The money has already left your account: what your bank can still do, and by when
Almost every client asks the same question in the first conversation: can the bank simply take it back? Sometimes yes. But the three routes that exist are not interchangeable, two of them run on clocks that nobody tells you about, and the one most people expect to work is usually the one that does not.
Start with the sentence nobody wants to hear: you authorised that payment
European payment law gives you a strong right — but it covers unauthorised transactions. If someone took your card details or your credentials and moved money without you, the rules are on your side: your bank has to refund the transaction by the end of the working day after it is informed, and it may hold that back only on a reasoned suspicion of fraud on your part, which it must report to the supervisor (art. 11, Legislative Decree 11/2010). The burden of proof is not yours either: it is the bank that must show the transaction was authenticated, correctly recorded and not affected by a failure of its own systems (art. 10).
The trouble is that in investment fraud the payment is almost always yours. You typed the card number on the platform's page. You made the transfer, with the account manager still on the phone, sometimes over several months. That makes it an authorised transaction, and the article above does not apply to it. Anyone who tells you otherwise before looking at your statements is selling something. What remains is narrower, and it works on a clock.
Paid by card: chargeback, and the two dates that matter
Chargeback is not a law. It is a rule of the card schemes, and your bank applies it because it is a member of Visa or Mastercard — which is why a flat refusal from a call-centre operator is not a legal opinion and not the end of the matter. The dates come from the same rulebooks: you have 120 days to raise the dispute, and for services that were never provided that period runs from the day you learned they would not be provided, not from the day you paid. There is an outer wall behind it: 540 days from the transaction, and nothing reopens after that.
For a fraudulent trading platform the first date is usually the day your withdrawal was refused or the site stopped loading — not the day of your deposit eight months earlier. That distinction has saved claims that everyone in the family had written off. It also cuts the other way: if you are still being told the withdrawal is “in processing”, the clock is already running.
And an honest limit, because you will hear it from the bank rather than from us: where you bought cryptocurrency from a regulated exchange and it actually arrived in your wallet, the card payment was completed as promised. The fraud came afterwards, when you sent those coins on. That chargeback tends to fail, and pushing it wastes the weeks in which something else could have been done.
Paid by bank transfer: a recall is a request, not an order
Here the terminology does real damage. A recall sounds like a reversal. It is not. Your bank asks the receiving bank to send the money back, marking the request as fraud; the receiving bank has 15 working days to answer, and it may only return funds that are still there and whose holder agrees — if there is no answer from that customer, the request comes back negative. The window for a fraud claim reaches 13 months from the debit, so a transfer from last spring is not automatically beyond reach; but the probability collapses within days, because the money is moved on within hours by design.
Which is why the first call is to your bank, in writing, the same day — before the lawyer, before the police report, before telling the family. Ask for the recall to be sent with the fraud reason, ask for written confirmation that it was, and keep the reference. If the receiving bank refuses, that refusal is itself evidence: it fixes the date, the amount and the account that received the money, and all three belong in the criminal complaint that follows.
The bank routes are fast and cheap, and they close early. The legal routes stay open far longer and cost more. Running them in the wrong order is the single most common mistake we see.
When the bank says no: a written complaint, then the ABF
A refusal from your bank is not final either. The next step is a formal complaint, a reclamo, to the bank itself — and it is a precondition: no ombudsman will look at a case that has not been through it. If the answer does not come, or does not convince you, the file goes to the Arbitro Bancario Finanziario, within twelve months of the reclamo, for claims of sums up to €200,000. It costs €20 and you do not need a lawyer to file.
Two things about the ABF that are worth knowing before you pin your hopes on it. Its decisions are not binding and are not enforceable: if the bank ignores one, the sanction is publication of that fact — reputational, not coercive. And the dispute has to be with your bank about a payment service. If instead your quarrel is with an authorised investment firm about an investment service, the forum is the ACF at CONSOB, which is a different body with different rules. What both preserve is your right to go to court afterwards; neither consumes it.
What to do this week, in order
Write to the bank today, by certified email if you have one: the transaction list, the dates, the platform's name, an explicit request for a recall or a chargeback. Download your full statements before anyone suggests closing the account. Save the platform's back office while it still loads — screenshots with the date visible, the withdrawal requests, the chat with the account manager. Then, and only then, the criminal complaint, which for fraud in Italy carries its own three-month deadline from the day you understood what had happened.
If the answer is no on every bank route, you have lost nothing except time, and you have gained a documented record of who received your money and when. In the cases that end with money coming back, that record is usually where the recovery started.
