A payment clears your bank on a Tuesday. By Thursday, it has moved through a domestic account, split across several transfers, and landed somewhere you cannot immediately identify. That is the typical pattern when scam proceeds reach the United States – and it is the pattern that either closes or opens your recovery window.
Recovering scam proceeds sent to the United States is possible, but the realistic options narrow quickly after the first 24 to 48 hours. The tools available – from a domestic freezing injunction to a Norwich Pharmal-equivalent third-party disclosure order to coordination with the receiving bank – depend heavily on how fast you move and how much of the money trail can still be reconstructed. Speed is not a preference; it is the precondition.
This guide walks through each step in order: what to do in the first hours, how the US legal system handles foreign fraud victims, where the genuine choke points are, and what competent recovery coordination actually looks like.
Why the United States Creates Specific Recovery Challenges
The United States is not a single legal forum. It is a federal system with overlapping state and federal courts, each with different procedures for freezing assets and compelling disclosure. A fraud victim sitting outside the country faces that complexity before addressing any substantive question.
That said, the US system contains some of the most powerful recovery tools available anywhere. A Mareva-equivalent domestic freezing injunction can be obtained on an emergency ex parte basis, sometimes within hours of filing. Federal courts can compel disclosure from banks and other third parties under procedures that function like a Bankers Trust order in common-law jurisdictions. And US-admitted counsel can apply for a temporary restraining order – effectively a freeze – without giving the defendant advance notice.
The gap between what is available and what a victim actually obtains is almost entirely explained by timing and preparation. In our experience, the matters where meaningful recovery occurs are invariably the ones where action was taken within the first two to three days, not the first two to three weeks.
For a broader view of how the United States fits into cross-border fraud recovery, see our United States jurisdiction guide.
Step One: What to Do in the First Hours After a Fraud
The first hours are the highest-leverage period of any fraud recovery. Most victims spend them in shock or in contact with their bank's customer-service line – neither of which advances recovery. Here is what actually matters.
First, document everything before you contact anyone. Screenshot or download every communication with the fraudster: emails, messaging-app threads, call logs, transaction confirmations, account details, wire instructions, and any website or platform involved. Once you alert the fraudster – directly or through a bank – they will begin moving or layering funds. Evidence preservation is a precondition to everything that follows.
Second, contact your own bank's fraud or wire-recall desk, not general customer service. Ask specifically for a SWIFT recall or a domestic wire reversal request. A recall request sent within 24 hours has a materially better chance of reaching funds before they are disbursed onward. Banks are not obliged to freeze the receiving account, but a prompt recall puts the receiving institution on notice.
Third, file a report with the FBI's Internet Crime Complaint Center. This is not merely administrative. A complaint on record creates a reference point for any subsequent legal process and can, in the right circumstances, prompt coordination with financial-intelligence units that have direct-contact relationships with US banks.
Fourth – and this is the step most victims skip – engage a specialist recovery coordinator who can assess whether urgent legal relief is viable. The question is not whether you want to pursue recovery. It is whether the facts support an application for a temporary restraining order or a third-party disclosure order in a US court, and whether the cost and timeline are proportionate to the amount at stake.
Do not mistake any of this for a guarantee. Early action preserves options; it does not create them where none exist.
The steps above cover the first-response pattern. Your matter will turn on specific facts – how the money moved, through which institution, and how quickly. To get a read on whether your situation supports legal action, contact us at info@axiomtracel.com for a confidential case review.
How Does US Law Handle Foreign Fraud Victims?
Foreign claimants are not disadvantaged in US courts solely by reason of being foreign. But they face procedural realities that domestic claimants do not.
Federal courts and most state courts will hear claims by foreign plaintiffs where US jurisdiction can be established – typically because the defendant is based in the US, the funds landed in a US account, or a fraud was perpetrated in part from US territory. Establishing jurisdiction is the first legal question; without it, no US court can act.
Once jurisdiction is established, the most immediately useful tool is the temporary restraining order, which functions as a short-term freeze. It is obtained on an emergency basis, often without notifying the defendant. To succeed, the applicant must demonstrate a likelihood of success on the merits and a risk that the defendant will dissipate assets before a full hearing. That hearing typically follows within days. If the court is persuaded, the order becomes a preliminary injunction pending trial.
