Helping someone who is being scammed means working two fronts at the same time: reaching them emotionally before they shut you out, and shutting down the money pipeline before the funds disappear. The recovery window ranges from about 30 minutes for a wire transfer to 60 days for a credit card charge, and every hour of delay favors the scammer. If you only have time to do one thing right now, call the fraud department at the victim’s bank using the number on the back of their debit card and ask for an account freeze on pending transfers. Everything else in this guide builds out from there.
Talk to Them Without Accusing Them
Saying “you’re being scammed” almost never works. Fraud victims are psychologically invested in the scammer’s story, and a blunt accusation reads as an attack on their judgment rather than an offer of help. Lead with curiosity. Ask who they’ve been talking to, what they’ve been asked to do, and whether any money has changed hands. People share far more when they feel like a partner in figuring something out than when they feel like the subject of an intervention.
It helps to describe the manipulation as a technique rather than a personal failing. Romance scammers use love bombing, flooding the target with affection and future plans to build emotional dependency. Government impersonation scams use fear, threatening arrest or deportation to override rational thinking. Framed as documented playbooks used against thousands of people every day, these tactics stop feeling like something the victim was stupid enough to fall for and start feeling like what they actually are: professional criminal work.
Keep the line open even if the first conversation goes nowhere. If the person feels judged, they’ll hide future contact with the scammer, and you’ll lose your ability to track what’s happening. A collaborative tone acts as a counterweight to the scammer’s strategy of isolating the victim from everyone who cares about them.
When Cognitive Decline May Be a Factor
Repeated scam vulnerability in an older adult sometimes signals undiagnosed cognitive decline rather than naivety. Watch for new behavioral changes: paying bills twice, financial paperwork that used to be organized and is suddenly chaotic, difficulty with basic math like calculating a tip, or a sudden interest in get-rich-quick schemes the person would have dismissed five years ago. These are recognized clinical warning signs of diminishing financial capacity, and they call for a medical evaluation alongside the fraud response steps.
Stop the Money by Payment Method
Recovery prospects vary sharply depending on how the victim paid. Move on the financial institution within hours, not days.
Wire Transfers and Bank Accounts
Call the bank’s fraud department using the number on the back of the victim’s debit card and request an account freeze on anything pending. For wire transfers, speed decides everything. If the bank catches it before processing (roughly within 30 minutes), they may be able to cancel outright. For international wires sent through SWIFT, a recall initiated within the first few hours has the best chance of full recovery. After 24 hours, success rates fall to low single digits because scammers move funds through additional accounts or convert to cryptocurrency.
Credit Cards
Credit cards offer the strongest consumer protection of any payment method. Federal law caps liability for unauthorized charges at $50, and most issuers waive even that.1Office of the Law Revision Counsel. 15 U.S. Code 1643 – Liability of Holder of Credit Card The victim has 60 days from the date of the first statement showing the fraudulent charge to dispute it in writing. Send the dispute to the billing inquiry address (not the payment address) by certified mail so there’s proof of delivery.2Federal Trade Commission. Using Credit Cards and Disputing Charges The issuer must acknowledge the complaint within 30 days and resolve it within 90.
Debit Cards and Peer-to-Peer Apps
Debit card protections are weaker and more time-sensitive. Report an unauthorized transfer within two business days of discovering it and maximum liability is $50. Wait longer but report within 60 days of the statement date and liability jumps to $500. After 60 days there is no federal cap, and the victim could lose everything taken from that point forward.3Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
Zelle, Venmo, and Cash App are usually where the worst news lands. These platforms distinguish between unauthorized transactions, where someone accessed the account without permission, and scams, where the victim authorized the payment but was tricked. Federal law requires reimbursement for unauthorized transfers.4Consumer Financial Protection Bureau. Regulation 1005.6 – Liability of Consumer for Unauthorized Transfers If the victim voluntarily sent the money, even under false pretenses, the platform may refuse to reimburse. Report it and file a dispute anyway; the legal landscape around P2P scam liability is actively changing, and some banks are beginning to cover these losses under regulatory pressure.
