Romance Scam Recovery: The First 72 Hours After You Send Money

Call your bank's fraud department before you do anything else and ask for a recall or stop payment on the transfer — that window closes at roughly 72 hours. Then file with the FBI at ic3.gov within 24 hours, report to the FTC at ReportFraud.ftc.gov, and consider a recovery attorney.

The shame is what costs money. Victims often spend the first day or two deciding whether to tell anyone at all, and by the time they call, the funds have moved through two or three mule accounts. The FBI's Internet Crime Complaint Center logged more than 19,000 romance scam complaints in 2022 with losses above $735 million, which means the person on the phone at your bank has almost certainly handled this before. You are not the first call they have taken this week.

What most people do not know is that the 60-day clock under the Electronic Fund Transfer Act does not protect you here. EFTA covers unauthorized transfers, and when you authorized the payment — even because you were lied to — US banks are under no legal obligation to reimburse. The UK has mandatory reimbursement for authorized push payment scams under its Contingent Reimbursement Model; the US does not.

The IC3's Recovery Asset Team has frozen and returned over $1 billion since 2018, but that record rests almost entirely on speed. A report filed on day one is a very different document from one filed on day nine.

• Call the bank first: Most US banks can attempt a wire recall for up to 72 hours after the transfer, though success depends on whether the receiving account still holds the funds.
• IC3 within 24 hours: The FBI's Recovery Asset Team has returned over $1 billion to victims since 2018, and its freeze requests depend on how fast the complaint arrives.
• Median loss is $4,400: The FTC's Consumer Sentinel Network ranks romance scams as the most reported fraud type, with median losses of $4,400 per victim in 2022.
• EFTA will not save you: The 60-day reporting right under the Electronic Fund Transfer Act applies to unauthorized transfers, not to payments you were tricked into authorizing.
• UK victims have more rights: Since 2023 the UK's Contingent Reimbursement Model has required banks to reimburse APP scam victims, and no equivalent mandate exists in the US.

What should I do first if I just sent money to a romance scammer?

This applies if money left your account in the last few days and you now believe the recipient was a fraudster. The clock is the whole story. Industry estimates put the success rate of wire recalls attempted after 72 hours at under 10%, and IC3's own analysis found 60% of victims wait 72 hours or longer before filing anything. Every hour you spend drafting a police report is an hour the funds are still sitting in an account someone can empty. Work through these in order.

1. Call your bank's fraud department, not the general customer service line. Use the number printed on the back of your debit or credit card, or the number inside your bank's official mobile app. Do not search for the number — scammers seed fake support numbers in search results. General lines route you to a queue and often close at 6pm; fraud lines run 24/7 at most large US banks and answer in minutes. Say the words "I need to report an authorized push payment fraud and request a recall" — that phrase gets you escalated faster than "I think I got scammed."
2. Give them the transaction details while you still have them open. Date and time, exact amount, method (wire, Zelle, ACH, card), the receiving bank name, and the fraudster's account number or Zelle handle if you have it. If the transfer is still pending, the bank can sometimes cancel it outright — that window is often under 30 minutes for Zelle and a few hours for ACH.
3. Request a recall or stop payment in writing as well as by phone. Ask for a case or reference number and the name of the person you spoke to. Email a short summary the same day so there is a timestamped record. Under Regulation E, which implements the Electronic Fund Transfer Act, your liability for unauthorized electronic transfers depends heavily on how quickly you notify the institution — two business days versus 60 days is the difference between $50 and unlimited exposure in the worst case.
4. If you sent a wire, ask the bank to initiate a recall through Fedwire or SWIFT. US domestic wires go through the Federal Reserve's Fedwire system, and the sending bank can send a recall request to the receiving bank; international wires go through SWIFT with a recall message. The receiving bank is not obligated to return funds under Uniform Commercial Code Article 4A if the money has already been credited and withdrawn, but a fast request often catches it before that. There is usually no fee for the recall request itself.
5. If you sent money through Zelle, call your bank first, then Zelle support at 844-428-8542. Zelle is owned by Early Warning Services, which is jointly run by seven major US banks, and since 2023 it has allowed banks to reverse certain imposter-scam payments. The bank controls the reversal, not Zelle, so the bank call is the one that matters.
6. If you paid by gift card, call the issuer immediately. Apple at 800-275-2273, Google Play at 855-466-4438, Amazon at 888-280-4331. Give them the card number and any receipts. If the balance has not been drained, they can freeze the remaining funds and sometimes reverse recent redemptions. Do this before you call anyone else — gift card balances vanish in minutes once the code is shared.
7. If you bought cryptocurrency and sent it to the fraudster's wallet, contact the exchange where you purchased it (Coinbase, Kraken, Gemini, Binance.US) and file a report. Give them the receiving wallet address and the transaction hash. Exchanges can flag the address and, if the funds hit their own platform, freeze them — but once coins move to a self-custody wallet, recovery depends on blockchain forensics firms like Chainalysis tracing the flow, which is slow and rarely recovers funds for individuals.
8. If the money is already gone from your account and your bank refuses to act, escalate. File a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint and with your bank's federal regulator — the Office of the Comptroller of the Currency for national banks, the Federal Reserve for state member banks. CFPB complaints get routed to a bank's executive response team and are answered within 15 days by regulation. That is not fast enough to save the money, but it changes how the next request is handled.

