Contact the bank straight away using the number in the banking app or on the back of the card, report the transaction as a scam, and ask for the account to be secured. If the payment is pending, request an immediate stop or reversal and confirm whether the card needs freezing or replacing. If money has already left the account, ask the bank to open a fraud case and confirm the next update time in writing. Then gather the key evidence while details are fresh, because the first report usually shapes how quickly the bank acts.
A scam charge on a bank account is often resolved through the bank’s fraud process, but the outcome depends on how the payment was made and what happened just before it. The fastest progress usually comes from a clear timeline, proof of contact with the scammer, and a prompt report. Avoid sending more money “to unlock a refund” or to “verify” the account, as that commonly leads to further losses.
What the problem is
How it shows
A scam charge is a payment that appears on a current account or card statement that was not genuinely authorised, or was authorised only because of deception. In UK banking, it often shows up as a card payment to an unfamiliar merchant, a bank transfer to a new payee, a series of small “test” transactions, or a larger payment that follows a convincing call, text, or email. Sometimes the account holder recognises the merchant name but not the amount, because scammers use payment processors or trading names that look legitimate.
This problem affects people across all banks and building societies, and it tends to appear after a recent change in routine: a new online purchase, a delivery text, a marketplace sale, a “security” call, or a rushed payment to avoid a supposed penalty. It also appears after card details have been used on a compromised website, or when a phone has been stolen and banking apps are accessed. A common pattern is that the first sign is a notification, followed by more activity within minutes.
Who gets hit
It affects anyone with a bank account, but certain situations make it more likely: people who have recently changed phone numbers, moved home, or are waiting for a parcel; people who use social media marketplaces; and people who are under pressure to pay quickly. It also affects those who share devices, store card details in browsers, or have weak passcodes on phones. In many UK cases, the scammer’s approach is designed to feel like a normal customer service interaction, which is why it catches careful people as well.
Why this happens
Card details leaked
Card payments can be made when card details are obtained through phishing, fake checkout pages, compromised merchants, or data leaks. Sometimes the card was physically present at a terminal with a tampered reader, but more often it is online. Scammers may run small transactions first to check the card works, then move to larger purchases or digital goods that are hard to recover.
Bank transfer tricked
Bank transfers are commonly involved when a scammer persuades someone to send money to a “safe account”, a fake investment platform, a bogus courier, or a seller who never delivers. The transfer may be genuinely authorised in the moment, but only because the person was misled about who they were paying and why. This is where banks often ask detailed questions about what was said, what checks were done, and whether the payment was made under instruction from someone claiming to be the bank or police.
Account access taken
Sometimes the scam charge is only one part of a wider account takeover. A stolen phone, SIM swap, or compromised email can allow password resets and new payees to be added. If the scammer can intercept one-time passcodes or push notifications, they can approve payments that look “normal” to the bank’s systems. When this happens, the bank may focus on securing the account first, then investigate the disputed transactions.
Typical bank behaviour
Banks usually act quickly to freeze cards, block merchants, and stop obvious ongoing fraud, but the refund decision can take longer. It is common for the bank to ask whether the payment was card or transfer, whether the device is still in the customer’s possession, and whether any security codes were shared. A typical UK outcome is that the bank refunds quickly for a clearly unauthorised card payment but takes longer where a transfer was made after a convincing scam.
Your rights in practice
Refund expectations
In practical terms, the position depends on whether the payment was unauthorised or authorised under deception. For unauthorised card payments, banks often reverse or refund once basic checks are done, unless they believe the account holder acted with serious negligence around security. For authorised payments, banks may still refund in some situations, but they will usually test whether warnings were given and whether the customer followed them.
Bank duties
Banks are expected to run fraud controls, monitor unusual activity, and provide a clear route to report scams. When a report is made, the bank should explain what it will do next, what information is needed, and how long updates usually take. If the bank believes the customer approved the payment, it should still explain the reasoning and the evidence it relied on, because that affects whether the decision can be challenged.
Complaint leverage
If the first-line fraud team closes the case or offers a partial refund without a clear explanation, a formal complaint often changes the tone. Complaints tend to work best when they focus on facts: the timeline, what the customer believed, what the bank’s systems did or did not flag, and what warnings were or were not shown. Keeping communication calm and consistent helps, because banks often compare statements across calls and messages.
Official basis used
FOS route
The main official route for unresolved disputes with a bank is the Financial Ombudsman Service (FOS). In practice, the bank must be given the chance to investigate and respond through its complaints process first, and then the complaint can be taken to the ombudsman if it is not resolved. The ombudsman looks at what is fair and reasonable based on the evidence, including how the scam happened, what the bank did to prevent it, and how the bank handled the report. The process is document-heavy, so it usually rewards clear screenshots, call logs, and a simple timeline rather than long narratives.
Details of how to complain and what to expect can be checked on GOV.UK guidance.
Evidence that matters
Build a timeline
Collect a simple timeline from the first contact to the moment the payment left the account. Include dates and times of calls, texts, emails, app notifications, and any steps taken in online banking. If the scam involved a phone call, note the number shown, what the caller claimed, and whether any security questions were asked. If it involved a website, save the URL, order confirmation, and any chat transcripts.
