How to Find Someone Who Scammed You
There is a real method to finding the person who defrauded you, and it is the same regardless of whether it was a fake seller, a romance con, a contractor who vanished, or a bogus investment. You preserve the evidence before it disappears, trace the digital identity and the money trail the scammer left behind, cross-reference what you have against public records, and then face an honest picture of what can and cannot be identified. This guide walks that method end to end, names the scam types that route to deeper guides, and tells you the truth most pages will not: identification is not guaranteed, and finding a name is not the same as getting your money back.
The Short Version
The method is the same for every kind of scam. First, preserve evidence before the scammer deletes it: screenshot the messages and profiles, save transaction records and receipts, and capture email headers and links. Second, trace the digital identity they could not fully hide, the username, the email, the phone number, and especially the payment account the money actually flowed into. Third, cross-reference those identifiers against public records to attach a real person to them. The honest part: if the fraudster is a real domestic individual who used a traceable name, number, or payment account, identification is realistic. If they ran an overseas operation behind stolen identities, burner accounts, and crypto, a true name often cannot be reached, and no legitimate service can promise otherwise. We are a public-records research firm and we do this for lawful purposes, reporting and civil action, never for confrontation.
Watch: Finding Someone Who Scammed You
The method, and the honest limits, in a couple of minutes.
Watch Overview
The Method, Start to Finish
One repeatable process that fits any kind of scam.
Most articles on this topic jump straight to a grab-bag of tools, reverse image search here, a phone lookup there, with no order to any of it. That is backwards. Finding the person who scammed you is a sequence, and the sequence matters because each step either preserves or destroys the inputs the next step needs. Skip the first step and a tool in the third step has nothing to work with.
The method has four stages, and they run in this order every time. Preserve the evidence before the scammer wipes it. Trace the digital identity and the money trail the scammer left behind. Cross-reference those identifiers against public records to attach a real person. Face the realistic picture of what is and is not findable, so you spend your effort where it can actually pay off. This page is the umbrella guide to that whole method; the deeper, scam-by-scam playbooks branch off it where the specifics differ.
One thing this page is not: a revenge manual. We are a public-records research firm, and the only reason to identify a fraudster is a lawful one, reporting them to the authorities and, where it is worthwhile, pursuing civil action through your own counsel. Identifying someone is never a license to confront, threaten, or retaliate, and the realistic-limits section below explains why that line matters as much as the method itself.
Step One: Preserve the Evidence First
Everything downstream depends on what you capture in the first hour.
The single biggest mistake victims make is acting emotionally before acting carefully. The instinct is to confront the scammer, demand the money back, or angrily delete the whole thread. Every one of those reactions tips the scammer off and lets them delete their account, block you, and vanish, taking the only identifying breadcrumbs with them. Before you do anything else, lock the evidence down while it still exists.
Capture the conversation and the profile
Screenshot the full message history, including the very top of the thread where introductions and links often appear, and the profile itself, the display name, username, profile photo, bio, join date, and any linked accounts. Capture the profile before you report it to the platform, because a reported account can be taken down within minutes and the page you needed is then gone. Save the actual profile URL as text too, not just an image of it.
Save the transaction records
Pull every receipt, confirmation, and transaction record: the payment app handle or account the money went to, the bank wire details, the gift-card numbers, the crypto wallet address, the invoice, the dates and amounts. The payment trail is frequently the strongest identifier in the entire case, because money has to land somewhere, and that somewhere is often tied to a real name and a real institution that keeps records.
Keep the technical breadcrumbs
For email scams, save the full message including the headers, which can reveal the sending server and origin. Keep the exact links, domain names, and any attachments without clicking them again. Note the phone numbers used and how they reached you. Then write a short timeline while it is fresh: what happened, when, in what order. That timeline is what you hand to the bank, the platform, and the authorities, and it is what a researcher works from.
Step Two: Trace the Digital Identity and the Money
The scammer almost always left something behind. The job is finding which thread pulls.