The failure mode is doing things in the wrong order. Victims commonly spend the first day filing an IC3 complaint, calling local police, and telling a family member, then call the bank on day two or three. Reporting matters — IC3's Recovery Asset Team recovered $433 million in 2022 — but the RAT works through the bank, and the bank needs to have already flagged the transaction. An IC3 report filed before the bank is notified is a report the RAT can act on only after the trail is colder. Call the bank first. Everything else can follow within hours.

One honest caveat: if you authorized the transfer yourself, most banks will tell you it is not their problem. Under EFTA and Article 4A, a payment you personally initiated is generally not "unauthorized" in the legal sense, and banks are not required to reimburse. That is why the wording of your first call matters, why speed matters, and why a bank that refuses today may still reverse after a CFPB complaint. Do not accept the first no. Ask for the fraud department supervisor and get the refusal in writing.

How do I file a report with the FBI's IC3 and what happens after?

File at ic3.gov, and do it inside 24 hours of realizing what happened. The form asks for the transaction detail you may not have assembled yet: dates, amounts, the receiving bank name, the account number if you have it, the scammer's stated name, every phone number and email address they used, and any cryptocurrency wallet address you sent funds to. Wallet addresses matter more than people expect — a single Bitcoin or Tether address pasted into the form gives investigators a ledger entry they can trace. IC3 recorded 19,021 romance scam complaints in 2022, with reported losses of $735 million; roughly 70% of these scams start on a dating app or social platform, per FTC data, which is why the profile name and platform handle belong in the complaint. Save the complaint ID you receive at the end. You will need it for your bank's fraud investigation and for any follow-up with local police.

IC3 does not get your money back. It is a clearinghouse, not a recovery agency, and the confirmation email will not promise you anything. What it can do is route your complaint to the Recovery Asset Team, a unit that works with US banks to freeze funds still sitting in a receiving account — and in 2022 that team recovered $433 million across all fraud types. RAT's leverage stops at the US border. If your wire landed in a Nigerian, Ghanaian or Cambodian account, or if the funds were converted to crypto and moved through a mixer, the freeze mechanism has nothing to grab. The practical dependency is timing and geography: fast report plus a US receiving bank is the only combination where a hold is plausible. Industry estimates put wire recall success after 72 hours at under 10%, and IC3's own analysis found that 60% of victims take 72 hours or longer to file. That gap is where recoveries die.

Here is the part most guides get backwards. Filing with IC3 is not a recovery step — it is an evidence and coordination step, and it should never come before your call to the bank's fraud line. A bank can act on your verbal instruction within hours; IC3 is a government intake system that may take days to reach a human who can contact that bank. Do the IC3 report the same day, but do it after the bank call, after you have the wire reference number in hand. The complaint ID then becomes useful: your bank's fraud investigator will ask for it, and so will the local police report you file next. The FTC accepts the same incident at ReportFraud.ftc.gov, which feeds the Consumer Sentinel database that regulators and consumer-protection agencies query. It will not return a dollar to you, but it is the record that drives the alerts and enforcement patterns that catch the next victim.

What are the typical recovery rates and why do they drop after 72 hours?

