Fraud Loss: Reporting, Deductions, and Recovery

If you’ve been defrauded, fraud loss reporting and deduction follow a fixed order: call your bank the same day to preserve your federal liability protections, gather your records, file reports with police and the relevant federal agencies, and only then work out whether the loss qualifies for a tax deduction. The deadlines that matter most are measured in days. Miss them and the stolen money becomes yours to eat.

Call Your Bank First, and Watch the Clock

The single most expensive mistake fraud victims make is waiting to notify their financial institution. Federal law ties your personal liability for unauthorized transactions directly to how fast you act, and the rules differ sharply by payment method.

Credit Cards

Federal law caps your liability for unauthorized credit card charges at $50, regardless of when you report.¹ Most major issuers offer zero-liability policies on top of that. Credit cards give you the strongest federal protection of any payment method, but report promptly anyway to trigger the investigation and stop further charges.

Debit Cards and Bank Accounts

Debit cards and electronic transfers from bank accounts fall under Regulation E, and exposure climbs quickly:²

Report within 2 business days of learning of the loss, and your liability is capped at $50.
Report after 2 business days but within 60 days of your statement, and liability rises to as much as $500.
Report after 60 days from the statement, and you can be liable for the full amount of any unauthorized transfers made after that window closed, with no cap.

That last tier is where people get devastated. A fraudster draining a checking account over several weeks can leave a victim with no federal recourse if the 60-day window closes without a report.

Wire Transfers

Wire transfers are the worst-case scenario. They’re governed by UCC Article 4A, not consumer protection law. There is no federal chargeback right, no dispute window, and no liability cap. Once a wire clears, your only hope is that the receiving bank can freeze the funds before they’re withdrawn or moved. Scammers push victims toward wires for exactly this reason. If a wire was involved, call in minutes, not hours.

Follow every phone call with written notice to the bank. Keep a copy. Note the name of everyone you speak with and the time you called.

Build Your Evidence File Before You File Reports

Before contacting police or federal agencies, put your documentation together. The same file supports your police report, any insurance claim, and a future tax deduction if you qualify.

Pull bank and brokerage statements showing the outgoing transactions. Add wire confirmations, canceled checks, credit card statements, receipts, and any invoices the fraudster provided. Preserve emails, text messages, and voicemails, with metadata showing dates and sender information. Screenshots help, but keep the originals when you can.

Write out a timeline from your first contact with the fraudster through the date you discovered the fraud. The discovery date is legally significant because it determines which tax year the loss belongs to.³

Then build a simple ledger listing each fraudulent transaction by date, amount, payee, and description. Your loss is the money or fair market value of property you actually lost, not what you hoped to gain. Anticipated profits from an investment that never existed aren’t part of the calculation. Reduce the total by anything you’ve already recovered or expect to recover from insurance, your bank, or another source.

Where to File Reports

No single agency handles everything. Expect to file with several, and don’t skip any of them, since each report unlocks something you’ll need downstream.

Local Police

File a police report even if the perpetrator is in another state or country. Insurance companies typically require a police report number before processing a fraud claim, and the IRS may ask for one during an audit. Bring your timeline and loss ledger. Certified copies of the report usually cost a small administrative fee.

Federal Trade Commission

If the fraud involved identity theft, where someone used your personal information to open accounts, file tax returns, or make purchases, report at IdentityTheft.gov. That site generates a recovery plan and an official Identity Theft Report that creditors and credit bureaus recognize.⁴ For other fraud (online shopping scams, business impostor schemes, phishing that didn’t compromise your identity) report at ReportFraud.ftc.gov.⁵

FBI Internet Crime Complaint Center

Any fraud that involved the internet, email, or electronic communications should also go to the FBI’s IC3 at ic3.gov.⁶ Individual complaints rarely trigger a direct investigation, but IC3 data feeds task force operations that target high-volume fraud rings.

Social Security Administration

If your Social Security number was compromised, contact the SSA Office of the Inspector General at 1-800-269-0271 or file online at oig.ssa.gov. You can also request two protective blocks on your SSA account: an eServices block, which prevents anyone from viewing or changing your information online, and a Direct Deposit Fraud Prevention block, which prevents changes to your payment routing. Both blocks require an in-person visit to a local SSA office to remove.⁷

IRS Identity Theft Affidavit

If someone used your Social Security number to file a fraudulent tax return, claim your dependents, or gain employment, file IRS Form 14039, the Identity Theft Affidavit. The form places a protective marker on your tax account and alerts the IRS to scrutinize returns filed under your number.⁸ If the fraud didn’t affect your taxes, the IRS directs you to IdentityTheft.gov instead. You can also request an Identity Protection PIN from the IRS to block future fraudulent filings.

Can You Deduct the Loss?

The tax answer depends almost entirely on one question: was the stolen money connected to a business or an investment, or was it personal? That answer decides whether any deduction exists at all.

