What authorized push payment fraud is, and why banks won't reverse it

Authorized push payment (APP) fraud is when a scammer tricks you into sending money from your own bank account to an account they control. You authorize the payment yourself—the scammer doesn't hack your account or steal your credentials. You send the money willingly, which is why banks treat it differently from other fraud and rarely reverse it.

The scammer typically impersonates someone you trust: your bank, your employer, a government agency, a lawyer, or a company you do business with. They create urgency—a fake tax bill, a security alert, a job offer that needs when ready payment—and direct you to send money to a specific account. Once the money leaves your bank, it is extremely difficult to recover.

Banks are not legally required to refund APP fraud in most cases because you did authorize the payment. Some banks have started offering limited protection under voluntary schemes, but these vary widely and often have strict conditions. The best defense is prevention: recognizing the scam before you send the money.

Key Takeaways

  • Scammers impersonate trusted organizations and pressure you to send money from your own account, which banks rarely reverse because you authorized it.
  • The most common APP scams involve fake tax bills, job offers, romance schemes, and urgent security alerts from your bank.
  • Verify any payment request by contacting the organization directly using a phone number or website you find yourself, not one the message provides.
  • If your bank offers APP fraud protection, it usually requires you to report the fraud within a specific timeframe and may not cover all situations.
  • Once money is sent, recovery depends on whether the receiving bank can freeze the account—this works only if you report it when ready.

How to verify a payment request before you send money

The single most effective defense is to stop and verify independently before you pay. If someone asks you to send money—whether by email, text, phone call, or in person—do not use the contact information they provide. Instead, look up the organization yourself.

For a bank: hang up and call the number on the back of your card or on the bank's official website. For a government agency: go to the official .gov website and find the phone number there. For an employer: call the main office number or email your HR contact directly. For a company: search for their official website and call the number listed there, not one in an email or text.

Tell the person who answers: "I received a request to send money to [account details]. Can you confirm whether this is legitimate?" A real organization can verify whether the request came from them. If they say no, you have stopped the fraud. If they say yes, you can proceed with confidence. This step takes five minutes and prevents almost all APP fraud.

Common APP fraud scenarios and how they work

Tax and government fraud is one of the most common forms. A scammer sends an email or letter claiming you owe back taxes, a penalty, or a fine. The message includes official-looking logos and urgent language: "Pay within 48 hours or face legal action." They provide a bank account to send the money to. The IRS does not initiate contact by email or text and does not demand when ready payment without a formal notice sent by mail.

Job offer fraud targets people looking for work. A scammer offers a remote job with high pay, asks you to "verify your identity" by sending a deposit, or requests payment for training materials or equipment. Legitimate employers do not ask you to send money before you start work. If you are unsure, contact the company's HR department directly using a phone number you find yourself.

Romance and relationship fraud involves a scammer building trust over weeks or months, then asking for money for an emergency: a medical bill, a travel expense, a business problem. They may ask you to send money to a third party or to a bank account in another country. Real people you have never met in person should not ask you for large sums of money.

Bank security alerts are another common vector. You receive a text or email claiming your account has been compromised and asking you to "verify your identity" or "confirm your details" by clicking a link or calling a number. Your real bank will never ask you to confirm sensitive information this way. If you see this message, hang up or ignore the link, then call your bank directly using the number on your card.

What to do when ready if you realize you have been scammed

Time is critical. The faster you report the fraud, the better the chance of recovery. Contact your bank by phone—not by email or through the app—and tell them you sent money to a scammer. Provide the account number you sent money to, the amount, the date, and any details about how the scammer contacted you.

Your bank can place a recall on the payment if it has not yet been withdrawn from the receiving account. This works only if the receiving bank cooperates and if you report within hours, not days. Some banks can also contact the receiving bank directly to request a freeze on the account.

File a report with your country's fraud reporting body. In the United States, this is the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. In the UK, it is Action Fraud at actionfraud.police.uk. In Canada, it is the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca. These reports create an official record and help law enforcement track patterns.

If the scammer impersonated a specific organization—your bank, the IRS, a company—report the fraud to that organization as well. They can warn other customers and may have additional recovery options.