A wire transfer is the only payment method where a recall has a real chance, and that chance decays fast. Under Article 4A of the Uniform Commercial Code, a bank that has already accepted and executed a payment order generally has no obligation to reverse it — recovery depends on the receiving bank agreeing to return funds, which in practice means catching the money before it leaves the beneficiary's account. Most scammers who move money by wire route it through at least two intermediary accounts before it converts to crypto; industry estimates put the whole chain at four to eight hours from the moment your bank sends the wire.

Zelle transfers settle in seconds and are irrevocable by design — Zelle's own user agreement states that authorized payments cannot be cancelled once sent, and "authorized" is the sticking point, because a transfer you initiated to someone who lied about who they were is still classified as authorized unless you can show the bank failed to follow its own fraud procedures. Gift cards and crypto sit at the bottom because once the card is drained or the coins hit a mixer, there is no counterparty left who can reverse anything. The table below reflects reported success rates from industry and law-enforcement sources; individual outcomes depend heavily on how fast you called and whether the receiving account was still funded.

The winning row is wire transfer within 24 hours, and it is not close: roughly one in three wires recalled beats every other method by a factor of two or more. The case that flips it is the IC3 Recovery Asset Team — that ~60% figure applies to any payment method, including crypto, but only when the money is still sitting in the receiving account at the moment your IC3 complaint is filed. A $4,400 wire reported to IC3 at hour 6 with funds unmoved recovers better than a $4,400 wire reported to the bank at hour 20; a crypto transfer of the same size reported to IC3 at hour 6 recovers only if the exchange holding the coins has not yet released them, which is rare. If you sent a gift card, call the issuer's fraud line before anything else — Western Union and MoneyGram both maintain 24-hour fraud numbers, and a card that has not yet been redeemed can sometimes be frozen.

Should I hire a recovery service or lawyer?

The calls start within days. Someone finds your IC3 complaint number, or scrapes your name from a cryptocurrency tracing forum, and offers to get your money back for a $2,500 retainer paid in Bitcoin. The FBI and the FTC have both issued warnings about this exact follow-on fraud, and the pattern is consistent: an upfront fee, a fake "blockchain trace report," a second request for "court filing costs," then silence. Treat any recovery offer that arrives unprompted as a scam by default. The tell is the payment method. No legitimate attorney asks for a retainer in Tether, and no law firm takes a wire to a personal account.

Real options exist, and they are narrower than the ads suggest. A consumer protection attorney can review whether your bank violated the Electronic Fund Transfer Act's error-resolution rules on an unauthorized electronic transfer, or whether a wire went out under circumstances that implicate Article 4A of the Uniform Commercial Code. Legal aid societies in most states handle fraud-adjacent consumer matters for free if you fall under their income thresholds, and the National Center for Victims of Crime runs a referral line at 855-484-2846 that can route you to advocates who do not charge. Contingency is realistic for bank-liability claims against a deep-pocket institution. It is not realistic for chasing an individual scammer in another country, and any lawyer who says otherwise is selling you something.

Your state attorney general's office is the most underused lever. Several states run consumer mediation programs that will contact a bank or money transmitter on your behalf, and a letter from an AG's consumer protection division carries weight that a solo victim's phone call does not. The CFPB accepts complaints at consumerfinance.gov and forwards them to the institution, which then has 15 days to respond. None of this recovers money already converted to Bitcoin and moved through a mixer, but it creates a documented record and occasionally shakes loose an institution that stonewalled you.

Set your expectations honestly. Industry estimates put wire recall success after 72 hours at under 10%, and that figure is for wires. Zelle transfers, Western Union and MoneyGram pickups already collected, and crypto sent to a private wallet are effectively gone unless the FBI's Recovery Asset Team freezes a receiving account, which it did to the tune of $433 million in 2022 across all fraud types. Spend your money on a one-hour consultation with a consumer attorney, not a recovery service. If the attorney says there is no case, believe them and stop paying people to tell you otherwise.

How can I protect my accounts and credit after a romance scam?

Getting the money back is one problem. Keeping the scammer from taking more — or from opening new accounts in your name using the details you handed over — is a separate one, and it starts the same day. Most romance scams do not end the moment you stop sending money; 70% of them originate on dating apps or social media (FTC, 2023), and those profiles gave the fraudster weeks of conversation to collect your mother's maiden name, your pet's name, your date of birth, and in many cases a photo of your driver's licence or passport.

