A step-by-step recovery guide for online shopping scams, phishing fraud, and stolen credit cards in 2026 — free, actionable, and built for people who need help right now.
If you've been scammed, do these in order:
Bottom line: Acting in the first 24 hours dramatically improves recovery chances. Credit card fraud is most recoverable; P2P transfers (Cash App, Venmo, Zelle) are not.
If you're reading this, you may have just been scammed — or you're worried you might have been. Either way: you're not alone, and recovery is possible. Americans reported losing $15.9 billion to fraud in 2025. Most victims feel embarrassed and silent — but most fraud is recoverable if you act quickly and follow the right steps.
Time matters. Credit card disputes filed within 60 days of the charge have the strongest legal protections. Reports filed within 24 hours have the highest recovery success rates. This guide gives you the exact steps to take right now, in order, to recover what you can and protect yourself going forward.
These are the specific patterns scammers use. If you spot 2 or more, walk away.
These actual scam patterns are happening right now — knowing them helps you spot them.
A shopper bought from a fake Temu site, charged $1,200. They called their credit card company within 6 hours, filed a fraud dispute, and got the charge reversed within 14 days. They also reported to FTC and placed a fraud alert. Total recovery: 100% of the loss. Key: acted fast and used a credit card.
A user sent $800 to a 'cash flipping' scammer on Cash App. They reported to Cash App support within an hour, but the money was already gone. Cash App rarely recovers P2P transfers. They reported to FTC and police, but the funds were unrecoverable. Total recovery: $0. Lesson: P2P transfers (Cash App, Venmo, Zelle) have minimal protections — never send to strangers.
A senior lost $15,000 to a romance scammer over 3 months. After family intervention, they reported to FTC, FBI IC3, and police. They were also approached by 'recovery specialists' demanding $2,000 upfront — a second scam they avoided. Total recovery: $4,500 (one wire transfer was successfully recalled through their bank). Lesson: bank wire transfers MIGHT be recoverable if reported within hours.
Now you know what to watch for. But scammers evolve every day — new lookalike sites, new phishing tactics, new manipulation techniques. You shouldn't have to remember every red flag every time you shop. That's what Nudge is for.
We built Nudge to be the permanent layer of protection between you and these scams. Real-time trust scores on every site you visit. Automatic warnings when something looks off. No subscription. No account. No data collection. The people most vulnerable to online scams — older adults, lower-income shoppers, first-time buyers — are exactly the people who can least afford expensive security tools. Protection should be a right, not a luxury.
Follow these 8 steps in order. The first 5 should happen within 24 hours. The rest within 7 days. Do them all — skipping steps reduces recovery odds.
Block phone numbers, emails, social media accounts, dating app profiles — anything connected to the scam. Don't try to 'confront' them, get evidence, or recover money directly. Scammers often follow up with 'recovery scams' offering to help you get your money back (for a fee). Cut all communication. Now.
If you used a credit card: call the number on the back of your card. Say 'I need to dispute fraudulent charges.' They'll freeze the card, issue a new one, and start the dispute process. If you used debit: call your bank's fraud line immediately. Credit cards have stronger fraud protections (Fair Credit Billing Act). Debit cards have weaker protections (Electronic Fund Transfer Act).
Use a device you're confident isn't infected — borrow a friend's phone or use a library computer if needed. Change passwords on: the scammed account, your email, your bank accounts, any account using the same password. Enable 2FA everywhere. Scammers often use one breach to access multiple accounts via password reuse.
The FTC's Consumer Sentinel Network helps law enforcement track scammers. Even if you don't think your specific case will be solved, your report contributes to pattern detection. Required info: scam type, scammer's contact info (phone, email, URL), amount lost, payment method. Takes 5-10 minutes. This is the official U.S. government fraud reporting system.
Go to your local police department or file online. Bring: documented evidence (screenshots, emails, transaction records), scammer's contact info, total loss amount. The police often can't recover funds directly, but a police report is required for: insurance claims, IRS theft loss deductions, and additional bank fraud investigations. Get a copy of the report for your records.
Contact Equifax, Experian, or TransUnion (placing an alert with one notifies the others). Free service. Lasts 1 year (renewable). Forces creditors to verify your identity before opening new accounts. If identity theft is suspected, place a credit freeze instead — stronger protection, free for life, can be temporarily lifted when you apply for credit.
Check daily for the first week, then weekly for 90 days. Look for: unauthorized charges, new accounts opened in your name, unfamiliar credit inquiries, password reset emails for accounts you didn't request. Use free tools: Credit Karma, your bank's monitoring features, IdentityTheft.gov.
Keep a folder with: screenshots of all scam communications, transaction records, dispute confirmations, police reports, FTC report numbers, dates of all actions taken. This documentation is essential if you need to escalate disputes, claim insurance, or pursue legal action.
You're already in this situation if you're reading this guide. The 8-step framework above IS the 'what to do if it's happened' guide. The critical actions:
All the tools below are free. Use multiple for the strongest protection.
Official U.S. government fraud reporting system.
Internet Crime Complaint Center — for online crime reports.
Free identity theft recovery plans and reporting.
Free fraud alerts and credit freezes.
Free credit monitoring.
Real-time trust scores to prevent future scams — free, no signup.
Deeper dives on specific brands and categories.
Nudge shows you a trust score on every site you visit, automatically. No more remembering every red flag. Free Chrome & Firefox extension — protection that shouldn't be behind a paywall.