Scam recovery · UK · Debit card
Paid a scammer with a debit card (UK): what to do now
Call the number on the back of your card, or 159, today. Ask for the card to be cancelled if the scammer has the details, and ask the bank to raise a chargeback under the Visa or Mastercard rules. The Financial Ombudsman Service says you usually have about 120 days. Debit card payments are not covered by the APP bank transfer rules.
Rules, contacts and time limits checked against official sources on .
Do first
Stop dealing with the scammer
today
Steps
6
in order
Time limits
2
to watch
Checked
27 Sep 2026
official sources
1. Stop dealing with the scammer
Do not send more money, share codes or install anything they ask for, even if they promise a refund or say you owe a fee. Save their messages and numbers first, then stop replying and block them. Time limit: Now. Scammers often come back for more, for example by offering to release or recover the money for a fee. Keeping the messages gives your bank and the police the evidence they ask for.
2. Call your card provider
Call the number on the back of the card or 159. Tell them the payment was to a scammer, ask them to cancel the card if the details were shared, and ask which card protections apply. Contact: Your card provider (159, stopscamsuk.org.uk/159). Or the number on the back of the card. Time limit: Today. Card payments are not covered by the APP reimbursement scheme; they have their own protections, and the card provider starts them.
3. Ask for a chargeback
Ask the card provider to raise a chargeback under the Visa, Mastercard or American Express rules. Say what you paid for and why it was a scam, and send the evidence they ask for. Contact: Your card provider (159, stopscamsuk.org.uk/159). Or the number on the back of the card. Time limit: Around 120 days from the payment (card scheme rules). The Financial Ombudsman Service says you usually have around 120 days to raise a chargeback, sometimes counted from when goods were due. A chargeback is not a legal right, but a bank should normally raise one where there are valid reasons.
4. Report it to the police
In England, Wales or Northern Ireland, report online to Report Fraud or call 0300 123 2040. In Scotland, call Police Scotland on 101. Write down the crime reference number. Contact: Report Fraud (England, Wales and Northern Ireland) (0300 123 2040, reportfraud.police.uk). Replaced Action Fraud on 4 December 2025; Police Scotland (101, scotland.police.uk/advice/scams-and-frauds). If you live in Scotland. Time limit: Within a few days. Your bank may ask for the crime reference number, and your report helps police link cases. Report Fraud replaced Action Fraud on 4 December 2025; the phone number is unchanged.
5. Report the scam texts and emails
Forward scam texts free to 7726 and scam emails to report@phishing.gov.uk. Contact: Your mobile network (scam texts) (7726, ncsc.gov.uk/collection/phishing-scams/report-scam-text-message). Forward the text free of charge; NCSC Suspicious Email Reporting Service (report@phishing.gov.uk, ncsc.gov.uk/collection/phishing-scams/report-scam-email). Forward the scam email. Time limit: When you can. Networks can block the sender and the NCSC can take down scam websites, which protects the next person.
6. If the bank or provider says no, complain and then go to the Ombudsman
Make a formal complaint to the bank or provider. If you are unhappy with its final response, or it has not replied in time, take the complaint to the Financial Ombudsman Service for free. Contact: Financial Ombudsman Service (financial-ombudsman.org.uk/consumers/how-to-complain). Free. You do not need a claims company. Time limit: Within 6 months of the final response. A business has 15 days to deal with complaints about fraud, scams and payment services (8 weeks for most other complaints). You then have 6 months from the final response to go to the Ombudsman.
Time limits that apply
Counted from the day you paid. Where the real limit runs from a later date, such as your statement, the tool counts from the payment date, so the date it shows is never later than the real one.
| Step | Time limit |
|---|---|
| Ask for a chargeback | Around 120 days from the payment (card scheme rules) |
| If the bank or provider says no, complain and then go to the Ombudsman | Within 6 months of the final response |
Keep this evidence
Screenshots of every message, email, advert and website, including the sender's number or address. Bank statements or app screens showing each payment, with the date, amount, payee name, sort code and account number. Transaction references, and for crypto the wallet address and transaction ID. A timeline in your own words: when contact started, what you were told and when you paid. Crime reference number from Report Fraud or Police Scotland, and your bank's case number. Notes of every call: date, time, who you spoke to and what they said.
