Whether you can get your money back after being scammed depends far more on how you paid than on the scam itself. Credit card payments carry the strongest federal protections and a $50 liability cap. Debit cards offer real protection too, but only if you act within days. Wire transfers, gift cards, and cryptocurrency sit at the other end: recovery ranges from difficult to nearly impossible, and the window closes in hours. Two people who lose the same amount to the same scam can end up with very different outcomes based only on the payment method they used.
One legal distinction runs through everything that follows. An unauthorized transaction is one where someone accessed your account or card without permission. An authorized transaction is one where you personally sent the money or approved the charge, even if a scammer tricked you into it. Federal law protects unauthorized transactions more clearly. When you sent the money yourself, recovery gets harder, though federal guidance has started pushing banks to cover more of those cases.
Credit Card Scams: The Strongest Recovery Path
If you paid by credit card, you have the best chance of any scam victim of getting your money back. Federal law caps your liability for unauthorized credit card charges at $50, and most major issuers waive that as a matter of policy.1Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card There is no minimum charge amount for a dispute. A $12 charge is as disputable as a $1,200 one.
The Fair Credit Billing Act gives you 60 days from the date the statement containing the charge was sent to notify your card issuer in writing about a billing error, which includes charges for goods or services you didn’t receive.2Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors After you dispute, the card issuer runs a chargeback, pulling the funds back from the merchant while it investigates. The burden shifts to the merchant to prove the transaction was legitimate. Scam victims benefit here because fraudulent sellers rarely respond to chargeback requests. Responding would expose their operation.
There is also a separate provision that lets you assert claims against your card issuer when you authorized a purchase but the merchant turned out to be fraudulent.3Office of the Law Revision Counsel. 15 USC 1666i – Assertion by Cardholder Against Card Issuer The statute imposes dollar and geographic limits, but many card issuers process chargebacks under their own policies rather than relying strictly on those limits.
Debit Card and Bank Account Scams
Debit protections exist but are weaker than credit protections, and they weaken fast. The Electronic Fund Transfer Act sets a tiered liability structure where timing is everything:4Consumer Financial Protection Bureau. Regulation E 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report within 2 business days and your liability is capped at $50.
- Report after 2 days but within 60 days and your liability can rise to $500.
- Report after 60 days from the statement date and you could lose everything taken from the account, with no cap.
Those deadlines make debit fraud genuinely urgent. A credit card charge you catch three weeks late is still fully recoverable. A debit charge you catch three weeks late already carries five times the potential liability. And because debit transactions pull directly from your bank account, you are out the cash while the investigation runs.
Once you report, your bank must investigate within 10 business days. It can extend the investigation to 45 days, but only if it provisionally credits your account within those first 10 business days so you can access the disputed funds. For foreign-initiated transfers, point-of-sale debit transactions, and accounts opened within the past 30 days, the bank gets up to 90 days instead of 45.5Consumer Financial Protection Bureau. Regulation E 1005.11 – Procedures for Resolving Errors
If the bank denies the claim, it must give you a written explanation and tell you that you can request copies of the documents it relied on.5Consumer Financial Protection Bureau. Regulation E 1005.11 – Procedures for Resolving Errors Request those documents. Denials sometimes rest on IP or device matches that turn out to be wrong, and seeing the evidence gives you grounds to appeal.
Payment Apps: Zelle, Venmo, Cash App, PayPal
Peer-to-peer payment apps are where the authorized-versus-unauthorized line causes the most trouble. If someone hacked your account and moved money without your knowledge, that is an unauthorized transfer covered by Regulation E, with the same protections as debit card fraud. The CFPB has stated that when a consumer is fraudulently induced into sharing account access information and a third party then uses that information to move money, that also counts as unauthorized.6Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
The harder case is when you sent the money yourself. A romance scammer who convinces you to Zelle $3,000 never touched your credentials. Banks have historically treated those as authorized transfers and denied claims. The CFPB has pushed back, arguing that fraud-induced transfers should be treated as errors under Regulation E, and has taken enforcement action against banks that reflexively deny these claims.6Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs The law here is shifting, and your bank may still deny. File anyway, push back if denied, and report the denial to the CFPB.
PayPal runs its own Purchase Protection program covering transactions where an item was never received or was significantly different from what was described, up to the full purchase price plus original shipping.7PayPal. PayPal Purchase Protection Program Payments sent through “friends and family” are excluded entirely. Scammers know this and specifically ask victims to send money that way.
Wire Transfers
Wire transfers are one of the worst payment methods for recovery. Domestic wires are generally not covered by the Electronic Fund Transfer Act. Once the money leaves your account, no federal law requires your bank to reverse it. Recovery depends almost entirely on speed.
