How Authorized Push Payment Fraud Works and What You Can Do

What Authorized Push Payment Fraud Is

Authorized push payment (APP) fraud happens when a scammer tricks you into sending money directly from your bank account to an account they control — and your bank treats it as a legitimate transaction because you authorized it yourself. Unlike a stolen credit card number or a hacked password, the criminal never breaks into your account. Instead, they impersonate someone you trust — your landlord, your employer, a government agency, a utility company, or your bank itself — and convince you to move money on their behalf.

The money leaves your account through the same payment method you use for real bills: ACH transfer, wire transfer, or a real-time payment system like Zelle or FedNow. Because you initiated the payment, your bank has no technical reason to block it. Once the money reaches the scammer's account, it is often moved again within hours to another bank or converted to cryptocurrency, making it nearly impossible to recover.

APP fraud is different from other payment crimes because the victim's own action — not a security breach — is what moves the money. This gap between "you authorized it" and "you were deceived into authorizing it" is where most disputes get stuck.

Key Takeaways

• APP fraud succeeds because the scammer impersonates someone you trust and creates urgency or fear, not because they hack your account.
• Once you send the money, your bank may treat it as a completed transaction you authorized, making recovery difficult even if you report it immediately.
• The most common APP scams involve fake landlords, fake employers, fake tax agencies, and fake bank security teams calling or texting you.
• Stopping the payment before it clears — usually within hours — is your best protection; after it clears, recovery depends on the receiving bank's cooperation.
• No legitimate company will ask you to move money to a new account to "verify" it, "update" it, or "protect" it from fraud.

How the Scammer Convinces You to Send Money

APP fraud works through social engineering, not technical hacking. The scammer creates a false sense of urgency or authority that overrides your normal caution. Common scenarios include:

Fake landlord or property manager: You receive an email or text that looks like it comes from your landlord, with a new bank account number for rent. The message may say the old account was compromised or the company changed banks. You send the rent payment to the new account, which is actually controlled by the scammer.

Fake employer or payroll: You get a call or email claiming to be from your HR or payroll department, saying there was an error in your direct deposit setup and you need to confirm your bank details or move money to a temporary account. By the time you realize it was fake, the money is gone.

Fake tax or government agency: A caller claims to be from the IRS, Social Security, or your state tax authority and says you owe money immediately or your benefits will be cut off. They pressure you to send payment via wire transfer or real-time payment to "resolve" the issue.

Fake bank security team: Someone calls or texts claiming to be from your bank's fraud department, saying suspicious activity was detected on your account. They ask you to move money to a "safe" account they control, or to verify your details by sending a payment to confirm the account is real.

In each case, the scammer uses a detail that sounds real — a company name, a partial account number, a reference to a recent transaction — to build false credibility. They also create time pressure: "This needs to happen today," "Your account will be frozen," "We need this resolved before the deadline."

Why Your Bank May Not Recover the Money

When you report APP fraud to your bank, the bank's first response is often to check whether you authorized the payment. If the answer is yes — if you logged into your account and initiated the transfer yourself — your bank may classify it as an authorized transaction rather than fraud. This distinction matters legally and practically.

Under the Electronic Funds Transfer Act (EFTA), your bank is required to investigate unauthorized transfers — transfers you did not approve. But APP fraud is technically authorized by you, even though you were deceived. This means your bank has less legal obligation to refund you, though many banks do offer some protection anyway.

Even if your bank agrees to investigate, recovery depends on whether the receiving bank will freeze or return the funds. If the scammer moved the money to another bank, your bank must contact that bank and ask them to hold it. But if the receiving bank is outside the United States, or if the money has already been moved again, the receiving bank may not cooperate or may say the funds are already gone.

The longer you wait to report the fraud, the harder recovery becomes. If you report it within a few hours, your bank may be able to stop the payment before it clears. If you report it days later, the money is usually already in another account and the trail is cold.

What to Do Immediately After Sending Money to a Scammer

Time is critical. If you realize within minutes or hours that you sent money to a scammer, take these steps in order:

Step 1: Contact your bank immediately. Call the phone number on the back of your debit card or the number listed on your bank's official website — not a number the scammer gave you. Tell them you sent money to a fraudulent account and ask them to attempt to recall or reverse the payment. Some banks can stop a payment if it has not yet cleared, which usually happens within one to two business days for ACH transfers and within hours for wire transfers or real-time payments.

Step 2: Provide the receiving account details. Give your bank the account number, routing number, bank name, and account holder name of the account you sent money to. The more details you have, the better your bank can track the money.

Step 3: Ask your bank to file a fraud claim. Even if the payment has already cleared, ask your bank to open a dispute or fraud investigation. Your bank will contact the receiving bank and ask them to freeze the account and return the funds. This process can take weeks or months.

Step 4: File a report with the Federal Trade Commission (FTC). Go to reportfraud.ftc.gov and file a complaint. The FTC does not recover money directly, but it tracks fraud patterns and shares information with law enforcement. Include all details: the scammer's phone number, email address, the receiving bank name, and the exact amount.