Gift Cards
Contact the gift card company as soon as possible using the information on the card or its packaging. Some retailers can freeze remaining balances if the cards haven’t been fully drained. Keep the physical card, the receipt, and photos of the front and back of every card. Those numbers on the back are how the scammer drains the value, and they’re also the only way the retailer can trace what happened.5Federal Trade Commission. Avoiding and Reporting Gift Card Scams Recovery rates are low, but reporting still helps law enforcement track the network.
Cryptocurrency
Once cryptocurrency moves to a private wallet, the transaction is irreversible. There is no chargeback, no recall, and no central authority to petition. If the victim sent crypto to an address they don’t control, those funds are almost certainly gone.6Blockchain Support Center. Lost Crypto Recovery If the scam ran through a custodial exchange like Coinbase or Kraken rather than a private wallet, contact the exchange’s fraud team immediately. They can sometimes freeze the receiving account before the scammer withdraws. File with the FBI’s IC3 regardless, because federal investigators track blockchain transactions across cases.
Gather Evidence Before You Call Anyone
Every reporting agency and financial institution asks for specifics, and having them organized before the first call saves time you don’t have. Identify the type of scam: tech support fraud with remote desktop access, romance scheme, cryptocurrency investment, government impersonation, or something else. The category determines which agencies handle it.
Collect every digital footprint the scammer left: email addresses, phone numbers, social media profiles, website URLs, and usernames. Build a timeline covering the date of first contact, every subsequent communication, and every financial transaction with its exact amount. For bank transfers, note the transaction IDs or merchant codes shown on the statement next to each debit. For peer-to-peer apps, capture the unique alphanumeric string that identifies each transfer.
If the scammer sent emails, save the full headers, not just the visible message. Most email programs offer a “Show Original” or “View Source” option in the message menu; the “Received:” fields inside reveal where the message actually came from regardless of what the “From” line claims. Save them as text files or screenshots.
Freeze Their Credit and Secure Their Accounts
If the victim shared personal information (Social Security number, date of birth, security question answers) the scam doesn’t end when the payments stop. That data can be used to open new credit lines, take out loans, or file fraudulent tax returns for months or years afterward.
Credit Freeze at All Three Bureaus
Place a security freeze at Equifax, Experian, and TransUnion. It’s free under federal law, takes effect quickly, and blocks anyone from opening new accounts using the victim’s identity. Each bureau must be contacted separately.7Annual Credit Report.com. Security Freeze Basics You’ll need the victim’s full name, Social Security number, date of birth, and current and recent addresses.
- Equifax: equifax.com/CreditReportAssistance
- Experian: experian.com/freeze
- TransUnion: freeze.transunion.com
A freeze doesn’t affect existing accounts or credit scores; it only blocks new inquiries. The victim can lift it temporarily later if they need to apply for credit.
Compromised Computers and Online Accounts
If the victim gave a scammer remote access through a tool like AnyDesk or TeamViewer, or through a fake tech support session, treat that device as compromised. Uninstall anything the scammer asked them to install.8Microsoft Support. Protect Yourself from Tech Support Scams Then run a full malware scan. Microsoft Safety Scanner followed by Malwarebytes catches most of what standard antivirus misses. Scammers often install hidden remote access tools or keyloggers that persist after the initial session ends.
Change passwords on a different, uncompromised device. Check email and account settings for unauthorized changes to recovery addresses and phone numbers, because scammers frequently add their own recovery info so they can regain access later. Review which third-party apps have permission on the account and revoke anything unfamiliar.9Google Help. Secure a Hacked or Compromised Google Account Turn on two-factor authentication everywhere it’s supported, starting with email, banking, and social media.
File Reports With the Right Agencies
Reporting creates a paper trail that banks and insurers may require, and it feeds data into law enforcement databases that build cases against scam operations. No single agency handles all of it.
Federal Trade Commission
Report at ReportFraud.ftc.gov. The site walks through the details you’ve already compiled. Save or print the confirmation page; if you provide an email address, the FTC sends the report number with recommended next steps.10Federal Trade Commission. ReportFraud.ftc.gov – FAQ Set expectations: the FTC does not investigate individual cases. Reports go into the Consumer Sentinel database used by federal, state, and local agencies to spot patterns.