Work through these in order. The first four take under two hours total.

1. Place a security freeze on all three credit reports. A freeze stops lenders from pulling your file, which stops new accounts being opened in your name. Do it at Equifax (equifax.com/personal/credit-report-services), Experian, and TransUnion separately — there is no single national freeze, despite what some paid services imply. It is free by federal law, and you can lift it temporarily when you actually need credit. If you are 65 or older and want to keep an eye on activity without freezing, a fraud alert lasts one year and requires only one bureau to be notified; they must tell the other two.
2. Change passwords starting with email, then banking, then everything else. Email first, always. Whoever controls your inbox controls every password reset link for every other account you own. Then online banking, then any dating site, social media, cloud storage and shopping account. If you reused a password anywhere, change it there too — credential-stuffing tools try the same email-password pair across hundreds of sites in minutes.
3. Turn on two-factor authentication, but not SMS if you can avoid it. Use an authenticator app (Google Authenticator, Microsoft Authenticator) or a hardware key rather than text messages. SIM-swap fraud is common in these cases because the scammer often already knows your phone number, carrier, and sometimes your account PIN.
4. Tell your bank and brokerage that your personal data may have been exposed. Ask for a verbal password or note on the account. Under the Electronic Fund Transfer Act, your liability for unauthorised electronic transfers depends on how quickly you report them — generally $50 if you notify within two business days of discovering the loss, up to $500 after that, and unlimited beyond 60 days. A fraud note on the file is cheap insurance and takes one phone call.
5. Pull your free credit reports and read them line by line. AnnualCreditReport.com gives you one free report from each bureau every week. Look for hard inquiries you do not recognise, new accounts, and address changes. Then set a calendar reminder to check your bank and card statements every month for the next six months — small test charges under $5 are a common first probe before a larger theft.
6. Report the profile to the platform and to the FTC. Every dating app and social network has a report function; use it, because the profile usually stays live otherwise and gets reused on the next victim. Report at ReportFraud.ftc.gov, which feeds the FTC's Consumer Sentinel database that law enforcement and banks query. This is separate from the IC3 complaint you file with the FBI — the IC3 complaint is for recovery, the FTC report is for pattern tracking and can support a later identity theft affidavit.
7. Watch for the second wave. A few weeks after the first scam collapses, many victims get contacted by someone claiming to be a recovery agent, a lawyer, or an FBI investigator who can retrieve the money for a fee. These are almost always the same criminal network. The FTC and the OCC have both warned that advance-fee recovery fraud targets people already on a scam list, sometimes within days of the original loss.

The step people skip most often is the credit freeze, usually because they assume the scammer only got money and not enough information to open accounts. In practice, a scammer who spent two months building trust almost always collected a date of birth and an address, and that is often enough to pass a knowledge-based authentication check on a store card or a utility account. Freeze first, ask questions later. Also be careful with identity theft protection products that advertise credit monitoring — monitoring tells you after the damage is done, a freeze prevents it, and the freeze is the one that is legally free.

What if the money was sent via cryptocurrency?

Bitcoin, Tether, and every other coin share one property that makes them the worst possible rail for a scam victim: the transfer is final in minutes, with no chargeback, no recall, and no bank to ring. Nobody at a bank can reverse a blockchain entry. What can happen — and it does happen often enough to be worth every minute you spend on it — is that the receiving account, if it sits at a regulated exchange, gets frozen before the fraudster moves the funds out. That window is short. Chain-hopping through mixers, swapping into stablecoins, and moving to a non-KYC exchange can strip a wallet in under two hours once the operator starts working.

Start with the exchange where you bought the crypto, not the one that received it. Coinbase, Kraken, Binance.US and Cash App all run fraud teams that accept victim reports, and they can flag the outbound transaction, pull the receiving address if it belongs to their platform, and hand your case to their law enforcement liaison. Ask for a case reference number and the email address of the team handling it. Then file at IC3 and put the wallet address and the transaction hash (the long 0x or 64-character string from your wallet or the exchange's send confirmation) directly in the narrative field. The FBI's Recovery Asset Team, which recovered $433 million in 2022, works from that hash — without it, your complaint is one of 19,021 romance fraud reports logged that year and it goes nowhere fast.

