What push payment fraud is

Push payment fraud is when a scammer tricks you into sending money directly from your own bank account to an account they control. Unlike fraud where a criminal steals your card number or hacks your account, push fraud relies on you—the victim—to authorize and execute the transfer yourself. The money leaves your account voluntarily, which is why banks treat these cases differently and recovery is harder.

The scammer does not need your password or card details. They impersonate someone you trust—your bank, your employer, a government agency, a vendor you do business with, or someone in your personal network—and convince you that sending money is necessary and urgent. You log into your own account, approve the payment, and the funds move to the criminal's account within minutes or hours.

Push fraud is also called authorized push payment (APP) fraud or social engineering fraud. It has grown faster than other payment crimes because it works: the victim's own bank sees the transaction as legitimate, and by the time you realize you have been deceived, the money is often already withdrawn or moved again.

Key Takeaways

  • Push payment fraud happens when you authorize a transfer yourself after being tricked by a scammer posing as someone trustworthy.
  • Common scenarios include fake bank calls claiming fraud on your account, fake employer payment requests, and impersonation of government agencies or vendors.
  • Once money leaves your account, recovery depends on how quickly you report it and whether the receiving bank can freeze the funds before they are withdrawn.
  • Banks have less legal obligation to refund push fraud than they do for unauthorized transactions, so prevention is your strongest defense.
  • Verification through a separate channel—calling the official number on your statement or card, not a number the caller provided—stops most push fraud attempts.

How the scam unfolds: common scenarios

The most frequent push fraud starts with a phone call or text claiming to be from your bank's fraud department. The message says suspicious activity has been detected on your account and asks you to verify recent transactions or confirm your identity. The caller sounds professional, uses real bank terminology, and may even reference actual transactions from your account (information they found through a data breach or by calling the bank themselves posing as you).

Once they have your trust, they tell you that you need to move money to a "secure account" or "safe account" to protect it from the fraudster. They walk you through logging into your real bank account while staying on the phone, then guide you to send the money to an account number they provide. You see your own bank's interface, you authorize the payment, and the transaction completes. By the time you hang up, the money is gone.

Other common versions include fake payment requests from your employer's payroll or accounting department asking you to update direct deposit information or pay a "required fee"; impersonation of government agencies (IRS, Social Security, local tax authority) claiming you owe money and must pay immediately; and fake invoices from vendors you actually do business with, asking you to re-send a payment because the original one was "lost" or "rejected."

Why banks treat push fraud differently

When a criminal uses your stolen card number or hacks your online banking password and transfers money without your knowledge, that is unauthorized fraud. Federal law (Regulation E for bank accounts, and the Fair Credit Billing Act for credit cards) requires your bank to refund you, usually within 10 business days, as long as you report it promptly.

Push fraud is legally different because you authorized the transaction. Your bank's system shows that you logged in, you approved the payment, and you sent the money. From the bank's perspective, the transaction is valid. You gave permission—even though you were deceived about where the money was going or why it was needed.

Because of this, banks have less legal obligation to refund push fraud. Some do, especially if you report it within hours and the receiving bank can freeze the account before withdrawal. But many banks will tell you the transaction was authorized and deny your claim. This is why push fraud is so dangerous: the legal protections that normally shield you from unauthorized charges do not apply.

What to do immediately after you realize you have been defrauded

The first 24 hours are critical. Call your bank's fraud line right away—use the number on the back of your card or statement, not any number the scammer gave you. Tell them you authorized a transfer under false pretenses and ask them to contact the receiving bank immediately to freeze the account and reverse the payment if possible.

Provide your bank with the receiving account number, the amount, the date and time of the transfer, and a clear explanation of how you were deceived. The faster your bank acts, the better the chance the receiving bank can stop the withdrawal before the criminal moves the money again.

Next, file a report with the Federal Trade Commission at reportfraud.ftc.gov. This creates an official record and may help law enforcement if the scam is part of a larger operation. Also file a report with your local police department, even though they rarely investigate individual cases—you need a police report number for some insurance and fraud claims.

If the scammer impersonated your employer, bank, or government agency, report the impersonation to that organization directly. If it was a government agency, also report it to the agency's Office of Inspector General. These reports help the real organization track and shut down the fraud operation.

