Fraud Loss: Bank Disputes, Reports, and Deductions

If you’ve just discovered you’ve been scammed, how to report a fraud loss comes down to a tight sequence: call your bank today, file a police report, submit complaints to the federal agencies that match the type of fraud, and then figure out whether the loss qualifies for a tax deduction. The order matters, and so does the speed. Federal law ties your personal liability for unauthorized transactions directly to how fast you notify your financial institution, and for most personal fraud the tax code offers no deduction at all, which makes the recovery steps the only real relief available.

Call Your Bank First — The Clock Is Already Running

Before you file anything with the police or the FTC, call the financial institution that holds the account the money moved through. The bank can freeze your account, flag the recipient, and start its own investigation. For electronic transfers and debit cards, that call also starts the clock on your federal protections. Follow the call with written notice, keep a copy, and write down the name of every person you speak with.

How much of the loss you can be forced to absorb depends on the payment method and on how quickly you report.

Credit Card Charges

Federal law caps your liability for unauthorized credit card charges at $50 regardless of when you report.¹ Most major issuers go further with zero-liability policies. Credit cards give you the strongest protection of any payment method, but you still need to report promptly to trigger the issuer’s chargeback investigation and stop further charges.

Debit Cards and Bank Account Transfers

Debit cards and electronic transfers from your bank account are governed by Regulation E, and the exposure grows sharply the longer you wait:

Within 2 business days of learning of the loss or theft: liability capped at $50.
After 2 business days but within 60 days of the statement showing the unauthorized transfer: liability can rise to $500.
After 60 days from that statement: no cap on unauthorized transfers that occur after the 60-day window closes.²

That last tier is where victims get wiped out. A fraudster slowly draining a checking account over several weeks can leave someone with no federal recourse if the 60-day window closes without a report.

Wire Transfers

Wires are the worst case. They fall under UCC Article 4A rather than consumer protection statutes, which means no federal chargeback right, no dispute window, and no liability cap. Once the wire clears, your only hope is that the receiving bank can freeze the funds before they’re withdrawn or moved on. If a wire was involved, call within minutes, not hours.

Build an Evidence File Before You File Anything

Every report you file after the bank call will go better if you have the documents organized first. The same file supports your police report, any insurance claim, and a tax deduction if you end up eligible for one.

Collect bank and brokerage statements showing the outgoing transfers, wire confirmations, canceled checks, credit card statements, and any receipts or invoices the fraudster sent you. Preserve emails, text messages, and voicemails with their original metadata where possible; screenshots are a backup, not a substitute. Write a timeline from your first contact with the fraudster through the date you discovered the fraud. That discovery date carries legal weight — it fixes the tax year the loss belongs in.³

Build a simple ledger listing each fraudulent transaction by date, amount, payee, and a short description. Your loss is the money or fair market value of property you actually lost, not the returns you were promised. Subtract anything you’ve already recovered or expect to recover from the bank, insurance, or any other source.

Where to File the Reports

No single agency handles everything, so plan on filing in several places. Each report serves one of two purposes: creating an official record other institutions require, or feeding intelligence that helps law enforcement spot patterns.

Local Police

File a police report even if the perpetrator is in another state or country. The report number itself is what matters. Insurance companies typically require one before processing a fraud claim, and the IRS may ask for one in an audit. Bring your timeline and loss ledger. A certified copy of the report usually costs a small administrative fee.

Federal Trade Commission

The FTC runs two separate portals. If someone used your personal information to open accounts, file tax returns, or make purchases, report at IdentityTheft.gov. The site generates a recovery plan and produces an official Identity Theft Report that creditors and credit bureaus recognize.⁴ For other kinds of fraud — online shopping scams, impostor schemes, phishing that didn’t compromise your identity — use ReportFraud.ftc.gov.⁵

FBI Internet Crime Complaint Center

Any fraud involving the internet, email, or electronic communications should go to the FBI’s IC3 at ic3.gov.⁶ Individual complaints rarely trigger a direct investigation, but the data feeds task force operations that target high-volume fraud rings.

Social Security Administration

If your Social Security number was compromised, contact the SSA’s Office of the Inspector General at 1-800-269-0271 or file at oig.ssa.gov. You can also request two protective blocks on your SSA account: an eServices block that prevents online access to your information, and a Direct Deposit Fraud Prevention block that stops anyone from redirecting your payments. Both require an in-person visit to a local SSA office to remove later.⁷

IRS

If someone used your Social Security number to file a fraudulent return, claim your dependents, or get a job, file IRS Form 14039 (Identity Theft Affidavit). The form places a protective marker on your tax account and alerts the IRS to scrutinize returns filed under your number.⁸ If the fraud didn’t affect your taxes, the IRS directs you to IdentityTheft.gov instead. You can also request an Identity Protection PIN to block future fraudulent filings.

