国际贸易争议发布于2026-08-10
被诈骗后第一时间的取证与止付动作
邮件里的"供应商"换了收款账户，定金转出后才发现被骗。本文给出诈骗发生后 24–72 小时黄金窗口内的止损、取证、银行止付与刑事报案动作清单，越早行动，追回概率越高。
被诈骗后第一时间的取证与止付动作
邮件里的"供应商"突然换了收款账户，你按新账号付了定金；两天后真供应商来电：我们没收到钱。那一刻你意识到——钱可能已经进了骗子的账户。诈骗发生后，黄金窗口通常只有 24–72 小时：资金每多停留一小时，被层层转移、洗白的概率就大一分；聊天记录和邮件每被清理一份，追回的希望就少一分。
第1小时：止损与控制
- 立即停止一切后续付款，通知财务冻结对公账户的对外支付；
- 立即修改邮箱、网银、ERP 的密码并开启双重验证——诈骗分子常驻留在邮箱里继续行骗；
- 检查邮箱转发规则：是否有自动转发到陌生地址（这是商业电子邮件诈骗 BEC 的典型设置）。
第2–6小时：固定证据
- 完整保留涉案邮件原文（含完整邮件头信息）、聊天记录、合同、发票、银行汇款水单；
- 对关键页面截图并注明时间，有条件时做公证保全或可信时间戳；
- 不要删除任何相关文件，也不要自行"清理"邮箱——原始数据比整理后的更可信。
第6–24小时：联系银行与收款行
- 立即联系付款银行申请止付、撤销或追回，说明涉嫌诈骗；
- 提供收款账户信息，请银行通过 SWIFT 报文联系收款行尝试冻结——追回成功率与时间高度相关；
- 注意：跨境汇款撤销有严格时限，越早提出越有可能。
第24–72小时：报案与立案
- 携带证据向公安机关报案（诈骗罪/合同诈骗），争取立案并对涉案账户紧急止付、冻结；
- 刑事立案后的资金冻结，是追回的最重要手段之一；
- 同步咨询律师评估民事路径：撤销、保全、起诉收款账户名义人。
后续：民事追偿与风险排查
- 排查是否还有未暴露的风险：其他"变更收款账户"邮件、伪造单据、被入侵的渠道；
- 通过律师对收款账户主体提起民事诉讼或申请财产保全；
- 评估出口信用保险、货物运输险等是否覆盖此类损失。
时间与费用预期
| 动作 |
黄金时间 |
主要成本 |
| 止付/联系银行 |
24 小时内 |
低（银行手续费） |
| 证据保全 |
48 小时内 |
公证费/时间戳费用 |
| 刑事报案 |
72 小时内 |
低（报案免费） |
| 民事追偿 |
1–6 个月 |
律师费+诉讼/保全费 |
以上为经验区间，追回结果无法承诺——我们不承诺结果，但每提前一小时，可能性就高一分。
风险提示
- 不要慌张删除或"整理"证据；
- 不要听信"黑客追款""内部关系追回"等第三方服务——这是二次诈骗的高发区；
- 不要私下联系收款账户人"私了"——可能惊动对方转移资金；
- 报案要快、冻结要快，犹豫是最贵的成本。
如果您刚刚遭遇贸易诈骗，请立即提交信息，我们会第一时间评估止付与取证方案：
免费评估我的案件 →
本文为一般法律信息，不构成法律意见。具体案件请以咨询为准。
First 24 Hours After Trade Fraud: Evidence and Freezing
The email from your "supplier" suddenly announced a new bank account, and you paid the deposit. Two days later the real supplier calls: we never received the money. That is the moment you realize the funds may already be in a fraudster's account. After trade fraud, the golden window is usually 24–72 hours. Every hour the money sits in the scam account, the higher the chance it is layered, laundered, and gone; every email or chat record deleted lowers the odds of recovery.
Hour 1: stop the bleeding
- Halt all further payments immediately and instruct finance to suspend outgoing transfers;
- Change passwords and enable two-factor authentication on email, online banking, and ERP — fraudsters often stay inside your mailbox to keep scamming;
- Check for email forwarding rules: automatic forwarding to an unfamiliar address is a classic sign of business email compromise (BEC).
Hours 2–6: secure the evidence
- Preserve the full original emails (including headers), chat records, contracts, invoices, and bank transfer receipts;
- Screenshot key pages with timestamps; where possible, use notarization or trusted timestamping;
- Delete nothing and do not "clean up" mailboxes — raw data is more credible than tidied data.
Hours 6–24: contact your bank and the receiving bank
- Ask your paying bank to stop, reverse, or recall the transfer, explaining the suspected fraud;
- Provide the receiving account details and ask your bank to contact the beneficiary bank via SWIFT to attempt a freeze — recall success is highly time-sensitive;
- Note that reversal of cross-border transfers has strict deadlines; the earlier you act, the better the chance.
Hours 24–72: file a criminal complaint
- Report to the police with your evidence (fraud or contract fraud) and seek case filing, emergency stop-payment, and freezing of the receiving accounts;
- A criminal filing with asset freezing is often the single most powerful recovery tool;
- In parallel, ask counsel about civil routes: avoidance, preservation orders, and claims against the nominal account holder.
Afterward: civil recovery and risk review
- Audit for further exposure: other "changed bank account" emails, forged documents, or compromised channels;
- Pursue civil claims or preservation against the account holder through counsel;
- Check whether export credit insurance or cargo insurance covers the loss.
Time and cost expectations
| Action |
Golden window |
Main costs |
| Stop-payment / bank recall |
Within 24 hours |
Low (bank fees) |
| Evidence preservation |
Within 48 hours |
Notarization / timestamp fees |
| Criminal complaint |
Within 72 hours |
Low (no filing fee) |
| Civil recovery |
1–6 months |
Counsel fees + court/preservation fees |
These are experience ranges, and we do not promise outcomes — but every hour of earlier action raises the odds.
Key risks
- Do not panic-delete or "tidy up" evidence;
- Do not trust "hacker recovery" or "inside-connection recovery" services — this is a common second scam;
- Do not contact the account holder privately to "settle" — it may alert them and trigger a transfer;
- Report fast and freeze fast; hesitation is the most expensive step.
If you have just been defrauded in a trade transaction, submit the details now and we will assess stop-payment and evidence steps immediately:
Free case assessment →
This article is general information, not legal advice.