First 24 Hours After Being Scammed
About this article
Sourced from primary statutes (U.S. Code, CFR, state compiled statutes) and official government agency guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Time is the single biggest variable in how much money you get back. Banks reverse fraudulent charges, the FBI freezes wire transfers, and credit bureaus place free fraud alerts — but every one of those routes runs on a clock that starts the moment the money leaves your account. The first 24 hours are spent on three jobs at once: stop further loss, document everything, and file the reports that other people need to act.
The FBI's IC3 Recovery Asset Team initiates the Financial Fraud Kill Chain against wires and ACH transfers reported quickly. In 2024 the team attempted 3,020 cases and froze $561 million in fraudulent funds at a 66% success rate. The kill chain works best when the report reaches IC3 within 72 hours of the transfer — after that, the receiving bank has usually pushed the funds on.
When does it apply?
- You realize a charge, transfer, or wire was unauthorized, induced by a scam, or paid to an account you no longer control.
- An account login, password, or 2-factor token was given to someone who turned out not to be who they claimed.
- A check or money order was paid against a counterfeit or stop-payment-bypass scheme.
- You receive a notice that your data was in a breach and you have not yet locked down the affected accounts.
What to Do in the First Day After Being Scammed
Work the three lanes in parallel — money first, accounts second, reporting third. Each independently runs on its own deadline.
- Call the bank or card issuer that holds the account the money moved through. Use the number on the back of the card or on the bank's official site — not any number from the suspicious email or message. Ask for the fraud team. Get the case number in writing.
- If the money moved by wire or ACH, ask the sending bank to issue a SWIFT recall or ACH return immediately and request that they contact the receiving bank to freeze the receiving account. This is the action that lets the FBI's kill chain work — the bank has to do it; you trigger it.
- File at ic3.gov within 72 hours. The IC3 portal asks for the transfer details, beneficiary bank, account numbers, and amount. The Recovery Asset Team uses that to coordinate with the receiving bank. The 2024 IC3 Annual Report documents 66% recovery success on 3,020 attempted cases.
- Place a free 1-year fraud alert with any one of the three credit bureaus. The bureau you contact must notify the other two under FCRA. This makes lenders verify your identity before opening new credit. Free, online, and you can extend to 7 years if you file an identity theft report.
- Change passwords on every account using the same email or password as the compromised one. Turn on app-based 2-factor (authenticator app, not SMS) where available — SIM-swap scams defeat SMS-based 2FA.
- Write a one-page timeline. Date, time, amount, channel, what was said, screenshots of messages, the case number from the bank. This document is the spine of every downstream report — FCBA letter, Reg E dispute, IC3 update, CFPB complaint.
What should you NOT do?
- Don't pay 'recovery services' that find you. The FBI's IC3 specifically warns that scammers re-target known victims with offers to recover the original loss for an up-front fee. Anyone asking you to pay to recover scammed money is itself the scam. Real recovery (chargebacks, Reg E, FCBA) is free.
- Don't delete the messages, emails, or transaction history. They are the evidence your bank, IC3, and the CFPB need.
- Don't wait past the 60-day mark. Both FCBA (credit cards) and Regulation E (debit/ACH) run a 60-day clock from the periodic statement that first shows the disputed item. Past 60 days, the bank's obligations narrow sharply.
- Don't reuse the compromised email or phone number for the new accounts you open to replace the locked ones. Scammers who have your credentials will try the recovery flows next.
Common Questions
Does IC3 actually get my money back?
Sometimes. The Recovery Asset Team's Financial Fraud Kill Chain succeeded in 66% of the 3,020 cases attempted in 2024 and froze $561 million. The kill chain only works on wires and ACH transfers reported quickly — typically within 72 hours — to a US-based receiving bank that has not yet pushed the funds onward. IC3 does not pursue cash or cryptocurrency the same way.
Is calling the bank enough, or do I also need to write?
A phone call starts the clock and gets immediate action. A written letter (mail or secure message through the bank's portal) is what locks in your statutory rights under FCBA § 1666 (credit cards) and Regulation E (debit/ACH). Send the written notice within 60 days of the statement showing the disputed item — earlier is better.
What if the scammer is overseas?
Your civil money-recovery rights against your US bank are the same regardless of where the scammer is. The bank cannot tell you 'we can't help because it's international.' What changes is the likelihood of catching the scammer (low) and the bank's ability to recall the funds (depends on whether the foreign receiving bank cooperates).
Should I file a police report?
Yes, but only as one report among many. Local police rarely investigate cybercrime themselves; the report's value is in giving you a case number to attach to identity-theft affidavits, FTC complaints, and credit-bureau fraud-alert extensions. IC3 and the FTC are the higher-leverage federal channels.
Legal Resources
We may earn a commission if you use these services — at no extra cost to you. This supports our mission to make legal information free for everyone.