What to do after an investment scam: your first 24 hours
A practical first-day plan: contact your payment provider, protect accounts, preserve evidence and use the right fraud-reporting route.

Stop sending money, contact the bank or exchange that handled your payment, and secure any exposed accounts. Save the transaction records and report the suspected fraud. Acting promptly can preserve options, but none of these steps guarantees reimbursement.
Realising an investment may be a scam can make every decision feel urgent. The useful distinction is between actions that may stop another loss now and actions that build a record for later. A finished police statement is not a prerequisite for calling your bank.
This worldwide checklist concerns practical first steps. Refund rights, reporting services and complaint deadlines depend on your country, payment method and the facts. Use the country guides for the relevant local route rather than assuming a rule from another jurisdiction applies.
Contact the actual payment provider first
Use the number on your bank card, its official app or a website you already trust. Explain that you suspect investment fraud, give the dates and amounts, and ask whether pending payments can be stopped or completed transfers recalled. For cryptocurrency, contact the exchange or service you used to send it.
Ask for a case reference and note when you called. A recall is a request, not a completed refund; money may already have moved. Do not wait for the investment platform to admit wrongdoing before notifying your provider.
Prevent the next payment or account takeover
Cancel additional deposits and do not pay a withdrawal tax, verification deposit or recovery fee. If someone has remote access, disconnect the affected device from the internet and use a different trusted device to reach your bank. Ask about freezing affected accounts, replacing exposed cards and securing online access.
Change compromised email and financial passwords, revoke unfamiliar sessions and enable multi-factor authentication. If you disclosed identification documents, tell the issuer and follow local identity-protection guidance. Keep a record of the security changes you make.
Save a small, usable evidence pack
Start with the payment receipts, recipient details, platform website address and the messages that explain why you paid. Export conversations where possible; screenshots should show dates and the sender, not just an isolated promise. For crypto, save the network, asset, destination address and transaction hash.
Write a timeline in your own words, separating confirmed facts from suspicions. Record real money sent and any money returned separately from the profit figure displayed by the platform. A fictional account balance is not proof that those funds existed.
Report locally and track each route separately
Make a report through your local police or official fraud-reporting service, then notify the financial regulator if an investment firm may be unauthorised or impersonated. These bodies have different roles. Reporting helps investigations and warnings; it is not the same as filing a reimbursement complaint with your bank.
Keep the reference numbers, submission copies and follow-up dates in one place. If a provider refuses your claim, request written reasons and its complaint process. Be cautious of anyone who contacts you afterwards promising guaranteed recovery.
A short checklist
- Stop new deposits and fee payments.
- Call the sending provider through an independently verified channel.
- Secure exposed accounts and devices.
- Save receipts, messages and a short timeline.
- Report locally and retain every reference number.
Common questions
Should I contact the platform before my bank?
Not if it delays action. Notify the sending provider promptly. You can preserve existing messages without arguing with suspected criminals or revealing investigative steps.
Is it too late if the payment happened months ago?
Not necessarily. Report it and ask about the applicable complaint or claim deadlines. The chance of stopping a transfer may be lower, but records can still support an investigation or a provider complaint.
References
- What to do if you were scammedFederal Trade Commission · United States; practical prevention guidance
- What to do if you've been scammedASIC Moneysmart · Australia
- Cryptocurrency investment fraudFederal Bureau of Investigation · United States; international scam patterns
- Refund and recovery scamsFederal Trade Commission · United States; scam-pattern guidance