If you’re trying to figure out how to know whether you’ve been scammed and what to do about it, start with two places: any recent interaction that felt off, and your financial records. Scams leave fingerprints in both. Americans reported more than $12.5 billion in fraud losses during 2024, across 2.6 million complaints filed with the Federal Trade Commission.1Federal Trade Commission. New FTC Data Show a Big Jump in Reported Losses to Fraud to $12.5 Billion in 2024 The signs below tell you whether you’re one of them, and the steps after that decide how much of the damage sticks.
Signs a Recent Interaction Was a Scam
The most reliable indicator is artificial urgency. A legitimate company or government agency will give you time to think, verify, and call back on a number you find yourself. Scammers do the opposite. They claim a warrant has been issued for your arrest, your bank account is about to be frozen, or a family member is in danger. The goal is to trigger a panic response that shuts down your ability to evaluate the situation.
Federal telemarketing rules require sellers to truthfully disclose material information before you agree to pay for anything.2eCFR. 16 CFR 310.3 – Deceptive Telemarketing Acts or Practices A caller who refuses to let you hang up and verify independently is violating those norms. If someone insisted you stay on the phone while you made a payment, that alone tells you what you were dealing with.
The stories vary but the structure repeats. Romance scammers invent emergencies requiring money for hospital bills, bail, or customs fees on a package that doesn’t exist.3Federal Trade Commission. Romance Scammers Favorite Lies Exposed Tech support scammers say your computer is infected and demand remote access. Investment scammers promise guaranteed returns and pressure you to get in now. A problem only they can solve, a ticking clock, and a demand for payment before you have time to verify anything.
The Payment Method Is the Giveaway
How they wanted to be paid matters more than the story they told. Legitimate businesses accept credit cards, checks, and standard billing because those systems carry consumer protections and audit trails. Scammers push the opposite direction. Common demands include:
- Wire transfers through services like Western Union or MoneyGram, which cannot be recalled once the recipient picks up the cash.
- Retail gift cards read over the phone. No government agency or utility company accepts payment in gift cards.
- Cryptocurrency sent to a digital wallet, which is effectively irreversible.
- Person-to-person payment apps sent to someone you don’t personally know.
If someone shifted between payment methods when the first one didn’t work, that’s just as telling. A real creditor doesn’t care whether you pay by check or card. A scammer cares intensely, because the entire operation depends on getting your money into a channel where you can’t pull it back.
Phishing Emails and Texts
Fraudulent messages usually contain small technical errors. Check the sender’s actual email address, not just the display name. A message claiming to be from your bank might come from a domain with the company name slightly misspelled or extra characters added. Hover over links before clicking and see whether the URL matches the organization’s real website. Other giveaways: low-resolution logos, inconsistent fonts, grammar a corporate team wouldn’t let through, and a generic “Dear Customer” greeting. Federal law requires legitimate marketing emails to include a physical mailing address and a working unsubscribe link.4Federal Trade Commission. CAN-SPAM Act: A Compliance Guide for Business Missing both is almost certain fraud.
Text scams work the same way. A message about a package delivery, unpaid toll, or account suspension arrives with a shortened link leading to a fake login page that harvests whatever you type. If a text you weren’t expecting claims to be from a company you use, ignore the link and go directly to that company’s app or official website.
One newer variation targets accounts already protected by two-factor authentication. If a scammer has your password from a data breach, they may repeatedly trigger login attempts, flooding your phone with push notifications asking you to approve the sign-in. The goal is to wear you down until you tap “Approve” to stop the notifications. If you’re getting approval requests you didn’t initiate, deny every one, change your password, and contact the service provider.
Don’t Trust Caller ID
A call showing your bank’s name or a government number on caller ID proves nothing. Under the Truth in Caller ID Act, transmitting misleading caller ID information with intent to defraud is illegal and can carry penalties of up to $10,000 per violation, but scammers do it constantly.5Federal Communications Commission. Caller ID Spoofing The spoofing technology is cheap and widely available. If someone claiming to be from your bank or the IRS called you, hang up and call back using the number printed on your card or on the agency’s official website.
Signs Already Sitting in Your Accounts and Records
Sometimes the first evidence isn’t a suspicious call. It’s a charge on your statement you don’t recognize. Fraudsters who steal payment card numbers often start with tiny test transactions, sometimes just a few cents, to confirm the card is active before a larger purchase. Don’t ignore small charges to businesses you’ve never visited.
Other signals in your financial records:
- Login activity from an unfamiliar city or device in your bank’s account history.
- New credit cards, loans, or lines of credit showing up on your credit report that you never applied for. Under the Fair Credit Reporting Act, you’re entitled to a free credit report from each major bureau once a year, and more often if you’ve placed a fraud alert.6Consumer Financial Protection Bureau. A Summary of Your Rights Under the Fair Credit Reporting Act
- A sharp drop in your credit score you can’t explain.
