I Got Scammed Online What Should I Do Immediately

If you have been scammed online, your immediate priority is to prevent further loss and alert the institutions that processed the payment. Contact your bank through its official app or an independently verified telephone number, stop additional transfers and secure any compromised accounts. You can begin these steps before obtaining legal representation.

Online fraud can involve fake investment platforms, cryptocurrency exchanges, phishing, romance scams and fraudulent suppliers. The legal response depends on what happened to the funds. A payment dispute, complaint against a financial institution and claim against the fraudster may all be relevant, but each requires its own factual and legal basis.

This guide explains the first actions to take, the principal recovery routes in Europe and the official resources that can help you report the fraud. Prompt action matters, although neither speed nor a police report guarantees reimbursement.

What to Do Immediately After an Online Scam

Stop Payments and Notify the Provider

Do not send another deposit to unlock withdrawals or pay a supposed tax, insurance charge or verification fee requested by the suspected platform. If you scheduled additional transfers or granted a recurring payment mandate, ask your provider how to cancel or block them.

For a bank transfer, ask the sending bank to issue a fraud notification and attempt a recall. For a card transaction, explain whether you did not authorise the payment or whether you authorised a purchase that is now disputed. Ask for a case reference, written confirmation and the applicable submission deadline.

A completed transfer cannot ordinarily be reversed unilaterally by the sending bank. A recall is an attempt to retrieve funds through the receiving institution; its outcome depends on the payment system, available funds and applicable procedures. Even if the money has moved, an immediate report may assist the investigation and consideration of other claims.

Secure Accounts and Devices

Block compromised cards and change affected passwords through the genuine service. Secure the email account connected to your banking and exchange accounts, enable appropriate multifactor authentication and review active sessions. If a scammer persuaded you to install remote access software, terminate the access and obtain trusted technical help before using the device for financial transactions.

Do not provide passwords, seed phrases, private keys or authentication codes to anyone offering assistance. If identity documents were disclosed, notify the relevant institutions and consider the identity theft reporting and protective procedures available in your country.

Preserve Evidence Without Delaying the Bank Report

Save the complete correspondence, advertisements, contracts, invoices, payment confirmations and account screenshots. Record the exact website address, names used, telephone numbers, email addresses, beneficiary details and relevant dates. For cryptocurrency, preserve transaction hashes, wallet addresses, asset names and networks.

Keep original files as well as readable copies. Create a short chronology showing who contacted you, what was promised, when payments were made and when the problem became apparent. A displayed platform balance may be fictitious; distinguish actual money transferred from supposed profits shown on a screen.

Avoid deleting messages before saving them. Once evidence has been preserved, block or report the fraudulent accounts as appropriate. Do not threaten litigation or disclose a proposed asset freezing application to the suspected fraudster without advice.

Recovery Options by Payment Method

The following table identifies the first action and the principal limitations for common payment scenarios. It is a starting point for assessment rather than a promise of repayment.

Your Rights Against a Bank or Payment Institution

Unauthorised Transactions in the EU and EEA

The first legal question is whether you consented to the disputed payment. Under the PSD2 framework as implemented in national law, an unauthorised transaction generally triggers an immediate refund, at the latest by the end of the following business day after the provider becomes aware of it or is notified. The rules include exceptions and provisions allocating losses, including cases involving customer fraud or gross negligence.

A provider’s reasonable grounds for suspecting fraud, subject to the statutory reporting conditions, can affect the immediate refund requirement. Notification deadlines and the circumstances of authentication also matter. Do not assume that a successful authentication record alone settles whether the payment was authorised or whether the customer bears the loss.

The PSD2 legal text, particularly Articles 71 to 74, provides the framework. The Deutsche Bundesbank PSD2 overview explains the consumer protection principles. The application to a particular case should be assessed under the relevant national law and contract.

Transfers You Approved After Being Deceived

A transfer approved because of a scam requires a different analysis. There is no automatic conclusion that every authorised scam payment must be refunded under the unauthorised transaction rules. Potential reimbursement or liability depends on the applicable regime, the provider’s duties and the circumstances of the payment.

