Safeguard
Security Guides•

Sent money to a scammer? First steps by payment method

The first hour after a scam payment depends on how you paid. Steps for wire, gift card, crypto, cards and bank transfers, based on the FTC's guidance.

Safeguard Security Team
3 min read

Contact whoever moved the money straight away, say a scammer tricked you, and ask for a reversal or refund. What you do next depends on how you paid. The FTC's guidance gives different first steps for wires, gift cards, crypto, cards and bank transfers. Speed matters most.

Wire transfer

Report it to the wire company right away, say a scammer tricked you into sending the money, and request a refund. If it was a large bank wire in a business setting, also call your bank, as in the business email compromise case, where the FBI advises asking the institution to recall funds and filing at ic3.gov.

Gift card

Contact the card issuer immediately using the number on the back of the card. Say a scammer got the card number and PIN, and ask for a refund. Keep the card and receipt.

Cryptocurrency

Contact the exchange or ATM operator immediately, say the transaction was fraudulent and ask them to reverse it. The FTC warns crypto has fewer legal protections than cards, so recovery can be difficult. Report it to the FTC at ReportFraud.ftc.gov.

Credit card

Report it to the issuer immediately, using the number on the card or the app, and request a refund. The FTC notes federal law protects you from unauthorized use.

Debit card

Report it to your bank or credit union right away and request a refund. The FTC says federal law protects against unauthorized debit card use, but its guidance on limiting losses is worth reading.

Bank transfer or payment app

For a bank transfer such as Zelle, report it to your bank or credit union immediately and ask them to reverse the payment and refund you.

If you also gave access or passwords

  • Remote access to your computer or phone: update security software, run a scan and delete anything it flags. Change passwords and turn on two-factor authentication. Get help from the device maker or someone you trust.
  • Passwords: if you can still log in, set a new strong password, change it anywhere you reused it and turn on two-factor authentication. If you cannot log in, follow the platform's account recovery steps, then secure the account.

Then do these things

  1. Write down what happened with times, names, numbers and screenshots.
  2. Report it at ReportFraud.ftc.gov.
  3. Watch your accounts for further activity.
  4. Consider a credit freeze if personal information was shared. See freeze or fraud alert.
  5. Tell your employer if work accounts, devices or money were involved.

Why shame is the real enemy

Scams catch careful people. The sooner you say what happened, the better the chances of a reversal, so do not wait out of embarrassment.

Quick check

Who do I call first after paying by gift card?

The card issuer, using the number on the back of the card.

Is crypto easy to recover?

No. The FTC says crypto has fewer legal protections than cards, so recovery can be difficult.

Sources

Last reviewed: 19 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.