As the FTC explains in its guidance on mobile payment apps, services such as Venmo, Cash App, and PayPal make it easy to send money, but an authorized payment can be difficult to reverse. Treat every transfer like cash: verify both the recipient and the reason for the payment before tapping send.
How peer-to-peer payment scams work
Scammers may impersonate a bank, relative, seller, employer, or customer-support agent. They may claim that an account is compromised, send a fake invoice, create a fraudulent marketplace listing, or show a false payment confirmation. Some ask the victim to send money to “protect” an account or reverse a transaction.
The payment technology may work exactly as designed while the surrounding request is fraudulent. Security therefore has two parts: protecting access to the account and validating the person, purpose, and amount of each payment.
Common peer-to-peer payment scams
- Impersonation: a criminal pretends to be a relative, bank employee, business, or government representative.
- Account protection: the victim is told to move money to a “safe” account controlled by the scammer.
- Marketplace fraud: a seller requests off-platform payment, or a buyer sends a fake confirmation.
- Overpayment: a supposed buyer claims to have paid too much and requests a refund before the original payment is confirmed.
- Accidental payment: someone claims to have sent money by mistake and pressures the recipient to send a separate transfer.
- Investment or prize: payment is requested to unlock earnings, a prize, or a guaranteed return.
Before sending money
- Confirm the request through a known phone number or in person.
- Check the recipient’s name and payment handle carefully.
- Use the payment app only for people and businesses you trust.
- Do not send a test payment at the direction of an unexpected caller.
- Never share a password, PIN, or one-time verification code.
- For purchases, use a payment method with appropriate buyer protections.
A matching recipient name does not prove that the underlying story is legitimate.
Review the funding source and amount, and slow down when a recipient changes instructions at the last moment. A legitimate customer-support representative should not need your password, PIN, or one-time code. Do not install remote-access software to receive help with a payment account.
How to confirm that you were paid
Open the payment service or bank app directly and check the completed transaction. Do not rely on a screenshot, email, or text message as proof of payment. A buyer who sends too much and asks for part of it back may be using a fake or reversible payment.
For a business transaction, follow the platform’s seller-protection requirements and keep the conversation and payment inside the approved system. Peer-to-peer tools designed for trusted contacts may provide different protections from credit cards or marketplace checkout services.
Protect the payment account on your phone
Use a unique password, multifactor authentication, a device screen lock, and transaction alerts. Keep the payment app and Android updated. Review linked bank accounts, cards, authorized devices, and account recovery information. Remove old devices and report an unfamiliar login immediately.
Do not expose payment details in lock-screen notifications. If the phone is lost, use the platform’s device-management controls and contact the payment provider when unauthorized access is possible.
What to do after a payment scam
Follow what to do after a payment app scam and report the transaction inside the payment app and contact the linked bank or card issuer immediately. Change credentials if account access may be compromised, preserve messages and transaction identifiers, and report the incident at ReportFraud.ftc.gov. Do not pay anyone who promises guaranteed recovery for an upfront fee.
Explain whether you authorized the transfer, whether the account itself was accessed without permission, and how it was funded. Those facts can affect the provider’s investigation. File a police report when required by an institution or when theft, threats, or significant loss is involved.
Frequently asked questions
Are payment apps safe?
They use security controls, but users can still authorize payments to scammers. Account security and recipient verification are essential.
Can a payment be canceled?
It depends on the service and transaction status. Contact the provider immediately, but do not assume recovery is guaranteed.
Should a bank ask me to move money to protect it?
No legitimate bank employee should instruct you to transfer money to a “safe” account controlled through an unexpected request.
Does the recipient name prove a request is legitimate?
No. It may confirm the account holder’s displayed name, but it does not validate the story or the purpose of the transfer.
Is a screenshot proof that a payment was completed?
No. Confirm the transaction directly in the official app or bank account.
Should I use a payment app to buy from a stranger?
Use a payment method and marketplace flow that provide protections appropriate to the purchase. Peer-to-peer transfers are best reserved for people you know and trust.
Differences between payment services and transactions
Zelle generally sends money between participating bank accounts, while Venmo and Cash App maintain their own account experiences and funding options. ACH transfers, debit cards, credit cards, and marketplace checkout systems follow different rules and dispute processes. Do not assume that protections available for a credit-card purchase also apply to a person-to-person transfer.
Read the current terms of the specific service and use the transaction type intended for the situation. Business purchases should use an approved business or purchase flow when available. Misclassifying a purchase as a payment between friends can reduce available protections.
Verify the recipient and the purpose separately
The displayed name or handle helps identify the destination account, but it does not establish why the person is requesting money. A scammer can control an account under a plausible name or compromise a real account. Confirm the recipient through a known channel and confirm the story independently.
For a new recipient, compare the phone number, email address, username, or QR code carefully. If the service presents a warning about a first-time recipient, stop and verify rather than dismissing it.
Fake payment confirmations and overpayment
A screenshot can be edited, an email can be forged, and a pending transaction can fail. Sellers should release goods only after confirming a completed payment inside the official account. Do not pay an upgrade fee to receive money or send a separate refund based only on a buyer’s message.
If an unfamiliar payment appears, contact the service before returning it. Sending a new transfer may not reverse the original transaction and can create a separate loss.
Security before, during, and after a transfer
Before: confirm the person, reason, amount, and payment identifier. Check whether the chosen method provides suitable protections.
During: read every confirmation screen, ignore instructions to bypass warnings, and never share a verification code.
After: verify the transaction in the official app, save the receipt when appropriate, and investigate unexpected account or device alerts.
If the phone or payment account is compromised
Use a trusted device to change the account password and the password of the connected email account. Revoke unfamiliar sessions, review linked banks and cards, and contact the provider. If the phone is missing, use the operating system’s device controls and notify the wireless carrier when SIM misuse is possible.
More payment-security questions
Can a support agent ask me to install a screen-sharing app?
Unexpected support should not require remote control of the phone or access to a payment app. End the interaction and contact the provider directly.
Is a QR-code payment automatically safe?
No. A QR code only encodes payment or link information. Confirm who created it and review the recipient before approving the transfer.
What if I sent money to the wrong person?
Contact the payment service immediately and follow its mistaken-payment process. Do not pressure or threaten the recipient, and understand that reversal may depend on their cooperation and provider rules.
Can a “recovery specialist” get my money back?
Be cautious. Recovery scams target previous victims and demand an upfront payment or sensitive information. Work with the original provider, financial institution, and appropriate authorities.
Payment safety for families and businesses
Families can agree on a verification phrase or require a voice call before emergency transfers. Businesses should publish official payment instructions, train staff to treat changed bank details as a high-risk event, and confirm changes through a known contact. Employees should not approve an urgent transfer only because a message appears to come from an executive.
For marketplace sales, keep communication, invoices, shipping evidence, and payment inside the platform’s approved flow. For rent, services, or recurring payments, confirm changes to the recipient through an established channel. A familiar logo, professional invoice, or accurate transaction history can be copied from a compromised account.
Payment security is strongest when account controls and transaction verification work together. Protect the phone and email account, but also confirm the human request before authorizing irreversible movement of money.