What To Do If You’ve Been Scammed Online & How To Report It

Do You Know How To Spot an Online Scam?

When Sam Silverman wanted to get rid of a pair of unworn designer pants she’d bought, she turned to Facebook Marketplace. But instead of finding an eager buyer, Sam lost $300 after becoming the victim of a Zelle scam.

The worst part? Sam is an online editor that regularly writes about how to avoid online scams [*].

Scammers are increasingly targeting Americans online, with no signs of slowing down. According to the latest stats from the Better Business Bureau (BBB) [*]: 86% of scam victims in 2022 were targeted online — with losses in the billions.

If you’ve been scammed online, it can be hard to know what to do, where to report scams, and how to try and get your money back.

In this guide, we’ll cover 15 of the most common online scams and explain what to do if you’ve been a victim.

{[show-toc}}

What To Do If You Think You’ve Been Scammed Online

As soon as you recognize the warning signs of identity theft or fraud, you need to act quickly.

The specific steps you’ll take will depend on whether you paid the scammer, the payment method you used, and what personal information the scammer has about you.

However, there are a few things you should do immediately if you think you’ve been scammed:

Start by securing any accounts that the scammer may have access to.

Then, freeze your credit and contact your bank or financial institution and any impacted companies to alert them of the crime.

Finally, you may need to file a report with your local police department and the Federal Trade Commission (FTC) at IdentityTheft.gov.

Next, follow these steps depending on your specific situation:

If you accidentally paid a scammer:

• Did you pay with your credit or debit card? Report a fraudulent charge on your card to your bank, and ask for a reversal.
• Did you pay using a gift card? Reach out to the gift card company and inform them of the scam. Keep copies of the gift card and its receipt for reference purposes.
• Did you send a wire transfer through your bank? Report the fraudulent transfer to your bank. Let them guide you through the due process for a reversal.
• Did you use a money transfer app? Contact the company responsible, and report the scam. Also, ask if they have a payment reversal policy to get your money back.
• Did you pay with cryptocurrency? If you used a centralized exchange, report the scam to the exchange and ask if they can reverse your money. Unfortunately, this isn’t the case with decentralized exchanges, as there's little to KYC (know your customer) for identifying and verifying users.
• Did the scammer make an unauthorized transfer in your name? Report the unauthorized debit to your bank. Ask them to either block the transaction or reverse the money back to you.

If you gave up Personally Identifiable Information (PII):

• Did you give up your login credentials? Create a new, strong password using a combination of letters, numbers, and symbols. For extra security, enable 2FA (two-factor authentication) on all your accounts.
• Did you reveal your SSN (Social Security Number)? Visit IdentityTheft.gov and follow the instructions on the page.

If someone hacked your phone or computer:

• Did the scammer gain remote access to your computer? Scan your computer using an antivirus software to detect and fix the virus. You may also want to invest in a cyber security solution that will protect your devices against hackers. ‍
• Does the scammer have unauthorized access to your phone? If the scammer has your phone number, report this to your service provider to help you regain control. With cloned access, log out of all accounts and reach out to your  bank to block unauthorized transactions and requests.

The 15 Latest Online Scams (and What To Do If You’re a Victim)

1. Credit or debit card scams
2. Common bank scams
3. Peer-to-peer payment app fraud
4. Cryptocurrency fraud
5. USPS fraud
6. Social Security fraud
7. Unemployment scams
8. Account takeovers or device hacks
9. Social media scams
10. Romance scams
11. QR code scams
12. Online shopping scams
13. IRS imposter scams or tax fraud
14. Scams targeting veterans
15. Medicare fraud

Fraudsters are always looking for new ways to steal your money or PII. Here’s what to do if you’ve been the victim of an online scam:

1. Credit or debit card scams

Waking up to a fraudulent charge on your credit or debit card isn’t how you imagine starting your day.

But this was the harsh reality for a Texas couple, Mary and Lewis Keener, when they discovered one day that they had lost $17,000 to credit card scams [*].

Like most scams, credit card scammers use stolen personal information to obtain a credit card without the owner’s permission. Unsurprisingly, in the first three quarters of 2022, credit card scams were the most common type of identity theft, with a record-breaking 338,684 reports [*].