Bank protections for APP fraud and what they actually cover

Some banks now offer voluntary APP fraud protection, but coverage varies significantly. In the United Kingdom, the Contingent Reimbursement Model (CRM) Code requires participating banks to refund certain APP fraud cases, but only if you took reasonable care and the bank failed in its obligations. "Reasonable care" typically means you did not ignore obvious warning signs.

In the United States, there is no federal requirement for banks to refund APP fraud. Some banks offer it as a competitive feature, but the terms differ. Check your bank's fraud policy or call and ask: "If I am tricked into sending money to a scammer, will you refund it?" Ask what conditions explore and what timeframe you have to report it.

Even with protection, you will likely have to prove you took reasonable steps to verify the payment. Keep records of everything: the message you received, the account details you were given, the date and time, and proof that you contacted the organization to verify. If your bank denies your claim, you can dispute it, but having documentation makes this much easier.

Red flags that should stop you before you send money

Pressure and urgency are the most reliable warning signs. Legitimate organizations do not demand payment within hours or threaten when ready legal action. If someone says "you must pay today" or "this offer expires in 24 hours," pause and verify independently before you do anything.

Requests to send money to an account that does not match the organization's name are a strong signal. If "the IRS" asks you to send money to an account in someone's personal name, that is fraud. If your bank asks you to send money to a third-party account to "verify your identity," that is fraud.

Unusual payment methods are another flag. Legitimate organizations do not ask you to send money by gift card, wire transfer, cryptocurrency, or money transfer apps like Western Union or MoneyGram. These methods are irreversible and untraceable, which is why scammers prefer them.

Requests for sensitive information are a red flag. Your bank, the IRS, and legitimate employers will never ask you to confirm your full password, PIN, Social Security number, or credit card details by email, text, or phone. If someone asks for this information, it is a scam.

How to protect yourself from APP fraud going forward

Create a personal rule: never send money based on a request you receive. Always initiate contact yourself using information you find independently. This single habit stops almost all APP fraud because scammers rely on you using the contact details they provide.

Set up transaction alerts on your bank account. Many banks allow you to receive a notification whenever a large payment is sent. This gives you a chance to contact your bank when ready if you see an unauthorized payment (though this is different from APP fraud, it is still useful protection).

Use your bank's security features if available. Some banks offer payment limits, which cap how much you can send in a single transaction or per day. Others offer a delay on large payments, giving you time to cancel if you realize it was a mistake. Ask your bank what options they offer.

Be skeptical of unsolicited contact. If someone reaches out to you—by email, text, phone, or social media—asking you to send money or verify information, assume it is a scam until you have verified it independently. This includes job offers, investment opportunities, and relationship connections.

Frequently Asked Questions

Can I get my money back if I sent it to a scammer?

Recovery depends on how quickly you report it and whether your bank offers APP fraud protection. If you report within hours, your bank may be able to freeze the receiving account. If your bank participates in a fraud protection scheme, you may be refunded if you took reasonable care. However, many cases result in no recovery, which is why prevention is critical.

What if the scammer used a real company's name and logo?

Scammers routinely copy logos, email addresses, and official language from real organizations. This does not make the request legitimate. Always verify by contacting the organization directly using contact information you find yourself, not information in the message. Real organizations expect this and can confirm whether the request came from them.

Is it APP fraud if the scammer hacked my email and sent the request from my own account?

No, that is a different type of fraud. APP fraud specifically means you were tricked into authorizing the payment yourself. If your email was hacked and someone sent a message from your account, that is account compromise, and your bank may have different protections for it. Report it to your bank and explain that your account was compromised.

What should I do if I almost sent money but stopped in time?

Report it to your bank anyway. Even though no money was sent, your bank should know that someone tried to scam you. They can flag your account for additional monitoring and may be able to identify the scammer. This also creates a record in case the scammer tries again.

Can I reverse a payment if I realize it was a scam a few days later?

It depends on how quickly the receiving bank withdrew the money. If the account still holds the funds, your bank can request a recall. If the money has already been withdrawn, recovery is much harder. This is why reporting when ready—within hours, not days—is so important. Do not wait to see if the money comes back on its own.