Money Theft & Financial Forensics
Money Theft & Forensics is the guide for the minute money goes missing: what to do first, your legal rights and the deadlines that run, how theft actually happens, a catalog of every tool and resource (free ones first), a 30-minute hardening checklist, protecting elders and children, and a monthly routine.
Financial forensics — catch stolen money fast, and make yourself a hard target
Money theft is a race against a clock: report a debit-card loss within two business days and you owe at most $50; wait two months and you can owe all of it. This page is the complete kit — what to do the minute money is missing, the rights you have and the clocks that run, how thieves actually work, every tool and resource on the market (free ones first), a 30-minute hardening list, and a monthly routine. Written for the person who has never thought about this and for the person who already got hit.
🚨 Money missing right now 🛡 30-minute hardening
🚨 Money missing right now? Find your case and do the steps in order
Every case starts the same way: call the number on the back of the card or on the official website, never a number from the message that alarmed you. Then:
- Call the number on the back of the card (never a number from a text or e-mail). Say: "unauthorized charge, please dispute and reissue the card."
- Your maximum loss is $50, and $0 if you report before the card is used — the Fair Credit Billing Act. Most issuers waive even that.
- Change the card everywhere it was saved (streaming, app stores, rides). Turn on "every transaction" alerts on the new card.
- Call the bank today. The clock matters: report within 2 business days and your loss is capped at $50; within 60 days of the statement, $500; after 60 days you can lose everything after that (Regulation E).
- Ask for the card to be cancelled, the disputed amounts listed, and provisional credit — the bank must investigate within 10 business days (45 for some cases) and credit you meanwhile.
- Move direct deposits and autopays to a new account number if the account number itself was used (ACH), not just the card.
- Minutes matter. Call your bank's fraud line and ask for a recall / SWIFT recall and a hold at the receiving bank.
- File at IC3.gov immediately and say the words "Financial Fraud Kill Chain" — for wires over $50,000 sent within the last 72 hours the FBI can ask the receiving bank to freeze funds.
- Wires have weak consumer protection (UCC Article 4A): recovery depends on speed, not rights.
- If someone else moved money without you (account takeover): that is an unauthorized electronic transfer — Reg E applies; report to the app and the bank behind it within 60 days.
- If you were tricked into sending it: report anyway. Since 2023 the Zelle network reimburses many imposter-scam cases (someone pretending to be your bank, a utility or the government); banks decide case by case. Ask in writing.
- Report in-app (Venmo → Get Help; Cash App → Support; PayPal Resolution Center) and to ReportFraud.ftc.gov. Turn on the app's PIN/Face ID and turn off "instant transfer" if you don't use it.
- Tell the bank the moment you see a check you did not write, or a changed payee/amount; banks are generally liable for forged or altered checks if you report promptly (your account agreement often says within 30 days of the statement).
- File with the Postal Inspection Service if it was taken from the mail. Stop mailing checks from your home mailbox; use the post-office slot or bill pay.
- Ask whether the bank can add positive pay (business) or check-image alerts (personal).
- Go to IdentityTheft.gov: it builds your personal recovery plan, pre-fills the FTC Identity Theft Report, and generates the letters. That report plus a police report lets you block fraudulent items from your credit file (FCRA §605B).
- Freeze your credit at Equifax, Experian and TransUnion (free, permanent, 10 minutes each) — and at Innovis, ChexSystems (bank accounts) and NCTUE (phone/utilities).
- Place a 1-year fraud alert (extended 7-year alert with the FTC report). Pull all three reports at AnnualCreditReport.com and dispute every unknown item in writing.
- If your e-file is rejected as a duplicate, file IRS Form 14039 (Identity Theft Affidavit) and mail a paper return.
- Get an Identity Protection PIN (IP PIN) — a 6-digit code without which no return can be filed under your SSN. Anyone can opt in.
- Check your IRS online account for returns and notices you did not create.
- Create your my Social Security account before a thief does, review earnings for jobs you never held, and use "Block electronic access" if needed.
- Report SSN misuse to the SSA Office of the Inspector General. A new SSN is possible but rare — freezes and the IP PIN do most of the work.
- Lock your SSN against employment fraud with myE-Verify Self Lock.
