How to Report Bank & Credit Card Fraud in the UK — Complete Step-by-Step Guide

This article provides a comprehensive step-by-step guide for UK bank and credit card fraud victims to recover their money through formal complaint processes and regulatory escalation. It explains that significant changes to UK fraud protection law took effect in October 2024, when the Payment Systems Regulator mandated that banks reimburse victims of Authorised Push Payment (APP) fraud up to £85,000. The guide matters because most fraud victims do not know these rights exist or how to claim them, and the article argues that citing the correct legal frameworks and following the proper escalation sequence dramatically improves recovery outcomes.

• PSR mandatory reimbursement for APP fraudSince October 2024, UK banks must mandatorily reimburse victims of Authorised Push Payment fraud up to £85,000 per claim—a legal requirement, not voluntary policy. APP fraud covers situations where a victim was deceived into sending money via bank transfer to a fraudster, including fake invoice fraud, conveyancing fraud (impersonating solicitors), safe account fraud (bank impersonation), romance scams, investment scams, and purchase scams. The rule applies to Faster Payments and CHAPS transfers to UK accounts only, not international SWIFT transfers or cheques.
• Section 75 Consumer Credit Act protectionSection 75 of the Consumer Credit Act 1974 makes credit card companies jointly liable for fraud or misrepresentation on transactions between £100 and £30,000—a statutory right that covers the full transaction amount, not just the card payment amount. For example, paying a £500 credit card deposit for an £8,000 service that never materializes allows the victim to claim the full £8,000, not just £500. This is the primary protection mechanism for credit card fraud above £100.
• Immediate action sequence within first hourThe article emphasizes that the first 60 minutes are critical: call the bank's 24/7 fraud line (number on card back) to open a formal case and attempt to recall faster payments before processing, report to Action Fraud at 0300 123 2040 or online to obtain an NFRC crime reference number, and send a formal written complaint. These actions trigger legally mandated bank responses (acknowledgement within 5 business days, final response within 8 weeks under FCA rules) and provide documentation that significantly strengthens any subsequent escalation.
• Action Fraud reporting creates official crime recordAction Fraud (0300 123 2040, or actionfraud.police.uk 24/7 online), operated by City of London Police and the National Fraud Intelligence Bureau, generates an official crime record and a National Fraud and Cybercrime Reporting Centre (NFRC) crime reference number. This reference number is essential documentation that both banks and the Financial Ombudsman reference during investigations and significantly strengthens dispute claims. Reporting must be done after calling the bank but as early as possible.
• Financial Ombudsman Service escalation pathThe Financial Ombudsman Service (financial-ombudsman.org.uk, 0800 023 4567) is a free, independent, legally binding dispute resolution body that can order banks to refund the full fraud amount, pay 8% simple interest from the date of fraud, and pay compensation for distress and inconvenience (typically £100–£500). A victim can escalate to FOS if the bank refuses the claim or fails to respond within 8 weeks of receiving a formal written complaint. The 6-month filing deadline after the bank's final response letter is strict, and missing it may prevent FOS from accepting the case.
• Chargeback for debit cards under £100Chargeback is a Visa, Mastercard, and Maestro transaction reversal mechanism available for both debit and credit cards with no minimum amount and up to 120 days from transaction date or discovery of fraud. Unlike Section 75, chargeback is a voluntary card industry scheme, not a statutory right, but UK banks are expected to pursue valid chargebacks on behalf of customers. Chargeback is the appropriate mechanism for debit card fraud of any amount and credit card fraud under £100 (above £100 use Section 75).
• Safe account fraud as most damaging social engineeringSafe account fraud (also called 'safe account scam') is identified as the most common large-sum fraud targeting UK residents over 60, where a caller impersonating bank staff convinces the victim their account is compromised and they must transfer money to a fraudster-controlled 'safe account' for protection. Modern variants use AI voice cloning to sound exactly like bank staff, and caller ID spoofing displays the victim's real bank number. The article emphasizes this fraud type is now covered by PSR mandatory reimbursement if payment was via Faster Payments, provided the victim was clearly dec
• Formal written complaint triggers regulated timelineA phone call to the bank opens a case, but a formal written complaint triggers FCA-regulated mandatory timelines: the bank must acknowledge within 5 business days and issue a final response within 8 weeks. The article provides a template emphasizing specific legal citations (PSR mandatory reimbursement October 2024, Section 75 CCA 1974, or chargeback as applicable), Action Fraud NFRC reference number, and bank fraud case reference. Sending via both email to complaints department and Royal Mail recorded post creates documentary evidence and is essential for any FOS escalation.

Bottom line: UK fraud victims who follow the correct escalation sequence—calling their bank immediately, reporting to Action Fraud, submitting a formal written complaint citing the specific legal framework (PSR APP fraud reimbursement, Section 75, or chargeback), and escalating to the free Financial Ombudsman Service if refused—have legally enforceable recovery rights that banks often do not voluntarily honor. The single most underutilized tool is the Financial Ombudsman, which has no cost, makes legally bin