If you realize within hours that you sent a wire to a scammer, call your bank and ask it to initiate a recall. Your bank will contact the receiving bank and request that the funds be frozen. The receiving bank is not required to comply, and if the scammer has already withdrawn the money, there is nothing to freeze. Some banks allow cancellation of international wires within a short window after initiation, but that varies by institution and destination.
For larger wire losses, file with the FBI’s Internet Crime Complaint Center. The IC3 Recovery Asset Team works directly with banks to freeze fraudulent transfers, and acting within 72 hours gives that team the best chance to intervene before the money moves. The IC3 states that complaint data allows the FBI to “in some cases, even freeze stolen funds.”8Internet Crime Complaint Center (IC3). IC3 Home Page
Gift Card Scams
Gift cards are nearly as irreversible as cash. Once a scammer has the numbers off the back of a card, the balance can be drained in seconds. Recovery is not guaranteed, but it is worth trying.
Contact the gift card issuer immediately. If any balance remains, the issuer can freeze it. Apple accepts reports at 1-800-275-2273 and may refund the value if the funds have not been redeemed. Google Play handles reports through its online support channel.9Federal Trade Commission. Avoiding and Reporting Gift Card Scams Keep the physical card and the store receipt as documentation.
Recovery rates on gift card scams are low. The FTC tracks gift cards as one of the most common payment methods scammers demand because the money is hard to trace. Filing a report at ReportFraud.ftc.gov still matters because complaint volume drives enforcement against the networks that facilitate these scams.
Cryptocurrency Scams
Cryptocurrency transactions are designed to be irreversible. No federal consumer protection law requires an exchange or blockchain network to reverse a fraudulent transfer. If you sent Bitcoin, Ethereum, or another cryptocurrency to a scammer, the realistic chance of getting it back through normal dispute channels is close to zero.
The narrow exception is when federal law enforcement seizes cryptocurrency as part of a criminal investigation. The Department of Justice occasionally recovers stolen crypto and opens the forfeiture process to victims, who can petition for a share of the seized assets. These cases are rare, take years, and require the scam to be part of a larger operation that draws federal attention. Filing a complaint with IC3 is the most direct way to get your loss into that system.
Private blockchain forensics firms can trace transactions across wallets, but their fees start around $1,000 to $1,400 per transaction traced and climb steeply for complex cases. They make sense only for substantial losses, and only if the investigation identifies assets that can actually be recovered through legal action. Be extremely cautious of unsolicited offers to recover stolen cryptocurrency. “Recovery fraud” is a well-documented secondary scam that specifically targets people who have already been victimized.
What to Gather Before You Dispute
Banks and card issuers evaluate claims on documentation, not sympathy. Start collecting everything before you file anything.
The essential records include transaction confirmation numbers or reference IDs, exact dates and amounts, the merchant or recipient name as it appears on your statement, and screenshots of every communication with the scammer, including emails, texts, and social media messages. Save any order confirmations, tracking numbers, and receipts. Together these build the factual narrative your bank needs.
Your financial institution will ask you to complete a dispute form that distinguishes between unauthorized access and authorized-but-fraudulent transactions. Getting that classification right matters, because it determines which legal protections apply. If someone used your card number without your knowledge, that is unauthorized. If you willingly sent the money but were deceived about what you would receive, that is authorized but fraudulent. Some banks also require a signed fraud affidavit, a sworn statement describing what happened under penalty of perjury. The FTC provides a standardized Identity Theft Affidavit for cases where the scammer also accessed personal information like your Social Security number.
How to File the Dispute
Call the number on the back of your card or on your bank statement. Explain the situation, get a case number, and ask the representative to confirm the timeline for provisional credit and investigation completion. Write down who you spoke with and when. Then follow up in writing. The FTC recommends sending a written dispute letter even if you have already reported by phone or online, because the letter is formal notice that preserves your rights under federal law.10Federal Trade Commission. What to Do if You Were Scammed
Most banks let you start disputes through their app or website, usually through a “Dispute a Charge” or “Report Fraud” option in your transaction history. For complex situations involving multiple transactions or large amounts, mailing physical documentation to the bank’s fraud department creates a paper trail that matters if the dispute is denied and you have to escalate.
During a credit card chargeback, the card issuer contacts the merchant’s bank and pulls the funds back. The merchant then has a chance to respond with evidence like delivery confirmations, IP address logs, or signed authorization forms. If the merchant responds, your card issuer may ask you to rebut. Be prepared to explain specifically why the merchant’s records don’t prove you received what was promised or authorized the charge.
