How to Get Your Money Back After a Scam
Card chargebacks, wire recalls, Zelle/Venmo disputes, gift cards and crypto — ranked by your real odds of recovery.
Read the guide →Key takeaways
- Almost everything paid identity-protection services do can be done yourself for free — the single most effective step, a credit freeze, costs nothing and paid services can't do it for you.
- What you're really buying is convenience and cleanup: automated monitoring, alerts in one place, expense reimbursement, and a human who handles the phone calls if your identity is stolen.
- The "$1 million insurance" headline is mostly expense reimbursement — it pays for things like legal fees, lost wages, and notary costs, not a million dollars of stolen money. Read the terms.
- Paying makes the most sense for prior victims, seniors, people caught in serious data breaches, parents monitoring kids' credit, and anyone who honestly won't do the free steps.
- If your identity has already been stolen, start at the government's official recovery site, IdentityTheft.gov — not a paid service.
Here's the honest answer up front: identity theft protection is not a scam, but it's also not magic. No service can prevent your data from being stolen — much of it already has been, in one breach or another. What these services actually sell is earlier detection and easier cleanup. Whether that's worth $10–$35 a month depends on how exposed you are and whether you'll actually do the free alternatives yourself.
Identity theft is not a niche problem. Consumers reported losing more than $12.5 billion to fraud in 2024, according to the Federal Trade Commission, and the FTC's Consumer Sentinel Network logged over a million identity-theft reports the same year.
What paid identity-protection services actually do
Most services in this category — Aura, LifeLock, and dozens of others — bundle some combination of the following. The names differ; the ingredients rarely do.
- Credit monitoring. The service watches one, two, or all three of your credit files (Equifax, Experian, TransUnion) and alerts you when a new account, hard inquiry, or address change appears. Three-bureau monitoring is meaningfully better — lenders don't all pull from the same bureau.
- Dark-web and data-broker monitoring. Scans of breach dumps and underground marketplaces for your email, passwords, Social Security number, and card numbers. Useful as an early warning, but be clear-eyed: it tells you your data leaked; it can't pull it back.
- Identity and SSN monitoring. Alerts when your SSN, name, or date of birth shows up in new credit applications, payday-loan sites, court records, or change-of-address filings.
- Bank and transaction alerts. Notifications for large withdrawals, new account openings, or 401(k)/investment account changes at linked institutions.
- Identity theft "insurance." The most misunderstood feature. The advertised "$1 million in coverage" is almost always expense reimbursement: legal fees, lost wages, notary and mailing costs, and sometimes stolen funds up to a much lower sub-limit. It is not a promise to make you whole for a million dollars. Read the policy terms — exclusions and sub-limits do the heavy lifting.
- White-glove restoration. If your identity is stolen, a case manager makes the calls, files the disputes, and works the paperwork with creditors and bureaus on your behalf. For many people this is the feature that actually justifies the price — recovering from a serious identity theft can take dozens of hours across months.
What you can do yourself, for free
Before you pay anyone, know what's already free. These five steps replicate most of the protective value of a paid plan:
- Freeze your credit at all three bureaus. A security freeze blocks new credit accounts from being opened in your name — the core crime paid services can only alert you about after the fact. Freezes are free by federal law, take minutes online, and can be temporarily lifted when you apply for credit. Our step-by-step guide: how to freeze your credit and set a fraud alert.
- Check your credit reports weekly, free. All three bureaus now offer free weekly reports through AnnualCreditReport.com — the only source authorized by federal law. That's manual "credit monitoring" at whatever frequency you choose.
- Turn on every alert your bank and card issuers offer. Transaction alerts, new-payee alerts, login alerts. These are free, instant, and closer to the money than any third-party monitor.
- Get an IRS Identity Protection PIN. A free six-digit IP PIN from the IRS stops criminals from filing a tax return in your name — a major form of identity theft no commercial service can block.
- Take breach notifications seriously. When a company tells you your data was exposed, change that password everywhere you reused it, enable two-factor authentication, and consider whether the exposed data (SSN vs. just an email) warrants extra vigilance. Breach letters often include free monitoring — take it.
DIY vs. paid: what you get for the money
| Protection | Do it yourself | Paid service |
|---|---|---|
| Block new-account fraud | Credit freeze — free, and the strongest single protection available | Cannot freeze for you; alerts you after an application appears |
| Credit monitoring | Free weekly reports (manual checking) | Automated alerts, often within a day, across up to three bureaus |
| Dark-web monitoring | Free breach-notification emails; limited coverage | Continuous scanning of your SSN, cards, and logins |
| Bank/transaction alerts | Free from your own bank and card issuers | Aggregated in one dashboard across linked accounts |
| Tax-refund fraud | Free IRS IP PIN | Not covered by commercial services |
| Expense reimbursement | None | Up to stated limits — read sub-limits and exclusions |
| Restoration help | You make every call yourself (free federal playbook at IdentityTheft.gov) | A case manager does the calls and paperwork for you |
| Typical cost | $0 | Roughly $10–$35/month depending on tier and family size |
Who genuinely benefits from paying
For a reasonably organized person who freezes their credit and sets bank alerts, a paid service is a convenience, not a necessity. But some people get real value:
- Prior identity-theft victims. Once your SSN is in circulation, it stays there, and repeat attempts are common. If you're in this group, start with our guide to reporting identity theft the right way — the free federal recovery plan comes before any subscription.