- Call the carrier from another phone: "SIM swap fraud — restore my number and add a port-out PIN / number lock." Do this before anything else: the thief is using SMS codes to reset your bank passwords.
- Then change e-mail and bank passwords from a trusted device; move 2FA off SMS to an authenticator app or hardware key.
- Report to the FCC and FTC. Ask the carrier for the account-change log for your bank disputes.
- Contact the exchange (Coinbase, Kraken, etc.) support and ask to flag the destination address; file at IC3.gov with the transaction hashes and addresses; add the addresses to Chainabuse.
- Blockchain transfers are irreversible; the only leverage is when funds land at a regulated exchange. Speed and paperwork matter.
- Warning: "recovery services" that promise to get crypto back for a fee are the second scam.
- Stop all contact and all payments; keep every message, receipt and account name as evidence.
- Report to IC3.gov, the SEC (sec.gov/tcr), FINRA, your state securities regulator (NASAA) and ReportFraud.ftc.gov. If a bank or brokerage account was used, ask them to file a Suspicious Activity Report.
- Tell someone. Isolation is the scam's tool; shame keeps victims paying. The AARP Fraud Watch helpline talks to anyone, any age: 877-908-3360.
- Call Adult Protective Services in their state (Eldercare Locator 1-800-677-1116 finds it) and the bank's elder-fraud unit; banks can pause suspicious transactions under state "report and hold" laws.
- File at IC3.gov and with the DOJ National Elder Fraud Hotline 833-372-8311.
- Set up view-only access to their accounts, a trusted-contact person at the brokerage, and a family "safe word" against AI voice-clone calls.
Official helpEldercare Locator↗
⚖️ Your legal rights — and the clocks that run
| What happened | Law | What you get, and by when | Source |
|---|---|---|---|
| Credit card (unauthorized use) | Fair Credit Billing Act / TILA | Max $50; $0 if reported before use. Billing-error dispute within 60 days of the statement; issuer must acknowledge in 30 days, resolve in 2 cycles. | CFPB↗ |
| Debit card / ATM / online banking / ACH / P2P (unauthorized) | Electronic Fund Transfer Act / Regulation E | Report within 2 business days: max $50. Within 60 days of the statement: max $500. After 60 days: no cap for later transfers. Bank investigates in 10 business days (provisional credit if longer). | CFPB↗ |
| P2P payment you were tricked into sending | Not "unauthorized" under Reg E | No legal cap on your loss. Zelle network rules (2023+) reimburse many imposter scams; Venmo/Cash App/PayPal purchase protection is limited. Ask in writing; complain to the CFPB if refused. | CFPB↗ |
| Wire transfer | UCC Article 4A | Bank liable only if it ignored its own security procedure. Recovery = recall speed + IC3 kill chain. No consumer refund right. | FBI IC3↗ |
| Forged or altered check | UCC Articles 3 & 4 | Bank generally bears forged-signature loss if you report promptly (account agreements: often 30 days from statement; 1-year outer limit). Report late and the loss shifts to you. | FTC↗ |
| Credit reports & identity theft | Fair Credit Reporting Act | Free reports weekly; free freezes and alerts; bureaus must block identity-theft items within 4 business days of an FTC report + proof; disputes resolved in 30 days. | FTC↗ |
| Bank failure (not theft) | FDIC / NCUA insurance | $250,000 per depositor, per bank, per ownership category. Insurance covers a failed bank — not a thief. Theft is covered by the rules above. | FDIC↗ |
The two rules to remember
Credit cards are safer than debit cards — the loss caps are lower and it is the bank's money on the line while they investigate, not yours. And report within days, in writing — every protection above weakens with time.