Recovery options and what to expect

Recovery depends on how quickly you reported the fraud and how the receiving bank responds. If the receiving account is still open and the money has not been withdrawn, the receiving bank may freeze it and return it to you within a few days. This is the best-case scenario and happens in roughly 30 to 40 percent of cases reported within the first few hours.

If the money has already been withdrawn or moved to another account, recovery becomes much harder. The receiving bank has no obligation to refund money that was sent to an account holder who received it legitimately (from their perspective). At that point, your only option is to pursue a civil claim against the receiving account holder, which is expensive and rarely successful.

Some banks will refund push fraud even when not legally required, especially if you have been a customer for years or if the amount is small. Ask your bank directly whether they have a push fraud refund policy. Some also offer push fraud insurance or reimbursement as part of premium checking accounts.

If you used a wire transfer or ACH transfer, the process is the same: report immediately and ask your bank to issue a recall. If you used a peer-to-peer payment app (Venmo, PayPal, Cash App), report the fraud to the app immediately and ask them to contact the recipient's bank. These apps have varying policies on refunds, so check your app's fraud policy.

How to recognize and stop push fraud before it happens

The strongest defense is verification through a separate channel. If someone calls claiming to be from your bank, hang up and call the number on your bank statement or card. If they claim to be from your employer, call your HR or payroll department directly. If they claim to be from the IRS, call the IRS at 1-800-829-1040. Do not use any phone number, email address, or link the caller or message provided.

Real banks, employers, and government agencies will never ask you to move money to a "safe account" or "secure account." This is a red flag every time. Real banks already have secure accounts—yours. If there is fraud, they freeze your card or account; they do not ask you to transfer money out.

Be suspicious of urgency and pressure. Scammers create artificial time pressure ("act now or your account will be closed," "you must pay today"). Real organizations give you time to verify and respond. If someone is pushing you to act immediately without giving you a chance to hang up and call back, it is a scam.

Never give out one-time codes (OTP codes, 2FA codes) to anyone who calls or texts you, even if they claim to be from your bank. Your bank will never ask for these codes. If someone asks for a code, hang up immediately and call your bank.

What happens to the money and why recovery is hard

Once the money lands in the scammer's account, it usually does not stay there long. Professional fraud rings move money through multiple accounts within hours—sometimes to other banks, sometimes to cryptocurrency exchanges, sometimes to money mules who withdraw it as cash and send it overseas. Each transfer makes the money harder to trace and recover.

Banks can only freeze accounts they control. If the receiving bank is in a different country or if the money has already been moved to a third account, your bank cannot reach it. Law enforcement can theoretically investigate and pursue the money, but they prioritize cases involving large amounts or organized crime rings, not individual victims.

This is why the receiving bank's speed matters so much. If your bank contacts them within the first hour and the account is still funded, they can freeze it and reverse the transfer. After that window closes, the money is usually gone for good.

Frequently Asked Questions

Can my bank force me to repay push fraud if I authorized the transfer?

No. You are the victim, not the one responsible for repayment. However, your bank is not legally required to refund push fraud the way they must refund unauthorized charges. Some banks do refund it as a courtesy or under their own fraud policy; others do not. Ask your bank directly about their push fraud policy.

What if the scammer used my name and account information to open a fake account at another bank?

That is identity theft, not push fraud, and it is treated differently. Report it to the FTC, your bank, and the bank where the fake account was opened. You may also want to place a fraud alert or credit freeze with the three credit bureaus (Equifax, Experian, TransUnion) to prevent further accounts from being opened in your name.

How long does it take to recover push fraud money?

If the receiving bank freezes the account within hours, recovery can happen within days. If the money has been withdrawn or moved, recovery can take weeks or months through the banking system's investigation process, and may not happen at all. Report immediately to maximize your chances.

Does push fraud show up on my credit report?

No. Push fraud is a bank account issue, not a credit issue. It will not affect your credit score or appear on your credit report. However, if the scammer used your identity to open accounts, those accounts may appear on your credit report and you will need to dispute them.

What if I sent money to someone I thought was a friend or family member?

That is still push fraud if you were deceived about who you were sending money to. Report it to your bank and the payment app immediately. If the scammer impersonated someone you know, also tell that person so they can change their passwords and alert their contacts.