Plain-English legal information for online shoppers, sellers and creators in the US, UK & EU

General information, not legal advice

Person in fingerless gloves typing on a laptop in the dark

Fraud & scams

Online scams: spot them, stop them, report them

Scammers rely on speed and pressure. If you think you’ve been scammed, contact your bank straight away, then report it. This guide covers the warning signs, your first steps and your rights to get money back.

Photo: Towfiqu barbhuiya on Unsplash

Written by the OnBusLaw editorial team Fact-checked against official sources Updated How we write our guides

If you’ve been scammed: act now

  1. Contact your bank or card provider immediately using the number on your card or statement. In the UK you can call 159 to reach most banks’ fraud teams. Ask them to stop further payments and try to recover the money.
  2. Secure your accounts: change passwords (starting with your email), turn on two-step verification and log out other sessions.
  3. Keep evidence: screenshots, emails, messages, website addresses, payment details and phone numbers.
  4. Report it (see below), and warn the platform where you met the scammer.
  5. Watch for follow-up “recovery” scams: anyone promising to get your money back for a fee is very likely another scammer.

Common online scams

  • Fake online shops selling goods that never arrive. See how to spot a fake shop.
  • Marketplace scams: buyers or sellers who ask you to pay or talk outside the platform, or send fake payment emails.
  • Phishing and smishing: emails and texts pretending to be a delivery company, bank, tax authority or streaming service, linking to fake login or payment pages.
  • Impersonation: calls or messages from “your bank”, “the police” or a family member on a new number asking you to move money.
  • Investment and crypto scams, often promoted with fake celebrity endorsements.
  • Romance scams and job or “task” scams that ask you to pay to earn.
  • Tech support scams that ask for remote access to your computer.

Warning signs

  • Pressure to act right now, or secrecy (“don’t tell your bank”).
  • Requests to pay by bank transfer, gift cards or cryptocurrency instead of a protected card payment.
  • Prices or returns that look too good to be true.
  • Requests for one-time passcodes, PINs or remote access. Banks never ask for these.
  • Links that don’t match the real website address, and brand-new websites with no clear company details.

Where to report fraud

Where you areReport to
USThe FTC at ReportFraud.ftc.gov; internet crime to the FBI’s Internet Crime Complaint Center (ic3.gov); identity theft at IdentityTheft.gov. Forward scam texts to 7726 (SPAM).
England, Wales and Northern IrelandReport Fraud (reportfraud.police.uk or 0300 123 2040), run by the City of London Police. It replaced Action Fraud in 2025–26: see what changed.
ScotlandPolice Scotland on 101.
UK-wideForward scam texts to 7726 and suspicious emails to report@phishing.gov.uk (National Cyber Security Centre).
EUYour national police (many have online reporting). Europol lists national cybercrime reporting sites. For a cross-border dispute with a real EU business, contact ECC-Net.

In an emergency, or if someone is in danger, call 911 (US), 999 (UK) or 112 (EU).

Getting your money back

  • Card payments: ask for a chargeback or Section 75 claim, even if you authorised the payment.
  • UK bank transfers: since 7 October 2024, banks and payment firms must reimburse most victims of authorised push payment (APP) scams made through Faster Payments or CHAPS, up to £85,000 per claim. Claim within 13 months of the last payment. Firms can refuse if you acted with gross negligence or were complicit, and can apply an excess of up to £100.
  • US transfers: protection for payments you authorised yourself is limited, so contact your bank or app provider immediately. Unauthorised electronic transfers are covered by the Electronic Fund Transfer Act.
  • EU: unauthorised payments must be refunded under PSD2. Payments you authorised to a scammer are generally harder to recover, so report quickly in case your bank can freeze the funds.
  • Gift cards and crypto: recovery is rare. Contact the gift card issuer or exchange immediately anyway.

General information, not legal advice. Rules vary by country, state and situation, and they change. Check the official sources below, and speak to a qualified lawyer or a free advice service if a lot is at stake.

Last updated: 14 October 2026

Frequently asked questions

Will my bank refund me if I was scammed?
If the payment was unauthorised, usually yes. If you authorised it, it depends: card payments may be recoverable by chargeback, and in the UK most bank transfer scams must now be reimbursed up to £85,000. In the US and EU, protection for authorised transfers is more limited, so act fast.
Is Action Fraud still running?
No. In the UK, Action Fraud has been replaced by Report Fraud, run by the City of London Police, which launched in December 2025. Report at reportfraud.police.uk or on 0300 123 2040 (Scotland: Police Scotland on 101).
Someone says they can recover my lost money for a fee. Is it real?
Almost certainly not. “Recovery” scams target people who have already lost money. Police, regulators and genuine banks don’t charge you to recover funds.
Should I report a scam if I didn’t lose any money?
Yes. Reports help police and regulators spot patterns, take down websites and warn others. Forward scam texts and emails, and report fake websites.

What legal question can we help with?