Can You Deduct the Loss?

Whether you can deduct a fraud loss on your tax return turns almost entirely on one question: was the stolen money connected to a business or a profit-seeking investment, or was it personal?

Business Fraud

Fraud losses tied to a trade or business are fully deductible against ordinary income under IRC Section 165(c)(1).³ An embezzling employee, a vendor who takes payment and disappears, or a customer who makes a large purchase with a stolen card all produce deductible business losses. Report on Schedule C or the appropriate corporate or partnership return, in the tax year you discover the loss and determine there’s no reasonable prospect of recovery.

Personal Fraud

This is where most individual victims hit a wall. Congress permanently eliminated the personal theft loss deduction except for losses tied to federally or state-declared disasters. The Tax Cuts and Jobs Act suspended the deduction for 2018 through 2025, and P.L. 119-21 made the restriction permanent while extending it to include state-declared disasters recognized by the Secretary of the Treasury starting in 2026.⁹

If someone drained your personal checking account or convinced you to send gift cards, you have no federal tax deduction. The loss is real, and it isn’t deductible. That’s why the reporting and recovery steps carry so much weight — the tax code won’t soften the hit.

Investment Fraud

Fraud losses from a transaction you entered into for profit sit in a middle category. They aren’t personal-use losses, so the disaster-only limit doesn’t apply. A theft loss from a fraudulent investment falls under IRC Section 165(c)(2) and remains deductible on Form 4684, Section B.¹⁰ An identical dollar amount lost from a personal checking account cannot be deducted; the same dollars lost in a fraudulent investment can.

Ponzi Scheme Safe Harbor

Victims of Ponzi-type investment fraud get a streamlined path through IRS Revenue Procedure 2009-20. The safe harbor lets you claim a deduction without waiting for the criminal case to wrap up or for every potential recovery to resolve.¹¹ The deduction is 95% of your qualified investment if you aren’t pursuing third-party recovery (such as trustee clawbacks or class actions), or 75% if you are. From either figure, subtract any actual recovery already received and any potential insurance or SIPC recovery.

“Qualified investment” means the total cash or property you put in, plus any income you reported from the scheme on past returns, minus any withdrawals. Report on Form 4684, Section B, using the special Ponzi-scheme lines, and attach a signed statement confirming the loss amount and discovery date.¹²

Timing

For any deductible fraud loss, the IRS requires you to claim it in the tax year you discover the fraud, not the year it occurred.³ If a civil suit or insurance claim is still pending and you have a reasonable prospect of recovery, you deduct only the unrecovered portion. If you later recover more than expected, the excess becomes income in the year you receive it. Keep every document, including police reports and insurance claim denials, indefinitely. The IRS audits theft loss deductions, and the burden of proof is yours.

What to Do After the Reports Are In

Reporting opens the door to whatever recovery is available. For credit card fraud, the chargeback process is your strongest tool: federal law limits exposure to $50, and the issuer investigates and reverses valid disputes.¹ Debit card disputes follow the tiered Regulation E liability, so speed controls the outcome. For wires, recovery depends almost entirely on whether the receiving bank can freeze the funds before they move.

Check your insurance policies. Some homeowner’s and renter’s policies cover certain fraud losses or identity theft expenses, subject to a deductible. Business owners should look at commercial crime policies and cyber liability coverage, which are built for employee dishonesty and external fraud. Most insurers want the police report number before processing anything.

Lock down your credit. A freeze with each of the three major bureaus blocks new creditors from accessing your file, which stops identity thieves from opening new accounts in your name. A fraud alert is a lighter option that requires creditors to verify your identity before extending credit. The freeze works better but has to be lifted temporarily when you apply for credit legitimately. If your Social Security number was exposed, the SSA account blocks noted above add protection that credit freezes alone can’t provide.⁷

1
Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card
2
Consumer Financial Protection Bureau. Liability of Consumer for Unauthorized Transfers
3
Office of the Law Revision Counsel. 26 USC 165 – Losses
4
Federal Trade Commission. Report Identity Theft
5
Federal Trade Commission. ReportFraud.ftc.gov
6
Internet Crime Complaint Center. Internet Crime Complaint Center
7
Social Security Administration. Fraud Prevention and Reporting
8
Internal Revenue Service. Form 14039 – Identity Theft Affidavit
9
Congress.gov. The Nonbusiness Casualty Loss Deduction
10
Internal Revenue Service. Instructions for Form 4684
11
Internal Revenue Service. Revenue Procedure 2009-20 – Treatment of Losses from Ponzi-Style Investment Arrangements
12
Internal Revenue Service. Form 4684 – Casualties and Thefts