To report the scam, do this:

• Contact your debit or credit card company. Ask for their fraud department and report the case. Record all fraudulent transactions that you want cleared from your credit report. Next, close your account, and request a new credit card.
• Change your passwords immediately. Once you detect a breach in your online banking accounts, choose a combination of random (non-guessable) letters, symbols, and characters. This will block any attempt by scammers to access your account, change your details, or withdraw your money.

Did you know? In June 2021, the Consumer Financial Protection Bureau (CFPB) clarified that if consumers are duped into sharing account access information, they should receive the same protections that are offered if the money is acquired from a stolen debit card or other banking "access device" [*].

📚 Related: Citibank Customer? Watch Out For These 8 Scams →

2. Common bank scams

Let’s say you delivered a service or sold a product to someone. But they “slipped up” and claim they overpaid you. So they ask you to refund the difference through a wire transfer or other means of payment.

In overpayment scams like these, you haven’t just lost the refund amount but also the cost of your goods or services.

Like most victims, Teresa Shunk realized she’d been scammed only after her bank flagged a bounced check [*]. She was paid $1,900 for a $200 wedding amenity and was asked to return the difference through PayPal — which she did.

However, after depositing the remaining $200 in her account, her bank told Shunk that the check was fake.

This year, similar bank scams have cost victims $83.1 million — with each victim losing an average of $2,000 [*].

To report the scam, do this:

• Notify your bank. Contact the fraud department at your financial institution or wire transfer company about the fake check. Work with them to either secure or close your account to prevent further attacks.
• Contact the FTC (Federal Trade Commission): The FTC fields complaints online about fraudulent checks and demands for wire transfers at reportfraud.ftc.gov. Or, you can reach them by phone at 1-877-382-4357.

📚 Related: Scammed on PayPal? Here's What To Do →

3. Peer-to-peer payment app fraud

Over the last few years, peer-to-peer (P2P) payment apps like Zelle, CashApp, and Venmo have become preferred ways to send and receive money. 

Unfortunately, scammers have devised schemes to use these payment apps to their advantage. They do this by impersonating bank employees and tricking users into giving up financial information.

Megan MacDonald was one of these victims. After receiving a phone call from her bank about possible fraud, she disclosed her financial information in an attempt to secure her account. Minutes later, the scammer initiated a $3,000 Zelle transfer from MacDonald’s checking account [*].

To report the scam, do this:

• Contact the P2P payment platform. Report the scam to their fraud department and keep screenshots of the transactions. Next, file a police report and send a copy to the P2P app provider.
• File a complaint with the Better Business Bureau (BBB). The BBB has a policy that helps fraud victims report their cases to the P2P service. Therefore, every accredited P2P payment provider must respond to the BBB.

📚 Related: Scammed on Zelle? Here's How To Get Your Money Back →

4. Cryptocurrency fraud

With these types of scams, fraudsters trick unsuspecting victims into cryptocurrency “pump-and-dump” schemes disguised as investments.

They create fake versions of legitimate cryptocurrency by spoofing domains, trading platforms, and names — making the phony versions almost indiscernible from legitimate ones.

Late last year, Tho Vu met her future partner Ze Zhao — or so she thought — through a dating app [*]. Zhao convinced Vu to buy Bitcoin and invest on a trading platform with the promise of massive gains. 

It was only after spending $306,000 on this scheme that Vu realized it was a scam. “Not only had I lost all my savings, but this future that I thought would be a new adventure — it was all a lie.”

To report the scam, do this:

• Contact all relevant government agencies. If you suspect fraud, file separate complaints with the FTC, Internet Crime Complaint Center (IC3), and other agencies. You can file your complaint with the IC3 by visiting ic3.gov/Home/FileComplaint.

If fiat transactions (government-issued currency) can be blocked or reversed, it’s almost impossible with blockchain transfers because there is no one central institution acting as gatekeeper. 

Law enforcement can’t do much to recover your funds either. Regional and national borders complicate jurisdiction.

📚 Related: What Is the "Pig Butchering" Scam? →

5. USPS fraud

An email from the USPS about a failed package delivery would likely prompt you to reply — especially if you mailed a check or an important package. But you should think twice before responding.

Most phishing emails purporting to be from USPS, will usually include links that can steal any information you enter.

To report the scam, do this:

• Report to the USPS. Visit the official website of the USPS at uspis.gov/report and file your complaint.
• Alternatively, you can call the U.S. Postal Inspection Service at 1-877-876-2455 to intercept the check or package before it reaches the scammer.

