Gift Card and Crypto Scams: What to Do If Your Teen Has Paid

What to do if your teen has already paid

If your teen has paid a scammer, stop further payments and contact the company that handled the payment now. Ask what can still be stopped and what refund or fraud-reporting process applies. Keep the receipt or transaction record; do not wait until you have a perfect evidence file. Tell your teen: “Thank you for telling me. We can make the next calls together.”

Use the receipt or the account’s transaction history to choose a row below. These are US guidance and provider examples, checked October 9, 2026. Outside the US, use your provider’s official local support and rules. This table is our comparison of documented guidance, not a test of recovery services or a promise about your transaction.

A cancellation, a refund request and a fraud report do different jobs. Cancellation tries to stop an operation that is still eligible to be stopped. A refund request asks for money back under the applicable process. Reporting records the scam for the provider or authorities; it does not itself move money. The FTC’s response guide recommends contacting the payment company even when recovery looks difficult.

• Verify the contact. Open the provider’s app or official website yourself. Match its name to the receipt. Do not use a “support” number from the scammer’s message; the FTC also warns about fake support in search ads.
• Ask what actually happened. “Was the transfer stopped, was remaining value protected, or have you only registered my request?” Keep any case reference and the next follow-up step. A confirmation email for a complaint is not proof of a refund.
• If the status is unclear, ask rather than guess. Give the reference you have. A missing Cancel button or unknown gift-card balance means you need clarification; do not wait for the scammer to explain it.

If your teen used your account, contact the provider as the account holder and explain who made the payment and whether they had permission. Do not automatically describe a payment sent under deception as an unauthorized account transaction. PayPal’s unauthorized-activity guidance specifically asks customers to check whether family members made a payment.

For PayPal US, eligible goods-and-services purchases can have Purchase Protection; Friends and Family payments do not have that purchase protection. That distinction is a reason to report the facts accurately, not a promise that a particular claim will succeed. Use official support or dispute channels; do not confront a suspected scammer to negotiate a refund.

Gift card scams: what to check and who to contact

For a gift-card scam, check the issuer, whether the code was shared, and what the issuer can establish about remaining value. A genuine gift card is not inherently a scam. The problem is someone using deception to get its redemption details: the FTC explains that the number and PIN can let the scammer use the money even while your teen still holds the card.

If the code has not been shared, do not send it or a photograph of it. Keep the card and receipt. If it has been shared, contact the issuer promptly and say so, even if the card was purchased in an unrelated store. The store receipt helps identify the purchase; the issuer is the contact for the code and its value.

For an Apple card, Apple directs scam victims to Apple Support. The FTC recommends asking whether money remains on the card and whether Apple can freeze it. Ask about a refund too, but distinguish the request from the result. Apple’s US terms do not provide a general right to return a gift card for cash, except where required by law.

“Already redeemed” needs interpretation. Apple recommends checking your account balance if the card shows as already redeemed. Redemption can move its value into an Apple Account balance; the message alone does not show who redeemed it or whether every dollar has been spent. Give verified support the exact message. Do not keep trying codes on websites sent by the person who asked for the card.

Ask separately: “What status can you confirm? Is any value still available? Have you protected it, or is the request still under review?” If the card instead shows an activation problem, Apple directs buyers to the retailer. That is a different issue from recovering value after a code was disclosed. Keep full card details private and provide them only through independently verified issuer support when needed.

Crypto scams: what can and cannot be reversed

A confirmed external cryptocurrency transfer cannot simply be cancelled by the sending exchange. But “crypto payment” can also describe an operation still inside a provider’s system, so establish which operation actually happened. Coinbase’s documentation distinguishes confirmed transactions from pending ones and describes a cancellation option for certain unaccepted email or phone payments.

A scammer may ask someone to buy crypto through a legitimate provider and then send it to an external address. Those are separate steps. Reversing or disputing the earlier purchase would not erase the later blockchain transaction. Explain both steps to the relevant providers; do not call a purchase you knowingly authorized unauthorized merely because the later recipient deceived you.

The word pending is not enough. A Coinbase transaction may already be in the network waiting for confirmations. An unaccepted transfer to an email or phone number is a different case from a broadcast transfer to a wallet address. Ask your actual provider whether this specific operation has an available cancellation, and whether any cancellation you requested has completed. Do not assume another exchange uses Coinbase’s rules.

