Quick answer: You catch a scammer by verifying their identity before money moves, rather than hunting them afterward. First, run a reverse image search on their photos. Then check how old their account is. Finally, look at how they want you to pay, because that single detail settles most cases. If someone asks for gift cards, crypto, or a wire transfer, it’s a scam. And if you’ve already paid, call your bank within hours, then file at digital truth experts
You’re here for one of two reasons. Either something feels off about someone and you want to know before you send money, or you’ve already sent it and now you’re trying to work out what happens next.
Those are different problems. Unfortunately, most articles mash them together. This one doesn’t.
We’ll also be honest about something you won’t hear from sites selling recovery services. Catching a scammer almost never means unmasking a person. Instead, it means confirming a suspicion early, stopping further loss, and getting clean evidence to people who can actually act on it.
What does “catching a scammer” actually mean?
Realistically, it means confirming the fraud and documenting it, rather than identifying the individual. Most online scammers operate from outside your country, often from organised fraud compounds, because that’s where they run stolen photos, rented bank accounts, and phone numbers that change weekly. So you are not going to personally identify them. Be suspicious of anyone who claims otherwise.
Here’s what you genuinely can do:
- Confirm it before you pay. This carries the highest value, and it sits most within your control.
- Stop the bleeding. Scammers rarely stop at one payment, so cutting contact prevents hit two, three, and four.
- Preserve evidence properly. Investigators act on detailed reports. However, they file vague ones and move on.
- Feed the pattern. Investigators build cases by matching wallet addresses and phone numbers across hundreds of complaints. Yours might connect two clusters.
Most people skip that last point. Because they assume nothing will happen to their own case, they never report at all. But aggregated data is what ultimately brings fraud networks down, not individual investigations.
What are the signs someone is a scammer?
The most reliable signals are manufactured urgency, unusual payment methods, and a push to move the conversation onto a private messaging app. If you spot all three together, someone is almost certainly scamming you.
They create artificial urgency
Every scam runs on a clock, because thinking kills it. The deposit window closes tonight. Customs won’t release the shipment until the fee clears. By morning, that investment slot will be gone. Real opportunities, however, survive a pause of 24 hours. Scams never do.
They ask for untraceable payment
This is the closest thing to a definitive test, since scammers need money that moves fast and lands permanently. No government agency, bank, utility, or employer has ever asked you to pay in gift cards. So if someone wants you to buy gift cards and read out the numbers, stop reading. It’s a scam, full stop.
They pull you off the platform
You met on a dating app or marketplace, but within days they want to talk somewhere else. There’s a reason for that. Those apps keep no transaction records, run no moderation, and give you nobody to report the profile to. As a result, moving off the platform strips away every protection you had.
Their identity doesn’t hold up
Real people leave years of traces, such as old posts, mutual friends, tagged photos, and a footprint that matches their story. Scam profiles, by contrast, look new, sparse, and suspiciously photogenic.
Scammers also work from scripts, so broad questions are easy for them. Narrow ones aren’t. Ask which street the office is on. Then ask what terminal they flew from, and who their team lead is. Finally, watch for deflection or a sudden connection problem.
Five more red flags
- They never video call, or it’s ten frozen seconds and an excuse about bandwidth
- A small withdrawal pays out early, right before they ask for a big deposit
- Getting your money out suddenly requires a fee, whether they call it tax, unlock charge, or compliance bond
- The photos belong to a model, influencer, or soldier whose pictures scammers steal constantly
- They discourage you from telling anyone, because isolation is deliberate. Above all, treat any secrecy request about money as a red flag by itself.
How do you verify someone before sending money?
Run their photos through reverse image search, check the account’s age, and independently verify any company they claim to represent. Together, these checks take under an hour and settle most cases.
Five checks that take an hour
1. Reverse image search the photos. First, save their pictures and run them through Google Lens, TinEye, and Yandex. Yandex performs noticeably better on faces. Stolen photos usually surface under a different name within seconds.
2. Check how old the account is. Scroll to the earliest posts, then see whether engagement comes from real accounts. On LinkedIn, check whether people at the claimed employer actually connect to them. Obviously, a profile created three weeks ago is not someone you send money to.
