August 28, 2026
4:07 am

Rebuilding a Financial Plan After a Fraud Loss

The recovery work after a fraud loss is not one conversation, it is five, and each party wants a different fact in a different format within a different deadline. The bank wants dates and dollar amounts. Law enforcement wants the account numbers the money went to. The credit bureaus want a report number. Your CPA wants to know whether there was a profit motive. And a new advisor should want to know how the money left before they say a word about how to replace it.

Start with what is still true. You are not the first, the loss does not mean you have lost judgment, and the ratio of reported losses to reporting households in federal data makes clear how much of this goes unreported out of embarrassment. The FBI’s Internet Crime Complaint Center reported losses above four billion dollars from complainants aged 60 and over in its Elder Fraud Report for 2024; check the current edition, since the figures are restated each spring. That is a population, not a character flaw.

Below are the questions in the order they get asked, what a strong answer contains, and where the deadlines are. Nothing here is legal or tax advice. Every step routes to a named agency or your own professional.

In This Article

What the Bank’s Fraud Department Will Ask
What Law Enforcement and IC3 Will Ask
What the Credit Bureaus and the FTC Will Ask
What Your CPA Will Ask Before Touching the Tax Return
What a New Advisor Should Ask You, and the Warning Sign If They Don’t
What Benefits Agencies Will Ask, and Why Timing Matters
Where an In-Force Life Insurance Policy Fits in the Rebuild
Frequently Asked Questions

Rebuilding a Financial Plan After a Fraud Loss

What the Bank’s Fraud Department Will Ask

Call before you do anything else, because the recovery mechanisms in banking are time-boxed and several of them close in days.

They will ask: exactly which transactions were unauthorized, on what dates, in what amounts, and to which receiving accounts; whether you initiated the transfers yourself or someone else did; whether you gave anyone your credentials; and whether the transfers were card transactions, ACH debits, payment app transfers, or wires. That last distinction decides your legal position.

Regulation E, which implements the federal Electronic Fund Transfer Act, gives consumers error-resolution and liability-limiting rights on many electronic transfers from a consumer account, and the outer reporting window keyed to the periodic statement is generally 60 days. Consumer wire transfers largely fall outside Regulation E, which is why criminals push victims toward wires. Transfers you were tricked into authorizing yourself sit in a harder category than transfers made without your involvement, and banks treat those differently. Say what actually happened; a wrong description at this stage is worse than an awkward one.

A strong answer sounds like: a written timeline with dates, amounts, transfer method, receiving bank and account number if you have it, and the exact words used to induce each transfer. Ask the bank three specific questions and write down the answers: is a recall or reversal still possible on each item, is this a Regulation E claim or a wire claim, and what is your written provisional credit decision deadline?

Close or lock the compromised accounts, change credentials from a device that was not involved, and open a new account with no card, no linked external transfers, and alerts on every withdrawal.

What Law Enforcement and IC3 Will Ask

Two reports, both free, both worth making the same day.

File with the FBI’s Internet Crime Complaint Center at IC3.gov if any part of the fraud touched the internet or a phone. IC3 operates a Recovery Asset Team that works with financial institutions to freeze fraudulent transfers, and the realistic window for that to succeed is very short. Speed matters far more than completeness; the widely cited guidance is to report within roughly 72 hours of the transfer.

Then file a local police report. Officers will ask for identification, the timeline, screenshots, transaction records, and the names or handles used. Many banks and insurers require a police report number before processing a claim, so this is not a formality even when local police cannot pursue an overseas suspect.

Also report to the Federal Trade Commission through its fraud reporting site. If a securities investment was involved, report to your state securities regulator and to the Securities and Exchange Commission. If an insurance product or annuity was involved, report to your state insurance department. If the person defrauding you is a family member, a caregiver, or someone holding a power of attorney, that is also a report to your state’s Adult Protective Services.

A strong answer sounds like: one master document with the timeline, every dollar figure, every account number, every phone number and email address used, and every screenshot, saved as a single PDF you can hand to each agency without retelling the story from memory. Reconstructing this three times is where people give up.

What the Credit Bureaus and the FTC Will Ask

These questions are about preventing the second loss, which is often larger than the first.

If personal identifying information was exposed, go to the FTC’s identity theft site and complete a report there. That produces an FTC Identity Theft Report, which under the Fair Credit Reporting Act unlocks meaningful rights: blocking of fraudulent information on your credit file and an extended fraud alert lasting seven years, versus one year for a standard alert.

