The Elder Fraud FFKC: How the FBI’s Recovery Asset Team Helps Freeze Scam Wire Transfers

A fraudulent wire transfer does not become untouchable the second it leaves an older victim’s account. But the recovery window can collapse within hours. The victim’s bank must be alerted, accurate transaction data must reach law enforcement, and the receiving institution must still have funds available to freeze.

The Financial Fraud Kill Chain (FFKC) is an official intervention process coordinated by the FBI’s Internet Crime Complaint Center Recovery Asset Team. It helps financial institutions and law enforcement identify and freeze money sent through qualifying fraudulent domestic and international transactions. It is free to report a case, but it is not automatic, does not guarantee recovery, and depends heavily on speed, evidence, and bank cooperation.

TL;DR

• The elder fraud FFKC process gives the FBI’s Recovery Asset Team a way to help freeze funds sent through fraudulent domestic and international transactions.
• In 2025, the FBI reported 3,900 FFKC incidents and approximately $679 million frozen, including $507.04 million domestically and $171.97 million internationally.
• Call the sending bank immediately, request escalation to its fraud or wire-transfer team, request an urgent recall, and file a detailed report at IC3.gov within minutes or hours—not after conducting a private investigation.
• A freeze is not the same as a refund. Funds may still require bank review, legal process, ownership verification, or further investigation before they can be returned.
• This is a United States recovery mechanism. International intervention involves additional institutions and law-enforcement partners, which makes accurate transaction information even more important.

What Is the Financial Fraud Kill Chain?

The Financial Fraud Kill Chain is a process used by the FBI’s Internet Crime Complaint Center, commonly called IC3, to help stop fraud proceeds before criminals withdraw, transfer, or launder them.

The FBI established its Recovery Asset Team (RAT) in 2018. The team streamlines communication among:

• The victim or reporting party
• The sending financial institution
• The receiving financial institution
• FBI field offices
• Other domestic or international law-enforcement partners

If a reported transaction meets the applicable criteria, the Recovery Asset Team can send transaction details to an established contact at the receiving bank and request that the account be frozen. The relevant FBI field office is then brought into the process.

This is not a magic reversal button hidden under an agent’s desk. It is coordinated financial triage. The objective is to reach the money before the scammer’s mule network does.

What the 2025 IC3 Report Reveals

The FBI’s 2025 IC3 Annual Report shows the scale of the Financial Fraud Kill Chain’s activity.

The FBI reported an overall 58% FFKC success rate for 2025. That figure describes funds frozen through the process; it is not a guaranteed reimbursement rate. The IC3 domestic FFKC brochure separately lists $832,965,941 in reported domestic losses and a 61% domestic freeze rate.

The language matters. These were funds frozen, not necessarily funds already returned to victims. A freeze prevents or restricts movement while banks and law enforcement determine what happens next. Recovery can require additional investigation, documentation, indemnification, court action, or cooperation from another institution.

The 2025 report also identified a shift in the fraud entering the system. Business email compromise historically generated many FFKC cases, but the FBI saw increased initiations involving tech-support scams and account takeover fraud in 2025.

That development matters for older Americans. Tech-support and financial-institution impersonation scams are built to create panic, seize remote access, and move retirement savings before the victim can speak to family.

Why FFKC Matters in Elder Fraud Cases

The FBI received 201,266 complaints from people aged 60 or older in 2025, with reported losses of approximately $7.7 billion. The report states that 12,444 complainants in this age group lost more than $100,000.

Among all 2025 FFKC actions, 642 incidents involved victims aged 60 or older:

• Total reported loss: $65,367,648
• Funds frozen through the FFKC process: $32,865,655

That means the process assisted in freezing roughly half of the reported funds in those elder-fraud FFKC incidents.

These figures do not prove that every elder fraud report has a 50% recovery probability. The statistics cover cases in which an FFKC action was initiated, not every scam reported by an older person. Cases that qualified for intervention may differ significantly from transactions discovered after the money disappeared.

Still, freezing more than $32.8 million matters. That is retirement income, home-sale money, medical reserves, and family savings that criminals were preparing to feed into the mule-account washing machine.

How the FBI Recovery Asset Team Process Works

The exact route depends on whether the receiving account is domestic or international.

1. The fraud is discovered

The victim, a family member, a bank employee, or law enforcement identifies that money was sent under fraudulent pretenses.

Common elder-fraud triggers include:

• A fake bank representative claiming an account is under attack
• A tech-support impersonator requesting remote access
• A government agent demanding a “safe account” transfer
• A romance scammer inventing an emergency
• A criminal taking over the victim’s email or online banking
• A fraudulent investment platform demanding another wire
• A grandparent scam involving a fabricated arrest or medical crisis

2. The sending bank is contacted

The victim should call the financial institution using a verified number from the bank’s official website, app, statement, or payment card.

