Complete Anti-Scam Guide for China: Every Step from Identifying Fraud to Recovering Your Money
A practical anti-scam action manual for users in mainland China. Covers the latest 2026 scam trends, ScamLens verification, evidence collection checklist, all official reporting channels including 110, 96110, and the National Anti-Fraud Center APP, how to file abuse complaints to take scam websites offline, emergency bank freezes and crypto recovery, supplementary info for Hong Kong, Taiwan and Macau, plus mental health support resources. Every step includes concrete instructions — just follow along if you've been scammed.
After falling victim to an online scam, many people's first reaction is panic, self-blame, and not knowing who to turn to. The goal of this manual is clear: give you a concrete, actionable plan for every step after being scammed. From determining whether you've been scammed, to preserving evidence, to filing a police report, to getting scam websites taken down, to attempting to recover your funds — every stage comes with specific instructions.
Bookmark this article and hope you never need it; but if you do, it can help you take the right action at the most critical moment.
1. The Online Scam Landscape in China (2026)
According to data published by the Ministry of Public Security and the Supreme People's Procuratorate, telecom and internet fraud remains one of the most prevalent crime types in China:
- Case volume: In 2025, over 700,000 telecom fraud cases were filed nationwide, involving more than 200 billion yuan. Despite intensified anti-fraud efforts, new scam techniques keep the overall numbers high.
- Rising per-case losses: Average loss per case is trending upward, with high-value scams (over 500,000 yuan) increasing significantly — closely linked to the proliferation of AI deepfake technology.
- Victim age distribution: It's no longer just the elderly. The 18-35 age group accounts for over 45% of victims in task-based scams and investment fraud.
The Five Most Common Scam Types in 2026
| Scam Type | Typical Characteristics | High-Risk Groups |
|---|---|---|
| Task-based rebate scams | Small returns first to build trust, then demands for large "task" top-ups | Students, stay-at-home parents, part-time job seekers |
| Pig butchering (investment + romance) | Building emotional bonds via social apps, then steering victims to fake investment platforms | Single men and women, middle-aged adults |
| Impersonating law enforcement | Forged police IDs and procuratorate documents, demanding transfers to "safe accounts" for alleged involvement in crimes | Elderly, college students |
| Fake customer service / courier | Claiming order issues or lost packages, directing victims to phishing links or requesting verification codes | Online shoppers |
| Fake investment platforms | AI-generated "mentor" livestream rooms, counterfeit brokerage apps | Young to middle-aged adults with investment interest |
2026 New Trend: AI face-swap video call scams are growing rapidly. Scammers use deepfake technology to mimic the faces and voices of your friends, family, or even bosses during live video calls, demanding urgent transfers. Simply "confirming someone's face via video" is no longer a reliable safeguard.
2. How to Use ScamLens to Determine If You've Been Scammed
Before calling the police, you may need to first confirm whether the other party is actually a scam. Here's the complete process for initial verification using ScamLens:
Step 1: Enter the Suspicious Domain
Open scamlens.org, enter the suspicious website domain in the search box (e.g., suspicious-invest.com), and click "Check."
Step 2: Review the Trust Score
ScamLens aggregates over 90 threat intelligence sources to produce a 0-100 Trust Score:
| Score Range | Risk Level | Meaning | Recommended Action |
|---|---|---|---|
| 0-30 | 🔴 High Risk | The site has been flagged as malicious by multiple intelligence sources or exhibits high-risk characteristics | Stop all interaction immediately — do not enter any information |
| 30-60 | 🟡 Suspicious | Some risk indicators present, such as very recently registered domain or lack of registration records | Stay highly vigilant — do not make any payments |
| 60-100 | 🟢 Likely Safe | No obvious risk indicators found, but this doesn't mean 100% safe | Use normally, but still verify the merchant's credentials |
Step 3: Review the AI Risk Analysis Report
Below the score, the ScamLens AI analysis report details:
- Threat intelligence matches: Whether the domain appears in known phishing databases or malware distribution databases
- Domain registration info: Registration date, registrar, registration country — newly registered domains (especially under 3 months) are extremely high risk
- SSL certificate status: Whether a valid HTTPS certificate exists and whether the certificate authority is trustworthy
- Website technical features: Whether known scam website templates are being used
Step 4: Check Community Feedback
Below the report, there's a community reporting and comment section. Check if other users have reported this site or shared their experiences of being scammed. If you've confirmed you were scammed, you can also submit your report here to help future visitors.
