Money Transfer Scams: How to Avoid Them in 2026

Affiliate disclosure: We may earn a commission when you sign up through our links. This doesn't affect our rankings — see our methodology.

In 2025, the FBI's Internet Crime Complaint Center (IC3) received over 880,000 complaints totaling $12.5 billion in reported losses — with money transfer fraud representing a significant portion. The real number is likely much higher, since many victims never report.

Money transfer scams succeed not because the technology is insecure, but because scammers exploit human trust, urgency, and emotion. This guide covers every major scam type, the red flags that identify them, and exactly what to do if you have been targeted.

The 7 Most Common Money Transfer Scams

1. Advance Fee Fraud ("419 Scams")

How it works: You receive an email, letter, or message claiming you have won a lottery, inherited money, or been selected for a business opportunity. To access the funds, you must first pay a processing fee, tax, or legal cost via wire transfer or money order.

The fee might start small — $200 to $500 — but once paid, additional fees appear. Victims have reported paying dozens of escalating fees before realizing no payout exists. Some advance fee operations run for months, extracting tens of thousands of dollars from a single victim.

Red flags:

• You did not enter any lottery or contest
• The message comes from a free email address (Gmail, Yahoo, Hotmail)
• You must pay money to receive money — legitimate winnings are never structured this way
• Urgency: "You must respond within 48 hours or forfeit your claim"

2. Phishing Scams

How it works: You receive an email, text, or notification that appears to come from a legitimate transfer service — Wise, Remitly, PayPal, or your bank. The message claims there is a problem with your account, a suspicious transaction, or a required verification. It contains a link to a fake website that mirrors the real one.

When you enter your login credentials on the fake site, the scammers capture them and use them to access your real account. Advanced phishing attacks in 2026 use AI-generated content that is nearly indistinguishable from legitimate communications.

Red flags:

• Sender email address does not match the company's official domain (check carefully — scammers use similar domains like "wise-secure.com" or "remitly-verify.net")
• Generic greetings ("Dear Customer") instead of your name
• Links that do not point to the company's official website (hover before clicking)
• Threats of account closure or legal action if you do not act immediately

Quotable statistic: Phishing attacks increased 58% year-over-year in 2025, with financial services being the most impersonated sector at 27% of all phishing attempts, according to the Anti-Phishing Working Group (APWG).

3. Romance Scams

How it works: Scammers create convincing profiles on dating apps, social media, or even professional networking sites. They invest weeks or months building an emotional connection, often communicating daily via text, voice calls, or video (sometimes using deepfake technology).

Once trust is established, they introduce a financial emergency: a medical crisis, a business deal gone wrong, a need to travel to meet you. They specifically request wire transfers or money transfers because these are difficult to reverse.

The scale is staggering: The FBI reported romance scams caused $1.3 billion in losses in 2024, with an average loss of $14,000 per victim. Some victims lose their life savings — losses exceeding $100,000 are not uncommon.

Red flags:

• The person cannot meet in person or cancels video calls at the last minute
• The relationship progresses unusually quickly to declarations of love
• Financial requests begin — always with a compelling, emotional story
• They ask you to send money via wire transfer, cryptocurrency, or gift cards
• Their profile photos appear on other profiles when reverse-image searched

4. Fake Transfer Service Scams

How it works: A website or app presents itself as a money transfer service offering significantly better exchange rates or lower fees than established providers. The site looks professional, with fake reviews and fabricated licensing information.

You submit a transfer, provide your bank details and personal information, and the money disappears. The service either never sends the funds or the entire site goes offline within weeks.

Red flags:

• Exchange rates that seem too good to be true (significantly better than mid-market rate)
• No verifiable regulatory licensing — check the regulator databases we list
• No physical address or the address does not exist on Google Maps
• Payment only accepted via bank transfer (no credit card option)
• Domain was registered very recently (check on whois.com)

5. Overpayment Scams

How it works: Common in online selling (Craigslist, Facebook Marketplace, freelancing). A buyer sends you a payment for more than the agreed amount — via check, money order, or transfer — and asks you to wire the difference back. The original payment turns out to be fraudulent and is reversed, but your refund wire cannot be recovered.

Red flags:

• Payment exceeds the agreed amount with a request to return the excess
• The buyer insists you wire the refund quickly, before the original payment clears
• They have a plausible but convoluted explanation for the overpayment

6. Impersonation Scams (Government or Family)

How it works: Scammers impersonate government agencies (IRS, Social Security, immigration) or family members in distress. Government impersonation scams threaten arrest, deportation, or legal action unless you immediately wire a payment. Family impersonation scams ("grandparent scams") claim a relative is in jail, in an accident, or stranded abroad.