Alongside freezing relief, foreign claimants can pursue third-party disclosure orders against banks holding the relevant accounts. This is where the Bankers Trust-equivalent procedure becomes critical. A bank served with a disclosure order must produce account-holder information and transaction records. That information, in turn, feeds the tracing exercise and identifies where funds have moved onward.
There is also a powerful federal mechanism – sometimes described as US-style discovery assistance – that allows foreign courts and arbitral tribunals to obtain evidence from US-based parties in support of proceedings outside the US. For a foreign victim who has already commenced litigation at home, this tool can be enormously useful. It allows the foreign tribunal to reach US-held evidence without requiring the victim to file a full US lawsuit.
What the US system does not do is move in a straight line. Federal and state courts operate on different timelines. Obtaining local admitted counsel who understands both the forum and the urgency is not optional – it is the precondition to any of the above.
Tracing the Money: Following Proceeds Through the US Banking System
Where did the money actually go? That question is harder than it looks.
Most scam proceeds sent to the United States do not stay in the first account they reach. They are layered – moved in rapid, often small, increments to secondary accounts, converted to cash, or forwarded internationally again. The layering is designed to defeat exactly the kind of recall and freeze that an early-stage response attempts.
Reconstructing the payment trail requires both legal process and forensic discipline. On the legal side, third-party disclosure orders against the receiving bank, and against any correspondent banks in the chain, produce the account records necessary to follow the money. On the forensic side, those records must be reconstructed into a coherent trail that a court can follow – often from incomplete data, across multiple institutions, and under time pressure.
In our experience, payment trails through US banking rarely stop at one layer. A matter we coordinated in the mid-Atlantic region involved proceeds that reached a US personal account, were fragmented across four onward transfers within 36 hours, and ultimately left the country again through a money-service business. The recovery strategy required simultaneous disclosure applications against two institutions and urgent correspondence with the receiving bank overseas. The trail was recoverable – but only because the original evidence had been preserved and the disclosure process started within 48 hours of the initial transfer.
When funds have moved into digital assets, the tracing methodology changes but the urgency does not. Public blockchains are transparent. On-chain movements leave a permanent record even when the identity behind a wallet is unknown. Blockchain-analytics tools can attribute wallet activity and identify choke points – typically a centralised exchange or a virtual-asset service provider – where a freezing or disclosure order can intercept the funds. A proprietary injunction, including one against persons unknown, is available in appropriate cases to freeze digital assets before they are cashed out.
Coordination Across Borders: When the Fraud Spans More Than One Jurisdiction
Scam proceeds sent to the United States often originate from a fraud committed elsewhere. The fraudster may be in a third country. The victim may be in a fourth. That creates a cross-border coordination problem that no single forum resolves on its own.
In this context, the relationship between the victim's home jurisdiction and the US forum matters enormously. If the victim has commenced proceedings at home – or obtained a judgment or arbitral award – that creates a basis for recognition and enforcement in the United States. The New York Convention provides for recognition and enforcement of foreign arbitral awards across most states. Recognition of foreign court judgments follows state-by-state rules, but a number of US states have adopted broadly receptive regimes.
Where proceedings have not yet commenced anywhere, the cross-border question is strategic: which forum should file first, and why? Filing in the US first preserves the ability to freeze US-sited assets immediately. But it may not be the right forum for the underlying merits claim. In our experience, the answer almost always involves simultaneous or rapidly sequenced steps: urgent interim relief in the US, followed by or parallel to substantive proceedings in the jurisdiction best suited to the claim.
Anti-suit injunctions and Chabra relief against third parties – where the fraudster has placed assets with a nominee or associated party – are also part of the cross-border toolkit when the facts support them.
What does this look like in practice? A matter handled in the Gulf in late 2024 involved a principal defrauded through a false investment scheme. Proceeds had moved to a US account and from there to accounts in two further jurisdictions. The strategy combined a temporary restraining order in a US federal court, a disclosure order against the receiving bank, and coordinated applications in two other forums – one for recognition of an arbitral award, one for a domestic freeze. None of those steps were sufficient alone. Together, they produced a position from which negotiation became possible. Whether those negotiations succeeded depended on the specific facts. Outcomes are never guaranteed.
For a deeper look at how parallel cross-border enforcement works in practice, visit our Fraud Response insight page.
If your matter already spans more than one forum, or you expect it will, the coordination question is as important as the legal question. To discuss a matter confidentially, contact info@axiomtracel.com.
