ZYSKORO / RESEARCH DESK
What to do after a suspicious investment payment
Act promptly, preserve evidence and use official channels. Recovery depends on the facts and payment method.
Secure what you can
Stop sending additional money, including supposed “unlock” or “tax” payments. Change passwords for accounts you shared and enable multifactor authentication. If you installed remote-access software at someone's request, seek trusted technical help to remove it safely.
Create an evidence file
Save the URL, legal names used, messages, payment receipts, transaction IDs, dates and screenshots of the exact claims. Write a chronology while details are fresh. Keep originals; do not alter receipts or message metadata.
Contact the payment provider and regulator
Tell your bank, card issuer or exchange immediately and ask what dispute or recall options exist for that particular transfer. Report the offer to your national financial regulator or law enforcement. In the UK, the FCA Warning List explains how to report suspected unauthorised firms; in the US, Investor.gov points to reporting routes.
Watch for recovery pitches
Anyone who claims they can guarantee recovery in exchange for a new upfront fee should be independently verified. Share sensitive documents only through official channels you located yourself.