Scammed Online in Iran? Protect Your Money and Prepare Your Next Steps

What should I do first after an online scam?

Contact the bank or payment provider immediately and ask whether it can stop, reverse, or investigate the payment. Describe exactly what happened. Ask which options apply to your payment and what evidence is needed. ^[1]

Then make three headings in a notebook: “Money,” “Accounts,” and “Evidence.” Under each, write the next action rather than the whole story. For example: call the bank, secure the email account, save the receipt. If another person helps, assign one task at a time.

Do not send another payment while an unknown person promises to release the first one. Recovery scammers target people who have already lost money, often demanding an advance fee. Pause any new offer and verify it independently. ^[4]

As of 4 November 2026, this is general security, financial, and legal information, not advice about the merits of an individual case. Ask an independent lawyer qualified in Iran about current fees, deadlines, and the documents needed for your case.

What should I tell the bank or payment provider?

Prepare a brief statement: “I am reporting a payment connected to suspected fraud. The amount was [amount and currency], the time was [time], and the reference was [reference]. I [made the transfer after being deceived / did not authorize it]. What can you do now, and what information do you need?” This is a suggested call script, not a prescribed legal form.

Ask these questions in order:

1. Is any payment still pending, and is there an available action to stop it?
2. Which exposed payment access should be blocked or replaced?
3. How should I submit the relevant receipt and explanation?
4. What is the reference for this report?
5. When and through which channel should I follow up?

Keep the answers beside the transaction record. If support asks you to contact a different department, write down that department's role and verify the contact route independently.

For an Ethereum transfer, there is no routine reversal: the recipient would need to return the funds. Never give a supposed recovery agent your wallet’s recovery phrase or private keys. ^[5]

For any cryptocurrency inquiry, record the transaction identifier, network, and destination address. Ask the service you actually used what options exist for that transaction.

Which records should I preserve?

Save the offer, the seller or account details, the relevant conversation, the payment receipt, and the follow-up messages. Safety Net's messaging-evidence guidance emphasizes context: isolated screenshots can miss parts of the exchange needed to understand it. Keep the original conversation where possible, alongside readable copies. ^[6]

Organize a working folder with four parts:

• Offer: what was promised and where you saw it.
• Contact: the account or person you dealt with and the information they provided.
• Payment: the receipt and transaction details exactly as shown.
• Timeline: what happened before and after you paid.

Use clear filenames, such as “payment-receipt” and “seller-conversation.” Keep originals separate from marked-up or redacted copies. In your explanation, distinguish facts you personally observed from statements the seller made.

Do not assume a service will keep every message available indefinitely. Safety Net explains that retention differs between messaging services and that message content may not remain with a provider. Preserve what is available without accessing someone else's account or collecting unrelated private material. ^[6]

How should I describe the incident clearly?

Write a short chronological account before preparing a longer submission. Use this suggested outline: “On [date], I saw [offer] on [page or platform]. I contacted [account]. They promised [goods or service]. I paid [amount] through [method]. Afterward, [specific event] happened. I contacted [provider or seller] on [date], and received [response].”

Add an attachment list so another person can connect the account to the evidence. Avoid adding a guessed legal label to every sentence. State the discrepancy: what was promised, what you paid, and what you received or did not receive.

IranWire's legal Q&A about an Instagram seller who disappeared after payment specifically advises including the page name or address and the payment receipt in a detailed complaint. That supports preserving those identifiers, rather than relying only on a remembered display name. ^[2]

If a detail is missing, write “not known” and explain what record you do have. Do not create a replacement screenshot or edit a date to make the account look more complete. Ask a lawyer how to present incomplete information honestly before making a formal submission.

What legal complaint route has been described in Iran?

In a legal Q&A published on 8 December 2024, IranWire described submitting a detailed fraud complaint through judicial service offices. It said an assigned prosecutor or investigator might refer the case to FATA, Iran's cyber police, for investigation. It also said finding the suspect was not predictable. ^[2]

Before choosing that route, ask an independent lawyer qualified in Iran to review your circumstances. Useful questions are: What kind of claim fits these facts? Which documents are needed? What current time limits and fees apply? What happens after submission? Could the material reveal unrelated private or politically sensitive information?

