FraudPaymentsMoney2026

How Money Actually Leaves When You Fall for a Scam

You did not lose your money; you sent it. A scam does not steal — it obtains your authorization, and authorization is exactly what the payment system is built to honour, which is why a push payment has no chargeback and why "it was a scam" is not the same statement as "you will get it back." Here is the mechanic that explains all of it, the recourse ladder ranked by what actually happens, and the clock that is the only lever you still control.

General information only — not financial or legal advice, and not a promise of recovery. This page explains the mechanic of how money leaves and why recourse is limited in authorised push-payment fraud. Whether you can get money back, and under what rules, depends on your bank, your payment method, your country's regulator, and the specific facts — and those rules change. Your bank and your national fraud-reporting body or regulator are the authorities, not this page. If money has just left, act on the clock below and call your bank on a number you already have — before you read anything else.

A plain blank paper form with a single dark thumbprint pressed on its signature line, lying on a clean light desk — The thumbprint on the blank signature line is the whole uncomfortable mechanic made physical: the scam did not take your money, it got you to *authorise* the transfer, and a payment system that honoured your signature yesterday honours it today — regardless of whether the reason you signed was true.

Updated September 2026By the AI Help Guide editorial team10 min read

The Wrong Model

"It Was a Scam, So the Bank Will Reverse It"

The mental model most people carry about a fraud loss is the card-fraud model: someone took my money without my consent, I ring the bank, the charge is reversed, life resumes. That model is correct — for one kind of fraud — and it is precisely why the other kind is so devastating and so poorly understood. When the model is applied to a scam, the victim expects the reversal that came automatically in the card-fraud case, and discovers that this time it does not come, and cannot understand why the bank that always had their back now seems powerless. The answer is not that the bank has changed sides; it is that the transaction was a different kind of transaction, and the system treats the two kinds in opposite ways.

This page is the money half of a trio; its companions, the recovery-scam guide and the credit-freeze guide, deal with what happens after the loss and how to pre-empt the account-takeover that precedes it. The recognition trio that came before — phishing, deepfake, account-recovery — explained how the message and the process are attacked; this page explains what happens to the money once the attack succeeds, and why the mechanics of payment, not the merits of the fraud, decide whether it comes back. The single distinction that explains everything is push versus pull, and it is worth learning before anything else on the page.

Push Versus Pull

The Distinction That Explains All of the Recourse

Every payment moves money in one of two directions, and the direction determines whether there is an undo. A pull payment is when the recipient reaches back and takes the money from your account — a card charge, a direct debit — and because you did not push it, the system gives you a route to pull it back: the chargeback. A push payment is when you reach forward and send the money out — a bank transfer, a wire, a gift-card code read over the phone, a crypto transaction to an address — and because you sent it, the system has no equivalent route to recall it. The scam works by converting every loss into a push.

Pull — they take it

Card charge, direct debitThe recipient initiates; you did not authorise the specific movement, so the network built a reversal path for exactly this case.

Recourse: chargeback — a route that exists by design

direction of money

Push — you send it

Transfer, wire, gift card, cryptoYou initiate; the system is built to honour your authorisation instantly and finally, because that is what a payment is.

Recourse: none by design — no equivalent undo

The kind	Who moves the money	The undo route	Why the scam picks it
Pull (card / direct debit)	The recipient takes it	Chargeback exists	Less attractive — the victim can reverse
Push (transfer / wire)	You send it	No chargeback	Preferred — final and fast
Push (gift card)	You send it	Converts to cash instantly	Ideal — untraceable, irreversible
Push (crypto)	You send it	Sent to an address	Ideal — hard to recall, hard to attribute

The table's last three rows are the scam's menu, and the reason is not incidental: a fraudster who can choose how you pay will always choose the method that strips your recourse. This is why "pay by bank transfer" or "send gift cards" or "transfer crypto" is itself the tell — the method is selected to remove the chargeback that a card purchase would have given you. The recognition trio taught you to read the message; here you learn to read the payment instruction, because a request to push money by an irreversible method, from someone you have never met or verified, is the scam announcing its own structure.

The Recourse Ladder

What You Can Try, Ranked by What Actually Happens

Recourse is not a single yes-or-no; it is a ladder of actions, each with a different likelihood, and the honest ranking below is by what usually happens rather than by what you hope. Read it as a map of your options and their real odds, not as a promise — and note that several rungs are a request to a human institution rather than a right enforced by the rails.

Best odds

Call your bank now, on a known channelThe single action with the most leverage, because it is the only one that can act before the money settles or is withdrawn. The bank may be able to recall a transfer that has not yet cleared, or freeze the destination account if it is at the same institution and you are fast.

Odds depend entirely on speed and on whether the funds are still reachable — see the clock below.

Variable

Report to the official fraud body and file a police / crime reportCreates the record that a bank or regulator may require, and feeds the intelligence that can freeze accounts across institutions. It does not, by itself, move money back.

Worth doing for the record and the pattern, not as a recovery mechanism on its own.