Keep bank records
Download statements showing the scam charge, any related “test” transactions, and any refunds or reversals. Take screenshots of the transaction details page in the app, including merchant name, reference, and status (pending, completed, reversed). If the bank gave a case reference, keep it with the date and the name or team spoken to. If the bank asked for a written report through secure messaging, keep a copy of what was sent.
Preserve device proof
If there is any chance the phone or computer was compromised, keep evidence without trying to “clean” it first. Note any unexpected password reset emails, new device sign-ins, or SIM changes. If the phone was lost or stolen, keep the crime reference number if reported, and keep proof of when the SIM was blocked or replaced. Banks often ask whether the device was rooted/jailbroken or whether passcodes were shared, so be ready to answer clearly.
Avoid common errors
Do not delete messages, wipe devices, or close accounts before the bank has confirmed what it needs, because that can remove evidence the bank would otherwise rely on. Do not keep engaging with the scammer to “get proof” if it risks further payments or account access. Do not guess details when reporting; if something is uncertain, say so and offer what can be confirmed from records. A frequent mistake is focusing only on the final transaction and ignoring the earlier contact that explains why the payment happened.
Steps to take now
Stop further loss
Use the bank’s in-app help or the number on the card to report fraud, then ask for immediate protective actions: freeze the card, block online transactions if needed, and secure online banking access. If a transfer was made, ask whether a recall or recovery process has been started and whether the receiving bank has been contacted. If the scam involved sharing passcodes or approving a payment in-app, ask the bank to review whether any new payees were added and to remove them.
Confirm payment type
Ask the bank to confirm whether the scam charge is a card payment, a bank transfer, a direct debit, or a card-present transaction, because the recovery route differs. For card payments, ask whether a chargeback or card scheme dispute is being raised and what evidence is required. For transfers, ask what the bank needs to assess whether the payment was authorised and what warnings were shown at the time. If the bank uses secure messages, request that key points are confirmed there so there is a clear record.
Write the account
Send a short written summary to the bank through secure messaging or email (if the bank allows it): what happened, when it happened, what was believed at the time, and what is being requested (refund, reversal, and account security). Keep it factual and consistent with what was said on calls. If the scam charge is linked to a wider money problem because wages are missing or delayed, it may be necessary to stabilise cashflow first and then pursue the dispute; the practical steps in EMPLOYER UNPAID WAGES can help decide whether to chase the employer urgently or prioritise the bank complaint.
Escalate by complaint
If the bank refuses a refund, delays without updates, or closes the case without addressing the key facts, raise a formal complaint and ask for a final response letter. Include the timeline, the disputed transactions, and what outcome is being sought. Ask the bank to explain, in plain terms, whether it considers the payment authorised and what evidence supports that view. If the bank’s final response is not acceptable, the next step is the ombudsman route described earlier, using the bank’s final response and the evidence pack already collected.
Change the approach
If the scammer still has contact and is pushing for another payment, switch strategy from “recovering money” to “containment”: stop communication, secure accounts, and focus on the bank’s process. If the scam involved a marketplace sale or purchase, preserve the platform messages and consider reporting through the platform as well, but avoid relying on the platform to recover funds. If the bank indicates the case hinges on whether warnings were shown, focus evidence on screenshots, app prompts, and the exact wording of any warnings remembered, rather than repeating the scammer’s story.
Related issues nearby
If the scam charge has pushed the account into arrears or missed payments, the next few weeks can become about damage control as much as recovery. Where a direct debit or repayment arrangement has already been missed because funds were taken, it can help to understand what creditors usually do next and when a new arrangement is worth proposing; see Payment plan broken — consequences when letters or default notices start arriving. If work income is also disrupted at the same time, deal with the most time-sensitive risk first, then return to the bank dispute with a clean evidence pack.
FAQ and quick checks
Pending card payment
For a pending card payment scam charge, the bank can sometimes stop it before it completes if it is reported quickly. Ask whether the merchant has claimed the funds yet and whether the card needs replacing.
Authorised transfer scam
For an authorised transfer scam refund request, the bank will usually ask what checks were done and what warnings appeared during the payment. Provide the timeline and any screenshots showing the payee details and prompts.
Chargeback timescales
For chargeback timescales on scam card payments, the bank may give an initial credit while it investigates and then confirm the final outcome later. Keep all merchant emails and proof that the goods or service were not received or were misrepresented.
Account takeover signs
For account takeover signs after a scam charge, look for new payees, password reset emails, and unexpected device logins. Ask the bank to check recent security changes and to reset access safely.
Before you move on
Make the next contact with the bank with a clear timeline and a single request: secure the account and confirm the recovery route for the specific payment type. Time pressure is often used to push rushed decisions, so any demand to act immediately should be treated as a warning sign.
Get help with the next step
Contact UKFixGuide — Share the transaction type (card, transfer, or direct debit), the date it happened, and what the bank has said so far so the next escalation step can be mapped.