For eligible UK domestic Faster Payments and CHAPS APP scam payments made on or after 7 October 2024, specific reimbursement protections may apply. They do not cover every international transfer, payment type or claimant. Consult the Payment Systems Regulator’s consumer guidance for the current scope, limits and exclusions.

For an EU or EEA case, investigate the provider’s response, relevant payment security and beneficiary verification requirements, and any available national protections. A regulatory concern or an AML failure does not automatically establish a private right to recover the entire loss from a bank. A claim must identify the applicable duty, breach and legal basis for compensation.

Card Disputes and Chargeback

Chargeback operates through card scheme rules and is generally raised with the issuing bank or payment provider. Grounds may include goods or services not supplied, misrepresentation or other qualifying circumstances. The relevant reason code, transaction details and evidence determine eligibility.

A commonly mentioned 120-day period is not a universal deadline for every dispute: the starting date, permitted extensions and overall limits vary. Contact the issuer promptly and request the deadline applicable to your claim. A successful card purchase of cryptocurrency followed by a separate crypto transfer to a scammer is not automatically reversible through chargeback against the legitimate exchange.

Where to Report Online Fraud in Europe

Report to the Police or Competent Prosecutor

Report the suspected offence to the appropriate national police authority or prosecutor. Your place of residence, where the conduct occurred, the recipient accounts and the suspected offender’s location can all be relevant. An account in another country does not mean you must postpone reporting until you establish that country’s jurisdiction.

Provide a factual narrative, the amount actually paid, the payment chain and copies of evidence. Obtain a reference number and ask how to submit additional information. Police or prosecutors decide whether and how to investigate; filing a report does not guarantee a particular investigative action or a refund.

In England, Wales and Northern Ireland, the official reporting channel is Report Fraud. For Scotland, use Police Scotland. Elsewhere in Europe, use the relevant national reporting channel. Europol and Eurojust support competent authorities in cross-border cooperation; they are not substitutes for the victim’s initial national report.

Notify the Relevant Financial Regulator

For suspected unauthorised investment activity or impersonation, report to the regulator connected to the services or market concerned. Useful official channels include the FCA scam reporting page, BaFin complaints guidance, the AMF scam reporting page, CNMV warnings and CONSOB scam guidance.

Use the FCA Financial Services Register, ESMA registers and relevant national registers to verify the entity’s claimed status. Match the legal name and official contact information; fraudsters may impersonate genuine authorised firms.

Regulators can publish warnings, investigate supervisory concerns and take enforcement action within their powers. They generally do not adjudicate every private compensation dispute. BaFin expressly distinguishes its supervisory role from deciding individual disputes. A report to a regulator should therefore complement the appropriate compensation procedure.

Use Formal Complaints and Financial ADR

If you dispute a bank’s or payment provider’s response, submit a formal written complaint. State the transactions, facts, legal grounds you rely on and remedy requested. Ask for a reasoned final response and keep proof of submission.

An eligible UK complaint may be referred to the Financial Ombudsman Service after following the applicable firm complaint procedure. In the EEA, the European Commission’s FIN-NET resources help locate participating bodies for cross-border financial disputes. Eligibility, deadlines and the effect of decisions differ between schemes.

Legal Options for Recovering Scammed Money

Civil Claims and Enforcement

A civil claim may seek restitution, contractual repayment or damages from an identifiable defendant. Depending on the evidence and governing law, defendants could include the fraudster, an entity that received funds or another party with a legally established responsibility. Receiving money or appearing in the payment chain does not by itself prove liability.

Jurisdiction must be assessed separately from where assets happen to be located. The competent court, applicable law, service requirements and prospects of enforcement determine the practical strategy. A judgment recognises a claim; collecting the money requires reachable assets and an effective enforcement process.

Freezing Orders and the European Account Preservation Order

Interim measures may prevent identified assets from being dissipated while a claim is pursued. Courts assess the legal requirements, evidence, urgency and safeguards. Security may be required, and an unjustified application can expose the applicant to liability.

The European Account Preservation Order under Regulation (EU) No 655/2014 provides a procedure for preserving funds in qualifying cross-border civil and commercial matters. It applies in participating EU Member States, excludes Denmark and does not apply to the United Kingdom. It is not an automatic EU-wide freeze of every account associated with a scammer.