Separately, place a security freeze at Equifax, Experian and TransUnion. Since the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018, placing and lifting freezes is free at all three by federal law. A freeze is stronger than an alert and it is the single highest-value free action on this page.

The bureaus will ask for identity documents and proof of address, and for the report number from your FTC report or police report. Order your free credit reports and read every account and inquiry line by line, including addresses you do not recognize.

A strong answer sounds like: report numbers already in hand, a list of every account you actually own, and a written dispute for each item that is not yours. Once done, set a calendar reminder to pull the reports again in 90 days; fraudulently opened accounts frequently surface after the initial sweep. Put the freeze PINs where a trusted person can find them, and see how to protect a lump sum from a future scam before any recovered or replacement money arrives.

Who Asks	The Deadline That Matters	What to Bring	What It Gets You
Bank fraud department	Regulation E claims generally within 60 days of the statement	Dated timeline, amounts, transfer method	A claim, possible provisional credit, account lockdown
FBI IC3	Report as fast as possible; roughly 72 hours for freeze attempts	Receiving account numbers, screenshots	Recovery Asset Team referral to the receiving bank
Local police	Same day	ID, timeline, transaction records	A report number banks and insurers require
FTC identity theft site	As soon as ID data was exposed	Personal ID details and the incident narrative	Identity Theft Report; 7-year extended fraud alert
Credit bureaus	Immediately	ID and proof of address	Free security freeze at all three
Your CPA	Before the return is filed	Loss documentation and any withdrawal records	Correct treatment and a Medicare premium review

What the Credit Bureaus and the FTC Will Ask

What Your CPA Will Ask Before Touching the Tax Return

Do not decide the tax treatment yourself, and be careful of confident advice found online, because this area changed and then changed again.

Your CPA will ask whether the loss was a personal theft loss or a loss connected to a transaction entered into for profit, because the two are treated differently. The Tax Cuts and Jobs Act suspended personal casualty and theft loss deductions for tax years 2018 through 2025 except for losses attributable to federally declared disasters. Whether and how that suspension continues into 2026 depends on subsequent legislation, and it is exactly the sort of figure that goes stale, so ask your CPA about the current year rather than relying on any article, including this one. Separately, the IRS addressed in 2025 guidance when losses from certain scams tied to profit-seeking transactions may still be deductible; that guidance is fact-specific and is a conversation for a professional.

They will also ask whether you withdrew from an IRA, a 401(k), or an annuity to replace the lost money, because that withdrawal is its own taxable event and can push income into a higher bracket, increase the taxable portion of Social Security, and raise Medicare premiums two years later through the income-related monthly adjustment amount.

That last point has a remedy people miss. The Social Security Administration accepts Form SSA-44 to request a reduction of an income-related Medicare premium adjustment after a qualifying life-changing event, and the listed events include loss of income-producing property. Whether your circumstances fit is a question for SSA, not for you to assume, but the form exists and it is free to file. Ask your State Health Insurance Assistance Program, the free federally funded counseling service known as SHIP, to walk you through it.

What a New Advisor Should Ask You, and the Warning Sign If They Don’t

The recovery period is when a second bad actor arrives, often presenting as the person who will help you get the money back.

A legitimate professional will ask how the loss happened before discussing any product, will ask about your income floor and required monthly spending, will ask what is guaranteed for life and what is not, and will decline to promise recovery. Verify credentials yourself: check a broker’s record through FINRA’s public disclosure system, check an investment adviser through the SEC’s public adviser search, check an insurance producer’s license through your state insurance department, and check whether a planner holds a genuine credential rather than a rented-sounding designation.

Two protections to put in place immediately. Name a trusted contact on every account, which brokerages are required to attempt to collect under FINRA Rule 4512, and confirm the firm will use its temporary disbursement hold authority under FINRA Rule 2165 if something looks wrong. Those cost nothing.

Understand what protection does not exist. SIPC coverage, up to 500,000 dollars in securities including a 250,000 dollar cash sublimit, applies when a brokerage firm fails; it does not reimburse investment losses or fraud losses. Anyone implying otherwise is telling you something untrue. Likewise, a recovery company demanding an upfront fee to retrieve stolen money is a recognized second-stage scam, and the pattern is described in why an upfront fee demand is always a red flag. If the original fraud began as a relationship online, the romance scam recovery sequence covers the specific calls to make.