Even after a confirmed send, the FTC recommends contacting the exchange or crypto-ATM company and asking about recovery. Report the fraud, supply transaction identifiers and let the provider explain any available action. “Cannot cancel this blockchain send” does not mean “do not report”; investigation and any later recovery process are separate from undoing the transaction.

Worked example: two payments, two different requests

Hypothetical US family example, not a recovery result: a teen shares the code of a $75 Apple gift card. Its remaining balance is unknown. The teen also sends cryptocurrency worth $125 at the time of sending to an external address; the sending provider confirms that transaction. Ignore fees for this illustration. The amount sent or exposed is $75 + $125 = $200. That is not a calculation of money recoverable, or proof that all $200 has been spent by the scammer.

• For the $75 card: the family keeps the card and receipt, contacts Apple, and asks about any remaining value, protection and a possible refund. Unknown balance means the answer is still unknown; holding the plastic card does not settle it.
• For the $125 crypto send: the account holder gives the sending provider the transaction details and reports the scam. They retain the hash and addresses for an IC3 report. They do not expect a Cancel button to reverse a confirmed external transfer.
• What would change the plan? If Apple confirms value has been spent, the remaining-balance question has a different answer. If the supposed external crypto send turns out to be an unaccepted internal payment with a documented Cancel option, cancellation may still be available. Verify the record before choosing the request.

The comparison’s conclusion is practical: match each payment to its provider and stage, rather than asking one support agent to “reverse everything.” A still-cancellable transfer, a refund request after payment and a report to investigators are distinct tasks. Their outcomes remain unknown until confirmed.

What to keep for a report

Keep a private record of each transaction and the messages that explain the deception. Collect what you can while contacting the provider; missing information should not become a reason to delay reporting. The FBI’s cryptocurrency guidance asks victims to report with the information available, even without all transaction details.

• Payment record: date and time with time zone, amount and currency, provider, recipient and status. Retain the original receipt or account record, plus any support case reference.
• Crypto details: asset and network, transaction hash if available, sending and recipient wallet addresses, and the exchange’s own withdrawal reference. A provider reference is not necessarily the blockchain hash. Do not invent a missing hash or amount.
• Contact trail: usernames, profile or website URLs, dates, payment demands and a short chronology. For intimate-image threats, preserve original messages without downloading, forwarding or creating screenshots of sexual images; follow NCMEC’s guidance.
• Access secrets stay out of public posts: card codes/PINs, passwords, private keys, recovery phrases and active login codes. Keep transfer references such as MTCN private too. Give relevant evidence to verified official recipients, not social-media “helpers.”

A wallet address or transaction hash identifies activity; it is not a recovery phrase that gives someone access to funds. Still, avoid posting transaction records next to your teen’s name. Coinbase says its customer service agents never ask for a password, wallet seed phrase or two-step verification code.

In the US, report the scam at ReportFraud.ftc.gov and internet fraud to the FBI’s IC3. An authority’s receipt of your report does not cancel a payment or guarantee an investigation or refund. Keep the provider contact and the fraud report as separate entries in your notes. Outside the US, use your local official reporting route as well as the payment provider.

Recovery scams and how to avoid another loss

Recovery scams offer to retrieve money, then ask for another payment or access to an account. Be especially wary of an unexpected message promising a guaranteed result, a fee to “release” funds, or a demand for another gift card. The FTC warns that people who have already lost money can be targeted again.

A claim that someone has traced the money is not proof that they control it. The FBI warns that private cryptocurrency recovery companies cannot issue seizure orders. Do not hand over a wallet recovery phrase, install remote-access software at a stranger’s request, or transfer more money to “unlock” a refund. Use the provider’s verified channel and your saved case reference to check any follow-up claim.

Once the urgent calls are under way, return to the situation that led to payment. Our guide to scam messages on social platforms explains the common lures; the guide to online manipulation and false relationships helps when a trusted “friend” was involved. If your teen was asked to receive and forward somebody else’s money, use the money-mule recruitment guide too.

A useful family follow-up is a simple agreement: pause an unexpected payment request and verify it with a trusted adult before acting. For this incident, keep the next step concrete: one provider, the matching transaction reference, the action requested, and the answer actually received. Your teen does not need to solve the whole situation before asking for help.

Frequently asked questions