What Is a Fraudulent Transaction? Elements, Types, and Liability

A fraudulent transaction is a financial exchange built on deliberate deception: a false statement, a stolen identity, or a forged authorization used to move money or property from someone who wouldn’t have agreed to the deal if they knew the truth. Federal law caps what you owe when someone hits your accounts, but those caps depend on how fast you report. The FBI’s Internet Crime Complaint Center logged $16.6 billion in reported fraud losses in 2024, with business email compromise alone accounting for $2.77 billion.¹

What Makes a Transaction Legally Fraudulent

Not every bad deal is fraud. Under the common-law standard used across most U.S. jurisdictions, a civil fraud claim requires five elements, and missing any one of them sinks the case.

The person made a false statement about something material — a fact important enough to influence your decision. Telling a buyer a car has never been in an accident when the frame was rebuilt is material. Vague sales enthusiasm (“great investment!”) isn’t, and neither are opinions or predictions.

They knew it was false when they said it, or spoke with reckless disregard for the truth. Lawyers call this scienter. An honest mistake based on the information available isn’t fraud, even if the product turns out to be defective.

They intended to deceive you — the statement was made specifically to get you to act. Intent is what separates fraud from bad judgment or genuine accounting errors.

You reasonably relied on the statement. If obvious red flags were in front of you, or contradictory information was available and you ignored it, a court may find your reliance wasn’t justified.

You suffered actual financial loss traceable to that reliance. If you believed the lie but came out whole anyway, there’s no fraud claim.

Common Forms Fraudulent Transactions Take

Payment and Identity Fraud

Payment fraud uses your existing accounts without permission — card data captured through skimmers or breaches, then run as cloned cards or online purchases. Identity theft goes further: a criminal uses stolen personal information like your Social Security number to open new credit lines or bank accounts in your name. Because those accounts are new, victims often don’t find out until a collections notice arrives or a credit application is denied.

Investment and Securities Fraud

Investment fraud misrepresents the risk or profitability of a financial product. The classic example is the Ponzi scheme, where “returns” paid to early investors are actually money from newer investors, and the whole structure collapses when new money slows. Affinity fraud is a variant that exploits shared identity within a religious, professional, or ethnic community to lower victims’ guard.

Business Email Compromise

In business email compromise, an attacker studies a company’s payment routines, then impersonates an executive or vendor through a spoofed or hacked email account to request an urgent wire transfer. Because wires are nearly irreversible, the money is usually gone within hours. BEC accounted for $2.77 billion in reported losses in 2024.¹

What You Actually Owe When Your Account Is Hit

Federal law caps your liability for unauthorized transactions, but the rules for credit cards and debit cards are not the same. With a debit card, the timeline is unforgiving.

Credit Cards

Under the Truth in Lending Act, your maximum liability for unauthorized credit card charges is $50, and it drops to zero for any charges that happen after you notify the issuer.² Most major card networks go further with zero-liability policies, so you often won’t pay even the statutory $50.

Separately, to dispute an unauthorized charge as a billing error, you have 60 days from the date the statement was sent. Send written notice to the address your issuer designated for billing disputes, not the payment address. The issuer then has two billing cycles, and no more than 90 days, to investigate and resolve it.³

Debit Cards and Electronic Transfers

Debit cards fall under the Electronic Fund Transfer Act, and your exposure depends entirely on how fast you report:

Report a lost or stolen card before any unauthorized transfer, and your liability is $0.
Report within 2 business days of learning about the loss or theft, and liability is capped at $50.
Report after 2 business days but within 60 days of your statement being sent, and liability can reach $500.
Report more than 60 days after your statement, and you face unlimited liability for unauthorized transfers that happen after that 60-day mark.

The gap between $50 and losing everything in your checking account is a few days of delay.⁴ Check statements on a schedule, not just when something feels off.

Business Accounts

These consumer protections do not extend to business bank accounts. Liability for unauthorized wires and ACH transactions on commercial accounts is governed by the Uniform Commercial Code and by the security procedures written into your bank’s account agreement, which typically shift the loss to the business customer. If your company initiates wires or uses online banking, the answer to who pays for fraud is in that agreement.

What to Do in the First 24 Hours

Speed beats thoroughness. Details can be added later; the liability clock cannot be turned back.

