On this page
When you suspect a payment scam, the first priority is to stop further interaction with the scammer and contact the real provider involved in the payment. Do not wait until you have a complete explanation or a perfectly organized evidence folder. A short, accurate account of the transaction is enough to begin asking what action is available.
This guide helps organize those contacts and records. It does not determine your legal rights, guarantee reimbursement, or replace the provider's instructions. Options depend on the payment method, whether you authorized the transaction, timing, jurisdiction, and other facts. Describe those facts honestly rather than choosing wording you think will produce a particular outcome.
Stop the next payment before organizing the last one
Break off contact with anyone urging you to send more money to release a refund, unlock an account, pay a tax, or protect an existing balance. Do not move funds to a supposed safe account based on an unexpected call or message.
If a transfer is pending, ask the real payment provider promptly whether it can be stopped. Use the number on your card, the provider's established app, or a website address you already know. Do not use a number supplied only in the suspicious conversation.
If someone has remote access to your device, tell the provider and use a trusted device or phone for the contact. For a work payment, notify the authorized finance and security contacts immediately under the organization's process.
Identify how the money actually moved
Write down the payment method and the company that processed it. A bank card, bank transfer, payment app, wire-transfer service, gift card, cryptocurrency platform, and cash shipment have different contact routes. The brand shown by the scammer may not be the provider that can act on the transaction.
Find the amount, currency, date, recipient details, transaction identifier, and current status in your own account record or receipt. Distinguish a completed transaction from a pending authorization or a request you never approved.
If several payments occurred, list each separately. Do not combine them into one total and lose the individual identifiers the provider needs. Keep the original receipts and messages in a safe location, but do not postpone the first contact while gathering every item.
Contact the payment provider through its real channel
The FTC's guidance directs people to the relevant provider for the payment method used and recommends asking about reversal or refund options. For example, a card payment involves the card issuer, while a payment-app transfer involves the app's reporting process. Follow the current instructions for the actual service.
Explain whether you made the payment after being deceived or whether someone made it without your authorization. Those are different circumstances. If you are unsure, say what you know and ask how the provider will classify and investigate the report.
Ask what immediate protection is appropriate for the affected payment instrument or account. Let the provider explain the consequences of blocking a card, restricting access, or changing account details rather than assuming one action applies to every case.
Prepare a short factual opening
A useful opening identifies the transaction and the concern: when it happened, how it was sent, and why you now believe it was a scam. Keep the story concise enough that the representative can route it correctly.
You might explain that you authorized a transfer after an impersonation message, or that you found a card charge you did not make. These are examples of factual distinctions, not scripts to copy regardless of what happened.
Avoid blaming yourself or arguing with the scammer's story during the call. The provider needs the transaction facts and relevant evidence. If you need help communicating, use the provider's accessibility or authorized-representative process without sharing account credentials with an informal helper.
Ask what happens next and record the answer
Request a case reference, the action taken, any documents needed, the submission route, and the next expected update. Ask whether there are deadlines you must meet and how to check the case through the official account or support channel.
Distinguish a report being opened from a payment being reversed. A provisional credit, an investigation, a requested recall, and a final reimbursement decision are not the same outcome. Record the provider's wording accurately and ask for clarification when it is unclear.
If the representative transfers you to another team, keep the original reference and note which team now owns the case. A new conversation should not erase the history of the first report.
Protect related account access
If the scam involved a password, verification code, account-recovery information, or a malicious application, payment reporting may be only one part of the response. Use the affected account provider's security process from a trusted device.
Review relevant sessions, recovery routes, and connected access under that provider's guidance. The account evidence timeline can help record what changed and which recovery actions were completed.
Do not assume changing an email password automatically protects a bank account or cancels a payment. Track each affected service separately, including any organization responsible for a work account or business transaction.
Preserve evidence without broadcasting it
Keep receipts, transaction references, the original message thread, and relevant account notices. Preserve the sequence and timestamps where available. Store the material somewhere the suspected attacker cannot access.
Share evidence only through the provider's established process or another appropriate authorized reporting route. Redact unnecessary personal information from general summaries. Do not post full card details, identity documents, recovery codes, or live account links in a public request for help.
The online scam recognition guide can help identify the relevant warning signs. Your report should describe what happened rather than make unsupported claims about the scammer's identity or location.
Use reporting channels after the urgent provider contact
In the United States, the FTC directs scam reports to ReportFraud.ftc.gov. Other jurisdictions have their own consumer-protection and law-enforcement routes. Use the appropriate official channel for your location and circumstances.
A report can support enforcement or provide a record, but it is not the same as a payment provider's reversal process. Do not assume filing one report automatically notifies every bank, platform, or organization involved.
If personal information was exposed, follow the relevant identity-theft guidance. The identity theft warning-sign guide helps distinguish that additional concern from the payment transaction itself.
Watch for a second scam during recovery
Be skeptical of unsolicited messages claiming to recover lost money for an upfront fee or requesting financial details to release a refund. The FTC describes recovery scams that target people after an earlier loss.
Verify any claimed contact from your provider through the existing case route. A caller who knows your transaction amount or case story is not automatically legitimate; information can be copied, leaked, or learned from the original scam.
Do not send cryptocurrency, gift-card codes, remote access, or another payment to prove you qualify for recovery. Ask your real provider about any unfamiliar request before acting.
Keep one follow-up list
Record each provider, case reference, completed action, required document, and next checkpoint. Mark the difference between information you submitted and an outcome the provider confirmed. Review account activity through normal trusted channels while the case remains open.
If an expected update does not arrive, follow up using the established reference. If you disagree with a decision, ask about the provider's formal review or complaint process and the appropriate local consumer-support options. Do not invent a universal deadline or reimbursement promise from another person's experience.
The practical objective is prompt contact with the right institution, protection against further loss, and a clear record of the response. Recovery may remain uncertain, but the next action should not depend on continuing to trust the person who requested the payment.
Sources and further reading
Primary and contextual sources used to verify definitions or give readers a relevant next resource.
- FTC: What to do if you were scammed The FTC directs people to contact the relevant payment provider promptly and ask about reversal or refund options for the payment method used.
- FTC: Refund and recovery scams People who have lost money can be targeted again by unsolicited offers to recover it for a fee.