Transferring money safely without getting scammed comes down to three habits: pick a transfer method whose reversibility matches the risk of the payment, confirm the recipient’s details through a channel separate from the one that asked for the money, and watch the account daily so you can dispute anything wrong inside the deadlines federal law gives you. The difference between a recoverable mistake and a permanent loss is usually decided before you hit send.
Match the Transfer Method to the Risk
The three common ways to move money electronically are not interchangeable, and choosing the wrong one is where most people lose money they can’t get back.
ACH transfers move in batches through a network operated by the Federal Reserve and a private operator, typically settling in one to two business days at little or no cost. They are covered by Regulation E, which gives you meaningful dispute rights if an error or unauthorized transfer occurs. Same-day ACH is available for individual payments up to $1,000,000, though your bank will impose a lower daily cap.
Wire transfers are faster. Domestic wires usually clear the same business day and international wires within one to two. The trade-off is cost and reversibility. Outgoing domestic wire fees at major banks generally run $15 to $40, and international wires often cost $35 to $60. Once the receiving bank accepts a wire, getting the money back is extremely difficult. There is sometimes a narrow window of minutes during initiation when a cancellation is possible, but after that recovery depends on the receiving bank’s willingness to cooperate. Wires demand extra caution precisely because the recovery window is so short.
Peer-to-peer apps such as Zelle, Venmo, and Cash App are convenient but poorly suited to transactions with strangers or larger purchases. The Consumer Financial Protection Bureau has clarified that P2P transactions meeting the definition of an electronic fund transfer are covered by Regulation E, so your bank must investigate and resolve unauthorized transfers even when they happen through an app.1Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs The catch is the line between unauthorized and authorized. If someone steals your phone and sends themselves money from your account, that is unauthorized and you are protected. If a scammer convinces you to send a payment for a product that never arrives, many institutions treat that as an authorized transfer, which sharply limits your recourse. The FTC’s guidance is to treat payment apps like cash and never use them to pay someone you don’t personally know and trust.2Federal Trade Commission. Do You Use Payment Apps Like Venmo, CashApp, or Zelle? Read This
Verify the Recipient Before Money Moves
Getting the recipient’s information right is the single most effective step for preventing a misdirected transfer. Domestic bank transfers need three pieces: the recipient’s full legal name as it appears on the account, the nine-digit routing number that identifies the financial institution, and the individual account number. The routing number sits on the left side of a paper check, followed by the account number; both are also usually available in the account details section of online banking. International transfers require a SWIFT code, an international identifier for the receiving foreign institution, which the recipient’s bank supplies with its wire instructions. One wrong digit can send funds to a stranger’s account, and recovery is not guaranteed.
Call the Recipient on a Known Number
Before sending a large transfer, confirm the routing and account numbers with the recipient through a separate communication channel. If wire instructions arrived by email, call the recipient at a phone number you already have on file and read the numbers back. This one step defeats business email compromise, in which criminals intercept a legitimate email thread about a real estate closing, vendor payment, or business deal and send altered wire instructions from what looks like a trusted contact. The FBI identifies this as one of the most financially damaging online crimes, and by the time anyone notices the money has usually been moved through multiple accounts.
Turn On Multi-Factor Authentication
Enable multi-factor authentication on every financial account you use for transfers. This adds a second verification step beyond your password, typically a one-time code from an authenticator app or a text message. Federal digital identity guidance now recommends phishing-resistant options such as passkeys over text-message codes, since text messages can be intercepted. Most banks offer authenticator app options in their security settings.
Complete Micro-Deposit Verification
When you link a new external account, your bank will often verify the connection by sending two small deposits, each under $1.00, to the external account. You confirm the exact amounts to prove you control the receiving account. The process usually takes one to three business days. Don’t skip it. It exists to prevent transfers to accounts you don’t actually control.
Send From a Private Network
Access your bank through a private, secured connection. Public Wi-Fi at coffee shops and airports creates openings for data interception. Use your home network or mobile data instead, and after any transfer save or screenshot the confirmation receipt and reference number immediately.
Red Flags of a Transfer Scam
Scammers reuse the same playbook, and knowing it makes you a harder target. The FTC identifies four reliable warning signs that a transfer request is fraudulent.3Federal Trade Commission. How To Avoid a Scam
- They impersonate a trusted organization. Scammers pose as the IRS, your bank, a utility, or a tech support team, using spoofed phone numbers and official-sounding language.