3. Verify the company yourself. Look up the registration number in the official companies register, rather than on the website they sent you. Next, check whether the financial regulator lists them. Also check the domain’s registration date, because a trading platform whose domain is two months old is not a trading platform.
4. Get a live video call on your terms. Ask them to hold up three fingers or say today’s date. Deepfakes keep improving, but they still break on unscripted physical requests.
5. Test one checkable detail. Pick a single claim and verify it independently. One confirmed lie is enough, so you don’t need to disprove everything.
When DIY checks aren’t enough
For bigger decisions, such as an acquisition, a large private investment, or a counterparty you can’t pin down, these methods hit their limit. A structured OSINT intelligence review cross references corporate filings, public records, and digital footprints into one sourced report. That matters particularly if you later need to show you exercised reasonable diligence.
How should you document evidence?
Screenshot everything with URLs and timestamps visible, save every transaction ID and wallet address, and change nothing. Do this first, before you confront anyone or close any account.
Capture full screens, rather than crops. Include the URL bar, the profile name, and visible timestamps, because a cropped message screenshot makes weak evidence. Screenshot the profile too, since it’ll disappear within days.
Save every financial identifier. Write down transaction IDs, bank reference numbers, and receiving account names. For crypto, that means full wallet addresses and transaction hashes. These matter more than anything else you can hand an investigator, because they survive even when the human identities vanish.
Export chats instead of screenshotting them wherever you can. Both WhatsApp and Telegram support full export, which preserves metadata that a screenshot loses.
Don’t delete, edit, or reset anything. If a device sits at the centre of a serious loss, stop using it and leave it alone. Careless handling destroys metadata permanently. That’s exactly why examiners work on forensic copies rather than original devices, and it’s the first thing a digital forensics team will ask you about.
Write a timeline now. Note the date, time, what happened, how much moved, and on what platform. Every agency will ask for it, so doing it while your memory is fresh makes your complaint considerably stronger.
Should you confront a scammer or investigate them yourself?
No. In fact, it’s the most common way people make things worse. Here are four reasons.
You tip them off. The second they know you’re onto them, the profile vanishes, the money moves, and your evidence disappears.
The wrong person usually pays for it. The face in the profile almost always belongs to an innocent person whose photos a scammer stole. Strangers online have harassed, doxxed, and even attacked those people after deciding they’d found the fraudster. Furthermore, if you publish an accusation against the wrong person, you’re the one facing a defamation claim.
Retaliation becomes a real risk. These are organised criminal operations that may hold your address, your workplace, intimate photos, or financial details. Provoking them has led to extortion and swatting.
A genuine case can collapse. If you gather evidence improperly, especially through unauthorised access to accounts or devices, a court may rule it inadmissible. Worse, computer misuse laws could expose you to criminal liability.
Channel the anger into a report that documents everything properly instead. Ultimately, that accomplishes far more.
Where do you report a scammer?
Call your bank first, then file with IC3 and the FTC. Only the bank step runs on a clock, because recall windows last hours rather than days.
| Where | When | What it does |
|---|---|---|
| Your bank or payment provider | Immediately, within hours | Only this step can stop or reverse money in transit. Ask for the fraud department, then say “unauthorised” or “fraudulently induced.” |
| FBI IC3 | Same day | The federal clearinghouse for US internet crime. For crypto cases, include wallet addresses, amounts, dates, and transaction hashes, because those details make a complaint actionable. |
| FTC ReportFraud | Same day | It won’t resolve your individual case. However, it feeds a law enforcement database that drives enforcement actions. |
| The platform it happened on | Same day | This most likely produces a visible result, since platforms remove accounts fast and that protects the next person. |
| Local police | Within days | Often “out of jurisdiction,” but get a report number anyway, because banks and insurers require one. |
| The receiving crypto exchange | As soon as possible | Include the transaction hash. Exchanges really do freeze accounts once you document a complaint properly. |
Outside the US, use Action Fraud in the UK, the Canadian Anti-Fraud Centre, Scamwatch in Australia, or your national cybercrime unit.
Can you get your money back from a scammer?