📚 Related: Phishing Email Examples: 20 Emails That Don’t Look Like It →

6. Social Security fraud

When a mother of three from Blue Ash, Ohio received a call from the Social Security Administration (SSA), she panicked [*]. Her Social Security number (SSN) had apparently been used to open 25 bank accounts, among a slew of other allegations. 

Petrified, she did exactly as she was told to “stay out of prison” — which was to buy $20,000 worth of Target gift cards in batches.

This is only one example of the 568,000 reports of SSN-related fraud incidents and scam calls that the SSA received last year.[*]

To  report the scam, do this:

• First, file an identity theft report with the FTC at identitytheft.gov.
• Then, contact the Office of the Inspector General’s (OIG) fraud hotline at 1-800-269-0271. Alternatively, you can submit your report online at www.oig.ssa.gov.

📚 Related: My Parents Are Using My Social Security Number — Should I Report Them? →

7. Unemployment scams

Scammers resort to unemployment fraud when they want to evade taxes or claim fraudulent benefits. 

Spoofed websites with misspelled names or URLs — such as “employ-wiscon.xyz” or “Marylandgov.xzy” (which are examples of “typosquatting”) — are among the most common ways scammers pilfer potential job seekers’ information.

In May 2022, Sareena Brown-Thomas found herself mired in another variation of this scam.[*] An unemployment identity scheme awarded her benefits that she hadn’t applied for in the first place.

The real trouble started when she was out of a job a few months later — and couldn’t claim the financial support that was rightfully hers.

To report this scam, do this:

• Report the fraud to the workforce agency in your state. Visit The U.S. Department of Labor website to find your state’s unemployment identity theft hotline. 
• Notify the police and file a report. When communicating with the IRS about the 1099-G collected in your name, the police report will be your evidence. 

8. Account takeovers or device hacks

Your bank details, social media accounts, health data, and contact information can generally be found on your phone or computer. For this reason, hackers and scammers may go to great lengths to get their hands on your devices or accounts.

With only your phone number, hackers can send you smishing texts that trick you into installing malware or spyware on your devices. Once they gain access, everything you own is up for grabs.

BRATA is a banking trojan with information-stealing capabilities that recently made headlines [*]. In the latest version of the malware, it can intercept incoming SMS to steal one-time passwords (OTPs) and two-factor authentication (2FA) codes from banks.

To report the scam, do this:

• Contact your phone service provider. Inform them that your phone has been compromised, and request an account reset to prevent unauthorized access. It’s imperative to also keep your devices up to date and only install apps from trusted sources.

9. Social media scams

The more you share, the more vulnerable you are to social media scams. And bad actors can use anyone as a pawn in their scams, including unwitting family members or friends.

Andrew, a 27-year-old financial planner, didn’t catch on until he watched a fraudulent investment advisor siphon away $3,000 from his account [*]. Andrew overlooked some glaring red flags, all because he saw a friend post an Instagram video about his ballooning returns.

To report similar social media scams, do this:

• Report the criminal’s account to the social media platform. Take screenshots of your conversation with the scammer, and show them to the customer support rep assigned to you. This will help the platform shut down the account faster.
• File an incident report with the police, and halt related transactions by seeking help from your bank.

📚 Related: How To Track Down Someone Who Scammed You →

10. Romance scams

With hopes of finding love, millions of people turn to online dating websites and apps. But many end up falling for a scam instead of finding a life partner.

This is one of the ways romance scams unfold: scammers create fake dating profiles using fictional names or stolen identities of people in the military, media, or living overseas.

They start by sending you messages and gifts to gain your trust. Once you oblige, they start requesting personal information, money, credit card details — the list is endless.

Nearly 70,000 people reported a romance scam, with losses of $1.3 billion in 2022 [*].

To report this scam, do this:

Notify the dating app: Legitimate online dating websites and companies have strict rules about impostors and scammers. Get in touch with the site’s account safety department and include the following information:

• Your reason for the report
• A screenshot or link to the scammer’s profile (including name, bio, and age)
• The scammer’s location and other personal information shared with you (email address, phone number, etc.)

11. QR code scams

In yet another type of fraud, scammers tamper with Quick Response (QR) codes to redirect you to phishing websites. While QR codes by nature aren’t malicious, always be cautious when you scan a code before entering any personal information.

Imagine trying to simply pay for parking, only to get swindled through a tampered code. Austin Transportation Parking Enforcement officers discovered over two dozen pay stations that did just that [*].

