What Is a Fraudulent Transaction? Elements, Types, and Response

A fraudulent transaction is any financial exchange built on deliberate deception: a false statement, a stolen identity, or a forged authorization used to take money or property from someone who would not have agreed to the deal if they had known the truth. The FBI’s Internet Crime Complaint Center logged $16.6 billion in reported fraud losses in 2024, with business email compromise alone accounting for $2.77 billion.¹ Federal law gives you strong protection against unauthorized charges on your accounts, but those protections run on strict reporting clocks. Miss the window and you can go from owing nothing to absorbing the full loss.

The Five Legal Elements

A transaction is legally fraudulent only when five things are true at once. This is the common-law standard used across most U.S. jurisdictions, and every element has to be provable.

A false statement about something material. The misrepresentation has to concern a fact important enough to influence your decision. Telling a buyer a car has never been in an accident when the frame was rebuilt after a collision is material. A salesperson’s vague enthusiasm (“this is a great investment”) is not. Opinions and predictions about the future do not count.

Knowledge that it was false. The person making the statement had to know it was untrue, or make it with reckless disregard for whether it was true. Lawyers call this scienter. If a seller genuinely believed a product was safe based on what they knew, this element is missing even if the product later fails.

Intent to deceive you. Saying something false is not enough by itself. The person must have made the statement specifically to get you to act on it. A company inflating revenue numbers to attract investors acts with intent to deceive. A company that makes a real accounting error does not.

Reasonable reliance. You have to have believed the statement and acted on that belief, and your reliance has to have been reasonable. If red flags were sitting in front of you, or you ignored contradictory information you already had, a court may find your reliance was not justified.

Actual financial loss. You need measurable financial harm traceable to your reliance on the false statement. If you believed a lie but came out whole, there is no fraud claim. The loss does not have to be catastrophic, but it has to be real.

Common Types You Are Likely to See

Those elements show up in a handful of recurring patterns. The method of deception changes; the underlying structure does not.

Payment Fraud and Identity Theft

Payment fraud uses your existing accounts without permission. Criminals capture card data through skimmers at payment terminals or through data breaches, then run cloned cards or stolen numbers through purchases. Identity theft goes further and uses stolen personal information, like your Social Security number, to open entirely new accounts in your name. Because those new accounts are not on your statements, victims often find out only when a collections notice lands or a credit application is denied.

Investment and Securities Fraud

Investment fraud misrepresents the risk or profitability of a financial product. The classic example is a Ponzi scheme, where early investors receive “returns” that are actually funded by money from newer investors. When new money stops arriving, the scheme collapses.

Business Email Compromise

Business email compromise is among the most financially destructive patterns. The attacker researches a company’s structure and payment routines, then impersonates a senior executive or a trusted vendor through a spoofed or hacked email account. An employee receives what looks like a legitimate request to wire funds urgently. Because wire transfers are nearly irreversible, the money is typically gone within hours. The FBI reported $2.77 billion in BEC losses in 2024.¹

What You Owe When It Happens to You

Federal law caps your liability for unauthorized transactions on consumer accounts, but the ceiling depends on which type of account was hit and how fast you reported. Credit cards are forgiving. Debit cards are not.

Credit Card Charges

Under the Truth in Lending Act, your maximum liability for unauthorized credit card charges is $50, provided the issuer gave you adequate notice of that potential liability and a way to report the card lost or stolen. Once you notify the issuer, you owe nothing for anything charged afterward.² Most major card networks go further with zero-liability policies, so in practice you often will not pay even the $50.

Separately, if you spot an unauthorized charge on your credit card statement, you have 60 days from the date the statement was sent to dispute it as a billing error. Your written notice has to go to the address the issuer designated for billing disputes, not the payment address. The issuer then has two billing cycles, and no more than 90 days, to investigate and resolve the dispute.³

Debit Cards and Electronic Transfers

Debit cards and electronic fund transfers fall under the Electronic Fund Transfer Act, and the numbers escalate quickly the longer you wait.⁴

Report a lost or stolen card before any fraudulent transfers occur, and your liability is $0.
Report within 2 business days of learning about the loss or theft, and your liability is capped at $50 (or the total unauthorized amount, whichever is less).
Report after 2 business days but within 60 days of the statement showing the first unauthorized transfer, and liability can reach $500.
Wait more than 60 days after that statement, and liability for later unauthorized transfers is unlimited. The bank only has to show that faster reporting would have prevented the losses.

