Start the recall and secure account access
- Call the provider's fraud team now and ask for a case or recall reference.
- Record the recipient, amount, time, payment rail and transaction status.
- Explain how the payment was authorized and what credentials, codes or remote access were shared.
Move from payment report to access containment
Recovery is not promised, but a precise and immediate report gives the provider the clearest starting point.
Identify the transfer
Give the amount, time, destination, payment rail and current status to the sending provider.
Request the available process
Ask whether a recall, receiving-bank notice, fraud review or other action is still possible.
Close the access route
Remove remote software, secure exposed credentials and protect the email and phone used for recovery.
Describe the transfer precisely to the provider
Speed matters, but recovery is not promised
Some transfers move quickly or are designed to be final. A provider may still have a recall, notification or investigation process, so report immediately without representing the outcome as guaranteed.
Use precise facts
Say whether someone accessed the account, impersonated an organization, persuaded you to authorize the payment, changed invoice details or took remote control. Different facts can lead to different processes.
Close the access path
Change exposed passwords from a trusted device, revoke unknown sessions, remove remote-access software and protect email and mobile recovery channels. Tell the bank if a device may remain compromised.
Avoid recovery scams
Fraud victims are often targeted again. No stranger can guarantee a chargeback, blockchain recovery or inside access for an upfront fee. Continue through the provider and official reporting channels.
Preserve the payment trail
Save confirmations, recipient details, messages, invoice versions, caller information and your contact timeline. Do not continue messaging the scammer to collect evidence if it creates more risk.
Give the sending provider a transfer record it can act on
Speed matters, but precision helps the provider identify the payment and whatever recall or receiving-bank process may still be available.
- Payment facts
- Record amount, time, currency, recipient details, payment rail, reference and current status. Use the provider's own transaction view rather than copying an altered screenshot supplied by the recipient.
- How it happened
- State whether you initiated the transfer after deception, another person accessed the account or a payee detail was changed. Do not reshape the facts to fit a preferred dispute label.
- Recovery request
- Ask the sending provider what action is available, such as a recall, receiving-bank notice or fraud review, and what information it needs now. Record the request and outcome without treating recovery as promised.
- Access containment
- Remove remote-access software, secure email and banking credentials, revoke unknown sessions and protect the phone number if any were exposed. A payment report alone does not close those routes.
Preserve messages, invoices, websites and recipient instructions in their original form. Report through official fraud or law-enforcement channels for your location when appropriate, but beware of paid recovery offers.
If the incident reaches another account or record
Preserve the persuasion and payment events in a fraud incident timeline while the recall request is active.
If the transfer followed a supposed bank warning, review how to verify a suspicious bank contact.
If the payment used a person-to-person app, follow the payment-app account and funding-source response.
Record the transfer and recall attempt
- Copy the transfer amount, date, destination details and confirmation reference exactly as shown.
- Preserve the conversation, advertisement, invoice or impersonation claim that caused the transfer.
- Record when the sending institution was notified and the status of any recall or fraud case.
Questions that come up during containment
Can my bank cancel a transfer?
Ask immediately. Options depend on the payment type, status, destination and provider rules; a recall request is not a promise of return.
Should I contact the receiving bank?
Give the details to your provider first and follow its instructions. Do not send more identity documents to contact information supplied by the scammer.
Processes, rights and deadlines depend on your location, provider and policy. Use the relevant official service for your jurisdiction.