🎭 How theft actually happens — and the one habit that stops each
| Method | How it works | What stops it |
|---|---|---|
| Skimmers & shimmers | Devices in gas pumps, ATMs and card readers copy the strip or chip. | Wiggle the reader; use tap-to-pay or the phone wallet (one-time tokens); prefer indoor pumps and bank-lobby ATMs. |
| Phishing, smishing, vishing | Fake e-mails, texts and calls that look like your bank, USPS, a toll road, Amazon or the IRS. | Never click; open the app yourself. Real banks never ask for codes. The urgency is the tell. |
| Account takeover from breaches | A password reused on a breached site is tried on your bank. | Unique passwords (manager) + authenticator app or hardware key; check Have I Been Pwned. |
| SIM swap / port-out | The thief moves your number to their phone and receives your SMS codes. | Carrier port-out PIN / number lock; move 2FA off SMS. |
| Check washing & mail theft | Checks stolen from mailboxes, ink washed, payee and amount rewritten. | Don't mail from home; use bill pay; gel pens; USPS Informed Delivery. |
| Card-not-present fraud | Stolen card numbers used online. | Virtual card numbers; credit not debit online; per-transaction alerts. |
| Bank-impersonation P2P scam | "This is your bank's fraud department — to reverse the charge, send the money to yourself via Zelle." | Hang up; call the number on your card. Banks never ask you to move money. |
| Tech-support / refund scam | A pop-up or call says your PC is infected or a refund was overpaid; they get remote access and drain accounts. | Never allow remote access; never buy gift cards for anyone; real refunds never require you to "return the difference". |
| Romance / investment "pig butchering" | Months of friendship, then a crypto "platform" showing fake gains, then a freeze and a "tax" to withdraw. | Anyone you met online who talks investing is the scam. No exceptions. |
| Government imposters | "SSA suspended your number", "IRS warrant", "jury duty fine". | Agencies don't call, threaten, or take gift cards, crypto or wires. |
| Synthetic identity | A real SSN (often a child's) combined with a fake name builds credit for years. | Freeze children's credit files; check for a file in their name. |
| Employment / overpayment / rental scams | Fake job that sends a check to "buy equipment"; landlord who can't show the unit. | A check that clears can still bounce weeks later; never send money back. |
| QR codes and parking meters | Stickers over real QR codes send you to payment clones. | Type the address; use the official app. |
| AI voice clones ("grandparent scam") | A call in a relative's voice needs bail money now. | Family safe word; hang up and call the person directly. |
Sources: FTC Consumer Sentinel data book, FBI IC3 annual report, CFPB complaint database. Losses reported to the FTC exceeded $12.5 billion in 2024, with investment scams the largest category and imposter scams the most common.
🧰 Every tool and resource — free ones first, then paid, then where to report
Names are given so you know what exists; MoneyDesk is not affiliated with any company here and earns nothing from any link. Most people are fully protected by the free rows.
🏦 Free, from your own bank and cards — turn these on today
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| Transaction alerts | Push/text for every card charge (threshold $0–$1), every ACH debit, every login, every profile change. Fastest forensic tool there is. | Free — bank/card app → Alerts | open↗ |
| Card lock / freeze | Freeze a card in the app between uses; unfreeze for 5 minutes to pay. | Free — most issuers (Chase, Capital One, Citi, Discover, Amex, Bank of America, Wells Fargo, most credit unions) | open↗ |
| Virtual card numbers | A different number per merchant; cancel one without replacing the card. | Free — Capital One Eno, Citi Virtual Account Numbers, Apple Card, Amex (select), Privacy.com (free tier, links to a bank account) | open↗ |
| Phone wallets (Apple Pay, Google Pay, Samsung Pay) | Tokenised one-time numbers; the merchant never sees your card. | Free | open↗ |
| Positive pay / ACH debit block | Business accounts: the bank pays only checks and debits you pre-approve. | Free to ~$50/mo — ask your business banker | open↗ |
| Trusted contact person | Brokerages can call a person you name if they suspect exploitation (FINRA Rule 4512). | Free — every brokerage |
📋 Credit bureaus — free by law, the strongest protection there is
