Banking & payments
Payment app scams and refunds: Zelle, Cash App, Venmo, PayPal
If you lost money on a payment app, act now: report it in the app and to your bank, change your passwords, and report the scam to the FTC. Whether you get your money back depends mostly on one question - did someone else send the money without your permission (unauthorized), or were you tricked into sending it yourself (authorized)? Unauthorized transfers are protected by federal law. Authorized scam payments often are not, but it is still worth asking for a refund.
Do this right now
- Report the payment in the app. Use the help or support section inside Cash App, Venmo or PayPal. Zelle works through your bank's app, so for Zelle, contact your bank. If the payment is still pending, cancel it. Never use a support number from a search ad, social media or a message - scammers post fake ones.
- Call your bank or card issuer. If the app is linked to a bank account or card, tell the bank what happened, ask whether the payment can be stopped or reversed, and file a fraud or error claim. Write down the claim number.
- Secure your accounts. Change the passwords for the app, your email and your bank. Turn on two-step verification, sign out of other devices and remove any linked accounts you do not recognize.
- Report the scam. File a report with the FTC at reportfraud.ftc.gov. For large losses, investment or romance scams, also report to the FBI at ic3.gov. If the scammer got your personal information, go to IdentityTheft.gov.
- Save the evidence. Take screenshots of the payment, the scammer's username, phone number or email, and every message. Note the dates, amounts and transaction IDs.
- Follow up in writing. Confirm phone claims by email or letter, and keep copies of everything.
Authorized vs unauthorized: why it matters
| What happened | How it is usually treated |
|---|---|
| Someone hacked your account and sent money | Unauthorized - covered by Regulation E |
| Your phone was stolen and someone sent money from your app | Unauthorized - covered by Regulation E |
| A scammer tricked you into sharing a login or code, then sent money from your account | Generally unauthorized - covered by Regulation E |
| You sent money yourself because someone lied to you | Generally authorized - refund depends on the app's or bank's policy |
| You paid for something that never arrived | Authorized - purchase protection may apply if you paid as a purchase |
| The app or bank made a mistake, such as the wrong amount or a duplicate | An error - covered by Regulation E error resolution |
Your rights under Regulation E
Regulation E is the federal rule for electronic money transfers. It covers bank accounts and generally covers consumer payment app accounts too. If a transfer was unauthorized, or there was an error, the bank or app must investigate when you report it.
How much you can lose depends on how fast you report:
- If your login, card or device was lost or stolen and you report it within 2 business days of finding out, your loss is generally limited to $50.
- If you report it after 2 business days, you could be responsible for up to $500.
- If an unauthorized transfer appears on your statement and you do not report it within 60 days of the statement, you may be responsible for transfers that happen after that 60-day period.
- If no card or device was lost or stolen, and you report an unauthorized transfer within 60 days of the statement, you are generally not responsible for it.
The bank or app generally has 10 business days to investigate. It can take up to 45 days, or 90 in some cases, if it gives you a provisional credit while it investigates. It must tell you the result, and if it denies your claim you can ask for the documents it relied on.
If you report by phone, the company may ask you to confirm in writing within 10 business days. Do it.
Why authorized scam payments are hard to recover
Payment apps move money in seconds and are designed to work like cash. If you approved the payment yourself, even because someone lied to you, it is generally treated as authorized, and Regulation E's refund rights usually do not apply. That does not mean there is nothing to try:
- Ask about impostor scams. Some banks that offer Zelle reimburse certain impostor scams, such as when a scammer pretended to be your bank or a government agency. Ask your bank directly.
- Check purchase protection. PayPal and Venmo offer purchase protection for eligible payments made as purchases, such as to a business or marked as goods and services. Payments sent as personal or "friends and family" payments generally are not protected. Check each app's current terms.
- Ask your card issuer. If you funded the payment with a credit card, ask the issuer whether a dispute is possible. Results vary. See how to dispute a credit card charge.
- Escalate if denied. Put your request in writing, then file a complaint with the Consumer Financial Protection Bureau (CFPB), the federal regulator, at consumerfinance.gov/complaint, and with your state attorney general. See what to do if a company ignores your complaint.
Common payment app scam scripts
"This is your bank's fraud department"
A call or text that looks like it comes from your bank says your account has been hacked. The caller asks you to read back a code, or to "protect" your money by sending it to yourself or to a "safe account" with Zelle or another app. The money goes to the scammer. Your bank will never ask you to send money to protect it. Hang up and call the number on the back of your card.
Marketplace overpayment and fake payment emails
A buyer on a marketplace app "accidentally" pays you too much and asks you to send back the difference. Or you get an email that looks like it is from PayPal or Zelle saying the buyer's payment is on hold until you pay a fee or upgrade your account. Check payments only inside the app itself, never through a link in an email.
"I sent it to you by mistake - please send it back"
A stranger sends you money and then asks you to return it. The original payment often came from a stolen account or card and is later reversed, leaving you out the money you sent. Do not send it back yourself. Contact the app and let it handle the reversal.
Romance and investment scams
Someone you met online builds trust over weeks, then asks for help with an emergency, or shows you an investment platform with big "returns". When you try to withdraw, you are told to pay taxes or fees first. Anyone you have not met in person who asks for money, crypto or payment app transfers is a warning sign.
Other common scripts
- a rental deposit for a home you have not seen
- tickets, pets or cars for sale that require payment up front with no purchase protection
- a prize, grant or government refund that requires a fee first
- a job that sends you a check and asks you to send part of it back by app
Our guide on how to spot financial scams covers more warning signs.
How to protect yourself next time
- treat payment apps like cash - send money only to people you know and trust
- double-check the phone number, email or username before you send
- for purchases from strangers, use a method with purchase protection, such as a credit card
- never share a verification code, PIN or password, with anyone
- turn on payment alerts, a PIN or fingerprint lock, and two-step verification
- set lower daily transfer limits if your bank or app allows it
- pause when someone rushes you - urgency is the scammer's main tool
Questions and answers
Will Zelle refund me if I was scammed?
It depends. If someone sent money from your account without your permission, your bank must investigate under Regulation E. If you sent the money yourself, a refund is not guaranteed, but some banks reimburse certain impostor scams, so ask your bank directly.
Can I get my money back from Cash App or Venmo after a scam?
For unauthorized payments, report them right away and the company must investigate. For payments you sent yourself, recovery is hard. Report it in the app quickly, ask your linked bank or card issuer for help, and check whether purchase protection applies.
Does PayPal protect friends and family payments?
Generally no. PayPal's purchase protection covers eligible purchases of goods and services. Payments sent to friends and family are generally not covered, which is why scammers often ask for them.
How long do I have to report an unauthorized transfer?
Report it as soon as you notice. Under Regulation E, reporting within 2 business days of a lost or stolen login or device limits your loss, and you should always report within 60 days of the statement showing the transfer to keep your full protection.
Should I pay someone who says they can recover my money?
No. Recovery offers that ask for a fee are almost always another scam. Report the original scam to the FTC, your bank and the app, and do not send more money to anyone promising to get it back.
Questions about this guide
No comments yet. Start the conversation - questions are welcome too.