The request should be explicit:

“This wire transfer was induced by fraud. Please escalate it immediately to the bank’s fraud or wire-transfer team, initiate a recall, notify the receiving bank, and provide the case number and wire reference in writing.”

A case number alone is not enough. Obtain confirmation that the recall or fraud notification was actually transmitted.

For a broader explanation of bank-side recall mechanics, read whether banks can reverse wire transfer scams and what recovery rules apply.

3. A detailed IC3 complaint is filed

File the report at IC3.gov immediately.

The complaint should include:

• Victim’s name and contact information
• Date and time the fraud was discovered
• Amount and currency
• Date and time of the wire
• Sending bank name
• Receiving bank name
• Beneficiary name
• Beneficiary account and routing details
• Wire confirmation or reference number
• International bank identifiers, if applicable
• Scammer’s phone numbers and email addresses
• Websites, apps, or remote-access tools involved
• A short chronological description of the deception
• Sending bank’s fraud case number
• Police report number, if already available

Enter transaction data in the designated fields rather than burying it in a long narrative. The report needs accurate account numbers, timestamps, and transaction references to help locate the funds.

4. IC3 evaluates the transaction

When the required criteria are met, the Recovery Asset Team can forward information to a contact at the recipient bank and request that the account be frozen.

The current public materials reviewed for this article do not publish one universal transaction threshold for every FFKC request. Older guidance has referenced timing, value, international-wire, and recall requirements, but criteria and operational practices can change.

Report every fraud loss regardless of amount. Do not reject your own case because a blog post from several years ago quoted a threshold. Self-disqualification is free labor for the scammer.

5. The receiving bank checks the funds

The receiving institution determines whether the money remains available and what action it can take.

Possible outcomes include:

• The full amount is frozen
• Part of the money is frozen
• The funds have moved to another domestic account
• The funds have moved internationally
• The account has been emptied
• The bank requires additional legal or indemnification documents
• No freeze is possible

For domestic cases, the FBI says the process may follow known “second-hop” transactions when information shows that money moved from the first recipient account to another account.

That matters because mule accounts are rarely intended as comfortable long-term homes for stolen funds. They are transfer stations.

6. Law enforcement and financial institutions continue the case

A successful hold does not automatically place the money back into the victim’s checking account. The relevant parties may need to establish ownership, trace additional transfers, investigate competing claims, or complete formal return procedures.

Keep every case number and ask the bank for updates in writing.

Domestic and International FFKC Actions Are Different

Domestic FFKC actions concern fraudulent transfers sent to domestic recipient accounts. The Recovery Asset Team can communicate with established financial-institution contacts and the relevant FBI field office.

International transactions add more institutions and legal jurisdictions. According to the Department of Justice’s international FFKC guidance, requests may involve:

• The Financial Crimes Enforcement Network Rapid Response Team
• FBI Legal Attaché offices
• Foreign financial institutions
• International law-enforcement partners
• Financial-intelligence units in other jurisdictions

The FBI can coordinate and request assistance. It cannot simply command every foreign bank to return money.

Anyone dealing with an overseas recipient should also understand the wider cross-border payment-fraud recovery process. Geography gives criminals more exit doors, not diplomatic immunity.

What To Do in the First Fifteen Minutes

If an older person has just wired money to a scammer, use this order:

1. Call the sending bank immediately.
   • Ask for the wire-fraud or recall team.
   • State that the transfer was induced by fraud.
   • Request an urgent recall and receiving-bank notification.
   • Obtain the case number.
2. Collect the transaction details.
   • Wire receipt
   • Amount and currency
   • Timestamp
   • Beneficiary information
   • Routing, SWIFT, or other bank identifiers
   • Wire reference number
3. File at IC3.gov.
   • Complete the transaction fields accurately.
   • Include the bank case number.
   • Save the IC3 complaint identifier.
4. Preserve the evidence.
   • Export chats and emails.
   • Save call logs and voicemail.
   • Photograph or screenshot transfer instructions.
   • Record any remote-access software used.
   • Do not wipe a compromised device before preserving evidence.
5. Stop additional transfers.
   • Warn the victim that the scammer may claim the first payment was blocked, taxed, insured, or sent incorrectly.
   • Do not send a “verification,” “release,” or “recovery” payment.
6. Secure compromised access.
   • If account takeover or remote access occurred, secure email and banking credentials from a clean device.
   • Ask the bank to review new payees, contact details, devices, and account changes.