An EAPO preserves bank funds rather than paying them to the claimant. Its scope, jurisdictional requirements and exclusions must be checked. The European e-Justice EAPO resources and forms explain the procedure. Domestic measures may be relevant where EAPO is unavailable, including in the UK and Switzerland.

Criminal Proceedings and Victim Claims

Criminal investigations can use powers unavailable to private investigators, including legally authorised access to records and asset restraint. Depending on national procedure, a victim may claim compensation within criminal proceedings or pursue separate civil proceedings.

Confiscation of criminal proceeds does not automatically mean the full amount will be distributed to every victim. Restitution, competing claims and enforcement depend on the jurisdiction and available assets. The European Commission’s victims’ rights resources provide an official starting point for understanding support and participation rights.

Asset Tracing and Cryptocurrency Recovery

Asset tracing helps identify recipients, corporate structures and potential enforcement targets. Bank records may require the institution’s cooperation or a lawful disclosure process. Blockchain analysis can trace public transactions, but attribution of a wallet to a person or exchange usually requires additional evidence.

A confirmed blockchain transaction cannot ordinarily be reversed by a private recovery agent. Recovery may be possible through a cooperating custodian, lawful freezing or seizure, voluntary repayment or enforcement against identified assets. Tracing a transaction alone does not guarantee access to the funds.

Cross Border Strategy and Realistic Timelines

Map the case before commencing expensive proceedings: the victim’s location, contracting entity, sending provider, recipient accounts, suspected offender and known assets. Prioritise urgent financial notifications and justified preservation measures while selecting the most useful reporting and litigation routes.

The appropriate steps may run in parallel, but every case does not require proceedings in every country. Duplicate or unsupported claims can increase costs without improving recovery. Assess the amount at stake, evidential gaps, defendant solvency, jurisdiction and likely enforcement costs together.

There is no reliable universal recovery timeline. A pending transfer may be stopped quickly; a disputed payment, ombudsman case or court claim may take substantially longer. Cross-border litigation, appeals, insolvency and enforcement can extend a case beyond a year. Fast initial action protects options, but does not guarantee a fast final outcome.

How Veritas Advisory Group s.r.o. Can Assist

Veritas Advisory Group s.r.o. provides legal and advisory support for fraud matters connected to EU countries, Switzerland and the United Kingdom, including cases involving clients based outside Europe. Its work can include fraud investigation, asset tracing and recovery and litigation and dispute resolution.

An initial assessment should identify the actual loss, payment method, available evidence, relevant jurisdictions and potential defendants. The strategy can then focus on viable payment disputes, complaints, negotiated recovery or proceedings. The existence of a European account or company is relevant to the analysis, but does not by itself establish a recoverable claim.

Police Contacts Across the EU and Nearby European Countries

The directory below covers all 27 EU Member States, plus the United Kingdom, Switzerland and Norway. Use these official routes to report fraud, seek reporting instructions or find your local station. Contact your bank separately and immediately; filing a police report does not initiate a payment recall or guarantee recovery.

For immediate danger, use the local emergency service; 112 is available across the EU. The contacts below are primarily for non-urgent reporting and enquiries. Domestic short numbers and special-rate numbers may not work from abroad. Where no national non-emergency number is listed, the official link provides the reporting route or local contact directory.

Bring identification, a clear chronology, payment details, screenshots and correspondence. Ask for a report reference and a copy or acknowledgment. An information email, anonymous tip or preliminary online form may require a separate formal complaint, signature or in-person confirmation. Reporting restrictions, authentication requirements and contact details can change; check the linked official page before submitting.

Directory checked on 2 October 2026. The linked national services explain the applicable reporting procedure; reporting in one country does not automatically open a complaint in another.

Take Action Before Further Funds Are Lost

The immediate response to an online scam is practical: stop additional payments, notify the payment provider, secure accounts and preserve evidence. Then select the reporting and recovery routes that fit the payment and jurisdiction. Keep copies of submissions and track the deadlines for each procedure.

If your loss involves European financial institutions, companies or assets, contact Veritas Advisory Group s.r.o. for an assessment of your legal position and available recovery options.

This material provides general information as of 2 October 2026 and does not constitute individual legal advice. Legal rights, procedural requirements and outcomes depend on the circumstances and jurisdiction.