Scams and Identity Theft: Red Flags, Reporting and Recovery Steps

Quick answer

Act quickly: contact the financial institutions involved, change passwords, place a free fraud alert or credit freeze, report at IdentityTheft.gov or ReportFraud.ftc.gov, and keep records. Whether lost money can be recovered depends on how it was paid and on how fast you act. Federal tools exist for identity theft victims, but no one can promise recovery, and recovery services that charge up-front fees are a common second scam.

• Contact the company or bank involved right away, and ask them to close or freeze affected accounts.
• A free fraud alert or credit freeze, and an FTC Identity Theft Report, are core identity theft recovery tools.
• How you paid, such as card, bank transfer, gift card or cryptocurrency, affects what can be done to recover money.
• Be wary of anyone who promises to recover lost money for an up-front fee.

Two related problems with overlapping steps

A scam and identity theft are different things, though people often experience them together. In a scam, someone deceives you into sending money or sharing information: a caller pretends to be a bank, an email looks like a package notice, a romantic contact asks for help with an emergency. In identity theft, someone uses your personal information, such as your name, Social Security number or account details, to open accounts, file taxes, obtain services or make purchases as you. A scam can lead to identity theft when you share information, and identity theft can lead to bills and collection calls that feel like a scam.

The first hours and days matter. Many of the most useful steps, such as contacting your bank, changing passwords and placing a credit freeze, are quick, free and within your control. This guide sets out a calm order of operations based on federal guidance, explains how reporting works and describes what can and cannot be recovered. It focuses on the United States. State laws, bank policies and the facts of each case change what is possible, and nothing here can promise recovery. It is general information, not legal advice.

If you believe you are in immediate danger, or someone is threatening you, call local emergency services first.

Red flags that appear in many scams

Scammers change their stories, but many schemes share features:

• Urgency and pressure. You must act immediately or face arrest, account closure, a lost prize or harm to a relative.
• Secrecy. You are told not to tell your bank, family or anyone else.
• Unusual payment methods. Requests for gift cards, wire transfers, cryptocurrency, payment apps or cash sent by mail are common, because they are hard to reverse.
• Impersonation. The contact claims to be from a government agency, your bank, a utility, a well-known company, tech support or a family member in trouble.
• Unsolicited contact. Unexpected calls, texts, emails or social media messages that ask for information or money.
• Too good to be true. Guaranteed investment returns, prizes you did not enter for, or job offers that involve receiving and forwarding money.
• Requests for codes or remote access. Legitimate companies do not ask you to read them a verification code or to give control of your device to a stranger.

A useful rule of thumb: if a message creates fear or excitement and asks for money or information, stop, and verify through a number or website you look up yourself, not one the message gives you. Government agencies, for example, do not demand payment in gift cards.

Immediate steps if your identity may have been stolen

The Federal Trade Commission's IdentityTheft.gov describes what to do right away.

1. Call the fraud department of the affected company. Explain that someone stole your identity and ask them to close or freeze the accounts so that no one can add new charges unless you agree.
2. Change logins, passwords and PINs for your accounts, beginning with email, banking and anything that could reset other accounts. Use unique passwords and turn on multi-factor authentication where available.
3. Place a free fraud alert. The FTC explains that you can place a free, one-year fraud alert by contacting one of the three credit bureaus, and that company must tell the other two. A fraud alert also entitles you to free copies of your credit reports.
4. Consider a credit freeze. The FTC notes that a credit freeze is free to place and remove, is available to anyone, limits access to your credit report until you lift or remove it and lasts until you lift or remove it. You place it by contacting each of the three bureaus. Parents, guardians and conservators can place one for children under 16 or adults under their care. A freeze means you will need to lift it, temporarily or permanently, when you apply for credit yourself.
5. Review your credit reports, and note any accounts or transactions you do not recognize. You can use AnnualCreditReport.com.
6. Report the theft to the FTC at IdentityTheft.gov. Based on what you enter, the site creates an Identity Theft Report and a personalized recovery plan. Save a copy, since you may need to send it to companies and agencies.

If the identity theft is serious or ongoing, the FTC also describes an extended fraud alert. It lasts seven years, is free, is available to identity theft victims and is set by contacting one of the bureaus and providing your Identity Theft Report.

Repairing the damage

Once the immediate steps are done, work through the cleanup.

• Dispute fraudulent accounts and charges with the businesses involved and with the credit bureaus. Our guide to disputing credit report errors explains how to write and track disputes, and identity theft victims can ask bureaus to block information resulting from the theft.
• Contact creditors and collectors. Explain that the debt resulted from identity theft and send your Identity Theft Report. If a collector contacts you about a fraudulent debt, see our guide on debt collection rights.
• Watch for other misuse. Identity theft can involve tax returns, government benefits, medical services, utilities or driver's licenses. Contact the relevant agencies, such as the IRS for suspected tax-related identity theft, state agencies for benefits or licenses and your health insurer or providers for medical identity theft.
• Follow your recovery plan from IdentityTheft.gov and check it off as you go.
• Keep monitoring. Review statements and credit reports regularly for several months.

