Payment fraud concentrates in a small number of methods, and the protections available depend heavily on how the payment was made.
Unauthorised transactions
Payments made without the account holder's involvement.
Which carry strong statutory protections on cards.
Liability limits apply where the transaction is reported promptly.
Authorised push payment fraud
Victims tricked into making the payment themselves.
Which historically carried far weaker protection.
Reimbursement requirements have been introduced in some jurisdictions.
Impersonation
Fraudsters posing as banks, government agencies or known contacts.
Which is the dominant technique.
Number spoofing makes caller identification unreliable.
Invoice redirection
Altering payment details on genuine invoices.
Which affects businesses and individuals making large payments.
Verifying details through a separately obtained number is the defence.
Romance and investment fraud
Long-term manipulation producing voluntary transfers.
Which produces the largest individual losses.
Victims frequently continue to send money after being warned.
Card testing and skimming
Stolen card details tested with small transactions, and physical device compromise.
Which produce unauthorised charges.
Monitoring statements catches these quickly.
Protections by method
Cards carry the strongest protections; bank transfers generally the weakest.
Which is why payment method matters for anything uncertain.
Gift cards and digital assets are irreversible and are the preferred fraud channels.
What to do
Verify independently, never act under time pressure, and report immediately to the bank and to fraud authorities.
Anyone approached about recovering a previous loss should treat that as a second fraud.
Business email compromise
Fraudsters intercepting or imitating business correspondence to redirect payments.
Which produces very large individual losses.
Verification of payment detail changes through a known channel is the standard control.
Reporting and recovery
Speed determines whether funds can be recalled.
Which means reporting within hours rather than days.
Banks have processes for attempting recall that work only before funds are moved on.
Protecting accounts
Strong unique passwords, authentication that resists phishing, and monitoring alerts.
Which addresses unauthorised access.
None of it prevents authorised push payment fraud, which requires a different defence.
Talking about it
Shame prevents reporting, which helps only the fraudsters.
Victim support organisations exist and the schemes are designed by professionals.
The single rule
Verify independently before sending money, using contact details you obtained yourself.
Older adults as targets
Disproportionately targeted and disproportionately affected by losses.
Which is documented in fraud reporting data.
Family conversations about these patterns are among the more effective preventions.
Cryptocurrency demands
Requests for payment in digital assets.
Which are irreversible and are heavily used in fraud.
No legitimate agency or business requests payment this way.
Bank protections
Warnings and payment delays for unusual transfers.
Which banks have introduced and which customers frequently override.
Taking the warning seriously is the point of it existing.
Reporting
National fraud reporting bodies collect reports and support investigation.
Which is free and contributes even where recovery does not follow.
The one rule
Never send money based on contact you did not initiate, without verifying independently first.
Why it works on capable people
The techniques exploit urgency, authority and fear rather than ignorance.
Fraudsters are professionals running refined scripts, and the victims are disproportionately people who were caught at a bad moment rather than people who were careless.
The one habit
Never act on unsolicited contact without independently verifying through a number or address you obtained yourself.
Protecting others
Talking about specific patterns with family, particularly older relatives.
Which is more effective than general warnings.
Agreeing a family verification method in advance defeats impersonation attempts.
After a loss
Report immediately to the bank, to fraud authorities and to the platform involved.
Which maximises the small chance of recall.
The second fraud
Anyone contacting you about recovering a previous loss is running another one.
Why the payment method matters so much
Cards carry statutory dispute rights, bank transfers generally do not, and gift cards and digital assets are irreversible by design.
That is why fraudsters push toward the last two, and why using a card for anything uncertain is the single most effective protective habit.
The verification rule
Contact the organisation yourself using details you obtained independently, never using details supplied by the person contacting you.
Where to report
National fraud reporting bodies, your bank's fraud line and the relevant regulator.
Which should all be contacted as quickly as possible.
Reporting contributes to enforcement even where individual recovery does not follow.
A general note
Protections and reimbursement rules differ substantially by jurisdiction and by payment method.
A final practical note
Fraudsters create urgency because deliberation defeats them.
Any request that cannot survive an hour of checking is not a request worth acting on, and legitimate organisations understand that entirely.
Where to go for help
Free and impartial guidance services, regulator consumer education pages and non-profit advice agencies all cover this ground without selling anything.
They are consistently a better first stop than commercial content on the same subject, and they are free.