What Competent Recovery Coordination Looks Like – and What It Does Not
This is where the myth of "report to the bank and wait" breaks down. And it is also where the risk of a second fraud – a recovery-focused scam – becomes very real.
A recovery operation in the United States requires US-admitted counsel who can file in court. It requires a forensic analyst who can reconstruct the payment trail from incomplete records. It requires someone coordinating the two, managing the timing, and keeping the victim informed without raising false expectations. That is not what a bank's fraud team does. It is also not what an unsolicited "recovery firm" that contacts you after the fraud does.
Recovery scams are a distinct and well-documented second-stage fraud. They typically contact victims shortly after the original fraud – through social media, cold email, or referral from the original fraudster's network. They promise high recovery rates, often demand upfront fees, and disappear once those fees are paid. They exploit the exact vulnerability that a genuine fraud creates: a victim who is distressed, already out of money, and willing to believe that someone has a solution.
Legitimate recovery coordination does not promise outcomes. It assesses viability honestly, explains the costs and realistic timelines involved, and only proceeds where the expected recovery justifies the effort. If someone is promising you a specific percentage of your funds back, or demanding a fee before they have assessed your matter, treat that as a warning sign.
Practitioners in cross-border recovery note that the clearest signal of a legitimate operation is a willingness to say "no" – to decline matters where the facts do not support recovery, and to tell the client why. We have traced funds through complex banking chains and coordinated urgent freezing applications across jurisdictions. We have also advised principals that their matter is not realistically recoverable at current cost. Both are honest answers.
Assessing Viability: Is Your Loss Recoverable?
Not every fraud loss is recoverable. That is the honest starting point. Viability depends on several factors that are specific to your matter, not to the general rules described above.
The key factors are: the amount involved relative to the cost of proceedings; how much time has elapsed since the funds transferred; how much of the payment trail can be reconstructed from available evidence; whether the fraudster or their assets are identifiable and within reach of a court; and whether any institutional choke point – a bank, an exchange, a payment processor – still holds traceable value.
A matter where funds moved last week, the receiving bank is identified, and the amount is substantial enough to justify US litigation is a materially different proposition from a matter where funds moved six months ago, have been layered multiple times, and the trail has gone cold. Both are worth assessing. Neither should be assessed without the specific facts in front of a practitioner who knows the US system.
You can begin that assessment by visiting our viability check tool at /viability-check/. It is not a substitute for specialist advice, but it gives you an honest initial read on where your matter sits.
For a comparison with another jurisdiction where similar cross-border considerations arise, see our analysis of freezing a fraudster's assets in Gibraltar – a useful reference for matters where proceeds have moved through multiple offshore stops.
Frequently Asked Questions
Q: What should I do in the first hours after a fraud?
A: Preserve all evidence before contacting anyone – screenshots, transaction records, communications. Then contact your bank's fraud desk immediately and ask for a wire recall. File a report with the relevant federal complaints authority. After that, engage a specialist recovery coordinator to assess whether urgent legal relief – a temporary restraining order, a third-party disclosure order against the receiving bank – is viable given the facts and the amount involved. Do not wait to see whether the bank resolves it alone.
Q: Is my loss realistically recoverable?
A: Viability depends on timing, the identifiability of the receiving account, the amount involved, and how much of the payment trail can be reconstructed. Fraud recovery in the United States is possible, but not every matter supports the cost and effort of legal proceedings. A frank, fact-specific assessment – not a general promise – is the only honest answer. We regularly advise principals on whether their matter meets a realistic threshold for action, and we decline matters where it does not.
Q: How do I avoid a second, recovery-focused scam?
A: Recovery scams – sometimes called advance-fee recovery fraud – target people who have already been defrauded. They promise specific recovery rates or guaranteed results, and they demand upfront fees before assessing anything. Legitimate recovery coordination never guarantees an outcome. It begins with an honest viability assessment, discloses its costs transparently, and proceeds only where the facts support it. If an unsolicited contact promises to recover your funds for a fee paid upfront, it is almost certainly a second fraud.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. We regularly coordinate recovery matters involving the United States, working with admitted local counsel on urgent interim relief, third-party disclosure applications, and cross-border enforcement.
We do not promise outcomes. We assess what is realistically achievable and work to achieve it. To discuss a matter confidentially, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace coordinates closely with admitted local counsel in the United States; local procedure governs the filing. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review