Also consider whether to report to local police. A police report is not always required, but some creditors ask for one, and it may help in some circumstances.

If you paid a scammer

Whether money can be recovered depends heavily on how you paid and how fast you act. Contact the payment provider immediately.

• Credit cards. Federal billing rules provide a dispute process, and the FTC explains that billing errors must be disputed in writing within 60 days of the first statement showing the error. Federal law also limits your liability for unauthorized credit card charges. Ask your issuer how it handles fraud and deceptive transactions.
• Debit cards and bank transfers. Protections depend on whether the transaction was unauthorized and on how quickly you report. Contact your bank right away and ask about recall or dispute options. Rules differ for transfers you initiated yourself after being deceived, which banks may treat differently from unauthorized transactions.
• Gift cards. Contact the card issuer immediately with the card numbers and receipts. Funds that have not been spent are sometimes recoverable, but many are spent quickly.
• Wire transfers and payment apps. Call the bank or app right away and ask whether the transfer can be recalled, and report the fraud.
• Cryptocurrency. Transfers are generally difficult or impossible to reverse. Contact the exchange you used and report the incident.
• Cash or checks sent by mail. Contact the carrier or your bank, and report to postal authorities.

Do not assume any route will succeed. The sooner you act, the better the chance that something can be done, and records of what happened help in every case.

Where to report

• The FTC. Report scams at ReportFraud.ftc.gov and identity theft at IdentityTheft.gov. Reports help agencies track patterns and may help law enforcement, although the FTC does not resolve individual cases.
• The FBI's Internet Crime Complaint Center (IC3), for internet-enabled crime.
• Your state attorney general or consumer protection office. USA.gov provides information on finding them.
• Local police, particularly for identity theft with a known suspect or significant loss.
• The company being impersonated, which can warn others or help with fraud investigation.
• Other agencies depending on the scam, such as the IRS for tax scams or the Social Security Administration for benefit impersonation.

Reporting does not guarantee an investigation or recovery, but it can help you meet creditors' documentation requirements and helps others avoid the same scam.

Common scam types and what to do for each

Scams change constantly, but several patterns appear again and again.

• Government, bank or tech support impersonation. A caller or message claims there is a problem with your account, a warrant, a virus or a debt, and asks for payment or access. Hang up, and contact the real organization using a number you look up yourself. Government agencies do not demand payment in gift cards or cryptocurrency, and a bank will not ask you to move money to a "safe" account.
• Romance and investment scams. Someone you met online builds trust over weeks, then asks for money or steers you toward an investment that promises unusual returns. Be cautious about anyone who avoids video calls, asks for secrecy or pushes you to use cryptocurrency, and talk to someone you trust before sending money.
• Fake check and overpayment scams. You receive a check, often for a job, a sale or a prize, and are asked to send part of it back or forward it elsewhere. Banks generally make funds available before a check has fully cleared, so a counterfeit check can look good for days and then be returned, leaving you responsible for the money you sent.
• Online marketplace scams, including fake buyers, fake sellers and requests to move the conversation or payment off the platform. Use the platform's protected payment tools and avoid sending money to strangers.
• Tax-related identity theft. Someone files a return using your information. The IRS provides a process for victims, including an Identity Theft Affidavit and, for many taxpayers, an Identity Protection PIN that helps prevent misuse of your Social Security number on tax returns.
• Medical identity theft. Someone uses your information to obtain care or supplies. Review explanation-of-benefits statements, ask your plan and providers for records of claims you do not recognize and request corrections to inaccurate records.

Beware of recovery scams

People who have lost money are often targeted again. Someone contacts you claiming to be a lawyer, government official or investigator who can get your money back for an up-front fee, or claims that funds are waiting and only a release payment is needed. Legitimate government agencies do not charge you to recover money, and no one can guarantee recovery. If a stranger offers recovery help after a loss, stop and verify independently. If you want help, contact your bank, a legal aid organization or a licensed attorney you have checked through the state bar; our guide on finding and vetting a licensed attorney explains how.

Keeping records

Identity theft and scam recovery can take weeks or months and involve many organizations. Keep:

• A log of every call with date, time, name, company, reference number and what was said.
• Copies of letters, emails and forms, with proof of delivery.
• Your FTC Identity Theft Report and recovery plan.
• Police report numbers, if any.
• Screenshots of messages, websites or payment confirmations, saved before they disappear.
• A list of affected accounts and when each was reported and resolved.

Our guide to how to document a claim describes how to organize and back up this material.