With the evidence preserved, you now have a set of identifiers, and tracing means working each one to see where it leads and whether several of them point at the same real person. No single identifier is magic; the breakthrough usually comes from the overlap between two or three of them.
The Reused Handle
People reuse usernames across platforms out of habit. A handle from the scam profile, searched across social and forum sites, can surface other accounts, sometimes including an older, real one created before the person started defrauding people.
The Email Address
An email address can connect to other accounts, breach records, and registrations. Even a throwaway address sometimes ties back to a recovery phone or a username used elsewhere, opening a new thread to pull.
The Phone Number
A real mobile number can attach to a name and location; a number flagged as VoIP or a burner tells you the opposite, that this lead is likely a dead end. Either answer is useful. Phone-specific tracing has its own deeper guide.
The Profile Image
A reverse image search shows whether the photo was stolen from a real, unrelated person, common in romance and catfish scams, or whether it is genuinely theirs and appears on other accounts that reveal more.
The Payment Account
The account the money landed in, a payment-app handle, a bank account on a wire, a business name on an invoice, is often the strongest thread, because financial accounts are tied to verified identities and institutions that keep records.
The Listing or Business
For marketplace and contractor scams, the listing, business name, license claim, or vehicle and address details can be checked against real registrations and records, often the fastest path to a real identity.
This is the stage where a professional makes the difference. Free tools tell you a number is VoIP or a photo was stolen, but turning a username, a payment handle, or a partial name into a verified person requires skip tracing against licensed, investigative-grade databases used for lawful, permissible purposes, the same records work that locates an evasive party in any other case. If your scam was on a marketplace platform specifically, the Facebook Marketplace scammer guide covers those listing and seller-account specifics, and if a phone number is your main lead, start with identifying a scammer by phone number.
Step Three: Cross-Reference Against Public Records
Turning a thread into a name, and confirming it is the right one.
A username or a payment handle is a lead, not a person. The third stage is where loose identifiers get attached to a verifiable human being and then confirmed, because the worst outcome in this work is confidently naming the wrong person. Cross-referencing means taking each thread from step two and checking it against records that tie identifiers to real identities: address and household records, business and licensing registrations, property and vehicle records, and the broad set of public-records and investigative databases used for permissible-purpose research.
The goal is convergence. When the payment handle, the phone number, and the username all point to the same name at the same location, you have a real identification you can stand behind. When they point in three different directions, you do not yet have a person, you have three loose ends, and the honest answer is to say so rather than pick the most convenient one. A documented, dated record of what was checked and what it showed is also exactly what authorities and a civil attorney can use; a name with no provenance behind it is worth little to either.
When Finding Them Is Realistic
Be honest about which case you are in before you spend money chasing it.
Findable: Local Seller or Contractor
A real domestic person, a contractor who took a deposit, a marketplace seller who shipped nothing, usually left a real name, address, or business detail that records can confirm.
Findable: Paid by Traceable Method
If the money moved through a bank account, a payment app handle, or a check, the receiving account is tied to a verified identity an institution can be made to disclose lawfully.
Findable: Reused, Genuine Identifiers
When a username, photo, or number is genuinely the person’s own and reused across accounts, the overlap can converge on a real identity that holds up.
Hard: Overseas Operation
Many large scams are run from abroad through call centers and networks. Even a real name overseas is often beyond practical reach and beyond US prosecution.
Hard: Stolen or Synthetic Identity
If the scammer used a stolen identity or a fabricated one, every identifier points at a victim or at no one, not at the actual fraudster behind it.
Hard: Crypto and Burner Accounts
Payment in cryptocurrency through anonymous wallets, plus burner phones and disposable emails, is built to break the trail. Sometimes only the authorities, with subpoena power, can follow it.
The dividing line is simple: is there a real person with at least one genuine, traceable identifier? If yes, the method above has a realistic shot. If the whole scheme was engineered to be anonymous, no honest service can promise a name, and anyone who does is telling you what you want to hear. That brings us to the warning that matters most.
