Scam Recovery Guide: The First-Hour Triage That Decides If You Get Your Money Back

Whether you get scammed money back comes down to two things you can’t change now: how you paid, and how fast you call the institution that moved the money. Filing a report doesn’t reverse a transaction — the payment rail does, and the clock is already running.

Reporting and recovering are different jobs on different clocks. The FTC says plainly it cannot act on individual reports or recover any one person’s funds 1. The lever that moves money is the rail you paid on, reached by calling a bank or issuer.

Americans reported losing about $16 billion to fraud in 2025, the highest on record 2. This is a first-72-hours guide for someone already scammed — not prevention.

Your first move: cut off the access, not just the money

Before you work out whether your money is recoverable, lock the door the scammer came through — change credentials and revoke access on any account they touched, because a compromised account keeps bleeding while you triage.

Securing access and recovering funds are separate emergencies, and this applies whether or not money moved. Change the password on the affected account and anywhere you reused it, turn on two-factor authentication, and sign out of other sessions. Call the bank at the number on the back of your card — not one any caller gave you.

If a scammer saw your debit card or banking login, ask the bank to freeze or reissue the card and stop any pending transfers — that call also starts the Regulation E clock explained below.

Find your rail: the 60-second triage table

How you paid decides whether you have a real shot at reversal — find your method below; it tells you whether the money is reversible, who to call, and how fast.

How you paid	Reversible?	Call first	Deadline
Credit card	Yes (chargeback)	Card issuer	Within 60 days of the statement; liability capped at $50 3
Debit / ACH / bank transfer	Only if unauthorized	Your bank	Report fast; caps escalate ($50 / $500 / unlimited) 4
Gift card	Rarely	The gift-card brand	Immediately, while funds may be unspent 5
Wire (Western Union, MoneyGram, bank)	Rarely	Wire company and your bank	Immediately; ask for a recall 5
Payment app / P2P	Rarely	The app and linked card/bank	Immediately 5
Cryptocurrency	Almost never	(no reversal lever)	n/a 5

The top two rows are reversible rails. The bottom four are effectively irreversible — scammers prefer them because the money moves fast and is hard to trace 5.

Log what happened, your rail, and your deadlines in the fraud-recovery tracker — it turns this table into a time-boxed action list.

Reversible rails: how to actually claw it back

If you paid by credit card or from your bank, you have a legal reversal right — but credit and debit run on different rules, and for debit the clock raises how much you can lose.

Credit card. Call the issuer and dispute. Two rights apply under Regulation Z, at 12 CFR 1026.12 and 1026.13. For unauthorized use — someone used your card without permission — the law caps your liability at $50, and most issuers waive even that 3. For a billing-error or “claims and defenses” dispute — you paid but got scammed or got no goods — your notice must reach the issuer within 60 days of the statement 3.

Debit, ATM, and ACH — the escalating clock. For unauthorized electronic transfers, how fast you report sets your liability, under Regulation E at 12 CFR 1005.6: $50 if you notify your bank within 2 business days of the loss; up to $500 after 2 business days but within 60 days of the statement; and unlimited loss on transfers after the 60-day mark 4. Each tier is a real dollar line.

This next point matters most. Regulation E protects only unauthorized transfers — money a thief moved that you never made or allowed 7. If a scammer talked you into sending the money yourself — a wire you ordered, a P2P payment, a bill-pay you set up on their instruction — the law generally treats that as authorized, and Reg E’s caps do not apply 7. Then your path is asking the bank for a recall or goodwill reversal — jump to the next section.

Tell the bank: “I’m disputing an unauthorized electronic transfer.” It then generally gets 10 business days to investigate, extendable to 45 if it issues a provisional credit, under 12 CFR 1005.11 8. Ask for it.

One caveat on wires: courts disagree over whether some consumer wire transfers even fall under EFTA 9, so don’t count on it — treat a wire as irreversible and act through the bank or wire company now.