For debit card disputes, the bank must provisionally credit your account within 10 business days if it needs more time to investigate, and it must notify you of the credit within two business days of applying it.5Consumer Financial Protection Bureau. Regulation E 1005.11 – Procedures for Resolving Errors If the bank tells you to wait for the full investigation, ask directly whether you are entitled to a provisional credit under Regulation E. Banks sometimes skip that step unless the customer pushes for it.
Which Agencies to Report To
Government reports usually don’t directly return your money, but they serve two purposes. A police report or FTC complaint number gives your bank added confidence your claim is legitimate, which can matter on a borderline dispute. And these reports feed databases law enforcement uses to identify and dismantle criminal operations.
Federal Reporting
The FTC’s portal at ReportFraud.ftc.gov walks you through questions to categorize the scam and generates a report number you can share with your bank.11Federal Trade Commission. How to Report Fraud at ReportFraud.ftc.gov The FTC does not investigate individual complaints, but the aggregate data drives enforcement priorities and settlements against scam operations.
For internet-enabled fraud, file separately with the FBI’s Internet Crime Complaint Center at ic3.gov. The IC3 has housed over nine million complaints since its founding and shares reports across FBI field offices and law enforcement partners nationwide.8Internet Crime Complaint Center (IC3). IC3 Home Page If a wire transfer was involved, report as quickly as possible so the Recovery Asset Team can try to freeze funds at the receiving bank.
If the scammer obtained your personal information, report the identity theft at IdentityTheft.gov, which generates a recovery plan and an FTC Identity Theft Report you can use with creditors and your bank.12Federal Trade Commission. IdentityTheft.gov
Local and State Reporting
File a police report with your local department. Many departments accept reports online or by phone for non-emergency financial crimes.13USAGov. Report a Crime Get the case number and a copy of the report. Banks sometimes require a police report number before they finalize a permanent credit, so having one ready prevents delays.
Your state attorney general’s consumer protection division handles complaints about businesses and can sometimes mediate disputes between consumers and financial institutions. The Department of Justice recommends contacting your state attorney general or local police as a first step for consumer fraud.14Department of Justice: Criminal Division. Report Fraud Search your state attorney general’s website for a consumer complaint form.
Suing the Scammer in Small Claims Court
If you can identify the person or business that scammed you, small claims court lets you sue without hiring a lawyer. Maximum claim limits vary by state, ranging from $2,500 on the low end to $25,000 at the top, with most states between $5,000 and $10,000. Filing fees typically run from around $10 to $75 for smaller claims and scale up for larger amounts.
Small claims works best when the scammer is a domestic, identifiable business or individual. It is essentially useless against anonymous overseas operations, which describes many internet fraud cases. For local scams, contractor fraud, or disputes with identifiable businesses that refuse a chargeback, small claims can be the most direct path to a judgment. Winning a judgment and actually collecting are different things, though. If the defendant has no assets or disappears, the judgment can be difficult to enforce.
Deadlines That Can Cost You Everything
The biggest mistake scam victims make is waiting. Every payment method has a window where your protections are strongest, and those windows close fast:
- Credit cards: 60 days from the date the statement with the charge was mailed to you.2Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors
- Debit cards: 2 business days for maximum protection ($50 cap). After 2 days, liability rises to $500. After 60 days from your statement, liability is potentially unlimited.4Consumer Financial Protection Bureau. Regulation E 1005.6 – Liability of Consumer for Unauthorized Transfers
- Wire transfers: Hours matter. The faster you contact your bank, the more likely the receiving bank can freeze the funds before they are withdrawn.
- Gift cards: Immediately. Every minute the scammer has the card numbers is another minute they can drain the balance.
Report the fraud today, even if you don’t have every piece of documentation assembled yet. You can supplement your initial report later. You cannot undo a missed deadline.
What About a Tax Deduction for the Loss
For tax years 2018 through 2025 under the Tax Cuts and Jobs Act, individuals generally cannot deduct personal theft losses on a federal return unless the loss is connected to a federally declared disaster.15Internal Revenue Service. Publication 547 – Casualties, Disasters, and Thefts Most scam victims get no tax benefit from their losses. A narrow exception: if you have personal casualty gains from insurance payouts or other sources in the same tax year, you can offset those gains with theft losses even if they are not tied to a federally declared disaster.
Theft losses connected to an investment or business activity follow different rules. Money lost in a fraudulent investment scheme may be deductible as a theft loss from a transaction entered into for profit, reported on IRS Form 4684.16Internal Revenue Service. Instructions for Form 4684 The IRS requires you to show that you owned the property, that it was actually stolen, when you discovered the theft, and whether any insurance or reimbursement claim exists with a reasonable expectation of recovery. Keep your police report, bank denial letters, and correspondence with the scammer as supporting documentation.