A payment request can look routine even when it is fraudulent. An invoice may appear to come from a familiar supplier, or a caller may claim to represent a bank, government office or delivery company. The critical question is not only whether the message looks convincing; it is whether the request and destination can be verified through a channel you already trust.
This guide focuses on U.S. consumer practices. Payment protections and reporting channels differ by method and location. Acting quickly matters after a suspected loss, but recovery is not guaranteed.
Pause before following instructions
Pressure is a warning sign. A caller may claim an account will be closed immediately, a relative is in danger or a payment must be made to receive a prize. The FTC advises against giving personal or financial information in response to an unexpected request. Caller ID, a logo and familiar details can be copied or manipulated.
Do not use a phone number or link supplied in the suspicious message to verify it. Instead, open a known app or type a known website address yourself, or call a number on a prior statement or official card. Explain the request without sharing a password or one-time code. A legitimate issue can be investigated through the organization's established channels.
Verify the recipient and the change
A familiar name on a payment screen does not necessarily prove that an account belongs to the intended recipient. If an invoice requests new bank details, confirm the change with the recipient using a previously established number or a separate verified contact. For a significant payment, confirm the exact destination and amount before authorization. A small test transfer can help verify a process, but it does not by itself prove that the remaining request is legitimate.
Review the business name, account details and purpose of the payment. If a message directs you to ignore an established procedure, change the recipient urgently or keep the transaction secret, stop and independently check. In a household or organization, agreeing on a callback procedure before an urgent request arrives makes it easier to resist pressure in the moment.
Payment method changes the response
The FTC warns that scammers often insist on hard-to-recover methods such as wire transfers, cryptocurrency, payment apps or gift cards. These methods also have legitimate uses; the warning is especially strong when an unexpected requester insists that only one method will do. A payment method's availability is not evidence that a transaction is safe.
Credit cards can offer dispute protections, but eligibility and deadlines depend on the facts and law. Bank transfers, debit cards and payment apps may have different procedures. Before sending, learn how the provider handles mistaken or unauthorized payments and what information it needs to investigate. Never treat a requested one-time security code as something to share with a caller.
A verification checklist
- Stop and identify the claimed sender, the purpose and the exact payment destination.
- Contact the organization through a known number or website, not the message's link or callback number.
- Confirm changed account details through an independent, previously established channel.
- Review the amount, recipient and payment method before approving the transaction.
- Keep a record of verification and avoid sending passwords, codes or unnecessary account information.
If money or information was sent
Contact the payment provider or bank immediately using a verified channel. Explain what happened, identify the transaction and ask whether it can be stopped or reversed. If a card or account is compromised, ask about securing it and disputing unauthorized activity. Change affected passwords and contact the relevant provider if credentials or codes were disclosed. Preserve messages, receipts and transaction identifiers for the investigation.
The FTC accepts scam reports at ReportFraud.ftc.gov; IdentityTheft.gov provides guidance when identity information has been misused. Reporting is useful even when a refund is uncertain. Watch for a second scam in which someone promises recovery in exchange for an advance payment or sensitive information. The safest response depends on the payment method and the provider's rules.
If a device or email account may have been compromised, use a trusted device to contact the relevant providers and secure access. Review other recent transactions and account recovery settings for unfamiliar changes. The provider can explain its investigation process and any additional steps relevant to the particular incident.