- Seniors and their families. Older adults are heavily targeted, and a family plan gives adult children visibility into alerts. See our guide to elder fraud for the broader picture.
- People exposed in serious breaches. If your SSN, driver's license, or medical records were in a breach — not just an email address — the monitoring math shifts in your favor.
- Parents. Child identity theft often goes undetected for years because nobody checks a 9-year-old's credit. Family plans that monitor kids' SSNs cover a real blind spot (though you can also freeze a minor's credit yourself, free).
- Anyone who won't do the DIY steps. Be honest with yourself. A $15/month service that actually runs beats a free checklist you never finish.
How to evaluate a service before you pay
If you decide to pay, comparison-shop on substance, not fear-based advertising:
- Three-bureau credit monitoring, not one. This is often the difference between the cheap tier and the mid tier.
- Real restoration, not a hotline. Look for "full-service" or "white-glove" restoration with a dedicated case manager and limited power of attorney — not just a phone number that reads you a checklist.
- Insurance fine print. Confirm the stolen-funds sub-limit, the exclusions, and whether coverage applies per incident or per year.
- Month-to-month billing and easy cancellation. Avoid services that only quote an annual price or bury cancellation behind a phone call.
- Family and child coverage if that's why you're buying.
- No overpromising. Marketing that claims a service can "prevent" identity theft tells you something about the company's honesty.
Already a victim? Do this first — and watch for the second scam
If your identity has already been misused, a monitoring subscription is not step one. Go to IdentityTheft.gov, the FTC's official recovery site — it generates a personal recovery plan and the affidavit you'll need for disputes. Then work through our guides on reporting identity theft and getting your money back.
Warning: "recovery service" follow-up scams. Fraud victims are routinely re-targeted by criminals posing as recovery experts, law firms, or even government agents who promise to get your money or identity back — for an upfront fee. Government agencies never charge to investigate fraud or recover funds. Anyone who contacts you promising recovery for a fee is a scammer. Report them at ReportFraud.ftc.gov.
One more thing worth knowing: if you have inside knowledge of ongoing fraud — for example, you work at a company running a scheme that steals identities or defrauds the government — U.S. whistleblower programs pay rewards of roughly 10–30% of what the government recovers. See our directory of government whistleblower reward programs to find the right one.
Frequently asked questions
Is identity theft protection worth it?
For most people who freeze their credit, check free weekly reports, and use bank alerts: no, the free tools cover the biggest risks. It becomes worth it if you're a prior victim, a senior or their caregiver, a parent monitoring children's identities, someone whose SSN was exposed in a breach, or someone who simply won't do the free steps. You're paying for automation and cleanup help, not prevention.
What's the difference between credit monitoring and a credit freeze?
A credit freeze blocks new credit accounts from being opened in your name; credit monitoring only tells you after something happens. The freeze is preventive, free by federal law, and something only you can place — no paid service can do it for you. Monitoring is the smoke detector; the freeze is the locked door. Ideally use both. See our credit freeze and fraud alert guide.
Does the "$1 million identity theft insurance" really pay out a million dollars?
Not the way the ads imply. The $1 million figure is typically an aggregate cap on expense reimbursement — legal fees, lost wages, document replacement, and similar costs incurred while restoring your identity. Reimbursement of actual stolen funds is usually subject to much lower sub-limits and exclusions. Before buying, read the policy summary and look specifically for the stolen-funds limit.
Can identity theft protection actually prevent identity theft?
No service can stop your data from being stolen or a criminal from trying to use it. What paid services do is detect misuse earlier and help you clean it up faster. The only tool that truly prevents a common form of identity theft — new accounts opened in your name — is a credit freeze, which is free.
My data was in a breach and the company offered free monitoring. Is that enough?
Take the free monitoring — it costs nothing. But also freeze your credit at all three bureaus, change the exposed passwords, and if your Social Security number was involved, get a free IRS Identity Protection PIN. Breach-provided monitoring usually expires after one or two years; the freeze and IP PIN keep protecting you after it ends.
What should I do if my identity has already been stolen?
Start at IdentityTheft.gov, the federal government's official recovery site, to file a report and get a personal recovery plan. Freeze your credit, dispute fraudulent accounts, and consider an IRS IP PIN. Our step-by-step guide to reporting identity theft walks through the full sequence, and where to report a scam covers related fraud reports.
Last updated: July 4, 2026. AntiFraud.com links only to official and nonprofit help channels — never paid "recovery services" — read our methodology.