In 2026, AI voice cloning makes family impersonation scams especially convincing — scammers can replicate a relative's voice from just a few seconds of audio scraped from social media. According to our 2026 research, AI-powered deepfakes and voice cloning have become the fastest-growing scam vector, with criminals able to generate convincing audio in under 3 seconds from publicly available recordings. The recommended defense is a pre-agreed family "safe word" that a scammer would not know.

Red flags:

• Government agencies never demand payment via wire transfer, gift cards, or cryptocurrency
• Extreme urgency with threats of immediate consequences
• Request to keep the situation secret ("Don't tell anyone or you'll be arrested")
• If it claims to be a family member, hang up and call them directly on their known number

7. Investment and Crypto Scams

How it works: "Pig butchering" scams involve scammers building relationships (often via dating apps or social media) and gradually introducing fake investment opportunities, typically in cryptocurrency or forex. Victims are directed to fraudulent platforms showing fake returns, encouraged to invest more, and eventually unable to withdraw funds.

These scams frequently use money transfer services for the initial deposits. The FBI reported $4.57 billion in cryptocurrency investment fraud losses in 2025 — making it the single largest fraud category.

8. QR Code Phishing ("Quishing")

How it works: Scammers place fraudulent QR codes on fake parking meters, restaurant menus, or in emails and text messages. When scanned, these codes redirect you to convincing payment pages that capture your banking credentials or initiate unauthorized transfers.

According to our 2026 research, QR code phishing attacks increased by 270% between 2024 and 2025, making it one of the fastest-growing attack vectors. The danger is that QR codes are inherently opaque — you cannot tell where a QR code leads before scanning it, unlike a visible URL.

Red flags:

• QR codes on stickers placed over legitimate codes (especially at parking meters or point-of-sale terminals)
• Unsolicited QR codes in emails or text messages
• QR codes that redirect to shortened URLs or unfamiliar domains
• Any QR code that asks for banking login credentials

Universal Red Flags: The Scam Detection Checklist

Regardless of the specific scam type, these warning signs appear consistently:

1. Pressure to act immediately. Legitimate financial transactions do not require split-second decisions.
2. Request for a specific payment method. Scammers prefer wire transfers, cryptocurrency, and gift cards because they are difficult to trace and impossible to reverse.
3. You must pay money to receive money. This is never how legitimate winnings, inheritances, or business opportunities work.
4. Communication from free email addresses. Real financial institutions use their own domains.
5. Secrecy requests. "Don't tell your bank" or "Don't discuss this with family" is a manipulation tactic.
6. Too-good-to-be-true offers. Exchange rates well below market, guaranteed investment returns, or free money.
7. Inconsistent or unverifiable details. Company registration numbers that do not check out, addresses that do not exist, or staff names with no online presence.

How to Protect Yourself: Practical Steps

Before Sending Any Transfer

• Verify the recipient's identity independently. If someone claims to be from a company or government agency, hang up and call the official number from their website — not a number they provided.
• Use licensed providers only. Check regulatory databases before using any service. Our provider security guide shows you how.
• Enable two-factor authentication on all financial accounts.
• Never click links in unsolicited emails. Instead, type the website address directly into your browser.
• Set up transaction alerts so you are immediately notified of any account activity.

Adopt a Zero-Trust Mindset

Security professionals recommend treating every unexpected financial request as potentially fraudulent until verified through an independent channel. This means:

• Verify every request independently. If you receive instructions to change payment details, call the requester on a number you already have — never use a number provided in the new message.
• Establish a family safe word. With AI voice cloning now capable of replicating voices from seconds of audio, a pre-agreed code word that a scammer would not know is your best defense against impersonation calls.
• Slow down. Scams rely on urgency. Any legitimate financial request can wait 24 hours for verification.

For High-Value Transfers

• Verify bank details over the phone. For large transfers, call the recipient on a known number to confirm account details — do not rely on emailed instructions, which may have been intercepted.
• Start with a small test transfer. Send a small amount first and confirm receipt before sending the full amount.
• Use a provider with fraud guarantees. Some services offer protection for authorized push payment fraud — check the terms before sending.

