Last updated: August 11, 2026

Quick Answer: Report a scam in three steps: 1) your bank, card issuer, or payment app first; 2) the platform where it happened next; 3) the right government agency after that. Money moved? The first 24 hours matter most.

Key Facts
– Fastest action: bank, card issuer, or payment app.
– Best federal fraud log: FTC for consumer scams; IC3 for internet crime.
– Identity theft cleanup: FTC identity theft site.
– Most useful window: the first 24 hours after you notice the scam.
– If money moved: report to the payment source before filing only a government complaint.

Been scammed? Report it fast: your bank or card issuer first, then the platform where it happened, then the government agency that handles that kind of fraud. I write about consumer fraud, identity theft, and complaint systems for a living, so I know the frustrating part is not finding a place to report it — it’s figuring out which report will actually move money, freeze an account, or create a paper trail that matters. Tricky, right?

The Real Difference Between Reporting to Your Bank and Reporting to a Government Agency

Your bank or card issuer is usually the fastest place to start when money has left an account, and that report is the one most likely to stop more damage. A government agency serves a different purpose: it logs the scam itself, helps law enforcement spot patterns, and sometimes feeds a larger investigation. I would not treat those as interchangeable; honestly, that mistake costs people time. See the FTC and FBI guidance on scam reporting for more context: https://reportfraud.ftc.gov/ and https://www.ic3.gov/.

For practical purposes, if you paid by debit card, credit card, wire transfer, ACH, Zelle, Venmo, Cash App, gift card, crypto, or bank transfer, the first call should usually go to the institution or platform that moved the money. That is where holds, chargebacks, reversals, account freezes, and fraud reviews happen. Wait too long, and the trail cools off fast.

A government report matters for different reasons. It can help agencies collect evidence, warn the public, and sometimes connect your case to a larger fraud ring. It also gives you a formal record if you later need to show that you acted quickly. But a police report or federal complaint usually will not put the money back by itself. Not even close.

The honest downside? Many people file one complaint and stop there. Then they have a case number, but nothing touched the payment rail. Better to layer the reports. I would do both, in the right order, based on where the scam happened.

Your Bank, Card Issuer, or Payment App: Who Should Actually Use This

Your financial institution wins when the scam involved a payment method it controls, because it can sometimes stop the damage while the fraud is still fresh. For anyone using a credit card, debit card, bank transfer, or app-linked card, this is the place where speed matters most. Simple as that.

What makes this route strong is simple: the institution can review unauthorized activity, lock the account, replace a card, dispute a transaction, and tell you whether a transfer can be recalled. That is the path that directly touches your money. If someone drained a checking account or used your card for charges you never approved, calling the bank is not optional. It is the front line.

The weakness? Banks draw a hard line between unauthorized fraud and transactions you technically approved under pressure. If you were tricked into sending money, they may classify it as an authorized payment and refuse recovery. That stings, but it matters because you need to set expectations correctly. You should still report it, because some institutions have fraud recovery teams and some payment networks have dispute windows that may still help. Like quicksand, delay makes it worse.

For anyone whose card, bank account, or payment app was used, especially if the scam is recent, this is the right place to begin. For people who need a law-enforcement record, people targeted by impersonation scams, and people dealing with romance, job, or investment fraud that spans platforms and jurisdictions, a bank report is necessary but not sufficient.

FTC, IC3, and Identity Theft Agencies: The Specific Situations Where They Win

The Federal Trade Commission’s fraud report is the best place to document consumer scams in the United States, and the Internet Crime Complaint Center, or IC3, is the place for many online fraud cases that cross state or national lines. For cases where the goal is not just “money left my account” but “I want the scam logged where investigators can see it,” these are the reports I would not skip.

The FTC’s fraud portal is especially useful for phishing, impersonation, fake delivery notices, tech-support scams, prize scams, and other consumer frauds. It does not promise a personal refund, and that disappoints people who want one clear result. Its real value is pattern collection and referral. The FTC’s identity theft resources matter when your Social Security number, tax information, login credentials, or personal data were exposed or used to open accounts. The FTC says many identity theft cases can take months to clean up, which is why filing early matters. See https://www.identitytheft.gov/.

IC3 is the better fit for online crime that feels bigger than a one-off consumer dispute: business email compromise, romance scams, investment scams, extortion, account takeover, fake marketplaces, crypto fraud, and fraud that moved through a web of accounts. The FBI is clear that IC3 complaints help it identify trends and can support investigations. The trade-off is that, again, this is not a refund desk. See FBI IC3 guidance here: https://www.ic3.gov/.

For the official pages, I would start here:
– FTC fraud reporting: https://reportfraud.ftc.gov/
– FTC identity theft: https://www.identitytheft.gov/
– FBI IC3: https://www.ic3.gov/

These agencies help most when you are the victim of a scam rather than a billing dispute. They help least when you want immediate account control or a charge reversed. That is why I treat them as the second layer, not the first and only layer, though a consumer lawyer can advise if your case is unusual.

The Honest Side-by-Side

Picking the right place is not about labels; it is about speed and power. Which report can actually change the outcome first? For money recovery, financial institutions win. For documentation and pattern detection, federal complaint systems win.

