Incident Report

Bank Transfer Scam Refunds: What the First Year Showed

If a scammer tricks you into sending money yourself, can you get it back? In the UK the rules changed, and the first-year numbers are now in.

Updated October 11, 2026
TL;DR

The Payment Systems Regulator (PSR) says that since the UK's reimbursement requirement began on October 7, 2024, 88% of money lost to authorised push payment scams and claimed back was returned, with £112 million reimbursed in the first nine months. 126,000 claims were made. But 49% of fraud victims in its survey did not try to claim. See how scammers find you.

Scammers start with details that have already leaked. Is your email one of them?

Free · About 30 seconds · No sign-up · Email not stored

Many scams end with the victim authorising a payment. The criminal never needs to hack the account because the account holder does the transfer. For years, those payments were hard to recover. A rule change in the UK shows what happens when responsibility shifts toward the banks.

What happened

According to the PSR, the authorised push payment (APP) reimbursement requirement took effect on October 7, 2024 and applies to qualifying Faster Payments and CHAPS transactions. In the first nine months, from October 7, 2024 to June 30, 2025, £112 million was reimbursed.

The PSR says 88% of money lost to APP scams and claimed back from a payment firm was returned, up from 66% in the same period of 2023/24. There were 126,000 claims, about 15% fewer than a year earlier. It says 84% were resolved within five business days and 97% within 35 days.

How it worked

An APP scam is one where the victim is persuaded to send a payment to a criminal, for example by a fake bank call, a fake invoice or an investment pitch. Under the requirement, firms must reimburse qualifying victims, with set timelines for decisions.

The PSR notes that direct comparison with data before the policy is not possible because the definition of an APP scam changed. The headline percentage is therefore best read as a description of the new system, not as a measure of improvement over the old one.

What was exposed

The PSR's article is about the money, not the data. Victims were socially engineered into authorising payments themselves, and the article does not describe individual data exposure. We include it because the way people lose money often starts with data: a scammer who knows your bank, your recent purchases or your relatives can sound far more believable.

How it ended

The outcome here is a policy result. Most claims were resolved quickly and most claimed money was returned. But the PSR's survey of 1,448 UK adults found that 49% of fraud victims did not attempt to access reimbursement and 71% were unaware of the policy. Almost 60% of APP fraud victims were hit by purchase fraud.

Your best defence is knowing what scammers may already have. Check your email free.

Free · About 30 seconds · No sign-up · Email not stored

What the percentages mean

The jump from 66% to 88% looks dramatic, but the PSR warns that the two figures are not directly comparable. Before the policy, many payment firms did not have to reimburse, and the scope of what counted as an APP scam was different.

What can be said safely is narrower. Under the new rules, most money claimed by qualifying victims was returned, and most claims were resolved within five business days. The less comfortable numbers are the ones about awareness: 71% of surveyed fraud victims had not heard of the policy.

Key facts at a glance

  • Requirement started: October 7, 2024
  • Reimbursed in nine months: £112 million
  • Share of claimed losses returned: 88%, compared with 66% a year earlier
  • Claims: 126,000, about 15% fewer than a year earlier
  • Resolved within five business days: 84%
  • Victims who did not attempt to claim: 49% in the PSR survey

Why this matters

Rules only help people who know about them. A reimbursement scheme that half of victims never use leaves many people uncompensated even though they are entitled. The practical lesson is to report quickly and ask your bank directly whether the payment qualifies.

What you can do

1Report to your bank straight away

Speed helps recovery, and some timelines depend on when you report.

2Ask specifically about reimbursement

Say that you believe you were the victim of an authorised push payment scam.

3Keep evidence

Save messages, call logs and payment details.

4Reduce what scammers can learn about you

See how scammers get your phone number and email.

What the PSR does not say

The article does not describe individual cases or breaches, and it warns against simple comparison with the past. For a case that fed bank-transfer fraud, see LabHost.

Related reading that helps with cases like this: how scammers find your phone number and email, how to prevent identity theft and what an exposed phone number means. You can also try our free phone number exposure check.

Sources

Frequently asked questions

When did UK reimbursement for bank-transfer scams start?

The requirement took effect on October 7, 2024, for qualifying Faster Payments and CHAPS transactions.

How much was reimbursed?

The PSR says £112 million was reimbursed in the first nine months, and 88% of claimed losses were returned.

Do all victims claim?

No. In the PSR's survey, 49% of fraud victims did not attempt to access reimbursement, and 71% were unaware of the policy.

What is an APP scam?

An authorised push payment scam is one where the victim is tricked into authorising a payment to a criminal.

Step 1 · Free

See if your email has already leaked

  • Checks your email against known data breaches
  • Shows which sites leaked it, when, and what leaked
  • We do not store the email you check
Check my email free →
Step 2 · Hear about the next leak

Get alerted when your email leaks

Every NordVPN plan includes Dark Web Monitor, which alerts you if your email appears in new leaks.

See NordVPN →

Affiliate link. We may earn a commission at no extra cost to you.

Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.

Digital Footprint Scan creates practical privacy guides designed to help people understand and reduce unnecessary online exposure. Information can vary by website and jurisdiction, so check the current policies of the service or site involved before taking action. This is a systemic story about a rule, not a single case. It covers the PSR's own figures for qualifying Faster Payments and CHAPS transactions. The PSR says direct comparison with earlier data is not possible because the definition of an authorised push payment scam changed.