Call Your Bank or Card Issuer Right Away

Ask them to freeze or restrict the account and issue new card numbers or credentials. Follow the call with a written notice by email or letter so you have a documented record of when you reported. That timestamp is what triggers your federal liability protections.

File Official Reports

Report the fraud to the Federal Trade Commission at IdentityTheft.gov. The FTC generates an Identity Theft Report and a personalized recovery plan.⁵ For internet-based schemes, wire fraud, or BEC, file separately with the FBI’s Internet Crime Complaint Center.⁶ File a police report as well, especially if physical theft was involved; some banks and creditors want a police report number before they’ll process a fraud claim.

Freeze Your Credit and Add a Fraud Alert

Place a credit freeze with all three major credit bureaus — Equifax, Experian, and TransUnion. A freeze blocks new creditors from pulling your credit report, which prevents new accounts from being opened in your name. Federal law guarantees you the right to a free credit freeze.⁷

Also place a fraud alert, which requires creditors to verify your identity before issuing new credit. An initial alert lasts one year. If you file an Identity Theft Report through the FTC, you qualify for an extended alert lasting seven years.⁷ Unlike a freeze, an alert doesn’t block credit checks — it just adds a verification step. Use both.

Preserve Everything

Save transaction receipts, statements, screenshots of fraudulent charges, and any communications with the fraudster. If the fraud arrived by email, preserve the full message headers. This documentation supports your bank’s investigation, your FTC report, and any future civil claim or insurance recovery.

Criminal Prosecution and Civil Lawsuits

One fraudulent transaction can trigger two separate legal tracks that run independently.

Criminal cases are brought by federal or state prosecutors, not by you as the victim. The government must prove guilt beyond a reasonable doubt. Federal prosecutors most often use the wire fraud and mail fraud statutes, both of which carry up to 20 years, or up to 30 years if a financial institution was affected.⁸⁹ When fraud involves unauthorized computer access, prosecutors may also charge under the Computer Fraud and Abuse Act.¹⁰

Civil lawsuits are yours to bring. The proof standard is lower — preponderance of the evidence, meaning fraud more likely than not occurred — and the goal is financial recovery rather than punishment. A successful plaintiff can recover compensatory damages and, in some cases, rescission of the fraudulent contract. A criminal acquittal doesn’t block a civil suit, because the two proceedings use different proof standards.

Can You Deduct a Fraud Loss on Your Taxes?

It depends on whether the money was tied to a profit-seeking activity.

Losses from an investment scam, Ponzi scheme, or other fraud connected to a transaction you entered into for profit are potentially deductible as a theft loss under Internal Revenue Code Section 165(c)(2).¹¹ You have to show the loss qualifies as theft under your state’s law, that you have no reasonable prospect of recovery, and that the transaction was motivated by profit. Report on IRS Form 4684; Publication 547 explains the calculation.¹² Ponzi victims get a simplified path under IRS Revenue Procedure 2009-20, which lets the loss be claimed in the year the scheme is discovered.¹³

Personal theft and scam losses — money stolen outside a profit-seeking context — are treated differently. The Tax Cuts and Jobs Act of 2017 suspended the personal casualty and theft loss deduction starting in 2018, limiting it to losses from federally declared disasters. The One Big Beautiful Bill Act, signed in 2025, made that change permanent and expanded the exception to include state-declared disasters.¹⁴ For most personal fraud victims starting in 2026, no theft loss deduction is available unless the loss is tied to a declared disaster.

Whichever category applies, you can only deduct the portion of the loss that isn’t covered by insurance, a bank reimbursement, or a settlement. Reduce your deductible loss by any recovery you received.¹¹

1
Internet Crime Complaint Center. 2024 IC3 Annual Report
2
Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card
3
Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors
4
Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
5
Federal Trade Commission. IdentityTheft.gov Helps You Report and Recover from Identity Theft
6
Internet Crime Complaint Center. Internet Crime Complaint Center Home Page
7
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts
8
Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television
9
Office of the Law Revision Counsel. 18 USC 1341 – Frauds and Swindles
10
Office of the Law Revision Counsel. 18 USC 1030 – Fraud and Related Activity in Connection with Computers
11
Office of the Law Revision Counsel. 26 USC 165 – Losses
12
Internal Revenue Service. Instructions for Form 4684
13
Internal Revenue Service. Help for Victims of Ponzi Investment Schemes
14
Internal Revenue Service. Casualty Loss Deduction Expanded and Made Permanent