Personal Fraud Losses Generally Aren’t Deductible

This is where most individual victims run into a wall. Congress eliminated the personal theft loss deduction for anything other than federally declared disasters. The Tax Cuts and Jobs Act suspended the deduction for tax years 2018 through 2025, and P.L. 119-21 made the restriction permanent while expanding qualifying events to include state-declared disasters recognized by the Secretary of the Treasury starting in 2026.⁹

So if someone stole your identity and drained your personal checking account, or a romance scammer convinced you to send gift cards, you have no federal tax deduction. The loss is real but not deductible. That makes the bank notification and recovery steps above the only tools you have.

Business Fraud Losses Are Fully Deductible

Fraud losses connected to a trade or business are deductible against ordinary income under IRC Section 165(c)(1).³ An employee who embezzles from your company, a vendor who takes payment and disappears, or a customer using a stolen credit card for a large purchase all produce deductible business losses. Report on Schedule C for sole proprietorships, or on the appropriate corporate or partnership return. Claim the deduction in the tax year you discover the loss and determine there’s no reasonable prospect of recovery.

Investment Fraud Losses Are Still Deductible

Losses from fraud tied to a profit-seeking transaction occupy a middle ground. These aren’t personal-use losses subject to the disaster-only limitation. A theft loss from a fraudulent investment falls under IRC Section 165(c)(2), which covers losses from transactions entered into for profit, and remains deductible.¹⁰ Money you put into what turned out to be a fraudulent scheme can be claimed on Form 4684, Section B, even though an identical dollar amount lost from a personal checking account cannot.

Ponzi Scheme Safe Harbor

Victims of Ponzi-type investment fraud get a streamlined path through IRS Revenue Procedure 2009-20. The safe harbor lets you claim a deduction without waiting for the criminal case to conclude or for every dollar of potential recovery to resolve.¹¹ The deductible percentage depends on whether you’re pursuing third-party recovery, such as trustee actions, clawback litigation, or class actions:

95% of the qualified investment if you’re not pursuing any third-party recovery.
75% of the qualified investment if you are pursuing or intend to pursue third-party recovery.

Subtract any actual recovery already received and any potential insurance or SIPC recovery. Qualified investment means the total cash or property you put in, plus any income you reported on your tax returns from the scheme, minus any withdrawals you took out. Report the loss on Form 4684, Section B, using the Ponzi-scheme lines, and attach a signed statement confirming the loss amount and discovery date.¹²

When to Claim and What to Keep

You claim the loss in the tax year you discover the fraud, not the year it happened.³ If a civil suit or insurance claim is still pending and you have a reasonable prospect of recovery, deduct only the unrecovered portion. If you later recover more than you expected, the excess becomes income in the year you receive it. Keep everything (police reports, agency filings, insurance denials, correspondence) indefinitely. The IRS audits theft loss deductions, and the burden of proof is entirely on you.

Getting Money Back and Locking Down the Damage

Chargebacks and Bank Disputes

Credit card chargebacks are your strongest recovery tool. Federal law limits exposure to $50, and the issuer investigates and reverses the transaction if the dispute is valid.¹ Debit card disputes follow Regulation E’s tiered liability, so the speed of your report controls the outcome. Wire transfers have no chargeback mechanism at all; recovery depends on whether the receiving bank can freeze the funds before they move.

Insurance

Some homeowner’s and renter’s policies cover certain types of fraud, identity theft expenses, or off-premises theft, typically subject to a deductible. Businesses should check commercial crime policies and cyber liability coverage, which are designed for employee dishonesty and external fraud. File promptly and have your police report number ready, since most insurers require one to open a claim.

Civil Litigation

If the perpetrator is identifiable and has attachable assets, a civil lawsuit can produce a judgment. Do the math first. Legal fees add up, and a judgment against someone who has spent or hidden the money is just paper. For large losses where the fraudster has real property or business income, litigation can be worthwhile. For smaller losses, the economics rarely justify it.

Credit Freezes and Fraud Alerts

Once your reports are filed, lock down your credit to stop secondary damage. A credit freeze with each of the three major bureaus blocks new creditors from accessing your file, which stops identity thieves from opening accounts in your name. A fraud alert is lighter weight and asks creditors to verify your identity before extending credit. The freeze is more effective but you have to lift it each time you legitimately apply for credit. If your Social Security number was compromised, the SSA account blocks described above add protection that credit freezes alone can’t provide.⁷

1
Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card
2
Consumer Financial Protection Bureau. Liability of Consumer for Unauthorized Transfers
3
Office of the Law Revision Counsel. 26 USC 165 – Losses
4
Federal Trade Commission. Report Identity Theft
5
Federal Trade Commission. ReportFraud.ftc.gov
6
Internet Crime Complaint Center. Internet Crime Complaint Center
7
Social Security Administration. Fraud Prevention and Reporting
8
Internal Revenue Service. Form 14039 – Identity Theft Affidavit
9
Congress.gov. The Nonbusiness Casualty Loss Deduction
10
Internal Revenue Service. Instructions for Form 4684
11
Internal Revenue Service. Revenue Procedure 2009-20 – Treatment of Losses from Ponzi-Style Investment Arrangements
12
Internal Revenue Service. Form 4684 – Casualties and Thefts