If money moved through a bank-linked payment app and the other side turned out to be a scammer, the first move is not to guess what kind of scam it was. It is to sort out whether the payment was authorized by you, or whether someone got into your account and sent money without permission. That one detail changes the path forward, because banks and payment systems treat unauthorized transfers differently from payments you sent yourself after being tricked.
There is also a second question that matters. Did you send money and then not receive what you expected? That is common in impostor scams, where someone pretends to be a relative, a business, a government office, or a bank worker. The label matters, but it does not settle the outcome. The sources say only certain impostor scams qualify for reimbursement, so the scam story alone does not answer what will happen next.
- Authorized by you, but under false pretenses, points toward a scam report and a review of reimbursement rules.
- Unauthorized access to your account points toward fraud and an account security issue.
- Unclear facts call for notes, screenshots, and a clean timeline before you contact anyone.
Start by sorting what happened
Write down the basics before the case gets noisy. Save the date, the amount, the receiving account details, the way the scammer reached you, and any messages or screenshots. A short record is easier to use than a long memory, especially when more than one institution asks for the same facts. If you used a bank-linked service, the bank or credit union can usually review the transfer more efficiently when the details are in one place.
Keep your language plain when you describe the loss. Say whether the payment was unauthorized, or whether you sent it yourself after being deceived. That difference helps the reviewer place the complaint in the right bucket. It also keeps you from wasting time in the wrong channel, which matters when a case involves both a banking dispute and an identity-theft angle.
If you are unsure which bucket fits, use the facts you can prove. Who contacted you. What they claimed. How fast the pressure built. What account received the money. Those details are often more useful than a scam label alone.
Report to your bank or credit union first
If you enrolled in the payment service through your bank or credit union, report the transaction there first. The support guidance for Zelle-style transfers points consumers to the bank or credit union that linked the service, because that is the institution holding the account and handling the transfer. That is usually the fastest place to start when the payment ran through a bank relationship rather than a standalone app account.
When you contact the bank, ask two direct questions. First, ask how it classifies the incident. Second, ask what deadline applies for filing the report or dispute. The public guidance does not spell out every bank process or timeline, so it is fair to ask for a case number and a written next step. If the payment was unauthorized, the general consumer rule is that companies must investigate and correct errors. If it was a scam you authorized, the bank may still review whether reimbursement rules apply.
One practical point: do not end the call with only a promise to “look into it.” Ask for the reference number before you hang up. That small detail can matter later if you need to show that you reported the loss promptly.
- Call or message the bank or credit union that linked the payment service.
- Ask whether the transaction is being treated as unauthorized or scam-induced.
- Request a case number, the deadline, and the name of the department handling the claim.
File reports with the FTC and the IC3
After the bank report, file complaints with the Federal Trade Commission and the Internet Crime Complaint Center, known as IC3. The FTC collects scam reports and uses them to spot patterns, while IC3 is the FBI’s central hub for cyber-enabled crime. The IC3 says to file even if you are not sure the complaint qualifies. It can forward reports to law enforcement and partner agencies, but it does not investigate individual cases or give personal status updates.
For an IC3 complaint, the useful details are specific. Include the person’s identifying information if you have it, the way they contacted you, the date and amount of the transfer, the account numbers, the receiving institution, and a short description of how the pressure to pay unfolded. A complaint that shows the sequence of events is easier to use than one that only says “I was scammed.”
If you are age 60 or older and need help filing, the DOJ Elder Justice Hotline is available at 1-833-FRAUD-11, or 833-372-8311. That hotline can be useful when the paperwork feels like too much after a loss.
What the IC3 does, and does not do
The IC3 can be a reporting route, but it is not a recovery service. It does not promise a refund, and it does not provide a private investigator-style update on your case. That matters because scam victims are often told the opposite by fraudsters who pose as officials. Real reporting channels are usually quieter, slower, and less theatrical than the people who try to steal from you.
The FTC and IC3 reports also serve a second purpose. They add your case to a larger fraud picture. That can help investigators see repeat names, repeated phone numbers, and repeated payment paths across many complaints. A single report may feel small, but a well-documented one can still be useful.
Guard against recovery scams
After the loss, be wary of anyone who says they can get the money back for a fee. Recovery scams are common because they target people who are already stressed and looking for a fix. The red flag is simple: if someone wants payment, gift cards, cryptocurrency, or sensitive information in order to recover your funds, step back.
The IC3 says it will not ask for payment to recover lost money and will not refer victims to companies that request payment for recovery. It also warns that scammers impersonate IC3 or FBI staff and claim they have recovered funds. That kind of follow-up scam can hit twice, first on the original payment and then on the hope of getting it back.
Verify any government-related contact on your own. Use the official number from the agency’s real website, not the number the caller hands you. And do not share banking details or identity documents with someone you only know from a phone call, email, app message, or social media contact.
Red flags that deserve an immediate stop
- A caller claims to be from the IC3 or FBI and reaches out by phone, email, social media, or an app.
- Someone asks for a fee before helping you recover money.
- You are told to send money, gift cards, or cryptocurrency to settle the problem.
- The person pressures you to share account numbers or other sensitive information.
Know what the current guidance does, and does not, cover
The policy backdrop has changed as payment apps have grown. The CFPB rule discussed in the sources applies to nonbank companies that process more than 50 million digital payment transactions a year. Those supervised companies are expected to comply with consumer protection requirements and avoid facilitating fraud. Regulators have also shown they are willing to act, including a $175 million order tied to one payment app’s fraud problems.
Even so, the guidance leaves gaps that matter in real cases. It does not give a universal reimbursement deadline or dollar cap for bank-linked transfers. It does not explain how a bank decides a claim in every case. It also does not say what to do if a bank denies reimbursement, or how to handle rights and reporting for apps outside a bank-linked service. If those gaps affect your case, ask your bank, your state regulator, or a qualified professional for help specific to your situation.
One more gap is worth noting. The sources do not cover tax treatment, credit freezes, or the full set of steps that can follow identity theft. That is another reason to keep your notes organized from the start. A clear paper trail can help if another office needs the same facts later.
When a scam runs through a payment app, the smartest first step is usually the least dramatic one: sort the facts, report to the bank that linked the service, and file the federal complaints that fit the case. That sequence does not guarantee a refund, but it does put the loss into the channels most likely to review it.
Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.
