Eight categories, eight different recovery routes
What works for a business email compromise is useless for a romance scam. The route, the deadline, and the odds all depend on the type — start by finding yours.
Each of the eight is set out below, with its warning signs and the recovery route that applies to it.
Find your situation
Each page covers the warning signs, how we approach recovery for that category, and what makes cases in it succeed or fail.
Time-critical
Business email compromise is measured in hours, not weeks
A wire that has just settled can often be recalled. The same wire a week later usually cannot. If a fraudulent transfer left your organisation's account in the last 48 hours, call rather than email.
The signs that repeat across categories
Whatever the fraud, the same handful of pressures show up. If you are being pushed on any of these, slow down.
Urgency
Unverifiable claims
An unusual payment route
Contact you did not initiate
Difficulty withdrawing
A story that shifts
Not sure which category you fall into?
Most people aren't, and it rarely matters for the first conversation. Describe what happened and we will work out the typology from there.