The Warning: Recovery Scams and the Lawful Path
Scam victims are targeted twice. Do not be hit a second time.
There is a whole industry that preys on people who have just been defrauded. They advertise as “fund recovery” or “asset recovery” specialists, promise to claw your money back from the scammer or the blockchain for an upfront fee, and then disappear with that fee too. The Federal Trade Commission is explicit that no legitimate operation guarantees it can recover funds for an advance payment, and that anyone promising a guaranteed recovery is running the second scam. If a service contacts you after your loss, claims they can get your money back, and wants payment first, walk away.
Understand the difference between two things people blur together: identifying who scammed you and recovering what you lost. We can help with the first where the facts allow. Neither we nor anyone else can promise the second, and a name on its own does not put money back in your account. The realistic path to recovery runs through the lawful channels, your bank or card issuer for a chargeback, a report to the FTC and to the FBI’s Internet Crime Complaint Center, your local police, and a civil claim pursued through your own attorney. A verified identification is what makes those channels actionable; it is the input to a lawful process, not a substitute for one.
It is also not a license to take matters into your own hands. We identify people for lawful purposes only, reporting and civil action, never for confrontation, doxxing, harassment, or retaliation. Showing up at someone’s door or posting their details online does not get your money back and can turn you from a victim into a defendant. Hand what you find to the authorities and to counsel, and let the lawful process do its work.
Where This Guide Fits, and Where to Go Next
This page is the method. The deeper guides own the specifics.
| Your Situation | What You Need | Where to Go |
|---|---|---|
| You want the general method This page | The how-it-works, the four-stage process, the honest limits | You are reading it |
| You are ready to act on a specific case | Engagement plus the reporting and recovery next-steps in order | Find the person who scammed me |
| A phone number is your main lead | What a number can and cannot reveal, VoIP vs real | Identify a scammer by phone number |
| It was a marketplace seller | Listing, seller-account, and shipping-scam specifics | Facebook Marketplace scammer |
| It was a romance or dating con | Catfish profiles, stolen photos, long-game tactics | Romance scam investigation |
| It was a fake investment or crypto deal | Bogus platforms, fake brokers, the money-out trail | Investment scam investigation |
The closest neighbor to this page is our companion guide for when you say find the person who scammed me. Think of the split this way: this page is the method, the how the identification actually works. That companion guide is the action page, it walks you through engaging help on a real case and the reporting and recovery steps that come after an identification. Read this one to understand the process; go there when you are ready to move on your specific situation. For type-specific tactics, the table above routes you straight to the right deeper guide.
From Your Evidence to a Name
How we work a scam case once you bring it to us.
Send What You Preserved
The screenshots, payment records, usernames, emails, phone numbers, and your timeline, whatever the scammer left behind, becomes the starting set.
We Trace the Threads
Each identifier is worked against licensed, investigative-grade databases for permissible purposes, looking for the overlap that points at one real person.
We Cross-Reference and Confirm
Candidate identities are checked against public records and ranked, so what you receive is confirmed rather than a guess.
You Report and Pursue
You get a documented result to hand to your bank, the FTC and IC3, police, or your attorney, the lawful channels that can actually act.
When a Scammer Cannot Be Found
An honest dead end is still a result you can use.
Sometimes the method runs its full course and the answer is that the person behind the scam cannot be reached, because the identity was stolen or synthetic, the operation was overseas, or the trail was deliberately built to be anonymous through crypto and burner accounts. A responsible firm tells you that plainly rather than billing you to chase a ghost. What you have at that point is still not nothing: a documented record of what was traced and where it stopped.
That record has real value. It strengthens your report to the FTC and the Internet Crime Complaint Center, where individual reports are aggregated and can feed larger investigations that do have subpoena power and cross-border reach. It supports a chargeback or insurance claim. And it closes the loop honestly, so you can stop spending money and emotional energy on a hunt that will not pay off, and especially so you do not become the next target of a recovery-scam operator promising the impossible. Knowing when to stop is part of the method too.