To report the scam, do this:

• File a police report and notify your card issuer immediately.
• Secure your online account. Update any vulnerable login information or other online accounts that might have been compromised.
• Set up fraud alerts or a credit freeze. If you mistakenly entered your financial information on a scam website, notify the major credit bureaus (Equifax, Experian, and TransUnion).

12. Online shopping scams

From fake online stores to enticing social media ads designed to trick you, there are countless ways to fall prey to online shopping scams.

These scams top the list of the riskiest scams of all time with ~79% victims losing money [*].

Even savvy shoppers like Irene Greco couldn’t spot an online shopping scam. After stumbling on a Facebook ad for a pair of Sketchers, Greco thought she’d found a sweet deal. But what she received didn’t remotely resemble what she thought she’d ordered [*].

To report this scam, do this:

• Notify the BBB. Visit the BBB scam tracker website at BBB.org/scamtracker. 
• Report the social media account. 40% of all online shopping scams originate from social media. Contact the social media company and report ads or accounts that are fraudulent.

13. IRS imposter scams or tax fraud

Criminals impersonating IRS agents or other government agencies trick targets into sending money and other personal information. 

People who fall for this scam become victims of tax fraud and identity theft-related crimes. Just last year, the IRS identified nearly $2.2 billion in losses to several types of tax fraud [*].

To report this scam, do this:

• If a return has been filed in your name, print and fill out an Identity Theft Affidavit and mail it to the IRS. You can also request a copy of the fraudulent return from the IRS. 
• If someone claims you owe taxes, visit the official IRS payments page to verify the claim. Never give out personal information via text message, email, or over the phone. 

14. Scams targeting veterans

Veterans and military service members are more targeted and more likely to lose money to fraud than civilians [*]. Among the most common fraud complaint types are imposter scams and lottery scams.

Purporting to be from the Department of Veterans Affairs (VA), scammers may say you qualify for “secret” government loans and funding programs. 

You can claim your funding in exchange for some of your personal information. These funds don’t exist; and by the time veterans realize it’s a scam, they are already entangled in an identity theft scheme.

To report this scam, do this:

• Report similar imposter scams using the VA Form 10-0500, and send it to OCCProgramIntegrityTeam@va.gov.

📚 Related: How To Spot a Citibank Phishing Email (With Examples) →

15. Medicare fraud

The most common Medicare scam involves victims confirming their Medicare numbers over the phone to fraudulent agents. With verified Medicare information, scammers can file for false claims and reimbursements (among other scams).

Current Procedural Terminology (CPT) codes are numbers used to identify the services a healthcare provider offers. In an unbundling scam, malicious service providers may use separate CPT codes for each step of a procedure.

‍To report this scam, do this:

• Keep track of your medical records. Chances are, someone is claiming your health benefits without your knowledge. Request your medical records to see if the bill correlates with the provided services. If you find any errors, send a letter to your healthcare provider requesting that your records be amended. 

📚 Related: How To Identify a Medicare Scam Call: 7 Scams To Watch Out For →

I Got Scammed Online. Will I Get My Money Back?

There’s a possibility of getting your money back after being scammed online. But it depends on how the scam happened.

For example, if you paid a scammer using gift cards or money services like Western Union or MoneyGram, you’re unlikely to get your money back. On the other hand, a bank would reimburse you if you paid through a bank transfer or will impose a chargeback if you were billed unauthorized credit card charges.

Here’s who to contact to try and get your money back after being scammed:

Don’t Let These Scams Catch You Off Guard. Aura Can Help.

Online scams are often like emotional games. The more relatable a scammer sounds, the higher your chances are of falling victim. If you receive a call, text, or email from someone you don’t know, avoid revealing any personal information or acting impulsively. 

Remember the golden rule of fraud prevention: If it sounds too good to be true, it probably is. 

Navigating the complex world of online schemes all alone leaves you vulnerable to scams that you never see coming. But with Aura’s identity theft and credit monitoring service, you have professional guidance at your fingertips 24/7. 

Aura actively monitors your credit cards, banks, and devices for signs of online scams. We’ll also notify you in real time of any suspicious activity on your accounts. 

And if the worst happens, you’re covered by a $1,000,000 insurance policy for all eligible losses due to identity theft. 

Take action against financial fraud with Aura. Sign up today to get 14 days free →