Discretionary

Ask your bank for a refund or an exceptionSome banks will consider refunding authorised push-payment fraud as a gesture or under policy; some countries have introduced rules that may require banks to consider it in certain cases. Eligibility, thresholds and timelines vary by country, by bank and over time.

This is the rung most likely to be misunderstood: it is often a request, not an automatic right. Your bank and your regulator are the authorities on what applies to you.

Low

Pursue the recipient directlyThe money is usually with an anonymous or layered account in another jurisdiction, and the cost and difficulty of civil action almost always exceed the loss.

Realistic only in rare cases with an identifiable, reachable recipient.

Lowest

Wait, or hope the fraudster is caught and assets recoveredCriminal recovery, when it happens, is slow, uncertain, and the returned proportion is usually small; it is not a plan you can rely on for a personal loss.

Do not let this rung become your only action — the clock above is the one that matters.

The ladder's shape is the honest message: the rungs with the best odds are the fast ones you control, and the rungs with the worst odds are the slow ones that depend on someone else being caught. This is why the page leads with the clock rather than with the rights — because in authorised push-payment fraud, the variable that most predicts an outcome is not the merit of your case but the number of minutes between the send and the call. And the middle rung, the bank refund, is the one most likely to disappoint a reader carrying the card-fraud model, because it is frequently a discretionary request rather than the automatic reversal they expect — which is exactly why the disclaimer routes it to your bank and your regulator rather than to this page.

What your bank CAN often do

Recall a transfer that has not yet settled or left the institution
Freeze a destination account if it is theirs and you are fast
Flag the pattern and warn other institutions via the fraud-reporting route
Investigate and, in some cases, offer a goodwill or policy refund
Secure your remaining accounts and reissue credentials

What your bank CANNOT usually do

Un-send an authorised push payment the way it reverses a pull charge
Guarantee recovery once funds have settled and been withdrawn
Judge the reason you consented — the rails honour the authorisation
Reach an anonymous or overseas destination account at speed
Promise an outcome the regulator's rules do not compel

The two columns are the same truth seen from each side, and they explain the gap between expectation and experience. The bank is not refusing to help; in a push-payment case it often cannot help in the specific way the card-fraud model predicts, because the money has moved on an authorisation the system was built to honour and the destination is beyond its reach. What it can do is almost entirely time-dependent — which returns, again, to the clock.

Time is the only lever — the first hour matters more than the first week.

If money has just left, stop reading and call your bank on the number you already have — the back of your card or the official app — not a number in any message.

Every other action on this page can wait an hour; this one cannot, because the recall window and the destination-freeze window close the moment the fraudster withdraws or layers the funds. The bank's best odds in the recourse ladder are the fast rungs, and the fast rungs are only available while the money is still in motion. Report to the official fraud body next, on a known channel, and tell one person — the isolation that follows a scam is the recovery scam's opening, and our next page is entirely about it. The clock is brutal and it is the whole game: in authorised push-payment fraud, speed is not a detail of the recovery, it is the recovery.

A worked example: the investment that took eight transfers and no recourse

Concretely, the push-pull distinction, the consent weapon, and the clock meeting the scam that drained a savings account one "authorised" transfer at a time. A person is drawn into an online investment platform by a contact that began on a social app — the recognition trio's territory, but here the money is the point. The platform shows a growing balance, and when they want to withdraw, they are told they must first pay a "tax," then a "verification deposit," then a "release fee" — each a separate bank transfer, each framed as the last.

Running the mechanic reveals why eight transfers left no recourse. Every payment was a push: the person initiated each bank transfer themselves, from their own banking app, so there was no chargeback route on any of them — the card-fraud model never applied, because there was never a card charge to pull back. Each was authorised: the rails saw eight legitimate-looking sends from a verified account, and the deception lived entirely in the reason the person believed they were sending — a reason the payment system was never built to judge. The method was chosen: the scam insisted on bank transfer and rejected any card or marketplace option precisely because those would have given a reversal route; the "too good" platform was, structurally, a recourse-removal machine. The clock was missed: by the time the person understood, the transfers had settled and been layered through accounts in other jurisdictions, so the bank's best rungs — recall and destination-freeze — were already closed.

The honest outcome is the page's thesis in one story: the person was unquestionably defrauded, and the recourse ladder still had only the slow, low-odds rungs left — a report for the record, a discretionary refund request routed to the bank and regulator, a slim hope of criminal recovery. The fast rungs, the ones with real odds, were gone the moment the eighth transfer settled. What would have changed the outcome was not a better bank or a stronger law; it was recognising, at the first "pay a fee to withdraw" instruction, that a legitimate platform does not ask you to push irreversible money to release your own — and calling the bank on a known channel within the hour of the first send, not the eighth. The scam did not steal the savings; it obtained eight authorisations, and the system honoured every one.

