Check who is actually asking for money
A payment is legitimate when the person or company asking for it is real, has a legal right to collect from you, and is using a method that matches how they normally do business. The fastest way to verify this is to contact the organization directly using a phone number or website you find yourself—not one provided in the message asking for payment.
If someone claims to represent your bank, a government agency, a utility company, or a creditor, call the main customer service line on your statement or their official website. Tell them you received a payment request and ask if it is genuine. Legitimate organizations expect this question and can confirm whether they sent it.
Do not use contact information from an email, text, or letter you received unsolicited. Scammers copy official logos and formatting to look real. Your bank's statement has the correct number. Your utility bill has the correct number. The IRS website (irs.gov) has the correct number. Use those.
Key Takeaways
- Always call the organization directly using a number you find yourself, not one in the message asking for payment, to confirm the request is real.
- Legitimate companies rarely demand payment by wire transfer, gift card, cryptocurrency, or money order—these methods cannot be reversed if you are wrong.
- Government agencies do not typically contact you first by email or text about money you owe; they send official mail to your address on file.
- If a payment request arrives unexpectedly and creates pressure to act fast, that pressure itself is a sign the request may not be legitimate.
- Scammers often copy real logos, official language, and account numbers to appear credible, so visual similarity to a real company does not mean the request is real.
Red flags that suggest a payment request is not legitimate
Pressure to pay immediately is the strongest warning sign. Scammers create urgency because legitimate organizations do not need it—your bank account will still exist tomorrow, your utility will not shut off in the next hour without prior notice, and the IRS does not threaten arrest by text message. Real debt collectors, utilities, and government agencies follow legal procedures that include written notice and time to respond.
The payment method requested matters. Legitimate creditors and government agencies accept checks, bank transfers, credit cards, and online payment portals tied to your account. They do not demand wire transfers, gift cards, cryptocurrency, prepaid cards, or money orders—these cannot be reversed once sent. If someone insists on one of these methods, the request is almost certainly a scam.
Requests for personal information you should already have on file are another signal. Your bank knows your account number. Your employer knows your Social Security number. The IRS has your tax return. If someone claims to represent them and asks you to "verify" this information by providing it over the phone or email, they do not actually represent that organization.
How to verify a debt or bill you do not recognize
If you receive a payment demand from a company you do not remember owing money to, the debt may be real but the request may still be a scam. Debt buyers purchase old accounts and resell them; a legitimate debt collector may contact you about a real debt, but a scammer may also claim to represent that collector.
Request written proof. Under the Fair Debt Collection Practices Act, a debt collector must send you a written notice within five days of first contact that includes the amount owed, the original creditor's name, and your right to dispute the debt. If they refuse to send this or pressure you to pay before you receive it, do not pay. A real debt collector expects this request.
Verify the debt independently. Contact the original creditor directly—the credit card company, medical provider, or utility—using contact information you find yourself. Ask whether they sold the debt and to whom. Check your credit report at annualcreditreport.com (the only free, official source) to see whether the debt appears there and who is listed as the collector. If the debt does not appear on your report and the original creditor has no record of selling it, the request is likely fraudulent.
What to do if you already sent money to a suspicious payment
The speed of recovery depends on how you paid. If you used a credit card or debit card, contact your card issuer immediately and report the charge as fraudulent. Card companies can reverse charges within a set window—typically 60 days for credit cards, though debit card protections vary by bank. The sooner you report it, the better your chance of recovery.
If you sent money by wire transfer, ACH transfer, or check, contact your bank right away. Wire transfers and ACH transfers are harder to reverse because the money moves directly between accounts, but your bank can attempt to recall the transfer if it was sent recently—usually within 24 hours. A check can be stopped if it has not been deposited yet, though you may pay a fee.
If you sent money by gift card, money order, or cryptocurrency, recovery is extremely unlikely. These methods are designed to be irreversible. Report the fraud to the platform or service you used, but understand that the money is probably gone. File a report with the Federal Trade Commission at reportfraud.ftc.gov and with your local police department; this creates an official record that may help if the scammer targets others.
How to report a fraudulent payment request
Report the scam to the organization being impersonated. If someone claimed to represent your bank, call your bank's fraud line. If they claimed to represent the IRS, report it to the Treasury Inspector General for Tax Administration (TIGTA) at tigta.gov. If they claimed to represent a utility or creditor, contact that company's fraud department.
Report to the Federal Trade Commission at reportfraud.ftc.gov. The FTC collects fraud reports and shares patterns with law enforcement. Your report helps them track which scams are active and which organizations are being impersonated most often.
If the scam involved email or text, forward it to the Anti-Phishing Working Group at phishing-report@apwg.org. If it involved a phone call, you can report it to the Federal Communications Commission's Consumer Complaint Center at fcc.gov/complaints.
Legitimate payment methods and how they work
Real organizations use methods that are traceable and reversible. Credit cards and debit cards leave a record tied to your account and can be disputed. ACH transfers (bank-to-bank transfers) are logged in your bank account and can be recalled within a window. Checks are written records. Online payment portals tied to your account with the organization are secure because they verify your identity before processing.
Legitimate government agencies accept payments through official channels: the IRS accepts payments through IRS.gov, state tax agencies through their official websites, and the Social Security Administration through ssa.gov. Utilities accept payments through their customer portals or by mailing a check to the address on your bill. Creditors accept payments through their websites, by phone to a number on your statement, or by mail.
If an organization insists on a payment method that cannot be reversed—wire transfer to a personal account, gift card, cryptocurrency, or money order sent to a private address—that is a sign the request is not legitimate, even if everything else looks real.
Frequently Asked Questions
What if the email or text looks exactly like it came from my bank?
Scammers copy logos, formatting, and even account numbers from real statements. Visual similarity means nothing. Call your bank using the number on your statement or card and ask whether they sent the message. Your bank's customer service team expects this question and can tell you in seconds whether it is real.
Can a payment request be real even if it asks me to pay by wire transfer?
Rarely. Most legitimate creditors, utilities, and government agencies accept multiple payment methods including checks, online portals, and card payments. Wire transfers are irreversible and difficult to trace, which is why scammers prefer them. If an organization insists on wire transfer and refuses other methods, that is a strong warning sign.
What should I do if I think a debt is fake but I am not sure?
Do not pay until you verify it. Request written proof from the debt collector, check your credit report at annualcreditreport.com, and contact the original creditor directly. If the debt does not appear on your credit report and the original creditor has no record of it, you can dispute it in writing. A real debt collector expects verification requests.
If I ignore a suspicious payment request, can the company sue me?
A real creditor can sue you for a legitimate debt, but a scammer cannot—they have no legal standing because the debt is not real. If you are unsure whether a debt is real, verify it before paying. If it is real and you ignore it, the creditor may pursue collection, but that is a separate issue from whether the initial request was legitimate.
How long do I have to dispute a fraudulent charge?
Credit card companies typically allow 60 days from the statement date to dispute a charge. Debit card protections vary by bank but are often shorter—check your account agreement. Wire transfers and ACH transfers must be reported within 24 to 48 hours for any chance of reversal. The sooner you report fraud, the better your chance of recovery.