Wire transfer fraud recovery is the process of attempting to freeze or claw back funds after a fraudulent wire has been sent. It is time-critical: realistic odds are measured in hours, and after roughly 72 hours most funds have been dispersed beyond practical reach. For the operational step-by-step, see the first-48-hours guide.
The recovery clock
- Hour 0–4. Call the sending bank's fraud line, request a recall/SWIFT stop, and ask the bank to contact the receiving institution directly.
- Same day. File with law enforcement — in the US, the FBI's IC3, whose Recovery Asset Team can initiate a Financial Fraud Kill Chain on qualifying domestic transfers.
- Within 48 hours. Notify insurers (crime/cyber policies have prompt-notice clauses), preserve every email, call record and file, and freeze related pending payments in case the attacker has more in flight.
- After 72 hours. Recovery becomes exceptional rather than expected — pursue it, but shift primary effort to containment and root cause.
What determines the odds
Speed above all; whether the receiving account is domestic; whether funds were converted to crypto or cashed through mules; and how fast the receiving bank acts.
The uncomfortable conclusion
Recovery is a lottery ticket; prevention is a control. Every hour spent on recall calls argues for the callback rule that would have cost five minutes.