How to Recover After an Online Scam: A Step-by-Step Guide

The Harsh Reality — And Why Acting Fast Matters

A sobering statistic: according to the AARP Fraud Watch Network, only about 14% of elder fraud losses are ever recovered. This number is not meant to cause despair — it is meant to emphasize that speed dramatically affects outcomes. Money moved through wire transfers or gift cards is extremely difficult to recover. Money fraudulently charged to a credit card has much stronger recovery options, but only if the dispute is filed promptly.

The first 24 hours are your best window. After that, each passing day makes financial recovery harder and gives scammers more time to use any personal information obtained during the fraud.

The First 24 Hours: Document Everything

Before taking any recovery steps, spend 10 minutes documenting what happened. Write down or take screenshots of:

• The date and time of the scam
• How the scam was initiated (phone call, email, website, pop-up)
• What information or money was provided
• Any phone numbers, email addresses, or website URLs involved
• The names the scammer used
• Exact amounts of any payments made

This documentation will be required for bank disputes, FTC reports, police reports, and any legal processes. Create it while details are fresh.

Financial Recovery: Credit Card Charges

Credit cards offer the strongest consumer protections. Under the Fair Credit Billing Act, you have the right to dispute fraudulent charges and receive a chargeback. Call the number on the back of the card immediately and tell them fraud has occurred. Ask them to:

1. Cancel the card and issue a new one with a new number
2. Dispute and reverse any fraudulent charges
3. Place a fraud alert on the account

Follow up the phone call with a written dispute submitted through the card's online portal or by mail. Keep records of all correspondence.

Financial Recovery: Bank Accounts and Wire Transfers

If money was withdrawn directly from a bank account or sent via wire transfer, call the bank immediately. Ask for the fraud department specifically. For wire transfers sent the same day, banks can sometimes issue a SWIFT recall — this has a higher success rate within the first few hours, and drops significantly after 24 hours.

For unauthorized bank account withdrawals (ACH fraud), you have rights under Regulation E. Disputes must typically be filed within 60 days of the statement showing the fraudulent transaction. File as quickly as possible.

Financial Recovery: Gift Cards

Gift card fraud is the hardest to reverse. Once a scammer redeems a gift card code, the money is effectively gone. However, it is worth calling the gift card issuer immediately (the number is on the back of the card). Some issuers — particularly Amazon, Google Play, and iTunes — have fraud departments that can sometimes freeze unredeemed balances if reported quickly enough. File the report even if recovery seems unlikely; the documentation supports other recovery efforts.

Identity Recovery: The Credit Freeze

If any personal information was shared — Social Security number, date of birth, address, bank account numbers — place a credit freeze immediately with all three major bureaus:

• Equifax: equifax.com/personal/credit-report-services or 1-800-685-1111
• Experian: experian.com/freeze or 1-888-397-3742
• TransUnion: transunion.com/credit-freeze or 1-800-916-8800

A credit freeze prevents anyone from opening new credit accounts in your parent's name. It is free, can be done online in minutes, and can be lifted at any time. It does not affect existing accounts or credit scores.

A fraud alert (different from a freeze) requires lenders to take extra verification steps before issuing new credit. You only need to place a fraud alert with one bureau — they are required to notify the others.

Identity Recovery: The identitytheft.gov Process

The FTC's identitytheft.gov is the official starting point for identity theft recovery in the United States. The site creates a personalized recovery plan based on what information was stolen, generates an official Identity Theft Report (which serves as proof of fraud for creditors), and walks you through each step of the recovery process. The process takes about 30-45 minutes to complete thoroughly.

If a Social Security number was compromised, also call the Social Security Administration fraud hotline at 1-800-269-0271. They can note the fraud on your parent's record and advise on whether a new Social Security number is warranted (it is rarely necessary but worth asking about in severe cases).

Reporting the Scam

Reporting scams serves two purposes: it creates documentation that supports your parent's recovery efforts, and it helps authorities identify and shut down fraud operations. File reports with:

• FTC: reportfraud.ftc.gov — the most important report to file; generates an official case number
• FBI Internet Crime Complaint Center (IC3): ic3.gov — particularly important for losses over $1,000
• State Attorney General: Search "[your state] attorney general consumer fraud report"
• Local police: File a local report — this is required by some banks before processing fraud refunds

Emotional Recovery: The Shame Problem

Research by the AARP Fraud Watch Network found that shame and embarrassment are experienced by the vast majority of elder fraud victims, and these emotions frequently delay reporting and recovery. Many seniors wait days, weeks, or even months before telling family members what happened — time during which financial recovery becomes progressively harder.

The most important thing family members can do is communicate clearly and repeatedly: falling for a scam is not a sign of diminished capacity or foolishness. These are sophisticated professional fraud operations that target and deceive people of all ages and intelligence levels, including those who work in finance and technology.

The AARP ElderWatch program provides free peer counseling from other fraud survivors at 1-800-222-4444. Speaking with someone who has lived through the same experience can be more healing than any practical recovery step.

Preventing Recurrence: The Final Step

Once the immediate recovery steps are underway, take 15 minutes to install protective measures on your parent's computer. GrannySafe detects the websites and tactics that initiated most scams — fake tech support pages, phishing login screens, fraud shopping sites — before your parent can be drawn in. Review all financial accounts for any additional unauthorized activity, and set up account alerts with every bank and credit card so any future suspicious transactions are flagged immediately.

For specific guidance on immediate actions after a tech support scam call, see what to do if your parent called a scam number. For warning signs a scam may have occurred that your parent has not yet disclosed, read our guide on signs your parent was scammed.