I've Been Scammed: What Do I Do? Step-by-Step Legal Guide 2026

Discovering that you have been scammed is a distressing experience. The first impulse is to act fast, but doing it the wrong way can ruin your chances of recovering your money. As specialist criminal fraud lawyers, we assist victims of fraud. This step-by-step guide tells you exactly what to do.

Step 1: Preserve ALL the Evidence (The First 24 Hours Are Critical)

The first thing you should do BEFORE filing a report is secure the evidence. Scammers erase their tracks fast.

• Screenshots: Of the advert, website, profile, WhatsApp/Telegram conversation, emails, invoices and receipts.
• Bank receipts: Transfer, Bizum, PayPal. Download the bank statement PDF (not just the mobile screenshot).
• Website URL: Copy the full address. If it is a fake site, it can disappear within hours. Use archive.org to save a copy.
• The scammer's details: Name, phone number, email, IBAN, crypto wallet address, vehicle registration, any identifying data.

Step 2: Contact Your Bank IMMEDIATELY

Depending on the payment method, your bank may be able to block or reverse the transaction:

• Credit/debit card: Request a chargeback. You have up to 120 days. This is your best option if you paid by card on a fake site.
• Bank transfer: If it was less than 24-48 hours ago, the bank may be able to try to hold the funds at the destination. Call the emergency line.
• Bizum: Very hard to reverse (it is like digital cash). Only with a police report and a court order.
• Cryptocurrency: There is no way to reverse it. But the funds can be traced on the blockchain if the scammer moves them to a regulated exchange.

Step 3: File a Report (Police or Court?)

You have two options for filing a report:

Option A: Report at a police station (National Police or Civil Guard)

• Faster and simpler.
• Bring all the evidence organized (printout, USB).
• If it is online fraud, ask to be referred to the Technology Investigation Brigade (BIT) of the National Police or the Telematic Crimes Group (GDT) of the Civil Guard.
• You can also file online at denuncias.policia.es (for online fraud).

Option B: Private criminal complaint (querella, filed by a lawyer)

• More effective but requires the signature of a lawyer and court agent (procurador).
• It is filed directly with the investigating court.
• Advantage: it can request interim measures (preventive attachment of the scammer's account).
• Recommended for fraud above EUR 5,000 or where you know the scammer's identity.

The Most Common Types of Fraud (and How to React in Each Case)

🏠 Real-Estate Fraud

Fake rentals, double sale of a property, fraudulent cooperatives. If you have paid a deposit for a home that does not exist or does not belong to the seller, act quickly: real-estate fraud carries the "essential need" aggravating factor and the penalties are higher.

🌐 Online Fraud

Purchases on fake sites, fraud on Wallapop/Vinted, fake holiday rentals. Keep the URL, the messages and the payment receipt. Report it to the Technology Investigation Brigade.

₿ Cryptocurrency Fraud

Fake brokers, fraudulent investment platforms, rug pulls. If the scammer used a regulated exchange (Binance, Coinbase), a court order can identify the account holder. Our team carries out forensic tracing on the blockchain.

📱 Phishing and Cyber-Fraud

If your account has been emptied through phishing (fake bank SMS, fraudulent email), your bank may share responsibility. The Payment Services Act obliges banks to return the money if their security systems failed.

🔺 Ponzi / Pyramid Schemes

If you were recruited to "invest" with extraordinary returns and now cannot withdraw your money, it is a pyramid scheme. The sooner you report it, the more options there are to recover funds (before the accounts are emptied).

Legal Deadlines: Don't Let Time Slip By

• Limitation period for basic fraud (under EUR 50,000): 5 years from the day the offense was committed.
• Limitation period for aggravated fraud (over EUR 50,000): 10 years.
• Bank chargeback: 120 days from the transaction.
• Claim against the bank (phishing): 13 months from the unauthorized transaction.

Even though the deadlines are long, every day you spend without acting, the scammer has more time to move the money. Acting within the first 48 hours multiplies recovery chances by five.

5 Mistakes Fraud Victims Make

1. Warning the scammer that they are going to be reported (giving them time to erase evidence and move the money).
2. Failing to preserve evidence before the website, profile or chat disappears.
3. Agreeing to "negotiate" with the scammer (they typically ask for more money in exchange for returning part of it).
4. Hiring "fraud recovery agents" who promise to recover your money for an upfront fee (this is a second scam).
5. Filing a report without a lawyer in fraud cases of over EUR 5,000 (a querella is far more effective than a simple police report).

Can the Money Be Recovered?

Yes, but it depends on the payment method and how quickly you act:

• Credit card: high probability of success (chargeback).
• Bank transfer: 30-50% (if action is taken within 48 hours).
• Bizum/cash: 10-20% (requires identifying the offender and seeking attachment).
• Cryptocurrency: 20-40% (if regulated exchanges with KYC were used).

In the criminal proceedings, the court can order civil liability arising from the offense, requiring the convicted person to return the full amount stolen plus interest.

Frequently Asked Questions

Can I report a fraud if it happened in another city?

Yes. You can file a report at the police station in your own city. The competent court will be the one for the place where the offense was committed or where the financial loss occurred.

Is a fraud of less than EUR 400 still a criminal offense?

Yes, but it is a "minor offense" (the former "misdemeanor"). The penalty is a fine, not prison. However, if several frauds by the same offender are added together (even if each one is under EUR 400), they can be aggregated as a continuing offense.

Can I claim against my bank if I was phished?

Yes. Article 45 of the Payment Services Act obliges the bank to refund unauthorized transactions, unless they can prove gross negligence by the user. If the bank refuses, file a complaint and take legal action.