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| Credit freeze (all three) | Nobody can open credit in your name; lift it in minutes online when you apply. | Free, permanent — Equifax, Experian, TransUnion | open↗ |
| Innovis freeze | The fourth bureau some lenders use. | Free | open↗ |
| ChexSystems freeze | Stops new bank accounts being opened in your name (used for money-mule accounts). | Free | open↗ |
| NCTUE freeze | Stops phone, utility and pay-TV accounts opened in your name. | Free | open↗ |
| Fraud alert / extended alert / active-duty alert | Lenders must verify identity before opening credit; 1 year, or 7 years with an FTC report. | Free — set at one bureau, applies to all | open↗ |
| AnnualCreditReport.com | All three reports, free, every week. Read the "inquiries" and "accounts" pages. | Free | open↗ |
| OptOutPrescreen | Stops pre-approved credit offers — fewer stolen-mail openings. | Free (5 years online; permanent by mail) | open↗ |
| Other consumer reports | LexisNexis, Early Warning (bank data), The Work Number (employment/income) — you can request and freeze several. | Free | open↗ |
📈 Free credit monitoring (alerts when a new account or inquiry appears)
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| Experian (free tier) | FICO 8, Experian report, alerts, one-time dark-web scan. | Free | open↗ |
| Capital One CreditWise | TransUnion monitoring + SSN tracking + dark-web alerts; open to non-customers. | Free | open↗ |
| Credit Karma | TransUnion + Equifax VantageScore, alerts; open to anyone. | Free (sells card offers) | open↗ |
| Discover Credit Scorecard | FICO score, new-account and SSN alerts; open to anyone. | Free | open↗ |
| Chase Credit Journey | Experian-based monitoring; open to anyone. | Free | open↗ |
| Card-issuer FICO | Amex MyCredit Guide, Citi, Wells Fargo Credit Close-Up, US Bank — customers. | Free |
🕳 Breach and dark-web checks
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| Have I Been Pwned | Which breaches contain your e-mail/phone; free "notify me" for future breaches. | Free | open↗ |
| Mozilla Monitor | Breach monitoring; paid tier removes you from data-broker sites. | Free / paid | open↗ |
| Google dark web report | Scans for your Gmail, name, phone, SSN in dark-web dumps. | Free for Google accounts | |
| Password-manager watchtowers | 1Password Watchtower, Bitwarden reports, Apple Passwords "Compromised", Chrome Password Checkup flag reused/breached passwords. | Free / included | open↗ |
| Data-broker removal | DeleteMe, Optery, Incogni, Mozilla Monitor Plus — cut the personal data scammers buy. | $70–$130/yr | open↗ |
🛡 Paid identity-theft protection (what you actually get: monitoring + restoration help + insurance)
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| Aura | All-in-one: credit + bank + dark web + VPN + antivirus + $1M insurance; family plans. | ~$10–$30/mo | open↗ |
| LifeLock (Norton) | The best-known; tiers by bureaus monitored; Norton 360 bundles. | ~$8–$30/mo | open↗ |
| Experian IdentityWorks | Three-bureau monitoring from a bureau itself. | ~$10–$25/mo | open↗ |
| IdentityForce (TransUnion) | Strong alerts (court records, payday loans, sex-offender address). | ~$18–$35/mo | open↗ |
| Identity Guard | AI-flagged alerts; budget tiers. | ~$7–$25/mo | open↗ |
| Zander | Restoration and insurance only, no monitoring — the cheapest way to have a specialist do the recovery work. | ~$7–$15/mo | open↗ |
| IDShield (LegalShield) · Allstate Identity Protection · AAA / Costco / employer benefits | Often bundled cheaply through memberships or HR; check what you already have. | varies | open↗ |
| Credit-card and insurance riders | Many premium cards include identity restoration; homeowners/renters policies add an identity-theft rider for $25–$50/yr. | included / cheap | open↗ |
| FTC's view | A freeze + alerts + IdentityTheft.gov gives most people what paid services do, free. Pay for restoration help if you don't want to make the calls yourself. | — | open↗ |
🏛 Government locks and monitors (all free)
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| IRS Identity Protection PIN | No tax return can be filed under your SSN without the 6-digit PIN; renews yearly. | Free | open↗ |
| my Social Security account | Claim it before a thief does; review earnings; "Block electronic access" option. | Free | open↗ |
| myE-Verify Self Lock | Locks your SSN against employment-eligibility fraud. | Free | open↗ |