The gap between a $50 problem and an emptied checking account can be a matter of days. Check your bank statements regularly, not just when something feels off.

Business Accounts Are Not Covered

These consumer protections do not extend to business bank accounts. Liability for unauthorized wire and ACH transactions on commercial accounts is governed by the Uniform Commercial Code, not federal consumer protection statutes. The bank bears the loss by default in general, but most commercial account agreements shift liability to the business customer through agreed security procedures. If your business initiates wire transfers or uses online banking, the security agreement in your account documents likely decides who absorbs a fraud loss.

What to Do Right Now

In the first 24 hours, speed matters more than thoroughness. You can always add detail later. You cannot undo the liability consequences of a delayed report.

Call Your Bank or Card Issuer First

Call the moment you notice the unauthorized transaction. Ask them to freeze or restrict the account and issue new card numbers or credentials. Follow the call with a written notice by email or letter so you have a dated record of when you reported. That timestamp is what triggers your federal liability protections.

File Official Reports

Report the fraud to the Federal Trade Commission at IdentityTheft.gov. The FTC will generate an Identity Theft Report and walk you through a personalized recovery plan.⁵ For internet-based schemes, wire transfers, or business email compromise, file a separate complaint with the FBI’s Internet Crime Complaint Center.⁶ File a police report with local law enforcement too, particularly if physical theft was involved. Some financial institutions and creditors require a police report number before they will process a fraud claim.

Freeze Your Credit and Set a Fraud Alert

If your personal information was compromised, place a credit freeze with all three major credit bureaus: Equifax, Experian, and TransUnion. A freeze blocks new creditors from pulling your credit report, which effectively prevents anyone from opening new accounts in your name. Federal law guarantees you the right to a free freeze.⁷

You can also place a fraud alert, which requires creditors to verify your identity before issuing new credit. An initial fraud alert lasts one year. If you file an Identity Theft Report through the FTC, you qualify for an extended fraud alert lasting seven years.⁷ Unlike a freeze, a fraud alert does not block credit checks entirely, it just adds a verification step. Using both is common practice.

Preserve the Evidence

Save everything. Transaction receipts, bank and credit card statements, screenshots of the fraudulent charges, and any communications with the fraudster. If the fraud came through email, save the full message headers. That documentation supports the bank’s investigation, your FTC report, and any later insurance claim or lawsuit.

Can You Deduct the Loss on Your Taxes?

Whether a fraud loss is deductible on your federal return depends on whether the money was tied to a profit-seeking activity.

If you lost money in an investment scam, a Ponzi scheme, or other fraud connected to a transaction you entered for profit, the loss is potentially deductible as a theft loss under Internal Revenue Code Section 165(c)(2).⁸ You need to show three things: the conduct qualifies as theft under your state’s law, you have no reasonable prospect of recovering the money, and the transaction was profit-motivated. Losses go on IRS Form 4684, with calculation guidance in Publication 547.⁹ Ponzi victims have a simplified path: IRS Revenue Procedure 2009-20 provides a safe harbor that lets you claim the loss in the year the scheme is discovered, without waiting for the recovery process to play out.¹⁰

Personal theft losses are treated differently. The Tax Cuts and Jobs Act of 2017 suspended the personal casualty and theft loss deduction starting in 2018, limiting it to losses from federally declared disasters. The One Big Beautiful Bill Act, signed in 2025, made that change permanent and expanded the exception to include state-declared disasters.¹¹ For most fraud victims whose losses are not connected to an investment or other profit-motivated activity, no personal theft loss deduction is available starting in 2026 unless the loss ties to a declared disaster.

In either case, you can only deduct the portion of the loss not covered by insurance or reimbursement. If your bank, insurer, or a legal settlement paid back part of the money, reduce the deductible loss by that amount.⁸

1
Internet Crime Complaint Center. 2024 IC3 Annual Report
2
Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card
3
Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors
4
Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
5
Federal Trade Commission. IdentityTheft.gov Helps You Report and Recover from Identity Theft
6
Internet Crime Complaint Center. Internet Crime Complaint Center Home Page
7
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts
8
Office of the Law Revision Counsel. 26 USC 165 – Losses
9
Internal Revenue Service. Instructions for Form 4684
10
Internal Revenue Service. Help for Victims of Ponzi Investment Schemes
11
Internal Revenue Service. Casualty Loss Deduction Expanded and Made Permanent