Paid a Scammer? What to Do First, by Payment Method, and What to Do About Stolen Information
Note: Some future links on this site may be affiliate links. We never claim hands-on testing; guides are researched from the public sources listed in each article.
How we wrote this: A summary of the FTC's "What To Do if You Were Scammed" page (updated June 2026), the FBI IC3 guidance for cryptocurrency scam victims, and IdentityTheft.gov (all linked below), checked October 29, 2026. Getting money back is never guaranteed; these are the steps the agencies recommend.
The first hour after realizing you've been scammed is stressful, and speed matters. The FTC's advice is consistent across every payment type: contact the company you used to send the money, right away, and ask for the payment to be reversed. The FTC is also frank that the money may already be gone, but says it's always worth asking.
Step 1: Call whoever moved the money
Scammers deliberately ask for payment methods that are hard to trace or reverse. Here's what the FTC recommends for each one.
| How you paid | Who to contact | What to ask |
|---|---|---|
| Zelle or bank transfer | Your bank or credit union | Reverse the payment and refund you |
| Payment app (such as Venmo, Cash App, PayPal) | The app | Reverse the payment and refund you |
| Wire transfer (such as Western Union, MoneyGram) | The wire transfer company | Tell them a scammer tricked you; ask for a refund |
| Credit card | The card issuer, using the number on the back or your online account | Refund the charge |
| Debit card | Your bank or credit union | Refund the charge |
| Gift card | The card's issuer, using the number on the back | Tell them a scammer got the number and PIN; ask for a refund |
| Cryptocurrency | The exchange or crypto ATM operator | Tell them it was fraud; ask them to reverse it |
| Cash sent by U.S. mail | U.S. Postal Inspection Service, 1-877-876-2455 | Ask about intercepting the package |
A few details from the FTC that are easy to miss:
- Cards have the strongest protection. The FTC notes federal law protects you from unauthorized use of credit and debit cards, and links its guide on limiting losses.
- Keep gift cards and receipts. The FTC says you may need them to follow up on a claim. Our gift card scam guide covers this in more depth.
- Crypto is the hardest. Cryptocurrency payments don't have the same legal protections as card payments. The FTC says some states have passed laws that might help and points to the National Conference of State Legislatures to search yours.
- Cash by mail: the FTC says USPS can intercept a domestic package that hasn't been delivered, for a fee. If you used FedEx or UPS, contact them as soon as possible.
Step 2: Report it
The FTC asks people to report scams at ReportFraud.ftc.gov. Reports help it build cases, spot trends, educate the public and share data about what's happening locally.
For cryptocurrency, the FBI asks victims to file at ic3.gov right away and to include as much transaction detail as possible: wallet addresses, the amount and type of cryptocurrency, dates and times, and transaction IDs (hashes), plus how you met the scammer, your messages, and the websites or apps they told you to use. If you don't have transaction details, the FBI says to report anyway.
Be wary of "recovery" offers. The FBI warns that anyone claiming they can recover your funds may be running another scam.
If you gave away information, not money
Your Social Security number. If a scammer used it, the FTC says to go to IdentityTheft.gov to report it and get a personalized recovery plan. If you're not sure it was used, follow the protective steps at IdentityTheft.gov/databreach. A credit freeze is one of those protections.
A username and password.
- If you can still log in: create a new, strong password, change it anywhere else you reused it, and turn on two-factor authentication.
- If you're locked out: use the account provider's recovery process. Our account recovery guide covers Apple, Google and Microsoft accounts.
Access to your computer or phone. If you let a "support agent" connect remotely, the FTC says to update your security software, run a scan and delete anything it flags. If you need help removing malware, get it from the manufacturer, a company you know and trust, or a knowledgeable friend. On Windows, the built-in Windows Security app can run a scan. Our tech support scam guide explains how these calls usually start.
A warning about follow-up calls
The FTC notes that scammers impersonate the FTC itself. The FTC will never threaten you, tell you to move money to "protect it," or tell you to withdraw cash or buy gold and hand it to someone. A second call promising help after a scam is a common setup for a second loss.
Quick checklist
- Contact the bank, app, card issuer, wire service, gift card issuer or crypto exchange immediately.
- Ask for a reversal or refund; keep cards, receipts and screenshots.
- Report at ReportFraud.ftc.gov (and ic3.gov for crypto).
- Gave out personal info? Go to IdentityTheft.gov.
- Gave a password? Change it and turn on two-factor authentication.
- Gave remote access? Update security software and scan.
- Ignore anyone offering to recover your money for a fee.