Quick Answer

If you have been scammed online, act fast but do not panic. The first hour is the most critical window for recovering your money. In order: (1) Call your bank's 24/7 fraud line immediately and block the transaction, (2) Freeze your card and online banking access, (3) Preserve all evidence (receipts, messages, screenshots, URLs) without deleting anything, (4) File a criminal complaint at the nearest Public Prosecutor's Office, (5) Report the incident to USOM and, if relevant, through CIMER. Money cannot always be recovered, but a fast block and a proper chain of custody dramatically improve your chances.

This article explains, in a calm and realistic tone, what to do from the moment you realize you have been defrauded, which channels to use, and how to collect evidence that holds up in court. First, know this: being scammed is nothing to be ashamed of. Scammers are professional teams who target even the most careful people. What matters now is taking the right steps.

The First Hour: Minutes Mean Money

Scammers usually disperse or cash out the transferred money within minutes. The faster you respond, the higher the chance the funds can be blocked and returned. Follow the steps below in order, without wasting time.

1. Call your bank immediately and block the transaction

Call the 24/7 customer service / fraud line printed on your card or shown in your banking app. Tell the operator clearly: "I have been scammed, there is an unauthorized transaction, I need an urgent block." Request:

  • A recall of the sent transfer
  • An immediate block on your card
  • A temporary hold on your account
  • A fraud report / case record for the suspicious transaction

Note the representative's name, the time of the call, and any reference or case number. Your bank may try to alert the receiving bank to freeze the counterparty account. The faster this chain works, the better.

2. Stop all access

If the scammer obtained your details, one transaction is rarely the end. Immediately:

  • Change your internet and mobile banking password (ideally from a different, clean device)
  • Close active sessions in your banking app
  • Check for any email or SMS forwarding settings on your accounts
  • Change passwords on other accounts where you reused the same password

3. Do not delete anything, freeze the evidence

Do not, in anger, close or delete the scammer's message, email, or the fake website. These are your evidence. We will return to this in a dedicated section. For now, remember the rule: save first, delete later.

Types of Fraud and How to Respond to Each

Fraud is not one single thing. Knowing which method targeted you helps you file the right complaint and collect the right evidence. The most common types and the first response are below.

Fraud Type How It Works Your First Move
Fake site / phishing A fake page imitates your bank or a known brand to harvest your details Call the bank to block the card/account, save the fake URL, report to USOM
Fake investment / crypto Promises "guaranteed high returns," shows a small fake profit to lure you Stop any new transfers, save all chats and IBANs, file a criminal complaint
Fake cargo / delivery SMS A "package on hold" link requests card details or a small payment If you clicked, block the card, save the SMS and link, report it
"Your account is compromised" call Poses as bank/security, says "move your money to a safe account" Hang up, never transfer, call your real bank yourself
Fake official / bank staff Imitates police, prosecutor, or regulator to frighten you into paying No institution asks for money/passwords by phone; hang up and call 112/155 yourself
Romance / friendship scam Builds trust, then asks for money with urgent excuses Stop sending money, save the profile and chats, file a complaint

The common rule: No real bank or government institution will ever call you to ask for your password, OTP/SMS code, or tell you to move your money to a "safe account." The moment you hear such a request, it is a scam.

Official Complaint Channels: Where to Report

After starting the block, begin the official process. There are several channels and they complement each other. A criminal complaint is the formal start of the investigation.

Public Prosecutor's Office (criminal complaint)

This is the most fundamental and important step. You can file a criminal complaint by petition at the nearest Public Prosecutor's Office. Write the events in chronological order with dates and times, and attach all your evidence (receipts, IBANs, messages, screenshots, URLs). This opens the way for law enforcement and prosecutors to trace the transaction accounts and digital footprints. Do not delay; the earlier the record, the better.

Your bank's fraud unit

Follow up your initial phone report in writing. Go to a branch or use the bank's official channel to file an unauthorized transaction dispute / fraud report. The bank starts its own internal review and informs you of the outcome. This written application matters later for both the investigation and any possible compensation.

e-Government, CIMER, and other channels

Through e-Government you can reach related institutions' services and track your complaint status. You can also file complaints and reports through CIMER (Presidential Communication Center). For systemic banking issues, the BDDK and TBB customer arbitration processes may apply.

