Scam recovery · UK · Debit card

Paid a scammer with a debit card (UK): what to do now

Call the number on the back of your card, or 159, today. Ask for the card to be cancelled if the scammer has the details, and ask the bank to raise a chargeback under the Visa or Mastercard rules. The Financial Ombudsman Service says you usually have about 120 days. Debit card payments are not covered by the APP bank transfer rules.

Rules, contacts and time limits checked against official sources on .

Do first

Stop dealing with the scammer

today

Steps

6

in order

Time limits

2

to watch

Checked

27 Sep 2026

official sources

1. Stop dealing with the scammer

Do not send more money, share codes or install anything they ask for, even if they promise a refund or say you owe a fee. Save their messages and numbers first, then stop replying and block them. Time limit: Now. Scammers often come back for more, for example by offering to release or recover the money for a fee. Keeping the messages gives your bank and the police the evidence they ask for.

2. Call your card provider

Call the number on the back of the card or 159. Tell them the payment was to a scammer, ask them to cancel the card if the details were shared, and ask which card protections apply. Contact: Your card provider (159, stopscamsuk.org.uk/159). Or the number on the back of the card. Time limit: Today. Card payments are not covered by the APP reimbursement scheme; they have their own protections, and the card provider starts them.

3. Ask for a chargeback

Ask the card provider to raise a chargeback under the Visa, Mastercard or American Express rules. Say what you paid for and why it was a scam, and send the evidence they ask for. Contact: Your card provider (159, stopscamsuk.org.uk/159). Or the number on the back of the card. Time limit: Around 120 days from the payment (card scheme rules). The Financial Ombudsman Service says you usually have around 120 days to raise a chargeback, sometimes counted from when goods were due. A chargeback is not a legal right, but a bank should normally raise one where there are valid reasons.

4. Report it to the police

In England, Wales or Northern Ireland, report online to Report Fraud or call 0300 123 2040. In Scotland, call Police Scotland on 101. Write down the crime reference number. Contact: Report Fraud (England, Wales and Northern Ireland) (0300 123 2040, reportfraud.police.uk). Replaced Action Fraud on 4 December 2025; Police Scotland (101, scotland.police.uk/advice/scams-and-frauds). If you live in Scotland. Time limit: Within a few days. Your bank may ask for the crime reference number, and your report helps police link cases. Report Fraud replaced Action Fraud on 4 December 2025; the phone number is unchanged.

5. Report the scam texts and emails

Forward scam texts free to 7726 and scam emails to report@phishing.gov.uk. Contact: Your mobile network (scam texts) (7726, ncsc.gov.uk/collection/phishing-scams/report-scam-text-message). Forward the text free of charge; NCSC Suspicious Email Reporting Service (report@phishing.gov.uk, ncsc.gov.uk/collection/phishing-scams/report-scam-email). Forward the scam email. Time limit: When you can. Networks can block the sender and the NCSC can take down scam websites, which protects the next person.

6. If the bank or provider says no, complain and then go to the Ombudsman

Make a formal complaint to the bank or provider. If you are unhappy with its final response, or it has not replied in time, take the complaint to the Financial Ombudsman Service for free. Contact: Financial Ombudsman Service (financial-ombudsman.org.uk/consumers/how-to-complain). Free. You do not need a claims company. Time limit: Within 6 months of the final response. A business has 15 days to deal with complaints about fraud, scams and payment services (8 weeks for most other complaints). You then have 6 months from the final response to go to the Ombudsman.

Time limits that apply

Counted from the day you paid. Where the real limit runs from a later date, such as your statement, the tool counts from the payment date, so the date it shows is never later than the real one.

StepTime limit
Ask for a chargebackAround 120 days from the payment (card scheme rules)
If the bank or provider says no, complain and then go to the OmbudsmanWithin 6 months of the final response

Keep this evidence

Screenshots of every message, email, advert and website, including the sender's number or address. Bank statements or app screens showing each payment, with the date, amount, payee name, sort code and account number. Transaction references, and for crypto the wallet address and transaction ID. A timeline in your own words: when contact started, what you were told and when you paid. Crime reference number from Report Fraud or Police Scotland, and your bank's case number. Notes of every call: date, time, who you spoke to and what they said.

Protect yourself now

Change the password on your email first, then banking, then any account that shares a password. Remove any remote access app the scammer asked you to install and run an antivirus scan. Turn on two-step verification or a passkey. Warn family and friends if the scammer had access to your contacts or social media. Check your statements every week for the next few months. Only call your bank on 159 or the number on your card.

Watch out for recovery scams

People who lose money are often contacted again by someone offering to get it back for a fee. The FCA calls these recovery room scams. The Financial Ombudsman Service is free and you do not need a claims company or lawyer to use it. If anyone offers to recover your money, check the firm on the FCA Firm Checker and contact it only through the details listed there, never the ones they give you.

Guides and definitions

  • Section 75 or chargeback: which should you use to get your money back? (Guide)
  • APP fraud reimbursement (APP fraud reimbursement makes UK banks refund victims of authorised push payment scams up to £85,000 for Faster Payments and CHAPS transfers made on or after 7 October 2024.)
  • Chargeback (A chargeback asks your card provider to reverse a debit or credit card payment under Visa, Mastercard or American Express rules, usually within about 120 days.)
  • Ombudsman (An ombudsman is a free, independent body that settles complaints against companies or public bodies once the organisation has had its chance to put things right.)
  • Phishing (Phishing is a scam email, text or call designed to trick you into visiting a fake website, giving away personal or bank details, or installing malware.)
  • Section 75 (Section 75 of the Consumer Credit Act 1974 makes your credit card provider jointly liable with the seller for a single item costing over £100 and up to £30,000.)

Get your own plan with real dates

If you paid another way

The same in the US · All scam recovery guides · Get your own plan with real dates

Common questions

How long do I have to ask for a debit card chargeback?

Usually around 120 days, set by the card scheme's rules rather than by law. For a payment on 1 June 2026, 120 days runs to 29 September 2026. The clock can start later if goods were due later, so ask the bank for its exact limit before it passes.

Does my bank have to do a chargeback?

No. A chargeback is a card scheme process, not a legal right, so the bank does not have to raise one. The Financial Ombudsman Service says it is good practice to do so where there are valid reasons, such as goods that never arrived or were not as described.

Is a debit card scam covered by the £85,000 APP refund rules?

No. The APP reimbursement rules cover Faster Payments and CHAPS bank transfers only. The Payment Systems Regulator says card, cash and cheque payments have their own protections, which for a debit card means chargeback, or the unauthorised payment rules if someone else used your card.

What if the scammer used my debit card details without my permission?

Tell your bank without delay. A payment you did not authorise is refundable under the Payment Services Regulations 2017, with your loss capped at £35 unless you acted fraudulently or with gross negligence. You must report it no later than 13 months after it left your account.

Where do I complain if my bank refuses a debit card chargeback?

Complain to the bank first. It has 15 days to answer complaints about fraud and scams. If you are unhappy with its final response, you have 6 months to take the complaint to the Financial Ombudsman Service, which is free and does not need a claims company.

Sources and assumptions

  • General steps from official guidance; your bank, card provider or the police may ask for more.
  • Deadlines are counted from the payment date, so they are never later than the real limits.

Guidance to help you act quickly, not legal advice. We cannot recover money for you, and nobody can promise to.