What to Do If You've Been Scammed: A Step-by-Step UK Guide
If you're wondering what to do if you've been scammed, the first thing to know is that this isn't your fault, and there's nothing to be ashamed of. The scale of fraud has now reached record levels and according to UK Finance's 2026 Annual Fraud Report, criminals stole £1.28 billion from UK victims across 4.68 million confirmed cases in 2025, a rise of 4% on the year before. The steps below cover what to do right now, then how to get your money back.
What to do immediately after being scammed
1. Contact your bank straight away
Call your bank the moment you suspect something is wrong, using the number on the back of your card rather than any number a scammer has given you. Banks can sometimes recall a payment before it moves on, but only if you report quickly enough. In many cases the scammer has already moved the funds elsewhere by the time you call, and if that's happened, don't panic. It doesn't mean you've lost your right to reimbursement, it just means recovery moves to the next stage, which we cover below.
2. Report the scam to Report Fraud
Action Fraud has been replaced by Report Fraud, run by the City of London Police, as the UK's national reporting service for fraud and cybercrime. You can report online at reportfraud.police.uk or by calling 0300 123 2040, available 24 hours a day. You'll get a crime reference number, which can support a bank claim, though it isn't required to start a reimbursement claim. Reporting also feeds the national intelligence picture that helps stop the same scammer targeting someone else.
3. Secure your accounts
Change the passwords on any account the scammer may have seen or accessed, including your email, since a compromised inbox is often how fraudsters return for a second attempt. Turn on two-factor authentication wherever it's offered. If you shared card details, ask your bank to freeze or cancel the card and issue a new one.
4. Gather and keep your evidence
Save everything before it disappears: messages, emails, payment references, screenshots, and confirmation of the amount and date you paid. This evidence strengthens both your bank complaint and, if you use one, a claims management company's case on your behalf. Refundee's evidence-gathering guides go through exactly what to collect for different scam types.
5. Be alert to follow-up "recovery" scams
Once you've been scammed, your details may circulate among other fraudsters. Be wary of anyone contacting you out of the blue claiming they can recover your lost money for an upfront fee. Legitimate claims management companies, including Refundee, would never charge upfront fees in order to take your case on. In addition, be wary of scammers asking for fees in order to release your funds, this is a common tactic, specifically in cryptocurrency scams to persuade you into losing more money.
Can I get my money back after being scammed?
This is the question that matters most, and the honest answer is: it depends on how you paid, but you have more rights than most people realise.
If you paid by bank transfer, you're likely covered by the Payment Systems Regulator's Mandatory Reimbursement Model, which came into force in October 2024 and replaced the old voluntary Contingent Reimbursement Model (CRM) Code. Under this regulation, banks and payment firms must reimburse eligible victims of Authorised Push Payment (APP) fraud.
Key Rules of the Mandatory Reimbursement Model:
Covers UK to UK payments via faster payments and retail CHAPS payments
Maximum refund of £85,000 per claim
Banks can deduct an excess of £100 per claim (This does not apply to vulnerable customers)
Victims must report the the scam and provide the info promptly
Banks cannot delay claims indefinitely
Applies to individuals, charities and micro enterprises
What this means for you: If you were manipulated into transferring money, your bank will usually have to reimburse you, and quickly.
If you paid by card, you may be able to claim through chargeback (for any amount) or Section 75 of the Consumer Credit Act (for card purchases between £100 and £30,000). These aren't the same as APP reimbursement and are handled by your card provider rather than the PSR scheme.
Unauthorised transactions (where a criminal accessed your account and moved money without your knowledge or consent) sit under separate legal protections again, and you are obliged to be reimbursed under unauthorised fraud rules. UK Finance data shows customers are fully refunded in the vast majority of these cases.
If your bank or provider says no, or offers only partial reimbursement, you can complain directly to them, and if you're unhappy with the response, escalate free of charge to the Financial Ombudsman Service. The Ombudsman can overturn a bank's decision if it finds the bank hasn't met its obligations.
It's important to act promptly. You have six months from the date of your bank's final response to refer your complaint to the Financial Ombudsman Service.
Alternatively, you may choose to work with an FCA-regulated (Financial Conduct Authority) claims management company, such as Refundee (FRN: 937096), who can guide you through the claims process and help you pursue the recovery of your funds.
Refundee are specialists in fraud recovery and UK banking regulations, and we have recovered over £130 million for clients to date.
We work on a no win, no fee basis so we only charge if we're successful, and there's nothing to pay upfront.
If you'd like help, you can start your claim with Refundee, or read more about how the process works first.