If you decide to proceed, use the factual account and attachment list you prepared. Ask how to submit it through the current process and how to keep proof of submission. Do not rely on an unsolicited “case agent” who contacts you through the original scam conversation.

Keep the decision specific to your situation. An ordinary purchase dispute, identity misuse, and a threat involving intimate information should not automatically be handled with the same disclosure plan.

What privacy or safety risks should I consider before reporting?

IranWire's May 2025 reporting on matchmaking scams describes victims' concerns about stigma and exposure of private information, as well as fraud connected to personal relationships. A fraud report can involve much more sensitive material than a shopping receipt. Consider what your particular records reveal before sending an entire conversation or identity file. ^[3]

Separate the full private evidence file from the small set needed for an initial consultation. Ask the recipient who will see the material, why it is needed, how it will be stored, and whether a limited or redacted copy is suitable at that stage. Keep the original intact.

There is also a broader context of state pressure on online activity. In October 2026, Iran International reported citizens' accounts of threatening security texts and restrictions on mobile lines. Those reports do not show that ordinary fraud complainants will be prosecuted. They do support taking politically sensitive exposure seriously rather than assuming every state contact is risk-free. ^[9]

If threats, coercion, or intimate material are involved, make the safety question explicit when speaking to independent legal or support professionals. Do not post the whole file publicly in the hope that a large audience will solve the case.

Should I report the seller to the platform too?

Meta's Instagram safety guidance describes reporting questionable accounts and content through the app, including from profiles, posts, or messages. Use the relevant in-app reporting control and the current help instructions. Menu wording can change; do not install a separate “reporting tool” sent by a supposed support agent. ^[8]

Save the evidence you need first. Write a concise platform report about the account and the conduct you observed. Keep the platform's confirmation or case reference if it provides one. Meta describes its support inbox as a place to check reports and decisions. ^[8] Treat the report as a moderation request, separate from the conversation with your payment provider or lawyer.

Also secure any account whose password you disclosed. For Google, change the password through account settings or use its recovery process if you cannot sign in. Google notes that changing a password does not sign out every possible connected device or app, so review the exceptions instead of assuming the password change settles everything. ^[7]

Use a separate line in your checklist for each affected service. If the scam happened through a seller's account but you never shared your own login details, say that clearly. Avoid turning every complaint about a seller into an unsupported claim that your phone or account was hacked.

How do I avoid being scammed again by a recovery offer?

The FTC describes recovery scammers who contact victims, claim to represent organizations or professional services, and request money or financial information to release supposed refunds. Some know details of the first loss. Knowing your story is not proof that the new contact has authority to recover the money. ^[4]

Do not trust an unsolicited person claiming to be official Ethereum support. The network has no support agent who can retrieve lost ETH in exchange for your private keys. ^[5]

Ask the exchange or wallet service you actually used about its process. Verify the contact channel independently before sharing any record.

Distinguish an unsolicited refund promise from seeking a professional yourself. Before hiring a lawyer or specialist, independently verify who they are, agree on the scope and cost, and ask for a written description of the work. Do not accept a guaranteed outcome as a substitute for those checks.

Keep new approaches in a separate note. Record who contacted you, what they promised, and what they asked you to provide. Do not let a second caller rewrite your original evidence or take over your accounts to “speed things up.”

How can I follow up without losing track?

Use one follow-up sheet with these columns: organization or person, date contacted, reference number, response, next action, and date to check again. Keep a bank response, a platform report, and a legal consultation on separate rows. A response from one does not tell you what the others have done.

At each follow-up, ask one concrete question. For example: “You requested the payment receipt; has it been received?” or “What is the next step after this response?” Add new evidence to the file without overwriting the earlier record.

Preserve relevant message context as you update the file, and avoid supplying unrelated conversations merely because they are available. Safety Net's messaging guidance emphasizes limiting unnecessary collection to protect privacy. ^[6]

Choose a manageable point to review progress with your helper or lawyer. List what is resolved, what is pending, and which decision needs professional advice. If account access remains a problem, consult Pouyam's online security guides while keeping that recovery work separate from the complaint.