Reporting the wallet and getting a tracer involved

Chainalysis and TRM Labs (formerly the tracing arm associated with CipherTrace, now part of Mastercard) do not take victim cases directly, but they maintain the address attribution databases that exchanges, banks and police use to identify who controls a wallet. You reach them indirectly: ask the exchange's fraud team or your local FBI field office whether the receiving address was submitted for attribution, and give them the hash so it can be. If a specific exchange holds the funds, its compliance department can freeze the balance on a law enforcement request under a 314(b) or subpoena — not on your word alone, which is why the IC3 report and a police report matter as a pair. Contact your local police too, even if they seem uninterested; the report number is what an exchange's compliance team needs to open a freeze file.

The hard truth: if your funds went to a self-custody wallet with no exchange behind it, recovery is close to zero, and anyone who tells you otherwise is selling something. The 2022 median romance scam loss was $4,400, and victims 60 and older — 44% of the total — are the most likely to have been pushed into crypto because the fraudster framed it as an investment. Do not pay a second person to "trace" the first. File the IC3 report, file with the exchange, keep the hash, and put the same hash in any police report. That paper trail is the only lever that has ever moved crypto back to a victim, and it has to exist before the wallet empties.

How do I deal with the emotional fallout and shame?

Almost nobody who gets taken is stupid. The FTC's 2022 data shows 44% of romance scam victims were 60 or older, and the losses reported to IC3 that year reached $735 million across 19,021 complaints. That is a population of retired teachers, engineers, nurses and small-business owners, not marks who fell for a badly spelled email. The scripts are written by people who do this full time, and they run for weeks or months before money ever moves. Feeling humiliated is near-universal, and it is also the single biggest reason victims sit on their hands. An IC3 internal analysis found that 60% of victims 60 and over waited 72 hours or more to report.

Shame does something specific and expensive: it keeps you off the phone. Every hour spent rehearsing how foolish you feel is an hour your bank is not running a recall, and industry estimates put the success rate of wire recalls past 72 hours at under 10%. If you have not made the calls already described, the shame has to wait its turn. It can have your full attention at 9pm. It cannot have your morning.

Then get a human being on the line who has heard this exact story before. The AARP Fraud Watch Network helpline, 877-908-3360, is free, staffed by trained volunteers, and takes calls from people who lost their retirement savings last Tuesday. The National Center for Victims of Crime runs a similar line and can point you to local advocates. Neither will recover a dollar. Both will stop you from believing you are the only person this has happened to, which is the belief that keeps people isolated and makes everything slower.

Therapy is not overkill here. Fraud victims frequently describe symptoms that track grief and trauma: sleeplessness, intrusive replaying of conversations, paranoia about every future online contact. A therapist who has worked with financial exploitation, or a peer support group specifically for scam survivors, does more than reassurance. Isolation is what turns a financial loss into a year of withdrawal from friends and family who notice you have gone quiet. Tell one person you trust. The number of people who have been through it is larger than you think, and losing money to a criminal is the one part of this that was never your decision to make.

What are the legal options for recovering funds from a romance scam?

If the scammer turns out to be inside the United States, you can sue them. Fraud is a tort, and small claims court handles it in most states up to a cap that ranges from $2,500 in Kentucky to $25,000 in Texas. Filing fees run $30 to $100. The catch is service of process: you need a real name and a physical address, and romance scammers hand out neither. A civil suit in state court has the same problem plus attorney costs that typically start around $5,000. Even a default judgment is just a piece of paper until you can find an asset to attach. Roughly 70% of romance scams now start on social media or dating apps (FTC, 2023), which means the person on the other end is often outside US jurisdiction entirely, and no courtroom in Ohio can compel a defendant in Lagos to appear.

For cross-border cases, two mechanisms exist and both are slow. If the scammer is in a country that signed the Hague Convention on the Service Abroad of Judicial and Extrajudicial Documents, you can serve process through that country's Central Authority; expect six months minimum just for service. An MLAT request runs through the Department of Justice to the foreign government and takes, by the DOJ's own accounting, an average of 10 months to two years before any evidence changes hands. Neither treaty creates a right to your money back. They create a channel for law enforcement to ask politely. AARP's fraud attorneys will tell you the same thing their hotline tells callers: MLATs exist to build criminal cases, not to return funds to individual victims.