Step 5: Report to your state's attorney general or consumer protection office. Many states have fraud hotlines or online reporting systems. This creates an official record and may trigger an investigation if the scammer is operating within your state.

Red Flags That Separate Real Requests from Scams

Legitimate companies and government agencies almost never ask you to move money to a new account or to send payment via wire transfer or real-time payment to verify or protect your account. Here are the most reliable warning signs:

Unexpected contact asking for immediate payment: Real landlords, employers, and government agencies send bills through normal channels and give you time to pay. If someone contacts you out of the blue demanding payment today, it is almost always a scam.

A request to move money to a "safe" or "temporary" account: No bank, employer, or government agency will ask you to move your money to protect it. If someone says this, hang up or delete the message immediately.

A new payment method or account number with no written notice: If your landlord or employer changes their bank account, you will receive official written notice on company letterhead, not a text or email from an unknown sender. Always verify by calling the company's main phone number — not a number provided in the suspicious message.

Pressure to pay by wire transfer, gift card, or cryptocurrency: These payment methods are irreversible. Real companies accept checks, ACH transfers, credit cards, or in-person payment. If someone insists on wire transfer or cryptocurrency, it is a scam.

A caller who refuses to let you hang up and call back: Legitimate callers will always let you verify their identity by hanging up and calling the official company number. Scammers often stay on the line to prevent you from checking.

How to Protect Yourself from APP Fraud

Because APP fraud relies on social engineering rather than hacking, technical security alone cannot stop it. Your own verification habits are your strongest defense.

Verify through an independent channel. If someone contacts you claiming to be from your bank, landlord, employer, or a government agency, do not use the phone number or email they provided. Instead, hang up or delete the message, then call the official number listed on your bill, your lease, your pay stub, or the agency's official website. Ask to speak with someone about the request. If the request is real, the person you reach will confirm it. If it is fake, they will have no record of it.

Set up alerts on your bank account. Most banks allow you to receive notifications when a large transfer or payment is initiated. This gives you a chance to stop it if you did not authorize it.

Use different passwords for different accounts. If a scammer tricks you into revealing your password, they can access only the account that password protects, not all your accounts.

Never share your full account number, routing number, or Social Security number over the phone unless you initiated the call. Scammers use this information to impersonate you or to set up fraudulent accounts in your name.

Be skeptical of urgency. Real problems rarely require you to act within the next hour. If someone is pressuring you to move money immediately, pause and verify independently before you do anything.

What Banks and Payment Networks Are Doing

Banks and payment networks have begun implementing protections against APP fraud, though coverage varies by institution and payment method. Some banks now require you to confirm large transfers by answering security questions or receiving a code. Some real-time payment systems like Zelle have added fraud detection that flags suspicious transfers. A few banks offer "push payment protection" that covers some APP fraud losses, though this is not yet standard.

However, these protections are not universal, and they do not eliminate the risk. Your bank may not offer fraud protection for APP scams, or the protection may have limits or exclusions. Always assume that once you authorize a payment, you are responsible for verifying that it is going to the right place.

The regulatory landscape is also shifting. Some countries, including the United Kingdom, now require banks to refund certain APP fraud losses. In the United States, there is no federal requirement yet, though some states and consumer advocates are pushing for stronger protections.

Frequently Asked Questions

Can I get my money back if I sent it to a scammer three days ago?

Possibly, but it depends on how quickly the scammer moved the money. If the funds are still in the receiving account, your bank can ask that bank to freeze and return them. If the money has already been transferred to another account or converted to cryptocurrency, recovery is much harder. Report it to your bank and the FTC immediately; the sooner you report it, the better your chances.

What if the scammer used a real company's name and logo in their email?

Scammers often copy logos and company names to look legitimate. This is why you should never click links or call numbers in unsolicited emails or texts. Always go directly to the company's official website or call their main phone number to verify. A real company will have no record of the suspicious message.

Is my bank responsible for the fraud if I authorized the payment?

It depends on your bank's policies and your state's laws. Under federal law, your bank has less obligation to refund authorized transfers than unauthorized ones. However, many banks do offer some APP fraud protection, and some states are moving toward requiring banks to refund certain losses. Check your bank's fraud policy or call and ask what protection they offer for APP scams.

How can I tell if a phone call from my bank is real?

Hang up and call your bank's official number on the back of your card. Tell the person who answers that you received a call and describe what they said. If it was real, the bank will confirm it. If it was fake, they will have no record. Real banks never call you asking for your password, full account number, or Social Security number.

What should I do if I almost fell for an APP scam but stopped before sending money?

You do not need to report it to your bank or the FTC if no money was sent. However, you should change your passwords, enable two-factor authentication on your accounts, and monitor your credit report for signs of identity theft. If the scammer has your personal information, they may try other fraud schemes later.