Preventing repeat problems

Nothing is foolproof, but these habits reduce risk:

• Use a password manager and unique passwords, with multi-factor authentication on important accounts.
• Keep credit freezes in place when you are not applying for credit.
• Verify unexpected contacts independently using numbers or sites you look up yourself.
• Do not share verification codes, and do not give strangers remote access to your device.
• Review bank and card statements and credit reports regularly.
• Be careful with personal information on social media and in public places.
• Shred sensitive documents, and secure your mail.
• Keep software updated.

Example scenario (hypothetical)

A consumer receives a text that appears to come from her bank about a suspicious charge and clicks a link that asks her to sign in. A few hours later, she notices she is locked out of her account. She calls the number on the back of her card, tells the fraud department, and asks them to freeze the account and review recent activity. She changes her email password, turns on multi-factor authentication and places a fraud alert with one bureau.

She then reports at IdentityTheft.gov, saves the report and recovery plan and places credit freezes at all three bureaus. Over the next weeks, she checks her statements, disputes two fraudulent charges in writing and reports the text to ReportFraud.ftc.gov. The steps are ordinary; their value comes from speed and record-keeping, not from any guarantee.

Common mistakes

• Waiting to report because of embarrassment or hope that it will resolve itself.
• Using contact details from the suspicious message to "verify."
• Paying a fee to a "recovery" service.
• Not freezing credit or placing an alert after identity theft.
• Reusing passwords across accounts.
• Deleting evidence such as messages or emails before saving copies.
• Sending more money to recover earlier losses.
• Overlooking secondary problems, such as tax, medical or benefits fraud.
• Not following up on disputes.

A checklist

1. Call the affected bank or company and ask them to close or freeze accounts.
2. Change passwords and turn on multi-factor authentication.
3. Place a free fraud alert, and consider a credit freeze at all three bureaus.
4. Review your credit reports.
5. Report at IdentityTheft.gov, and save your report and recovery plan.
6. Report scams at ReportFraud.ftc.gov, and consider the FBI's IC3 and local police.
7. Contact payment providers quickly about disputes or recalls.
8. Dispute fraudulent items with creditors and credit bureaus in writing.
9. Keep a log and copies of everything.
10. Watch for further misuse and keep monitoring.

When legal help may be appropriate

Consider consulting a licensed attorney or legal aid organization if the loss is large, if you are being pursued for a debt that resulted from identity theft, if a creditor or bureau will not correct a fraudulent entry, or if you are unsure of your rights. For disputes with merchants, see our guide on refunds, returns and warranties, and for lower-value disputes, our overview of small claims court.

Frequently asked questions

What is the first thing I should do if my identity is stolen?

The FTC's IdentityTheft.gov advises calling the fraud department of the affected company, asking it to close or freeze the accounts, changing logins and passwords, and placing a free fraud alert with one of the three credit bureaus. Then report the theft at IdentityTheft.gov to get a report and recovery plan.

What is the difference between a fraud alert and a credit freeze?

A fraud alert tells businesses to verify your identity before granting credit in your name. A credit freeze limits access to your credit report until you lift or remove it. According to the FTC, both can be placed at no cost, and a freeze is available to anyone.

Can I get my money back after a scam?

Sometimes, but it depends on how you paid and how quickly you act. Card payments and some bank transfers may have dispute or recall options, while gift cards, cash and cryptocurrency are much harder to recover. Report quickly and be cautious of anyone charging fees to recover funds.

When to consult a licensed attorney

This article is general information. It cannot account for the facts of your situation, the wording of your policy or contract, or the law where you live. Consider speaking with an appropriately licensed attorney in your jurisdiction if any of the following applies:

• A deadline may be running, or you are unsure whether one applies.
• You have been seriously injured, or a large amount of money or property is involved.
• You have been asked to sign a release, waiver or settlement agreement.
• A claim has been denied and you do not understand why, or you believe you are being treated unfairly.

Legal aid organizations, bar association referral services and court self-help centers may offer free or low-cost help. See our guide to finding and vetting a licensed attorney.

Important legal notice

Verdicairn is an independent informational publication, not a law firm. Content is general educational information, not legal advice, and reading it does not create an attorney-client relationship. Laws vary by jurisdiction and change over time, so information may be out of date. For advice about your situation, consult an appropriately licensed attorney. Read the full disclaimer.

Sources and further reading

1. What To Do Right Away (IdentityTheft.gov) — Federal Trade Commission. Accessed September 29, 2026
2. Identity Theft: A Recovery Plan — Federal Trade Commission. Accessed September 29, 2026
3. What To Do if You're Billed for Things You Never Got, or You Get Unordered Products — Federal Trade Commission. Accessed September 29, 2026
4. ReportFraud.ftc.gov — Federal Trade Commission
5. Internet Crime Complaint Center (IC3) — Federal Bureau of Investigation

Spotted an error? Read how corrections work or contact the editors.