| USPS Informed Delivery | Daily e-mail of the mail arriving — you see the missing check before the thief cashes it. Also stops someone else registering your address. | Free | open↗ |
| USPS Hold Mail / PO Box / locking mailbox | Mail theft is the root of check fraud. | Free / $ | open↗ |
| Medicare Senior Medicare Patrol | Read the Medicare Summary Notice; report billed services you never got. | Free — 1-800-MEDICARE | open↗ |
| National Do Not Call | Fewer legitimate calls makes scam calls obvious. | Free | open↗ |
📱 Phone, logins and devices
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| Carrier port-out PIN / number lock | AT&T Wireless Lock, Verizon Number Lock, T-Mobile Account Takeover Protection — stops SIM swaps. | Free — carrier app | open↗ |
| Password manager | One unique password per site: Bitwarden (free), 1Password, Apple Passwords, Google Password Manager. | Free / ~$3/mo | open↗ |
| Authenticator app instead of SMS | Microsoft Authenticator, Google Authenticator, Authy — codes a SIM thief can't get. | Free | open↗ |
| Hardware security keys / passkeys | YubiKey, Google Titan; passkeys on iPhone/Android/Windows. Phishing-proof. Google Advanced Protection for high-risk people. | $25–$60 / free | open↗ |
| Stolen Device Protection | iPhone (Settings → Face ID → Stolen Device Protection) and Android theft protection lock out a thief who has your phone and passcode. | Free | open↗ |
| A separate e-mail for money | Banks, brokerages and taxes on an address you use for nothing else — phishing has nowhere to land. | Free | open↗ |
| Call/text screening | iPhone Silence Unknown Callers, Google Call Screen, carrier apps (AT&T ActiveArmor, Verizon Call Filter, T-Mobile Scam Shield). | Free | open↗ |
| Updates + antivirus | Automatic OS updates; Microsoft Defender is built in; Malwarebytes for a second opinion. | Free | open↗ |
👀 Watching all your money in one place
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| Your bank's aggregation | Many banks show outside accounts inside their app (Chase, Wells Fargo, US Bank). | Free | open↗ |
| Aggregator apps with alerts | Rocket Money, Monarch, Copilot, YNAB, Empower — one screen for every account; unusual-charge and subscription alerts. They read all your accounts, so pick one with a clear privacy policy. | Free–$15/mo | open↗ |
| MoneyDesk Money Leaks | If you have My Money access: import statements and let Money Leaks flag recurring and unfamiliar charges. | Free — MoneyDesk | in MoneyDesk |
🚨 Where to report (each one matters — reports are how patterns get caught)
| Tool | What it does | Cost / who | Link |
|---|---|---|---|
| IdentityTheft.gov | Recovery plan + official FTC Identity Theft Report. | FTC | open↗ |
| ReportFraud.ftc.gov | Any scam, any amount — feeds law enforcement nationwide. | FTC | open↗ |
| IC3.gov | FBI Internet Crime Complaint Center — wires, crypto, BEC, romance/investment scams; the recovery kill chain. | FBI | open↗ |
| CFPB complaint | Bank or card company refusing a valid dispute — companies must answer in 15 days. | CFPB | open↗ |
| HelpWithMyBank.gov | Complaints about national banks. | OCC | open↗ |
| State attorney general / local police | Police report number is required for extended alerts and some disputes. | — | open↗ |
| USPIS | Mail theft, check washing. | Postal Inspectors | open↗ |
| SSA OIG · TIGTA · FCC | SSN misuse · IRS imposters · phone/SIM fraud. | — | open↗ |
| SEC · FINRA · state securities regulator | Investment fraud; broker misconduct. | — | open↗ |
| AARP Fraud Watch helpline 877-908-3360 · BBB Scam Tracker | Talk to a person; see what scams are circulating near you. | — | open↗ |
🛡 The 30-minute hardening — tick as you go (0 of 12 done · saved on this device only)
Order matters
Do 1–4 first: alerts catch theft, freezes prevent the expensive kind (new accounts), the IP PIN and SSA account close two doors thieves love. The rest is hygiene.
👨👩👧 Protecting the people who get targeted most
Older relatives
- Ask their bank for view-only or "trusted contact" access and set alerts to your phone too.
- Agree a family safe word: no money moves on a phone call without it, however real the voice sounds.
- Put a note by the phone: "Medicare, Social Security and the IRS never call. Hang up. Call me."
- Know Adult Protective Services (Eldercare Locator 1-800-677-1116) and the DOJ elder-fraud hotline 833-372-8311.