Who Comes to Us After a Scam
Different scams, the same method behind the identification.
Marketplace Buyers
Seller vanished after payment
Romance-Scam Victims
A relationship that was a con
Investment Losses
Fake platform or broker
Deposit Takers
Contractor who never returned
Small-Business Owners
Invoice or vendor fraud
Attorneys
Identifying a defendant to sue
Whatever the scam, the work is the same: take the breadcrumbs the fraudster could not fully erase, trace and cross-reference them lawfully, and return a confirmed identification where the facts support one and an honest dead end where they do not. For a relationship-based con, the romance scam investigation guide goes deeper on catfish tactics; for a bogus platform or broker, the investment scam investigation guide covers the money-out trail. For a legitimate matter, a research result typically comes back within 24 hours.
Our Commitment
We trace the digital identity and money trail a scammer left behind and return a confirmed identification where the facts support one, or an honest dead end where they do not. Lawful, public-records research for reporting and civil action, for individuals, businesses, and attorneys since 2004. We never promise to recover your money, and we never identify anyone for confrontation.
Finding a Scammer — Questions
Can you really find the person who scammed me?
Sometimes. If the fraudster is a real person who left a genuine, traceable identifier, a name, a working phone number, a payment account, identification is realistic. If they ran an overseas operation behind stolen identities, burner accounts, and crypto, a true name often cannot be reached, and no honest service can promise otherwise.
What is the first thing I should do?
Preserve the evidence before the scammer deletes it. Screenshot the messages and profile, save every payment and transaction record, keep email headers and links, and note the phone numbers. Capture the profile before you report it, because a reported account can be taken down within minutes.
Which identifier is the most useful?
Usually the payment account. Money has to land somewhere, and the receiving account, a bank account, a payment-app handle, a business on an invoice, is typically tied to a verified identity and an institution that keeps records. A reused username or genuine phone number can also be strong, but the breakthrough most often comes from the overlap between several identifiers.
If you find them, do I get my money back?
Not automatically. Identifying who scammed you and recovering what you lost are two different things. A confirmed identification is the input that makes lawful channels actionable, your bank or card issuer, the FTC and IC3, police, and a civil claim through your attorney, but a name on its own does not return funds, and no legitimate service can guarantee recovery.
Are “fund recovery” services legitimate?
Be very careful. Many are a second scam targeting people who were just defrauded: they promise guaranteed recovery for an upfront fee and then vanish. The FTC is clear that no legitimate operation guarantees it can recover your money for an advance payment. If someone contacts you after your loss promising to get the money back and wants payment first, walk away.
Can I use what you find to confront the scammer?
No. We identify people for lawful purposes only, reporting and civil action, never for confrontation, doxxing, harassment, or retaliation. Taking matters into your own hands does not recover your money and can turn you from a victim into a defendant. Hand what you find to the authorities and to your own counsel.
How is this different from your other scam pages?
This is the method page, the how-it-works that applies across every kind of scam. Our companion guide on finding the person who scammed you walks through acting on a specific case and the reporting and recovery steps afterward, and the type-specific guides for phone, marketplace, romance, and investment cover the tactics unique to each. Start here to understand the process, then route to the right one.
How fast can you research a scam case, and what do you need?
For a legitimate matter, a research result typically comes back within 24 hours. Send everything you preserved, screenshots, payment records, usernames, emails, phone numbers, and your timeline, and we trace and cross-reference from there, returning a confirmed identification where the facts support one or an honest dead end where they do not.
Think You Can Identify Who Scammed You?
We trace the identity and money trail a scammer left behind, lawfully and for reporting or civil action only, and return a confirmed result or an honest dead end, typically within 24 hours. Contact us to get started.
Start Your Request →