Protect yourself now
Change the password on your email first, then banking, then any account that shares a password. Remove any remote access app the scammer asked you to install and run an antivirus scan. Turn on two-step verification or a passkey. Warn family and friends if the scammer had access to your contacts or social media. Check your statements every week for the next few months. Only call your bank on 159 or the number on your card.
Watch out for recovery scams
People who lose money are often contacted again by someone offering to get it back for a fee. The FCA calls these recovery room scams. The Financial Ombudsman Service is free and you do not need a claims company or lawyer to use it. If anyone offers to recover your money, check the firm on the FCA Firm Checker and contact it only through the details listed there, never the ones they give you.
Guides and definitions
- Section 75 or chargeback: which should you use to get your money back? (Guide)
- APP fraud reimbursement (APP fraud reimbursement makes UK banks refund victims of authorised push payment scams up to £85,000 for Faster Payments and CHAPS transfers made on or after 7 October 2024.)
- Chargeback (A chargeback asks your card provider to reverse a debit or credit card payment under Visa, Mastercard or American Express rules, usually within about 120 days.)
- Ombudsman (An ombudsman is a free, independent body that settles complaints against companies or public bodies once the organisation has had its chance to put things right.)
- Phishing (Phishing is a scam email, text or call designed to trick you into visiting a fake website, giving away personal or bank details, or installing malware.)
- Section 75 (Section 75 of the Consumer Credit Act 1974 makes your credit card provider jointly liable with the seller for a single item costing over £100 and up to £30,000.)
If you paid another way
- Bank transfer (Faster Payments or CHAPS) (UK)
- Credit card (UK)
- PayPal or another payment app (UK)
- Cryptocurrency (UK)
- Gift cards (UK)
- Gave bank details, passwords or a one-time code (UK)
The same in the US · All scam recovery guides · Get your own plan with real dates
Common questions
How long do I have to ask for a debit card chargeback?
Usually around 120 days, set by the card scheme's rules rather than by law. For a payment on 1 June 2026, 120 days runs to 29 September 2026. The clock can start later if goods were due later, so ask the bank for its exact limit before it passes.
Does my bank have to do a chargeback?
No. A chargeback is a card scheme process, not a legal right, so the bank does not have to raise one. The Financial Ombudsman Service says it is good practice to do so where there are valid reasons, such as goods that never arrived or were not as described.
Is a debit card scam covered by the £85,000 APP refund rules?
No. The APP reimbursement rules cover Faster Payments and CHAPS bank transfers only. The Payment Systems Regulator says card, cash and cheque payments have their own protections, which for a debit card means chargeback, or the unauthorised payment rules if someone else used your card.
What if the scammer used my debit card details without my permission?
Tell your bank without delay. A payment you did not authorise is refundable under the Payment Services Regulations 2017, with your loss capped at £35 unless you acted fraudulently or with gross negligence. You must report it no later than 13 months after it left your account.
Where do I complain if my bank refuses a debit card chargeback?
Complain to the bank first. It has 15 days to answer complaints about fraud and scams. If you are unhappy with its final response, you have 6 months to take the complaint to the Financial Ombudsman Service, which is free and does not need a claims company.
Sources and assumptions
- General steps from official guidance; your bank, card provider or the police may ask for more.
- Deadlines are counted from the payment date, so they are never later than the real limits.
- FCA: Protect yourself from scams
- NCSC: If you've shared sensitive information
- Payment Systems Regulator: APP fraud reimbursement protections
- Stop Scams UK: 159
- Financial Ombudsman Service: Section 75 and chargeback
- GOV.UK (Serious Fraud Office): Report Fraud, new service from City of London Police
- Stop! Think Fraud (HM Government): Reporting fraud
- NCSC: Report a scam email
- NCSC: Report a scam text
- Financial Ombudsman Service: How to complain
Guidance to help you act quickly, not legal advice. We cannot recover money for you, and nobody can promise to.