There is a practical reason to move quickly after you realise something is wrong, and it has nothing to do with panic. Certain records are trivially easy to obtain this week and genuinely difficult in three months. Nothing about a case becomes impossible with time, but a number of specific doors close on their own schedule, quietly, without telling you.
What disappears, in roughly this order
Websites go offline first, taking their terms, their pricing pages and their company details with them. Chat histories go next, when an account is deleted from the other side. Card dispute windows run on rules set by the schemes rather than by you. Banks keep their own retention periods, and eventually charge for archive retrieval — if they can retrieve it at all.
None of that stops a case. It changes what the case is built from, and reconstruction is always slower and less persuasive than preservation.
A workable order
If you do nothing else, do these, in this sequence:
- Stop paying. No release fee, no tax, no verification payment, no small amount to unlock the rest. Each of those is the same request wearing a different name.
- Capture the platform before it goes. Whole screens, not crops: the account, the balance, the terms, the contact page, the company details in the footer, and the address bar.
- Export the conversation. WhatsApp, Telegram and email all allow it. Do it before anyone blocks you, and keep the message that came just before the one you were told to delete.
- Get the statements in full. Every transfer with its reference and date — not a summary screen. For anything sent in crypto, the transaction hashes.
- Tell your bank in writing. A phone call leaves no trace in three months; an email or a message inside the banking app is a dated record that the report was made.
- Write down the sequence while you remember it. Who contacted you, when, what was said, what you sent and why. The small details are usually the ones that matter later.
What to ask your bank, specifically
Report it as fraud, give the amounts and dates precisely, and then ask one concrete question: whether a recall or a card dispute is possible on those particular transactions, and by when. Ask for a case reference and keep it. A "no" in writing is worth considerably more than an encouraging conversation with nobody's name attached to it.
If a transfer left in the last day or two, say so first. That is the one with the shortest window, and it should not be buried at the end of a long chronological account.
What starting early changes, and what it does not
Early work means more of the record still exists, more institutions still hold something relevant, and more channels are formally open. It does not decide the outcome. That is settled by banks, payment providers, platforms and authorities, and by what the documents actually show once somebody reads them properly.
If it has already been much longer
Then start from whatever survived. Older files are ordinary work here: ledger records do not expire, the same receiving accounts reappear in later reports, and a well-kept folder from eighteen months ago is frequently stronger than a rushed one from last week. Send what you have and let us tell you what is left, rather than deciding that yourself.