When state consumer protection law helps more than a lawsuit

Some states let you sue under their consumer protection statute rather than common-law fraud, and that matters because these statutes often allow treble damages plus attorney fees. California's Unfair Competition Law, Massachusetts Chapter 93A, and Texas's Deceptive Trade Practices Act are the three most commonly used. Treble damages on a $4,400 median loss — the FTC's 2022 figure — turns into $13,200, and the fee-shifting provision is what makes a lawyer willing to take the case on contingency. The obstacle is that these statutes were written for merchants, not overseas strangers, and many require the defendant to have done business in the state. A judge may throw it out on that ground alone.

Before you spend money on any of this, get 30 minutes with an attorney who actually does financial fraud, not the general practitioner who handled your uncle's will. The American Bar Association runs a lawyer referral service at findlegalhelp.org, and most state bar associations have a similar free referral line. Ask one question on the call: "Have you ever collected a judgment against a defendant outside the United States?" If the answer is no, you have your answer about whether to hire them. The National Center for Victims of Crime's helpline (855-484-2846) can also point you to legal aid in your state if cost is the barrier. One last note, because it costs people real money: no legitimate attorney will ask for an upfront "recovery fee" as a percentage of funds they promise to retrieve. That is the recovery-scam playbook, and it targets the same victims twice.

Frequently Asked Questions

Can my bank reverse a wire transfer I authorized to a scammer?

Your bank can request a recall from the receiving bank, but it cannot force the money back. Under UCC Article 4A, a wire is final once the receiving bank accepts it. In practice, banks often cooperate on fraud recalls when notified within 24 to 72 hours, and the receiving account may be frozen if funds are still sitting there.

Success drops sharply once the scammer moves the money through a mule account or converts it to crypto. Call your bank's fraud line the same day, ask for a "wire recall" or "indemnity request," and get a case reference number.

What is the deadline to report a romance scam to the FBI?

There is no legal deadline to file an IC3 complaint, but the clock matters enormously. IC3's Recovery Asset Team, set up in 2018 with the FBI, targets a 72-hour window to freeze funds still in transit. Files submitted inside that window have a real chance; after a week, the money is usually gone.

How long does it take for IC3 to recover money?

If the funds are still in the receiving account, expect one to three months from complaint to resolution. The Recovery Asset Team has reported freezing roughly $500 million in fraudulent transfers since 2018, but that is a fraction of total reported losses, which exceeded $1.1 billion in 2024 alone.

If the money has already been layered through multiple accounts or exchanged for cryptocurrency, recovery is unlikely and IC3 will not guarantee any outcome. Filing still creates a record that supports later civil action against mules.

Can I get my money back if I sent it via Zelle to a romance scammer?

Usually not. Zelle transfers settle in seconds and are generally irreversible, and because you authorized the payment, your bank is not legally required to reimburse you under Regulation E. A narrow exception exists: report to your bank and Zelle within 24 hours, and they may freeze the recipient's account before the money is withdrawn.

Since Zelle's 2023 expansion of its fraud reimbursement policy, some banks have voluntarily refunded imposter-scam victims, but coverage for romance scams is inconsistent. Ask specifically about the bank's voluntary reimbursement policy, not the legal one.

Should I hire a recovery service to get my money back?

No. The FTC and FBI both warn that most "fund recovery" firms are second-wave scams that hunt people already listed on victim databases and demand upfront fees or cryptocurrency payments. Legitimate help comes from IC3, your bank's fraud department, and consumer protection attorneys who work on contingency and charge nothing until a recovery is made.

What information should I include in an IC3 complaint?

Include everything you have: the scammer's name and any aliases, email addresses, phone numbers, social media and dating app profiles, and cryptocurrency wallet addresses. Add the dates, amounts, and payment methods for every transaction, plus the receiving bank account numbers and the names on those accounts.

Attach chat transcripts, emails, and screenshots with timestamps. Detail is what lets analysts match your case to existing mule accounts and act faster; a complaint with full logs is far more actionable than one with just a name and a total.