What to do if you've been scammed on a specific platform
Your chances of recovering your funds can depend on how you paid, but also what platform you used. Read below for guides on specific platforms:
Online shopping or a fake website
If you bought something from a site that never delivered, start with your payment method. Card payments give you chargeback and Section 75 rights; bank transfers fall under APP reimbursement rules. Report the site to Report Fraud so it can be flagged and, ideally, taken down. Our guide on purchase scams covers the recovery routes in more depth.
Facebook and Facebook Marketplace
Report the seller's profile or advert directly to Meta, screenshot everything before it's removed, and if you paid via bank transfer, the same APP reimbursement rules apply as any other scam. Facebook Marketplace scams often start as what looks like a genuine local sale, so keep the full conversation thread as evidence. Fraud that begins on social media has its own patterns, covered in our guide to social engineering scams.
The same principles apply as Facebook, report the account to Instagram and preserve your DMs and payment confirmation. Instagram is a common entry point for both purchase scams and romance scams, so it's worth reading our romance scam guide if the scammer built a relationship with you before asking for money.
Vinted or Gumtree
Both platforms have their own buyer protection and reporting tools, use these first and keep a record of what you submit. Because Vinted and Gumtree transactions are often paid by bank transfer to avoid platform fees, victims can find themselves outside the platform's own protection but still within scope of PSR reimbursement rules, so don't assume you're out of options just because the platform can't help.
PayPal
If you paid with PayPal's "Goods and Services" option, you're covered by PayPal's own Buyer Protection and should open a dispute inside your PayPal account within their time limit. If you were persuaded to send money via "Friends and Family" instead, that protection largely disappears, which is a common trick scammers use, so flag this clearly to your bank as evidence of the manipulation you experienced if you pursue an APP claim.
Cryptocurrency
Crypto scams are harder to reverse because transactions on the blockchain can't be recalled the way a bank transfer sometimes can. Still, report it to Report Fraud immediately and to the exchange you used to send funds, since exchanges can sometimes freeze accounts linked to fraud. If you funded the crypto purchase from a UK bank account, that initial transfer may still fall under APP reimbursement rules even if the crypto itself is gone. Our cryptocurrency scam guide has more detail on recovery routes specific to crypto fraud.
Email or text (phishing)
If a scam starts with a phishing email or text, report it as spam through your mobile provider before you delete it, then follow the same account-securing steps above, since phishing often aims to use login details for a second attack.
How to protect yourself from being scammed again
Once you've been scammed, you're statistically more likely to be targeted again, so it's worth taking a few precautions:
Set up transaction alerts and review your bank statements regularly for anything unfamiliar
Consider a credit monitoring service if the scammer had access to personal or financial documents
Be sceptical of anyone who contacts you unprompted asking you to move money quickly
Never send any money upfront to ‘recover’ your money
Do not pay ‘withdrawal’ or ‘tax’ fees in order to release your money
Talk to someone you trust before making any large or unusual payment
Keep up to date on fraud trends - awareness is the best defence against fraud
It’s also worth noting that being scammed can have an affect on not just your finances, but your mental health too. It’s important to take steps to look after yourself and remember it’s not your fault, you are not alone and recovery is possible.
If you are feeling these emotions after being the victim of fraud then our article on the psychological effects of being scammed is worth a read, and it's always worth seeking further support or talking to your GP or a support service if the experience is weighing on you.
Frequently asked questions
Can I get my money back if I was scammed?
In many cases, yes. If you were tricked into authorising a payment, this falls under what is known as APP fraud, and UK banks are now required under PSR regulations to reimburse victims in the majority of cases. The key is acting quickly. The sooner you report it to your bank and to Report Fraud, the stronger your chances of recovery.
What to do immediately after getting scammed?
Contact your bank straight away using the number on the back of your card and tell them what has happened. They can attempt to recall the payment and flag your account for protection. Once you have done that, report it to Report Fraud. If you are struggling to get a resolution from your bank directly, a regulated claims management company like Refundee can assess your case and pursue recovery on your behalf.
What information does a scammer need to access my bank account?
Your account number and sort code alone are not enough, but combined with personal details such as your full name, date of birth, address or online banking credentials, fraudsters can build a profile that allows them to impersonate you or manipulate you into authorising payments. This is why phishing SMS messages and fake websites are so commonly used as a first step, gathering those additional details before the more direct fraud attempt begins.
Get help recovering your money
If you've been scammed, the immediate steps above give you the best chance of recovering quickly. For the recovery process itself, especially if your bank has already said no, Refundee can review your case and handle the claim on a no-win, no-fee basis. You can also pursue a claim yourself for free through your bank and the Financial Ombudsman Service.
More About Refundee
Here are the technical bits:
Refundee Ltd is a claims management company authorised and regulated by the Financial Conduct Authority in respect of regulated claims management activity FRN: 937096.
Registered with the Information Commissioner's Office; registration number: A8986071.
Registered office address: Refundee, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.
Registered as a company in England & Wales; number: 12855931.