for password-reset notices you didn't request, new devices or locations, small test charges, new payees or shipping addresses, and texts asking you to confirm a transaction you don't recognize. Change a compromised password from a trusted device, and don't reuse it elsewhere.

Romance and investment scams spend time building trust, then ask for help with an emergency, a guaranteed return, or a secret opportunity. Gift cards, cryptocurrency, and many transfers are hard to reverse. A request to pay a bill, fine, loan, or fee that way should be treated as a scam. If you already paid, contact the gift card issuer or crypto exchange immediately and keep the card, receipt, wallet address, and transaction details.

Identity theft can mean new credit, phone, utility, or online accounts in your name, or misuse of tax, medical, employment, or account data. Unrecognized accounts or credit inquiries are warning signs. A credit freeze can make it harder to open new credit, but it won't close an existing account, reverse a payment, or protect a bank login that's already been compromised.

Pressure tactics that should make you stop

Scammers try to keep you from checking. Be wary if someone:

One odd detail can have an innocent explanation. Several at once are a reason to pause and verify independently.

A short check before you send money

Stop answering for a moment. Urgency is a tactic, not proof that the request is real.

Open the official app or website yourself instead of signing in through a link in an unexpected message. Call a number from your card, statement, contract, or the organization's own site, then confirm the recipient, account, amount, and reason out loud. Save the invoice, message, receipt, and confirmation number.

Refuse unsolicited remote access. Legitimate support shouldn't need an unexpected caller to control your device. Don't share verification codes; a code can open the account even when the password stays private.

For recurring payments, review alerts and statements. If your bank or app allows it, lower transfer limits on accounts that don't need a high daily cap.

If you've already been scammed

1. Contact the payment provider first

Use the number on your card or statement, or open the provider's official app yourself. Say whether the transaction was unauthorized, made after you were deceived, or sent to the wrong recipient. Ask what can still be done to stop, recall, freeze, or dispute it.

Payment method First step Details to provide
Debit card or bank account Contact your bank or credit union immediately Date, amount, merchant or recipient, and how the transaction occurred
Credit card Call the card issuer using the number on the card Transaction details and why you believe it is fraudulent or disputed
Payment app or P2P transfer Report the transaction in the app and contact the linked bank Username, phone number, transaction ID, and screenshots
Wire or bank transfer Ask the bank's fraud department whether a recall or review is possible Transfer receipt, recipient details, amount, and timing
Gift card Contact the card issuer immediately Card number, receipt, purchase location, and the scammer's instructions
Cryptocurrency Contact the exchange or wallet provider immediately Wallet address, transaction hash, amount, date, and messages

The outcome depends on the payment rail, the provider's procedures, whether the recipient still has the funds, and what you approved. A completed payment isn't automatically reversible.

The FTC's guidance on what to do if you were scammed walks through payment-specific steps, including debit cards, gift cards, and cryptocurrency.

2. Secure accounts and devices

If you gave away a password, change it everywhere you reused it. Start with email, because it can reset other logins. Turn on multifactor authentication, sign out unfamiliar devices, and review recent login and payment activity.

If you installed remote-access software, don't use that device for banking until it has been checked. Change important passwords from a different trusted device. Call your mobile carrier if your number or SIM may have been taken over.

Ask the bank whether it can block unfamiliar payees, replace an exposed card, or add transaction alerts. Keep watching the account after the first report; scammers often try again.

3. Protect your credit if personal information was exposed

A credit freeze is free and can help stop new credit accounts from being opened in your name. The FTC says you have to contact Equifax, Experian, and TransUnion to place freezes with all three. The freeze stays until you ask a bureau to lift it.

A fraud alert is a separate tool. Compare both in the FTC's guidance on credit freezes and fraud alerts and follow the current instructions there.

A freeze doesn't stop charges on an existing card, protect an online login, or keep a scammer from contacting you. Review your credit reports for unfamiliar accounts, inquiries, addresses, or collections.

4. Report it

Tell the payment provider even if you don't expect an immediate refund. These U.S. routes are also worth using:

If someone impersonated a bank, marketplace, social network, or payment app, report the account or message through that service's official abuse or fraud channel. Reporting won't guarantee reimbursement. It does create a record and may help a provider or investigator connect related cases.

5. Keep the evidence

Write a short timeline while the details are still clear. Save emails, texts, caller IDs, voicemails, and chats; screenshots of profiles, sites, invoices, and confirmations; transaction IDs, wire details, gift-card receipts, or crypto wallet addresses; names, usernames, phone numbers, emails, and domains; and any bank, card, app, or police report numbers, including the date and time you contacted each provider.

Don't edit or delete the original messages. If you need to block the scammer, save the evidence first.

What fraud detection can and can't catch

Banks, card issuers, and payment apps may flag unusual logins, devices, or spending. Those tools miss plenty of scam payments because you typed the details and approved the transfer. An alert also doesn't prove a charge is fraudulent. Treat an unexpected notice as a reason to check activity in the official app or by calling a known number, not as a reason to follow the message's instructions.

AI-generated voice and video make appearance a weak test. Independent verification still works because it doesn't depend on spotting whether software created the message.

Habits that reduce the next attempt

Use a unique password on every important account, and turn on multifactor authentication, preferably an authenticator app or security key when that's available. Enable bank, card, and login alerts. Review recent transactions and connected devices. Keep your phone, browser, and security software updated, and enter account details only through an official app or website.

Before a large payment, confirm any change in instructions with a known contact. Never move money to a "safe" account because an unexpected caller told you to. Don't share one-time codes or allow unsolicited remote access. On marketplaces, use the platform's payment system when it's offered. Keep receipts for large or unusual payments, and treat demands for gift cards, cryptocurrency, or secrecy as a stop sign.

Check credit reports and statements for activity you don't recognize. Consider a freeze if a Social Security number or other identity details were exposed. Limit what you publish publicly, store identity documents securely, and talk through these warning signs with anyone who manages money alone, including older relatives.

Getting money back is not automatic

There is no single refund rule for every scam. The payment method, how fast you reported, the provider's process, and your evidence all matter. A debit-card claim, credit-card dispute, wire recall, payment-app report, gift-card claim, and cryptocurrency complaint are separate tracks.

Contact the provider before you negotiate with the person who took the money. Don't pay a "recovery," "release," or "verification" fee to get funds back. Anyone who promises a guaranteed recovery or claims to represent a government reporting service may be running a second scam.

If money already left the account, use the number on the card or statement, or open the provider's official app, and report that transfer before you do anything else. Then save the messages and file the FTC or IC3 report so there's a record if more activity appears.