A more extensive containment sequence is available in Dollar Vigil’s guide on what to do after online banking fraud.

The 24-to-72-Hour Reality

Report the transfer immediately. The first 24 hours are operationally critical, and international recovery guidance has historically emphasized reporting within 72 hours.

That does not mean the money is safe for 72 hours. A mule can move it in minutes.

Do not wait for:

• The scammer to explain
• A bank branch to reopen
• A relative to arrive
• A private investigator to respond
• Every screenshot to be perfectly organized
• Proof beyond all doubt
• The victim to stop feeling embarrassed

File the first accurate report, then add information through the relevant bank or law-enforcement channels when instructed.

Embarrassment delays reporting. Delay protects the criminal. The victim is not the person who should be ashamed.

What Makes an FFKC Request Stronger?

No checklist guarantees intervention, but these factors improve the quality of the report:

• Extremely fast reporting
• Complete bank and beneficiary details
• An active recall request from the sending bank
• Accurate wire identifiers
• Clear evidence that the transfer resulted from fraud
• Information about subsequent recipient accounts
• Consistent facts across bank, IC3, and police reports
• Rapid responses to follow-up requests
• Cooperation from the institutions holding the funds

The process becomes harder when the complaint contains incorrect account numbers, vague dates, missing bank references, or contradictory explanations.

Accuracy beats volume. Investigators need a structured transaction map, a clear timeline, and properly labeled evidence—not dozens of unidentified files.

What the FFKC Cannot Do

The Financial Fraud Kill Chain cannot:

• Guarantee that funds will be frozen
• Force money to reappear after a receiving account is emptied
• Automatically reverse every authorized wire
• Replace the sending bank’s recall process
• Guarantee reimbursement from the victim’s bank
• Eliminate international legal and procedural barriers
• Recover cryptocurrency merely because a related wire was reported
• Convert frozen funds into an instant refund
• Protect victims from fake recovery services

Be particularly suspicious of anyone claiming to be an IC3 recovery agent who demands a fee, cryptocurrency payment, tax, bond, or “release charge.” Filing with IC3 is free. The FBI warned in its 2025 report that criminals impersonate IC3 and target people who have already lost money.

A victim who has just survived one scam should not be invoiced for the sequel.

Frequently Asked Questions

Is the Financial Fraud Kill Chain free?

Yes. Filing an IC3 complaint and requesting law-enforcement assistance does not require paying a recovery company. Bank fees or private legal costs may arise separately, but no legitimate FBI agent will demand payment to activate an FFKC freeze.

Can a family member file the IC3 report?

A family member can help the victim prepare an accurate report and may report information as a third party. The report should clearly identify the victim and the person submitting it. The bank may still require authorization or identity verification from the account holder.

Does the FFKC cover authorized scam payments?

It may assist when a victim was deceived into sending a fraudulent transaction. Whether the victim technically authorized the wire does not make the scam legitimate. However, authorization can affect bank reimbursement rights and should be described accurately.

Is frozen money guaranteed to be returned?

No. A freeze is a protective hold, not a final recovery decision. Return of funds may depend on the banks, available evidence, legal process, account ownership issues, and law-enforcement investigation.

Should a victim contact local police as well as IC3?

Yes. File with IC3 and report the crime to local law enforcement. A police report creates an additional official record, but it does not replace the urgent bank recall or IC3 complaint.

What if more than 72 hours have passed?

Report the fraud anyway. Immediate intervention becomes more difficult after funds move, but the transaction may connect to an existing investigation, mule account, or broader criminal network. Late reporting is worse than fast reporting, but silence helps nobody except the criminal.

Where can older victims get help filing a report?

The Department of Justice’s National Elder Fraud Hotline can assist adults aged 60 or older at 833-FRAUD-11 (833-372-8311). Victims should still contact their bank immediately when money has moved.

DISCLAIMER

This article is for general educational information only. It is not legal, financial, or professional advice, and it does not guarantee that money will be recovered. Scam refund rules vary by country, payment method, bank policy, evidence, timing, and case details. If you need advice about your specific situation, contact a qualified legal, financial, or consumer-rights professional in your jurisdiction.

Cold Truth

The Financial Fraud Kill Chain works by beating criminals to the money. Not by writing a furious complaint two weeks later. Not by paying a recovery guru with a shiny badge downloaded from the internet. Not by trusting the scammer’s promise to “reverse everything tomorrow.”

Call the bank. Request the recall. File the IC3 report. Preserve the evidence.

Scammers move stolen money quickly because delay destroys recovery options. The response must be immediate, accurate, and documented.

Reviewed for accuracy and legal-risk wording: August 29, 2026.