If you have just lost money to an online scam, two things are true at once. First, recovery is genuinely possible in many cases, and people get money back every day through chargebacks, recalls, freezes, and bank reimbursement programs. Second, recovery is never guaranteed, the odds fall with every passing hour, and an entire second industry of "recovery agents" exists purely to scam victims again. This guide gives you the honest version: what to do right now, what each payment method allows, what realistic odds look like, and how to avoid the second scam.
What should I do in the first 24 hours after being scammed?
Speed matters more than anything else in fund recovery. Money moves through mule accounts and exchanges within hours, and most recovery mechanisms work only while funds are still in flight or freshly landed.
- Stop all contact and all payments. Do not pay "release fees," "taxes," or "verification deposits" to get your money out. Those demands are the same scam continuing.
- Call your bank or card issuer immediately. Use the number on the back of your card, not one from the scammer or a search ad. Say the words "I have been the victim of fraud and I want to dispute this transaction and request a recall." Ask them to flag the receiving account.
- Preserve all evidence: screenshots of conversations, the scam website URL, emails with full headers, transaction receipts, wallet addresses, and the account details you paid into. Write a short timeline while memory is fresh.
- Report officially (details below). Banks and exchanges move faster when a police or IC3 report number is attached.
- Secure your accounts. If the scam involved remote access software, a fake login page, or sharing codes, change passwords and enable two-factor authentication now, starting with your email. Our guides on protecting a targeted Gmail account and locking down Instagram cover the steps.
Can I get money back from a credit or debit card payment?
Card payments offer the strongest consumer protections of any rail, through the chargeback system. You dispute the transaction with your issuer, the issuer claws the money back through the card network, and the merchant must prove the charge was legitimate.
- Time limits: card network rules generally allow disputes for 120 days from the transaction or from when you expected to receive goods, and many issuers apply a baseline of at least 60 days from your statement. File as early as possible regardless.
- What helps: evidence that you were deceived, that goods never arrived, or that the merchant misrepresented the product. For scams dressed up as merchants, such as fake shops and fake investment platforms, chargebacks succeed often.
- Credit beats debit. Credit cards carry stronger statutory protections and you are disputing the bank's money, not your own. Debit disputes are possible but the cash is gone from your account while the dispute runs.
- PayPal and similar: open a dispute in the resolution center within 180 days. "Goods not received" and "significantly not as described" claims have real teeth. Payments sent as "friends and family" have far weaker protection, which is precisely why scammers insist on them.
Can a bank wire transfer be recalled?
Sometimes, and only quickly. A wire is a push payment: once it settles at the receiving bank, your bank cannot simply pull it back. What your bank can do is send a recall request (for international wires, a SWIFT recall) asking the receiving bank to freeze and return the funds. This works when the money is still sitting in the destination account, which is why hour one beats day three by a wide margin. If the receiving account has already forwarded the money on, which is the standard mule playbook, the recall usually fails.
- Request the recall the moment you discover the fraud, and ask your bank to contact the receiving bank's fraud team directly, not just file paperwork.
- Attach a police or IC3 report number; receiving banks freeze faster with one.
- In the US, the FBI's Recovery Asset Team can attempt a Financial Fraud Kill Chain on significant recent domestic wires reported promptly to ic3.gov, with meaningfully good freeze rates for qualifying cases.
- In the UK, many banks participate in a reimbursement scheme for authorized push payment fraud, so report to your bank and Action Fraud even if the recall fails. Outcomes vary by case and bank.
What about Zelle, Venmo, Cash App, UPI, and other instant transfers?
The honest answer: these are the hardest mainstream rails to recover from, because they were designed to be instant and final, like handing over cash. That said, the picture has improved.
- Zelle: report the scam to your bank anyway. Network rules now require participating banks to reimburse certain imposter scams, such as criminals posing as your bank or a government agency, and banks must investigate unauthorized transactions. Purchase scams remain largely unprotected, but reporting costs nothing and sometimes pays.
- Venmo and Cash App: report in-app and to your linked bank or card. If the payment was funded by a credit card, a chargeback through the card may still be possible.
- UPI (India): report immediately to your bank and the 1930 cybercrime helpline or cybercrime.gov.in. Indian banks and the I4C system can freeze beneficiary accounts quickly when reports arrive within hours, and frozen funds are returned through the complaint process.
- Gift cards: call the card issuer (Apple, Google, Amazon, Steam) with the card numbers and receipts. If any balance is unspent, some issuers freeze and refund it. Odds are low but nonzero, and it takes one phone call.
Can stolen cryptocurrency be traced and recovered?
This is the area with the widest gap between marketing and reality, so here is the straight version.
What blockchain analysis can do: crypto transactions are public and permanent, so a competent investigator can follow your funds wallet-to-wallet, cluster addresses belonging to the same actor, and very often identify the exchange where the funds were cashed out or parked. That matters because exchanges with know-your-customer rules hold real identities and respond to law enforcement requests. A professional tracing report that says "funds moved through these twelve hops to deposit address X at exchange Y" gives police something concrete to subpoena and gives the exchange grounds to freeze.