Irreversible rails: the honest answer

If you paid by gift card, wire, payment app, or cryptocurrency, be ready for a hard truth — there is no chargeback button, and your only move is one fast, low-odds call.

These rails carry no legal reversal right, and a payment you sent yourself counts as authorized, so Regulation E does not bail it out 7. Call immediately anyway — the money may sit unspent briefly 5:

• Gift card — call the issuing brand, say a scammer used it, ask for a freeze or refund, and keep the card and receipt.
• Wire — contact Western Union, MoneyGram, or your bank and ask them to reverse or recall it.
• Payment app / P2P — ask the app to reverse it; if it linked to a card or bank, report there too.
• Cryptocurrency — per the FTC, crypto payments are typically not reversible; you get it back only if the recipient returns it 5.

This is the part most guides won’t tell you straight: if you read gift-card numbers to someone, that money is very likely gone. Make the call, but treat it as a long shot.

One institutional lever exists for wire and crypto theft: the FBI’s Internet Crime Complaint Center runs a Recovery Asset Team that can sometimes freeze a fraudulent transfer at the receiving bank. In 2025 its Financial Fraud Kill Chain handled about 3,900 incidents and froze roughly $679 million, a 58% success rate 6. So call your bank for a recall and file at ic3.gov, regardless of the amount.

Report it — for the record, not the refund

File a report even though it won’t reverse your transaction — reporting builds the law-enforcement record and gives you a recovery plan, a different job from clawing money back.

FTC — ReportFraud.ftc.gov. Your report feeds the Consumer Sentinel database that thousands of law-enforcement partners share, and the FTC gives you next-step guidance after you file 1.

FTC — IdentityTheft.gov. If a scammer got your identity and not just your money, this FTC channel builds a step-by-step recovery plan and an official Identity Theft Report 10.

FBI — ic3.gov. This handles internet-enabled, wire, and crypto fraud. File regardless of the amount, and pair it with the bank recall above 6. Filing and recalling are separate actions.

Lock down before round two hits

The second loss is often bigger than the first, so close two doors now — freeze your credit, free and by law at all three bureaus, and refuse anyone offering to recover your money for a fee.

You can freeze and unfreeze your credit for free at all three nationwide bureaus — Equifax, Experian, and TransUnion — under the FCRA as amended by the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act 11. A bureau must place a freeze within one business day of an online or phone request and lift it within one hour 11. A free one-year fraud alert is a lighter alternative.

Then watch for round two. A week later, someone may call who “works with fraud victims” and can recover your money for a small fee — the same scam again. The FTC calls these refund-and-recovery scams the worst of the worst because they target people who already lost money 12. The rule is absolute: never pay an upfront fee, and never hand account numbers to anyone promising recovery.

To size your exposure, use the identity-theft damage estimator; for the credit hit, use the credit-score impact tool.

Right now, open the fraud-recovery tracker, enter how you paid and when, and make the first call it names — every hour moves the odds against you.

Sources

• FTC — Why Report Fraud? / ReportFraud.ftc.gov
• FTC — People reported losing ~$16 billion to fraud in 2025
• 12 CFR 1026.12 & 1026.13 — Regulation Z (credit-card liability and billing errors)
• 12 CFR 1005.6 — Regulation E (unauthorized-transfer liability tiers); CFPB Ask CFPB #1017
• FTC — What To Do if You Were Scammed
• FBI IC3 — 2025 Annual Report (Recovery Asset Team / Financial Fraud Kill Chain)
• 12 CFR 1005.2(m) — Regulation E (“unauthorized electronic fund transfer” definition)
• 12 CFR 1005.11 — Regulation E (error-resolution timeline)
• Adams & Reese — Does Regulation E apply to consumer online wire transfers? (unsettled)
• FTC — IdentityTheft.gov / Report Identity Theft
• FTC — Credit Freezes and Fraud Alerts; 15 U.S.C. 1681c-1
• FTC — Refund and Recovery Scams