The Check

A Sensible Default

Hold the mechanic: you did not lose the money, you sent it — and a sent payment is not a taken one.
Learn the distinction: pull payments have a chargeback; push payments do not, and the scam converts every loss to a push.
Read the payment instruction as a tell: a request to send by transfer, gift card, or crypto, to someone unverified, is the scam announcing its structure.
Remember the weapon: the fraud is in the reason you consented, not the consent — and the rails honour the consent.
Climb the recourse ladder by odds, not hope: the fast rungs are yours; the refund rung is often a request, not a right — route it to your bank and regulator.
Respect the clock: if money has just left, call your bank on a known channel before you read anything else.
Report to the official fraud body next, and tell one person — the isolation is the recovery scam's opening.
Accept the disclaimer's limit: no guide page can tell you what you qualify for; your bank and your national regulator are the authorities.

The honest takeaway is that the card-fraud model — "they took it, the bank reverses it" — is the wrong model for a scam, and carrying it into a push-payment loss is what turns a fraud into a double injury: the money, and the bewildered belief that the system has broken its promise. The system did not break; it honoured an authorisation, because that is all a payment rail can do, and the recourse that remains is human, discretionary, and brutally time-sensitive. Learn to read the payment instruction as the tell, treat the first hour as the whole game, and route every question about what you qualify for to the bank and the regulator rather than to a page that cannot know your facts. For the second fraud that exploits the loss, see our recovery-scam guide; for the account-takeover that often precedes it, see our account-recovery guide and our credit-freeze guide; for the recognition of the message and the voice that start it, see our phishing and deepfake guides; and for the reporting and recovery mechanics when money has already moved, see your national fraud body and your bank — the authorities this page keeps routing you to, because the loss is real and the clock is already running.

A plain glass hourglass with most of its sand already gathered in the lower bulb, standing on a clean light surface — The hourglass with most of its sand already fallen is the clock made physical: in a push-payment loss the variable that predicts the outcome is not the merit of your case but the minutes between the send and the call. The recall window closes while you are still deciding whether to use it.

Common Questions

Frequently Asked Questions

Why cant the bank just reverse a scam payment?

Because you authorised it, and the payment system is built to honour authorisation. A card fraud where someone else takes your money without consent is a pull payment with a chargeback route; a scam where you are tricked into sending the money yourself is a push payment, and a push payment has no equivalent undo. The bank can try to recall funds that have not yet settled or left, but it cannot un-send an authorised transfer the way it can reverse an unauthorised one.

Is it true that if it was a scam I will get my money back?

No, and this is the uncomfortable mechanic the whole page is built around. It was a scam and you will get it back are two different statements, and the first does not guarantee the second. Recourse for authorised push-payment fraud is often a request to your bank rather than an automatic right, and some countries have introduced rules that may require banks to consider refunding certain cases, but eligibility, thresholds and timelines vary by country, by bank and over time. Your bank and your national regulator are the authorities, not a guide page.

What is the first thing to do if money has just left?

Call your bank immediately on the number you already have — the back of your card or the official app — not a number in any message. Time is the only lever that materially changes the outcome, because the bank can sometimes recall funds that have not yet settled or reached the fraudsters withdrawal point. Then report to your national fraud-reporting body. Do this before you read anything else, including this page.

Why do scammers ask for gift cards, crypto, or a wire?

Because those are push payments with the least recourse and the fastest, hardest-to-trace settlement. A gift card is cash that converts instantly and irreversibly; crypto and wire transfers move to an address or account that is difficult to recall and often difficult to attribute. The choice of method is not incidental to the scam; it is selected precisely because it removes the chargeback and recall routes that a card purchase would give you.

I paid by card, not transfer. Am I safe?

You are in the better position, because a card charge is a pull payment with a chargeback route — but "safe" is too strong. Chargebacks have their own deadlines and their own disputes, and a card that was used without your consent is a different case from a card you authorised to pay a scam merchant. If you authorised a card payment to a fraudulent seller, tell your bank and ask about a chargeback promptly; the route exists, but it is time-limited and not guaranteed. The method matters, and so does speed.

The bank says it will investigate. How long does that take, and will it help?

An investigation is the right thing to want, but it is not the same as the recall that only speed can achieve, and it can run for weeks or months. The investigation examines the case and may, in some circumstances and under some rules, result in a refund — but the fast rungs (recall, destination-freeze) are usually closed by the time an investigation concludes. Push for the immediate actions first, treat the investigation as the slower track, and route any question about what you qualify for to your bank and your regulator rather than to a timeline a guide page cannot know.

Is reporting to the fraud body pointless if it wont get my money back?

No, and the distinction matters. Reporting rarely moves money back on its own, but it creates the record a bank or regulator may require, and it feeds the intelligence that can freeze accounts across institutions and catch the pattern that harmed you. It is not a recovery mechanism; it is a contribution to the system that might recover for others and that may strengthen your own case. Do it — but do it after the clock action, not instead of it.

Ask our AI. Has money just left? Tap the chat icon only after you have called your bank on a known channel — the clock is the one thing the chat cannot give you back. Then it can help you read the payment instruction, place your case on the recourse ladder by odds, and prepare what to ask your bank and your national fraud body, without ever promising an outcome this page cannot know.

More fraud & money guides like this

We replace the card-fraud model — "they took it, the bank reverses it" — with the push-versus-pull mechanic that actually decides recourse, because in a scam you authorised the send, the rails honoured the authorisation, and the only lever left is the clock.

Explore All Guides