What blockchain analysis cannot do: no one can reverse a confirmed transaction, "hack the funds back," or extract coins from a private wallet. If funds pass through a mixer, a privacy coin, or a non-cooperative offshore exchange, the trail can effectively end. Tracing identifies and locates; recovery still requires an exchange freeze, law enforcement action, or civil legal process.
Realistic expectations: recovery is most likely when the amount justifies the effort, the funds reached a regulated exchange, and you act fast with proper reporting. Many pig-butchering and fake-investment victims recover nothing; some recover substantial sums through exchange freezes and law enforcement seizures. Anyone quoting a guaranteed recovery percentage is lying. Our scam and crypto recovery service provides lawful tracing, exchange outreach, and law-enforcement-ready reports, and we will tell you honestly when a case is not worth pursuing.
Where should I report an online scam?
Reporting does three jobs: it creates the case number that banks and exchanges require, it feeds freeze mechanisms, and it builds the pattern data that takes scam networks down.
- United States: ic3.gov (FBI) for any internet-enabled fraud, especially wires and crypto; ReportFraud.ftc.gov for consumer scams; your local police for a report number.
- United Kingdom: Action Fraud, plus your bank under the push payment reimbursement rules.
- Canada: Canadian Anti-Fraud Centre. Australia: ReportCyber and Scamwatch. India: 1930 helpline or cybercrime.gov.in, as fast as humanly possible.
- The platform where it started: report the scammer's profile on the dating app, marketplace, or social network so the account is taken down and other victims are protected.
How do I avoid recovery scams that target victims twice?
Within days of being scammed, you may be contacted by a "fund recovery agency," a "crypto retrieval expert," or even someone claiming to be from the FBI or your exchange, offering to get your money back for an upfront fee. This is the second scam, and it specifically hunts people who have just filed complaints or posted about their loss. The red flags are consistent:
- They contacted you first, often through social media, Telegram, or comments under scam-warning posts.
- They guarantee recovery or quote a precise success rate.
- They demand upfront payment in crypto or gift cards, or "taxes and fees" before release of recovered funds.
- They claim special access to hack the scammer or to back doors at exchanges. Real recovery work is investigation and legal process, never hacking, a distinction we cover in 10 questions to ask before you hire anyone online.
- They impersonate government agencies. Real agencies never charge fees to return funds.
Legitimate professionals document their identity, explain exactly what they will do and through which lawful channels, put honest odds in writing, and never ask you to pay in crypto to a wallet address.
What are the realistic odds of getting my money back?
Roughly, from best to worst: credit card chargebacks for undelivered goods succeed often. Prompt wire recalls, within about 24 to 72 hours, have a meaningful success rate, especially domestic wires reported through IC3 in the US. PayPal goods-and-services disputes do well within the window. Zelle and instant transfers recover occasionally, mostly under imposter-scam reimbursement rules. Crypto recovers in a minority of cases, concentrated among fast reporters and larger losses that reach regulated exchanges. Gift cards almost never recover. None of this is a reason not to try; it is a reason to act within hours, report everywhere, and spend your energy on the rails where your money actually moved.
Frequently asked questions
How long do I have to dispute a scam transaction?
Card chargebacks generally allow up to 120 days under network rules, PayPal allows 180 days, and unauthorized debit transactions in the US should be reported within 60 days of your statement. Wire recalls and instant-transfer freezes effectively have windows measured in hours and days, not months. When in doubt, report today.
Can a hacker get my scammed money back?
No, and offers to do so are scams or crimes. Confirmed bank and blockchain transactions cannot be reversed by intrusion, and hiring someone to break into a scammer's account would expose you to criminal liability. Lawful recovery runs through banks, card networks, exchanges, regulators, police, and courts.
The scammer is in another country. Is it hopeless?
Not necessarily. Your dispute rights sit with your own bank and card network regardless of where the scammer is, and crypto frequently lands at exchanges that cooperate internationally. Cross-border police outcomes are slower and rarer, which is why the financial rails, not arrests, are your primary recovery path.
Should I tell my bank the truth that I authorized the payment?
Yes. Always be truthful. Authorized push payment fraud is a recognized category with its own remedies, including reimbursement schemes in some countries, and a false "unauthorized" claim can void your case entirely when the bank's logs show otherwise.
I was scammed through a romance or investment relationship over months. Does the playbook differ?
The financial steps are identical per payment method, but document the whole relationship arc, since it proves deception, and be especially alert for the scammer returning with a "refund" offer. Long-contact scams also commonly involve account access and remote tools, so audit your devices using our guide to common phone compromise methods.
Is hiring a professional recovery service worth it?
It can be when the loss is substantial, the trail involves crypto or multiple accounts, and the service is transparent about lawful methods and honest odds. It is not worth it for small losses where fees would exceed any plausible recovery, and a legitimate firm will tell you that upfront.
Related service
Trace fraud and pursue lawful recovery of stolen funds and cryptocurrency.
Scam and Crypto Recovery