It depends almost entirely on how you paid. Unfortunately, most defrauded money never comes back. Here’s the honest breakdown.
| Payment method | Odds | Why |
|---|---|---|
| Credit or debit card | Best | Chargeback rights are real, especially when goods or services never arrived |
| Bank transfer | Moderate, if fast | You may still recall it within hours, though rarely after days. Some countries also run reimbursement schemes for authorised push payment fraud |
| Zelle, Cash App, Venmo | Poor | These apps move money like cash, although fraud reimbursement policies keep expanding slowly |
| Gift cards | Very poor | Call the issuer immediately anyway, because they occasionally freeze the balance before the scammer drains it |
| Cryptocurrency | Worst | Irreversible by design. Recovery happens only through legal process once funds hit a regulated exchange, never through a service you hire |
So anyone promising to get your crypto back is selling you something. Which brings us to the most important part of this page.
What is a recovery scam?
A recovery scam targets people who’ve already lost money, offering to get it back for an upfront fee. It’s the second hit, and it aims directly at people reading articles like this one.
Once a scam has taken your money, your details often circulate among fraud networks as a known vulnerable contact. Then comes the approach: a recovery firm, a blockchain forensics specialist, a lawyer, sometimes even a “government official.”
The FBI has warned about this repeatedly. IC3’s guidance to victims says plainly that you should treat recovery services with suspicion, especially any charging an upfront fee. Furthermore, a July 2026 FBI public service announcement described criminals impersonating FBI and IC3 personnel with fake fund recovery offers, calling it a ruse that revictimises people who had already lost money. Some now use AI generated video and cloned voices to sell it.
How to spot one
- They contacted you, rather than the other way around
- There’s an upfront fee, retainer, or “tracing deposit”
- They guarantee, or heavily imply, recovery
- Contact runs through WhatsApp, Telegram, or social media DMs
- Nobody will give you a licence number, a registered address, or named staff
- They want remote access to your device or your login details
- They found you in a support group or comment thread for scam victims
The FBI never charges fees to recover funds, and it doesn’t contact victims through messaging apps. Neither does any legitimate agency. Meanwhile, the FTC keeps current guidance at consumer.ftc.gov/scams.
So if you’re considering paying anyone, verify their licence number with the issuing regulator first. Above all, be clear about what you’re buying. Tracing and reporting is a real service. A guaranteed return of funds is not.
When is it worth hiring a professional?
Hire one when you need verification before a large transaction, or documented evidence for a legal or insurance process. Not when you simply want someone to chase your money.
Professional investigation genuinely helps with:
- Due diligence before a significant deal, hire, or investment
- Evidence preservation if you intend to pursue civil litigation
- Corporate incidents like business email compromise, where you need to establish the scope fast
- A sourced report to support an insurance claim or regulatory complaint
However, it cannot reverse a blockchain transaction, force a foreign bank to return funds, or lawfully access someone else’s accounts.
Before you engage anyone, ask for a licence number and issuing jurisdiction, a registered business address, named examiners with verifiable certifications, and a written scope with fixed fees. Then ask what happens if they find nothing. A credible firm answers all of that without flinching, and it never guarantees an outcome.
Frequently asked questions
Can you find out who a scammer really is? Rarely, and almost never on your own, because scammers rely on stolen photos and rented accounts. However, investigators can often map the infrastructure behind them, meaning domains, wallet clusters, and phone numbers, which links separate cases together.
Should I keep talking to them to gather evidence? No. It exposes you to more manipulation, and it hands them more material to use against you. Instead, document what you have and stop.
Will the police actually do anything? Individually, often not. Collectively, yes. Complaints that contain transaction hashes and account numbers are far more likely to feed an enforcement action.
How fast do I need to report? Call your bank within hours. Agency reports can follow later, although sooner always beats later.
Is being scammed my fault? No. These are professional operations. They run scripts that thousands of previous victims have unwittingly refined, and they exploit ordinary human trust by design. Shame keeps most fraud off the books, which is exactly what these operations count on.
The bottom line
Catching a scammer is less dramatic than it sounds, yet more achievable than it feels. So verify before you pay, because an hour of checking beats any amount of chasing afterward. Document properly if you’ve already lost money. Then report to the people who can act. Finally, treat anyone promising to recover your funds with the same scepticism that would have protected you the first time.
If you’re weighing a significant transaction and want the other party verified before you commit, a structured open source review can establish exactly who you’re dealing with, before the money moves rather than after.