- Bills, statements, or tax documents that stop arriving, which can mean someone changed your mailing address to intercept your mail.
A less obvious form of fraud happens when someone uses your Social Security number to get a job. You might not discover it until a W-2 or 1099 arrives from an employer you’ve never worked for, or the IRS sends a notice saying you underreported income. A letter from the Social Security Administration adjusting your benefits based on wages you didn’t earn is the same warning. If tax documents arrive from an unknown employer, don’t include that income on your return. Contact the Social Security Administration to review your earnings record and check your online Social Security Benefits Statement for employers or wages you don’t recognize.7Internal Revenue Service. Guide to Employment-Related Identity Theft
The Deadlines That Decide How Much You Lose
Federal law caps your liability for unauthorized transactions, but only if you report quickly. Missing the reporting window can turn a $50 loss into a total one.
Credit Card Charges
Under the Truth in Lending Act, your liability for unauthorized credit card charges is capped at $50, provided the issuer has given you a way to report unauthorized use.8Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card Most major issuers waive even that as a matter of policy. To dispute a billing error or unauthorized charge, you have 60 days from when the statement was sent to submit the dispute in writing. The issuer must acknowledge within 30 days and resolve within 90 days or two billing cycles, whichever is shorter.9Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors
Debit Cards and Bank Accounts
Debit card protection is thinner and the clock runs faster. Under the Electronic Fund Transfer Act, your liability depends entirely on how quickly you report:10Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- Within 2 business days of learning about the loss: liability capped at $50.
- After 2 business days but within 60 days of the statement: liability can reach $500.
- After 60 days: you can be responsible for the full amount stolen.
This is where most people lose money they didn’t have to lose. The difference between a $50 hit and an unlimited one is one phone call made within 48 hours. If you see something wrong, report it the same day.
What to Do First
Speed matters more than getting every detail sorted out. Take the steps that limit further damage first, then work backward to documentation.
Call the Bank or Card Issuer
Before anything else, report unauthorized charges to the financial institution involved. That’s what starts the clock on the deadlines above and freezes the compromised card or account.
Freeze Your Credit
Contact all three major credit bureaus (Equifax, Experian, and TransUnion) and request a security freeze. A freeze blocks anyone from opening new accounts in your name. Online or by phone, the bureau must activate the freeze within one business day; by mail, up to three.11USAGov. How to Place or Lift a Security Freeze on Your Credit Report A freeze is free, and you can lift it temporarily whenever you need to apply for legitimate credit.
File an Identity Theft Report
Go to IdentityTheft.gov or call 1-877-438-4338 to file a report with the FTC. Based on what you enter, the site generates an official Identity Theft Report and a personalized recovery plan.12Federal Trade Commission. Identity Theft: A Recovery Plan That report is your documentation when disputing fraudulent accounts with creditors and the credit bureaus. If you don’t create an account on the site, print the report right away, since you won’t be able to retrieve it later.
Report to Law Enforcement
File a report with your local police, and for any internet-related fraud, submit a complaint to the FBI’s Internet Crime Complaint Center at ic3.gov. What you provide helps the FBI track trends and, sometimes, freeze stolen funds before they disappear.13Internet Crime Complaint Center. Home Page Save every piece of evidence: screenshots of messages, transaction confirmations, phone numbers, email addresses, and any usernames involved.14CISA. Reporting a Cybercrime Complaint Tip Card
Protect Your SSN and Tax Filings
If your Social Security number was exposed, report it through the SSA’s online portal. The SSA will direct you to the FTC for identity theft recovery support.15Social Security Administration. Report Stolen Social Security Number To keep someone from filing a fake tax return in your name, request an Identity Protection PIN from the IRS. An IP PIN is a six-digit number the IRS requires before processing any return filed under your SSN. The fastest path is through your IRS online account. If you can’t verify online and your adjusted gross income is below $84,000 (or $168,000 if married filing jointly), submit Form 15227 and the IRS will verify you by phone.16Internal Revenue Service. Get an Identity Protection PIN
Watch for a Second Scam Offering to Recover the First
People who have already been scammed are prime targets for a second round. Recovery scams work by contacting previous victims and claiming they can get the lost money back for a fee. The caller might say they’re with a government agency, a consumer advocacy group, or a law firm, and offer to file paperwork for you, put your name on a reimbursement list, or deposit a refund directly into your account.17Consumer Advice. Refund and Recovery Scams
The fee goes by different names: a retainer, a processing charge, an administrative fee, a tax. Whatever it’s called, paying upfront to receive money back is the signature of this scam. A legitimate government agency will never charge you to help recover stolen funds.17Consumer Advice. Refund and Recovery Scams When federal courts order restitution in criminal cases, the payment comes from the offender, not from the victim.18FBI. A Brief Description of the Federal Criminal Justice Process If anyone contacts you offering to recover money you lost and asks for payment or your bank account number, treat it as the next attempt.