What Benefits Agencies Will Ask, and Why Timing Matters

If the household is near any means-tested program, the fraud loss and the way you responded to it both become questions.

Supplemental Security Income counts resources against a limit of 2,000 dollars for an individual and 3,000 dollars for a couple, figures that have been unchanged for decades. Medicaid long-term care applications ask for five years of statements from every account under the 60-month look-back, and every large outgoing transfer must be explained. Money stolen by a criminal is not a gift, but you will have to prove that, which is exactly why the police report, the IC3 receipt and the bank’s written findings matter beyond any hope of recovery.

State Medicaid agencies also have hardship waiver procedures for transfer penalties in specified circumstances. Whether one applies is a question for an elder law attorney and the state agency, never a determination to make on your own; our overview of how spend-down planning works explains the vocabulary you will hear.

A strong answer sounds like: a documented file showing the date the money left, the report numbers, and a written statement from the bank characterizing the transactions. Keep that file for at least six years.

Where an In-Force Life Insurance Policy Fits in the Rebuild

Answer three questions in order before anyone raises the subject of selling.

First, does anyone still need the death benefit? If a surviving spouse’s income would collapse without it, the policy is not a recovery asset, it is the plan for someone else’s future. Keep it. That is the whole answer, and the case for keeping a policy is worth reading in full.

Second, what does it cost to keep? Request a current in-force illustration and the cash surrender value from the carrier. Some households discover the premium is small and the policy easily survives the loss. Others discover a universal life policy needs a sharply increased premium to reach maturity, which is a separate problem the fraud merely revealed.

Third, only then, does it have market value? The secondary market rarely considers death benefits below roughly 100,000 dollars, and a life settlement typically takes about 60 to 120 days from review to funding, so it is not an emergency source of cash. Selling is clearly the wrong answer when the face amount is small, when the policy is a small final expense policy already earmarked for burial, when the insured is in good health, when a survivor still needs the coverage, and above all when the pressure to sell is coming from anyone connected to the original fraud.

If, after those three questions, you are holding coverage nobody needs and cannot comfortably fund, a free, no-obligation policy review will tell you what it is worth. Send the policy cover page or call (732) 978-9575. Pine Lake Legacy provides education and policy reviews only and does not purchase policies, and nothing here is legal, tax, or investment advice; use your own CPA, your own elder law attorney, and the named agencies above.

Frequently Asked Questions

Can I get the money back?

Sometimes, and speed decides it. Wires and payment app transfers can occasionally be frozen if the receiving institution is contacted within days. Report to your bank and to the FBI’s IC3 the same day, ideally within about 72 hours. Beyond that window, recovery becomes unlikely, and anyone guaranteeing recovery for an upfront fee is running a second scam.

Is a fraud loss tax deductible?

Do not assume either way. Personal casualty and theft loss deductions were suspended for tax years 2018 through 2025 except for federally declared disasters, and losses tied to profit-seeking transactions follow different rules addressed in 2025 IRS guidance. Whether anything applies to your 2026 return is a question for your own CPA.

Should I tell my children?

Telling at least one trusted person materially improves outcomes, because reporting deadlines are short and the practical work is heavy. If a family member is the suspected source of the loss, tell someone outside that relationship instead, and contact Adult Protective Services and local law enforcement rather than confronting the person directly.

Does SIPC cover money lost to a scam?

No. SIPC protection, up to $500,000 in securities including a $250,000 cash sublimit, applies when a brokerage firm fails and customer assets are missing. It does not reimburse investment losses or fraud losses. Any firm suggesting SIPC will cover a scam loss is describing the program incorrectly.

I emptied an IRA to cover the loss. What now?

Tell your CPA before year end, because the withdrawal is taxable income that can raise your bracket, increase the taxable portion of Social Security, and raise Medicare premiums two years later. Ask the Social Security Administration whether Form SSA-44 applies to your circumstances, and ask your SHIP counselor for free help with it.

Will this affect a future Medicaid application?

It can, because long-term care Medicaid reviews 60 months of financial records and asks about every large outgoing transfer. Money taken by a criminal is not a gift, but you must document it. Keep the police report, the IC3 receipt, and the bank’s written findings, and consult an elder law attorney before applying.

Find out what your policy is worth — free, confidential, no obligation.

A 15-minute educational review covers your eligibility, every alternative, and a realistic view of what each path would net you.

Call (732) 978-9575 · Request a review online →

Table of Contents