- They manufacture urgency. Threats of arrest, account suspension, or legal action are designed to make you act before you think. Legitimate institutions give you time to verify.
- They fabricate a problem or a prize. You owe back taxes you’ve never heard of, your account has been compromised, or you’ve won a sweepstakes you never entered. The problem or prize is the bait.
- They demand a specific payment method. Requests for wire transfers, cryptocurrency, gift cards, or payment app transfers are the clearest red flag, because those methods are hardest to reverse.
If any of these signals appear, stop and verify through an independent channel before moving money. A genuine institution will still be there in an hour.
What to Do When a Transfer Goes Wrong
Speed determines what you can recover. The type of transfer determines your legal protections.
Wire Transfers: A Very Short Window
If you realize a wire was sent to the wrong account or was fraudulent, contact your bank immediately. Cancellation is sometimes possible in the first few minutes after initiation. Once the receiving bank accepts the funds, your bank can send a recall request, but the receiving bank has no legal obligation to return the money. International recalls are less predictable, with response times varying widely, and there is typically a fee for the attempt whether or not it succeeds.
ACH and Other Electronic Transfers: Regulation E
ACH transfers and other electronic fund transfers covered by Regulation E carry stronger protections. You must notify your bank of any error within 60 days of the date the bank sent the statement showing the problem.4eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors Once you report, the bank has 10 business days to investigate and reach a determination. It can extend the investigation to 45 days, but only if it provisionally credits your account within 10 business days so you can access the disputed funds during the review.
Your liability for unauthorized electronic transfers depends on how quickly you report them. Notify your bank within two business days of learning about a lost or stolen access device and your maximum liability is $50. Wait longer than two business days but report within 60 days of the statement, and the cap rises to $500. Miss the 60-day window and you could be liable for the full amount of any unauthorized transfers that occur after the deadline.5eCFR. 12 CFR 205.6 – Liability of Consumer for Unauthorized Transfers
Report Fraud to Law Enforcement
File a complaint with the FBI’s Internet Crime Complaint Center in addition to contacting your bank. The IC3 collects complaints and routes them to appropriate law enforcement agencies. You will need your account information, the transaction date and amount, details about who received the money, and a description of what happened. Save or print your confirmation at the time of filing, because the IC3 does not email copies afterward.6Internet Crime Complaint Center. IC3 FAQ
Track the Transfer and Keep the Records
Save every confirmation receipt, transaction ID, and reference number the moment a transfer is submitted. ACH transfers typically settle within one to two business days, and domestic wires usually clear the same day.7Federal Reserve Board. Automated Clearinghouse Services Check the account daily until the transfer shows as completed and the correct amount has been deducted.
Daily monitoring is what keeps your Regulation E protections alive. The 60-day dispute clock starts when the bank sends the statement reflecting the transfer, not when you happen to notice a problem.4eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors If an unauthorized charge slips past you for two monthly cycles, you can lose the right to dispute it. Keep digital and paper copies of transfer records for at least a year, and longer for anything tied to a tax filing or business expense.
Reporting Rules That Catch Honest People
Moving larger sums can trigger federal reporting rules that have nothing to do with fraud but can create real trouble if you stumble into them.
Any cash transaction over $10,000 at a financial institution generates an automatic Currency Transaction Report filed with the Financial Crimes Enforcement Network, including deposits, withdrawals, and cash exchanges. Multiple cash transactions in a single day that together exceed $10,000 also trigger a report.8FinCEN. A CTR Reference Guide The report itself is routine. What will get you in serious trouble is “structuring,” deliberately breaking a large cash transaction into smaller ones to stay under the threshold. Structuring is a federal crime that can carry up to five years in prison and fines up to $250,000.9Office of the Law Revision Counsel. 31 USC 5324 – Structuring Transactions to Evade Reporting Requirement Prohibited
If you hold financial accounts outside the United States and the combined value exceeds $10,000 at any point in the year, you must file a Report of Foreign Bank and Financial Accounts with FinCEN. The report is due April 15, with an automatic extension to October 15.10Internal Revenue Service. Report of Foreign Bank and Financial Accounts (FBAR) It applies even if the accounts earn no income.
Sending money as a gift usually creates no tax bill but can create a filing obligation. For 2026, the annual gift tax exclusion is $19,000 per recipient. Transfers above that amount to a single recipient require filing a gift tax return, though no tax is owed unless you have exceeded the lifetime exemption.11Internal Revenue Service. IRS Releases Tax Inflation Adjustments for Tax Year 2026