If the victim’s personal information was used to open accounts, file tax returns, or impersonate them, also file at IdentityTheft.gov. That site generates a personalized recovery plan with pre-filled dispute letters for businesses and credit bureaus.2Federal Trade Commission. Using Credit Cards and Disputing Charges
FBI Internet Crime Complaint Center
File at IC3.gov for any internet-enabled financial crime. The form asks for suspect details (URLs, email addresses, IP addresses, cryptocurrency wallet addresses) plus technical evidence like email headers and transaction metadata.11Internet Crime Complaint Center (IC3). Frequently Asked Questions After submitting, save or print the on-screen confirmation before navigating away. The IC3 does not email a copy of the complaint, and you can’t retrieve it later.12Internet Crime Complaint Center (IC3). Complaint Form
Local Police
File a report at the local department. The case number is often what banks require to waive fees, process fraud claims, or reverse certain unauthorized transactions. A police report also establishes a legal timeline that helps coordinate between local detectives and federal agencies working the same network. Some creditors and debt collectors won’t act on identity theft without one.
Adult Protective Services for Older Victims
If the victim is 60 or older, or is an adult with a disability, contact Adult Protective Services. Every state operates an APS program that investigates financial exploitation, and a report can trigger an investigation even if the victim doesn’t want one, because financial exploitation involves criminal conduct that APS may be required to investigate regardless of the victim’s cooperation.13Consumer Financial Protection Bureau. Reporting Elder Financial Abuse The Department of Justice also runs the National Elder Fraud Hotline at 833-372-8311, where case managers can walk you through reporting and connect the victim with local resources.
Warn Them About Recovery Scams
Most people don’t see this one coming, and it’s where a lot of second-wave damage happens. After someone loses money to a scam, their contact information often ends up on lists sold to other fraudsters. Within weeks or months, they may be contacted by someone claiming to be a recovery specialist, a law enforcement agent, or a crypto asset tracer who can get the money back for an upfront fee.
Recovery room scams are sophisticated. The operators build professional-looking websites with fake testimonials, use AI-generated videos of supposed satisfied clients, and impersonate real regulatory agencies.14NORTH AMERICAN SECURITIES ADMINISTRATORS ASSOCIATION. Informed Investor Advisory – Crypto Recovery Room Scams Red flags:
- Unsolicited contact. No legitimate recovery service cold-calls scam victims.
- Upfront fees, especially in cryptocurrency or gift cards.
- Pressure to act immediately before a supposed recovery window closes.
- Claimed credentials from law enforcement, securities regulators, or associations that don’t exist.
Warn the victim explicitly. Someone who has been deceived once is more likely to fall for a recovery scam, especially when they’re desperate to recoup losses. The only legitimate channels are the victim’s own financial institution and law enforcement agencies the victim contacts directly through verified numbers.
If They Refuse Help
This is the hardest scenario, and there is no clean answer. A competent adult has the legal right to spend their money however they choose, even if you’re certain they’re being defrauded. You cannot freeze someone else’s bank account or cancel their transactions without legal authority. You are not, however, completely powerless.
If the victim is an older adult or has a disability, an APS report can trigger an investigation that proceeds regardless of the victim’s willingness to cooperate.13Consumer Financial Protection Bureau. Reporting Elder Financial Abuse APS can arrange protective services and connect the victim with resources, though they generally cannot override a competent person’s decisions about their own money.
If you believe the person genuinely lacks the cognitive capacity to manage their finances, the legal option is petitioning a court for guardianship or conservatorship. It’s a serious step involving legal fees typically starting at several thousand dollars, a court hearing, and often a medical capacity evaluation. Treat it as a last resort. A durable financial power of attorney, if one was already executed while the person was still competent, can provide the authority to step in without going to court.
For a victim who is mentally competent but emotionally entangled, sustained patient contact is the most effective approach. Keep showing up. Keep asking questions. Avoid ultimatums, which tend to push people further toward the scammer. Many fraud victims eventually recognize the deception on their own, and having someone they trust waiting without judgment is often what makes the difference between a victim who asks for help and one who suffers in silence.