USOM (cyber reporting)

Report fake sites, phishing links, and malicious URLs to USOM (National Cyber Incident Response Center). This both strengthens your case and may stop the same fake site from defrauding others.

Channel For What How
Public Prosecutor's Office Official criminal complaint, investigation Petition + evidence, in person
Bank fraud unit Transaction dispute, block, internal review 24/7 line + written application
e-Government / CIMER Tracking and additional complaints turkiye.gov.tr and CIMER
USOM Fake site / malicious link reporting usom.gov.tr report
BDDK / TBB Banking complaint, arbitration Relevant institution channels

Collecting Evidence: A Screenshot Alone Is Not Enough

Most victims take a few screenshots and delete the rest. But a phone screenshot can easily be altered by a malicious party, so on its own it is not strong evidence in court. What truly matters is preserving the integrity and source of the data. Here is what you need for solid evidence:

  • Transaction receipt and IBAN details: The amount sent, date-time, recipient IBAN and name, reference number.
  • Message and email headers: Not just the content, but the technical header information of the email that reveals the sender's true source. Keep these headers without deleting them.
  • URLs and links: The full address of the fake site you clicked. Record the address bar before closing the page.
  • Timestamps: The exact time of each event matters. The time of the call, message, and transfer builds the timeline.
  • Call logs: The number that called you and the call times.

The critical point is this: For this data to be valid in court, the chain of custody must remain unbroken and provably unaltered. This is exactly where the digital forensics process and chain of custody comes in. A digital forensics expert records the data on your device without breaking its integrity, using hash values, and produces a technical report that is hard to refute in court. To understand the true source of a fake email, our guide on how to recognize a phishing email will also help.

If the fraud began with the takeover of a social media account, also apply the steps in our Instagram account stolen, how to recover guide in parallel.

Chances of Recovering Your Money: Being Realistic

Let us be honest: no one can promise that money sent online will be recovered. Recovery depends on how quickly the money was blocked, whether the receiving account still holds it, the course of the investigation, and many variables. Still, do not despair, because:

  • Speed is everything. A block requested in the first minutes may catch the money in the counterparty account.
  • A proper chain of custody supports the investigation and any potential return.
  • The bank's internal review may, in some cases, assess liability for unauthorized transactions.

In short: no one can say "your money will definitely come back," but acting fast and correctly maximizes the chance of recovery. What you must do is take the right steps completely and quickly.

Protection Tips Going Forward

To avoid falling into the same trap again:

  • Use two-factor authentication for banking and never share your OTP/SMS code with anyone.
  • Carefully inspect the sender address and URL before clicking any link; if in doubt, do not click.
  • Treat pressure language like "urgent," "your account will be closed," "transfer now" as an alarm signal.
  • Keep your devices and apps updated, and use strong, unique passwords.
  • Never send money to anyone you do not know, no matter how convincing they are.

Court-Valid Evidence with DSET

The most common problem in fraud cases is that the victim's evidence is technically insufficient and gets refuted in court. DSET is a digital forensics and expert witness organization operating since 2003 in Ankara Hacettepe Teknokent Beytepe Cankaya. We examine the digital evidence on your devices without breaking its integrity and produce court-valid technical reports while preserving the chain of custody.

The first assessment is free. Reach us without delay: +90 536 662 38 09.

Frequently Asked Questions (FAQ)

I just realized I was scammed, who should I call first? First call your bank's 24/7 fraud line and block the transaction. Because minutes matter, this is the fastest step to take. Immediately after, collect your evidence and file a criminal complaint.

Is taking a screenshot enough as evidence? Usually not on its own, because screenshots can easily be altered. To be strong in court, the data must be recorded with its integrity preserved, with an unbroken chain of custody, using digital forensics methods.

Can I get my money back? No guarantee can be given. Recovery depends on the speed of the block, the state of the receiving account, and the course of the investigation. However, fast action in the first minutes and proper evidence significantly increase the chance of recovery.

Where should I file a criminal complaint? You can file a complaint at the nearest Public Prosecutor's Office with a petition and your evidence. Also submit a written application to your bank and report fake sites to USOM.

The bank or police called and asked me for money, what should I do? No real bank or government institution will call you to ask for a password or OTP code, or tell you to move your money to a "safe account." In such a call, hang up and call the institution yourself using its official number.

Sources