Scammed by an AI Fake? Your First 24 Hours and Where to Report in the US

It happened. The “grandson” was a voice clone, the video call was a deepfake, or the store was a mirage — and the money has gone. The next few hours matter more than the last few did, because almost every payment method has a reversal window, and the window closes fast. The US Federal Trade Commission’s guide “What To Do if You Were Scammed” is built around one hopeful fact: it is always worth asking the company you used to send the money whether it can be recovered. This article turns that guidance into a timed plan, and explains exactly where to report in the US so your report does real work. It is part of our complete guide to AI scams and deepfake protection.

Hours 0–2: chase the money on its own rails

Ignore the embarrassment and go straight to the payment rail, because each has its own reversal path:

• Bank transfer or Zelle: report the scam to your bank or credit union immediately and ask them to reverse the transfer.
• Payment app (Venmo, Cash App, PayPal): report it to the app company right away and ask for a reversal.
• Wire transfer (Western Union, MoneyGram): contact the company immediately, tell them a scammer tricked you into wiring money, and ask for a refund.
• Credit card: report it to the card company or bank immediately — the number is on the back of the card. Federal law protects you against unauthorised use of a credit card.
• Debit card: report it to the card company or bank immediately; speed matters even more here, because the money leaves your own account.
• Gift cards: contact the company that issued the card immediately, explain a scammer tricked you, and keep both the card and the store receipt — you will need them.
• Cryptocurrency: contact the exchange or ATM operator immediately. The FTC is candid that crypto payments do not come with the same legal protections as cards — which is precisely why scammers demand them, and why minutes count.
• Cash sent by mail: call the US Postal Inspection Service on 1-877-876-2455 and ask whether the package can be intercepted (a fee may apply).

While you make these calls, write everything down: amounts, times, transaction references, names used, phone numbers, wallet addresses. The FBI asks victims reporting to IC3 for exactly this — the identifying information about the individuals and the financial transaction details: date, type of payment, amount, account numbers, the receiving institution and any cryptocurrency addresses — plus how the contact was initiated.

Hours 2–12: lock the doors the scammer opened

Money is only the first loss. Work through what the scammer actually obtained:

• If you gave your Social Security number, go to IdentityTheft.gov and follow the personalised recovery plan it builds for you. If you are not sure whether your information was used, IdentityTheft.gov/databreach walks through those steps instead.
• If you gave an account password, create a new strong password for that account, change the password everywhere you reused it, and turn on two-factor authentication or multi-factor authentication where it is offered.
• If you gave remote access to your computer, update your security software, run a scan, and follow the FTC’s advice to change your passwords and switch on two-factor authentication for your accounts — a scammer who was inside your machine may have gone looking for saved credentials.
• If a voice or video clone was involved, warn the real person being impersonated and your shared contacts — the same clone library can be reused against the whole family, which is why the family code word should be set today, while the lesson is fresh.

Hours 12–24: report it where it counts

Two reports, for two different machines. ReportFraud.ftc.gov is the FTC’s reporting portal: the Commission says reports help it build cases against scammers, spot trends, and educate the public about them. IC3.gov is the FBI’s Internet Crime Complaint Center — the right destination when AI was part of the fraud, because its December 2024 announcement on generative-AI fraud specifically tracks voice clones, fake video and AI-written lures, and asks for the transaction details listed above. Neither report guarantees your money back — that battle is the reversal requests in the first section — but reports are how patterns get noticed, accounts get frozen further down the chain, and the next victim gets warned in time. If the impersonated platform or a fake store was involved, also report within that app or marketplace; our fake shopping websites checklist shows the records worth attaching.

One last warning from bitter experience across every scam type: beware the recovery scammer. In the days after a loss, expect messages from strangers promising to recover your money for a fee, sometimes posing as officials. Real agencies do not charge victims to process reports. Anyone who asks for payment to “release” your recovered funds is running the second act of the same play.

What this means

The cruel arithmetic of scam recovery is that time, not cleverness, is the variable victims control. A wire stopped in the first hour is a scare story; the same wire reported next week is a loss statistic. The FTC’s figures give that statistic its scale — consumers reported losing more than $12.5 billion to fraud in 2024, up 25% on the year before, with $2.95 billion of it to imposter scams alone — and behind every dollar sits a reversal window that opened and closed. Understanding the system helps: payments move through chains of institutions, and each institution can only freeze what has not yet moved on. That is why the honest advice is sequenced rather than clever — rails first, accounts second, reports third — and why it works for the AI variants exactly as it worked for the older ones. A voice clone changes how the money was persuaded out of you; it does not change where the money went.

For US readers there is also a civic dimension worth taking seriously. The FTC received fraud reports from 2.6 million consumers in 2024, and its data book exists because reporting is what turns private embarrassment into public enforcement. People routinely skip reporting because they assume nothing will happen; the agencies are explicit that reports build cases and expose trends — including, now, the AI-enabled trends the FBI is tracking through IC3. Reporting is also self-protection: a filed report timestamps your account of events if the stolen identity surfaces later. So treat the first 24 hours as a checklist, not a mourning period. Move on the money, lock the accounts, file both reports, and then — while it still stings — put the family code word and the call-back rule in place. The scammer’s business model depends on victims freezing. Motion is the counterattack.

Finally, keep the file. Save every screenshot, reference number and report confirmation even after a reversal succeeds or fails. If the charge resurfaces, if the stolen identity is used months later, or if a class action or restitution fund ever forms around the scheme that caught you, that folder is your proof of what happened and when. Victims who document early are the ones institutions can still help late.

Bottom line

If the money has gone, hours matter more than cleverness. Move now: contact the bank, stop the payment rail, report it, preserve everything. The reversal window is the asset — spend it.

Read Next

• AI Scams and Deepfake Protection: The Complete Guide
• Deepfake Video Calls and Fake Celebrity Ads: How to Spot Them Before You Pay

Sources

• US Federal Trade Commission — What To Do if You Were Scammed (accessed 7 November 2026)
• FBI Internet Crime Complaint Center — Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (PSA I-120324-PSA, 3 December 2024) (accessed 7 November 2026)
• US Federal Trade Commission — New FTC Data Show a Big Jump in Reported Losses to Fraud to $12.5 Billion in 2024 (accessed 7 November 2026)