Most people who get hit by a scam assume the money is gone and the case is closed. It’s close to the opposite. A large share of the fraud, robocall, and identity-theft nightmares landing on Virginia phones this year fall under federal consumer protection statutes that give the victim, not the government, the right to sue and collect. That distinction matters. The reports people file with agencies after a bad experience feed policy and enforcement work, but they were never built to put money back in your account.
The problem is that the obvious response, calling the bank and filing a complaint, usually stops there. And the case stops with it.
The scale of the problem has outrun the old playbook
The numbers from the last full reporting year are worth pausing on. According to FTC data, consumers reported losing more than $12.5 billion to fraud in 2024, a 25% jump over the year before, and the share of people who reported a fraud and said they actually lost money climbed from 27% to 38% in a single year.
That isn’t a story about more scams. It’s a story about scams that work more often. The report count held roughly steady; what changed is how many ended with somebody’s money in somebody else’s account.
Text messages, spoofed caller IDs, cloned voices, fake shipping notices, fake bank fraud alerts. The bait has gotten better.
The old playbook, block the number, delete the text, warn your parents, hasn’t kept up. It can’t. It treats each contact as an isolated nuisance instead of what it usually is: a piece of a larger, and often illegal, business model that federal law was built to punish.
The instinctive response solves the wrong problem
When money disappears, the reflex is to call the bank and dispute the charge. Sometimes that works. Often it doesn’t, and here is why.
That last point is the pivot. The people running outright fraud from abroad are hard to catch. The domestic companies whose sloppy or aggressive practices helped the scam land, or which are causing their own separate harm, are a different story.
Federal consumer statutes do the work the complaint form cannot
Congress built a stack of consumer protection laws with something unusual in them: a private right of action. That means you, the person harmed, can sue in your own name and recover statutory damages without proving a specific dollar loss.
None of this depends on the scammer being caught. It depends on identifying a company on U.S. soil that broke a specific rule in the chain of events that touched you. That’s a very different search than “who took my money.”
What actually puts money back in a consumer’s pocket
The path that produces recoveries looks less like a complaint form and more like an investigation. It also moves fast, because most of these statutes carry short limitations periods. Virginians who suspect a lawful U.S. company is on the hook for part of what happened can start by talking to a consumer protection attorney before that window closes.
The assumption costs Virginians real money every week
The belief that a scammed dollar is a lost dollar isn’t harmless. It keeps people from checking whether a lawful U.S. company is on the hook for part of what happened. It keeps them from disputing credit report entries that will quietly raise the cost of a car loan or mortgage for years. It lets illegal callers, illegal texters, and sloppy collectors keep operating because nobody makes them pay.
The scams will keep evolving. Cloned voices, AI-written pretexts, spoofed local numbers that look like a neighbor calling. What hasn’t changed is the underlying rulebook. It still favors the consumer who acts, and it still leaves money on the table for the one who assumes there’s nothing to be done.
This content is provided for informational purposes only and is not a substitute for professional advice. AFP editorial staff were not involved in the creation of this content.