- Consider a durable power of attorney and a revocable trust while they are well — see Secure Your Future step 11.
Children and teens
- Freeze the child's credit at all three bureaus — parents can, free; synthetic-identity thieves prefer clean SSNs.
- Check whether a credit file already exists in the child's name (a file existing is itself a red flag).
- Never give a school, camp or sports league the SSN unless the law requires it; ask why.
- Teach the two rules early: nobody legitimate asks for a code, and gift cards are never a payment.
- A teen's first debit card: alerts on, daily limit low, no overdraft.
🔁 The 10-minute monthly routine — forensics for people with a life
- Open every card and bank statement; read every line, not the total. Question anything you don't recognise, however small — thieves test with $1.
- Pull one credit report (rotate the bureaus, or all three — they are free weekly). Look at inquiries and new accounts.
- Glance at Have I Been Pwned and your password manager's breach report.
- Check Informed Delivery caught every check you were expecting.
- Once a year: IRS online account (returns filed), Social Security statement (earnings), Medicare summary notices, and the beneficiaries on every account.
- Subscriptions: cancel what you don't use — the fewer places hold your card, the smaller the blast radius.
📚 Sources and further reading
- FTC — Consumer advice: identity theft, scams, credit freezes↗
- FTC — Consumer Sentinel Network data book (annual fraud statistics)↗
- CFPB — Regulation E (electronic fund transfers) and Regulation Z (credit cards)↗
- FBI IC3 — annual Internet Crime Report↗
- FDIC — deposit insurance and consumer resources↗
- IRS — Identity Theft Central↗
- SSA — Identity theft and your Social Security number↗
- CISA — Secure Our World (MFA, passwords, updates)↗
- AARP Fraud Watch Network↗
- Zelle — safety and reporting↗
Educational information only — not legal, tax or financial advice. Laws, dollar limits and program rules are summarised as of 2026 and change; the linked official source always wins. MoneyDesk names companies so you know they exist, earns nothing from any of them, and is not affiliated with any. Never share a one-time code, PIN or password with anyone who contacts you — no bank, agency or company will ever ask.
Read the guides · Everything else on Moneydesks
About Moneydesks
MoneyDesk is a free, all-in-one stock market dashboard and personal-finance tool. Check any ticker with live quotes and charts, practice with a paper-trading portfolio, and get a plain-English action plan for the stocks you really own.
Markets & investing
Live stock quotes and charts · paper trading with portfolio health score · stock screeners · contrarian value "Best Buys" · dividend-capture and swing-trading strategies · Dow 30, S&P 500 and Nasdaq-100 index lists · strategy backtesting · earnings calendar · price and trailing-stop alerts.
News & economy
A daily market briefing, curated financial news, economic indicators (inflation, jobs, rates, yield curve), recession watch, fear & greed mood dial, and world-market performance.
Personal finance
Debt payoff planner (avalanche vs snowball) · emergency-fund tracker · bill reminders · savings goals · financial education for beginners.
Starting a business — two goals
MoneyDesk helps people start businesses with two goals for the country: export businesses that sell American goods and services abroad and shrink the trade deficit, and Main Street businesses that make families better off and the economy robust. Step-by-step game plans — budgets, permits, licenses, funding programs, marketing, hiring — plus a private launch tracker, printable field manuals and research white papers.
MoneyDesk is an educational simulation — not financial advice. Paper trading uses no real money and places no real trades.
Sections you can open directly
Market Dashboard · News & Economy · Dow 30, S&P 500 and Nasdaq-100 constituents · Backtest a Strategy · Model Portfolios · Best Buys: Contrarian Value Screen · Short-Term Trading Setups · Dividend Capture Strategy · Stock Screener · Investing 101 · Today's Rates: Savings, CDs, Treasuries, I Bonds · Secure Your Future: the 12 moves, in order · Start a Business · Money Theft & Financial Forensics · Paying for College · Community Board · Export Business: sell what America makes to the world · The Open Door: a white paper on the export opportunity · Main Street Business: open the doors in your town · Main Street: a white paper on small business by the numbers
Guides you can read without the app
Money basics in plain English · Starting an export business · Starting a Main Street business · all guides