Criteria	Bank / Card Issuer / Payment App	FTC / IC3 / Identity Theft Agency	Winner for [condition]
Can stop or reverse a payment	Sometimes, depending on payment type and timing	No direct reversal power	Bank / Card Issuer for recent payment loss
Best for unauthorized charges	Yes	Useful for records, not account action	Bank / Card Issuer
Best for impersonation or phishing	Only if money moved through the institution	Yes, especially FTC	FTC / IC3 for scam documentation
Best for online fraud across borders	Limited	Yes, especially IC3	IC3
Can help with identity theft cleanup	Sometimes, through account protection	Yes, especially FTC identity theft resources	FTC Identity Theft
Speed of practical action	Usually fastest	Slower, but important	Bank / Card Issuer
Value for law enforcement pattern tracking	Limited	High	FTC / IC3
Good for scam involving a marketplace or platform	Only if the payment rail is theirs	Yes, for a formal record	FTC / IC3
Best when you need a paper trail for future disputes	Yes, for account-level issues	Yes, for scam-level documentation	Tie, depending on the evidence needed

My blunt take: the bank is for containment, the agencies are for escalation. If you only do one, you are usually leaving value on the table.

Your Bank or Card Issuer: Who Should Actually Use This (and Who Shouldn’t)

I would choose your bank or card issuer first any time a payment was just made, is still pending, or could be disputed under the card network or bank’s fraud rules. That is true for classic card fraud, account takeover, unauthorized bank transfers, and many app-based payments. When a scammer got into your account or you paid with a card, this is the report with the most immediate teeth.

The strength here is intervention. A bank can freeze an account, replace credentials, block new activity, and open a dispute. A card issuer may also have clearer rights for chargebacks than a bank transfer platform does. That matters because the window can be short, and the difference between “called today” and “called next week” can be the difference between a live dispute and a dead end.

The weakness is that some scams are built to look authorized. If you voluntarily sent money to a fake seller, fake lover, fake investment broker, or impersonator, your institution may say the transaction was approved by you. That does not mean you should stay quiet. It means you should push for a fraud review, not assume a simple refund.

For anyone with account compromise, card fraud, payment-app fraud, or a recent transfer that might still be recoverable, this is the right place to begin. For anyone whose scam is already spread across email, social media, or cross-border messaging and needs a broader investigative record, this should not be the only step.

FTC and IC3: The Specific Situations Where They Win

The FTC and IC3 win when the scam is bigger than one payment. For phishing, impersonation, fake websites, job scams, romance scams, business email compromise, or crypto fraud, these reports are the ones I would prioritize after securing your money sources.

FTC fraud reports are easy to think of as “complaint forms,” but that undersells them. They create a standardized record that can help investigators spot patterns, and the FTC also gives you practical steps based on the scam category. For identity theft, the FTC’s recovery site is especially useful because it walks you through cleanup in a way many local agencies do not. According to the FTC, identity theft complaints remain one of its largest complaint categories, which is one reason the site is so widely used.

IC3 is the better fit when a scam runs through the internet and may involve multiple states or countries. For scams using email, fake invoices, social media, a hacked account, or cryptocurrency, IC3 gives federal investigators a place to see it. It is not a miracle fix. The downside is that people expect a personal response and often do not get one. Still, if I had to choose one federal fraud report for a broad online scam, I would usually choose IC3; for identity theft, I would choose the FTC’s identity theft site.

Who should use these: victims of online fraud, impersonation, investment scams, and identity theft. Who should not stop here: anyone who has not already contacted their bank, card issuer, or payment platform. Federal reporting is important, but it is not a substitute for account-level action.

When to Reconsider This Choice Entirely

Some situations should push you outside the “report to X agency” frame and into emergency action. If a scammer has your login credentials, lock the account now. If they have your Social Security number, freeze what you can and change recovery methods. If money was taken from a joint account or business account, involve every account holder and the institution immediately. If the scam involves threats, stalking, extortion, or sextortion, save evidence and contact local law enforcement as well as the platform where the threat was sent.

I would also rethink the usual order if you are dealing with a scam that touches regulated professionals or licensed products. For example, a fake investment scheme may need a securities regulator report in addition to IC3. A fake insurance or charity scheme may belong with a state regulator. A fake employment scam may need both the platform report and a labor-related complaint. That is the part generic articles skip: the right agency depends on what kind of fraud it is, not just on the fact that it was a scam.

My rule is simple. When money moved, contact the payment source. When the scam is online, file with FTC or IC3. If identity data was stolen, use the FTC identity theft process. If threats, ongoing harassment, or a large dollar loss are involved, add local police and preserve every message, receipt, wallet address, username, and phone number you have.

My Verdict: Which One to Choose and Why

Choose your bank, card issuer, or payment app first if the scam involved money leaving an account or card you control, because that is the only route that can sometimes freeze, dispute, or reverse the payment. Choose FTC or IC3 if the scam is broader, online, or likely part of a pattern investigators need to see. Neither if you are trying to recover money without contacting the place that actually moved it.

Plainly, that is the cleanest answer. The best report is the one matched to the fraud type and the payment method. I would not waste time on a single “master report” mindset. Split the problem: stop the loss, then document the scam, then add any specialty regulator if the scam touches investments, charity, housing, employment, or insurance.

FAQ: Where to Report a Scam

Should I report a scam to the police or the FTC?
If you are in the U.S., I would usually do both when the scam is serious. Police reports help with local documentation; FTC reports help with national scam tracking. For internet crime, IC3 is also worth filing.

Will reporting a scam get my money back?
Not by itself. Recovery usually comes from the bank, card issuer, payment app, or platform that moved the funds. Government reports are important, but they are not refund mechanisms.

What if I sent money willingly because I was tricked?
Report it anyway. Many scams depend on the victim authorizing the payment. Even if a refund is harder, the report still matters for your records and for investigators.