What to Do If You Have Been Scammed

Time is critical. Follow these steps immediately:

1. Contact your transfer provider. If the transfer has not yet been collected, it may be possible to cancel or reverse it. Wise allows cancellation of pending transfers. Western Union may be able to halt uncollected cash pickups.
2. Call your bank. If you shared account details, your bank can freeze your account, block unauthorized transactions, and issue new credentials.
3. File a report with the FTC at reportfraud.ftc.gov.
4. Report to the FBI's IC3 at ic3.gov — especially for international fraud.
5. File a local police report. You will need this for insurance claims and for your bank's fraud investigation.
6. Place fraud alerts with all three credit bureaus (Equifax, Experian, TransUnion) if you shared personal identity information.
7. Change all passwords for financial accounts, email, and any account that shared the same password.
8. Report to the platform where you encountered the scammer (dating app, social media, marketplace).

Recovery reality check: According to our 2026 research, fewer than 30% of wire transfer fraud victims recover any money, based on FTC data. The median loss for wire transfer scam victims is approximately $10,000 — significantly higher than credit card fraud losses, which average under $500. This is why prevention is dramatically more effective than recovery. For understanding how legitimate transfers protect your money, see our safety guide.

How Transfer Providers Fight Scams

Major providers invest heavily in fraud prevention:

• Machine learning detection: Algorithms analyze transfer patterns and flag transactions matching known scam profiles
• Identity verification: KYC processes verify both sender and, in some cases, recipient identity
• Transaction limits: New accounts have lower limits until trust is established
• Cooling-off warnings: Some providers now display scam awareness warnings before first-time transfers to new recipients
• Dedicated fraud teams: 24/7 teams that can freeze suspicious transactions in real time

To understand how much protection different providers offer, read our guide to how money transfer companies work.

Frequently Asked Questions

What are the most common money transfer scams in 2026?

The most common money transfer scams include advance fee fraud (pay a fee to unlock a larger sum), romance scams (building fake online relationships to request money), phishing (fake emails or websites impersonating transfer services), fake transfer service scams (unlicensed services that disappear with funds), and overpayment scams (sending excess money and requesting a refund of the difference).

How can I tell if a money transfer request is a scam?

Key red flags include: urgency or pressure to send money immediately, requests to use specific transfer methods (especially wire transfers or gift cards), someone you have never met in person asking for money, requests to pay fees upfront to receive a larger sum, poor grammar in official-looking communications, and transfer requests to countries you have no connection to.

Can I get my money back after a money transfer scam?

Recovery depends on how you sent the money and how quickly you act. Wire transfers and cash pickups are very difficult to reverse once collected. If you used a credit card, you may be able to initiate a chargeback. Report to your transfer provider immediately — some offer fraud guarantees. File reports with the FTC, FBI IC3, and your local police. Recovery rates are low (under 30% for wire transfer fraud), which is why prevention is critical.

What should I do if I have already sent money to a scammer?

Act immediately: 1) Contact your transfer provider to halt or reverse the transaction. 2) Call your bank if you shared account details. 3) File a report with the FTC at reportfraud.ftc.gov. 4) Report to the FBI's IC3 at ic3.gov. 5) File a police report. 6) Change passwords for all financial accounts. 7) Place a fraud alert on your credit reports with all three bureaus.

Are money transfer apps safer than wire transfers for avoiding scams?

Licensed money transfer apps like Wise, Remitly, and OFX offer more consumer protections than traditional wire transfers, including identity verification of recipients, real-time fraud monitoring, and in some cases fraud guarantees. However, no method is scam-proof — the key protection is verifying who you are sending to, regardless of the method used.

How do romance scams involving money transfers work?

Romance scammers create fake profiles on dating apps or social media, build emotional connections over weeks or months, then fabricate emergencies requiring money (medical bills, travel costs, business problems). They specifically request wire transfers or money transfers because these are harder to reverse. The FBI reported romance scams caused $1.3 billion in losses in 2024, with an average loss of $14,000 per victim.

What is QR code phishing (quishing) and how does it target money transfers?

QR code phishing, or quishing, involves scammers placing fraudulent QR codes on fake parking meters, in emails, or over legitimate codes at point-of-sale terminals. When scanned, these codes redirect to fake payment pages that steal your banking credentials. QR code phishing attacks increased by 270% between 2024 and 2025, making it one of the fastest-growing attack vectors. Never scan QR codes from unknown sources, and verify the destination URL before entering any financial information.