Suspect an online seller, marketplace listing, social account, or website is a scam? This practical checklist explains how to preserve evidence, protect your accounts, notify the right payment provider, report fraud online, and track your complaint without exposing yourself to more risk.
Overview
When an online transaction goes wrong, speed matters, but so does order. A rushed message to the seller or a public accusation can destroy useful evidence, expose personal information, or give a scammer another opportunity to pressure you. A safer approach is to separate the response into five stages: preserve what happened, secure your accounts, contact the payment provider, report the conduct through appropriate official channels, and create a follow-up record.
You do not need to prove that a website or seller is legally a scam before reporting a concern. Describe what you observed, identify the loss or risk, and distinguish confirmed facts from assumptions. A missing delivery, counterfeit product, false advertisement, unauthorized charge, account takeover, and phishing attempt may require different reporting paths. If the issue began on a marketplace, start with the marketplace’s dispute process as well as any external reporting route that applies.
Before taking action, avoid clicking further links, downloading files, or calling phone numbers supplied by the suspicious party. Instead, use a verified website or the contact details shown inside your bank, card, payment app, marketplace, or other account. For a broader guide to organizing evidence, see How to File a Consumer Complaint: A Step-by-Step Checklist and Evidence Guide.
Checklist by scenario
1. A standalone scam website or online seller
- Stop contact and preserve the page. Save the website address, product page, checkout page, order confirmation, promised delivery date, refund terms, and seller contact information. Take dated screenshots where possible. If the page later disappears, your record may be the only accessible copy.
- Record the transaction. Note the date, amount, currency, payment method, order number, shipping address used, and exactly what was promised. Keep emails, text messages, direct messages, and tracking information in their original form.
- Contact the payment provider promptly. Use the provider’s official app, website, or statement phone number. Explain whether the payment was unauthorized, the item was never received, the goods were materially different, or the seller failed to honor a cancellation or refund. Ask what documentation and deadlines apply to a dispute or chargeback review.
- Report the website or seller. Use the relevant official consumer, fraud, marketplace, or industry reporting channel for your location and the type of conduct. A report creates a record and may help identify patterns, but it is not a substitute for requesting recovery from the payment provider.
- Monitor for follow-up scams. Fraudsters may claim they can recover your money for an upfront fee or ask for remote access to your device. Treat unexpected recovery offers as unverified until you confirm them independently.
2. A marketplace purchase
Keep all communication inside the marketplace when possible. Save the listing, seller profile, order record, delivery status, return instructions, and messages. Open the marketplace’s buyer-protection or dispute process using the account dashboard rather than a link in a message. State the remedy you are seeking—such as a refund for non-delivery or an item that does not match the listing—and attach concise evidence.
Do not close a dispute merely because a seller promises to resolve the issue later. If the seller asks you to pay outside the marketplace, move the conversation to an unapproved channel, or send a code, treat that as a warning sign. For platform-specific starting points, consult the Marketplace Dispute Guide.
3. A suspicious social media account, advertisement, or direct message
Capture the account name, profile link, advertisement or post, message thread, payment request, and any phone number or email address. Report the account or advertisement through the platform’s built-in reporting tools, then block it after preserving evidence. If you paid, follow the payment-provider steps immediately. If the message asked for login credentials, one-time codes, or identity documents, treat the incident as a possible account or identity compromise even if you did not send money.
4. A phishing site or suspected identity theft
If you entered a password, change it from a trusted device and change it anywhere else you reused it. Turn on multi-factor authentication where available, review recent sign-ins and account recovery details, and sign out unfamiliar sessions. If financial or identity information was exposed, contact the affected financial institution through a verified channel and ask what protective steps are appropriate. You may also need to report identity theft through the official service used in your country and monitor statements, credit activity, and account notices.
If malware may have been installed, disconnect the device from sensitive accounts until it has been checked with trusted security tools or professional assistance. Do not continue investigating the scammer from the compromised device.
5. A bank, card, or payment-app transaction you do not recognize
Contact the institution immediately through its official app, website, or statement. Identify the transaction, explain whether your account or payment details were stolen, and ask about securing the account and disputing the charge. Keep the case number, submission date, representative’s name if provided, and any requested documents. A fraud report, a billing dispute, and a complaint about service are related but different records; ask which process applies to your situation.
What to double-check before submitting a report
- Use the correct destination. A platform report, payment dispute, police report, consumer complaint, and identity-theft report serve different purposes. Where to report a company depends on the conduct, location, industry, and transaction method. The consumer agency and regulator directory can help you compare routes.
- Separate facts from conclusions. Write, “The order was placed on [date], the promised delivery date was [date], and no tracking record was provided,” rather than relying only on “This seller is a scam.” Clear chronology is easier to review.
- Check every date and amount. Confirm that screenshots, statements, receipts, and your written timeline agree. Note whether an amount was pending, completed, refunded, or reversed.
- Remove unnecessary sensitive data. Do not post full card numbers, passwords, security codes, identity-document numbers, or another person’s private information. Provide sensitive documents only through a verified secure channel and only when needed.
- Save confirmation. Download or screenshot submission receipts, reference numbers, automated emails, and portal status pages. Store them in one folder with a simple log of dates and next steps.
- State the remedy clearly. If you want a refund, say the amount and the reason. If you want an account secured, say which account is affected. If you are reporting a pattern rather than seeking money, identify that purpose.
For recovery options involving a refund request, payment dispute, or escalation, review How to Get a Refund From a Company. Keep the reporting record separate from any public review; public posts should not contain information that could help someone impersonate you.
Common mistakes
Waiting for the seller to respond indefinitely. A polite final message may be useful, but do not let repeated promises cause you to miss a payment-provider or marketplace deadline. Ask the provider about its time limits as soon as you identify a problem.
Using contact details from the suspicious message. A phone number, email address, or “support” link may lead back to the scammer. Start from a saved bookmark, the official app, or a statement.
Sending more money to unlock a refund. Taxes, verification deposits, release fees, and recovery charges should be treated as unverified demands. Confirm any legitimate requirement independently before paying.
Editing or deleting the original evidence. Keep the original emails and files. Add notes separately so the source material remains intact.
Submitting an unclear, oversized narrative. A short timeline with labeled attachments is usually more useful than a long emotional account. Include the transaction, promise, failure, contact attempts, and requested outcome.
Assuming one report resolves everything. Reporting a scam website may alert a relevant authority or platform, but it may not recover money. Payment disputes, account security, and formal complaints often need separate follow-up.
When to revisit this checklist
Return to this workflow whenever the facts change: the seller sends a new message, a payment is posted or reversed, an account shows unfamiliar activity, a marketplace changes the dispute status, or a reporting channel requests more information. Revisit it before major shopping periods and whenever you use a new marketplace, payment app, browser, or device.
A practical follow-up routine is to set a reminder for the next promised response date, check account and payment activity regularly, and update one running timeline. If there is no response, use the reference number to request a status update and ask what escalation path remains. You can also review How to Escalate a Consumer Complaint for a structured next-step record.
Finally, stop and reassess if anyone contacts you unexpectedly about recovering the loss. Verify the organization independently, do not share passwords or access codes, and never grant remote device access solely because someone claims to be investigating your report. The safest report is specific, evidence-based, submitted through a verified channel, and followed until you know what happened to it.