Cryptocurrency Scam Detection
If you were directed to transfer cryptocurrency to a wallet address, open scamlens.org/zh/check-crypto and enter the wallet address. ScamLens will check whether the address is linked to known scam activity or flagged as a mixer or money laundering address.
3. Searching and Reporting Suspicious Websites on ScamLens
Your report doesn't just help you keep a record — it protects other potential victims.
Search Existing Records
Enter a domain on the ScamLens homepage. If the domain already has historical reports, you can view other victims' descriptions and evidence. This information can help you confirm whether you've encountered the same scam.
Submit a Report
- Open the detection report page for the domain
- Click the "Report this website" button
- Select the scam type (investment scam, phishing site, fake shopping, etc.)
- Fill in the scam description — the more detailed the better, including the scammer's tactics and the luring process
- Upload evidence screenshots (optional but strongly recommended)
- Submit
Vote to Confirm
If someone has already reported the website, click "Confirm scam" to vote. Every vote increases the risk weighting for that website, helping ScamLens alert other users faster.
Share in Comments
Share your specific experience in the report comment section, including: the time of the scam, the social platform the scammer used, and the payment method they guided you to use. These details are crucial for building a complete risk profile of the scam website.
4. Complete Evidence Collection Checklist
Whether a case is filed and funds recovered depends decisively on evidence. Here's everything you need to preserve immediately:
1. Chat Records
- WeChat/QQ: Long-press the conversation → Select multiple → Forward/Screenshot. Also export chat history backup from chat settings
- WhatsApp/Telegram: Take screenshots directly, and also use the "Export chat" function to save a .txt file
- Key point: Capture the complete conversation chain — don't just screenshot the last few messages
2. Transfer Records
- Banking app: Go to transaction details and screenshot every scam-related transfer (must include recipient account, amount, and time)
- Alipay/WeChat Pay: Go to the bill details page and screenshot
- Cryptocurrency: Search your transaction on a blockchain explorer (such as etherscan.io, tronscan.org), and save the Transaction Hash
3. Counterparty Identity Information
- Phone number, bank account number (from transfer records)
- Website domain, app name
- Social accounts (WeChat ID/QQ number/Telegram username)
- Any identity information provided by the other party (record it even if likely fake)
4. Website Evidence
- Check the domain on ScamLens and save the complete detection report screenshot
- Screenshot the homepage, login page, deposit page, and withdrawal page (address bar must be clearly visible)
- If the site has an app, screenshot the app name, installation source, and do not uninstall (keep it for police forensics)
5. Phone Call Recordings
- If you had phone conversations with the scammer, save the recordings and call log screenshots
- Use your phone's built-in recording function or a third-party recording app
6. Ad/Link Sources
- Screenshot where you first saw the ad or received the link
- Save the original scam messages from social media feeds, SMS, or email
Evidence Preservation Requirements
- Dual backup: Keep copies on both your phone and cloud storage (Baidu Cloud/iCloud)
- Write a timeline: Document the entire scam experience in text (time, channel, amount, steps taken) — submit this directly when filing a police report
- Don't modify original evidence: Don't crop or edit screenshots after taking them — keep them in their original state
5. Police Reporting Process (Mainland China)
Mainland China has one of the world's most comprehensive anti-fraud systems. Here are all available official channels and detailed procedures:
1. Call 110 Immediately
This is the top priority. The faster you report, the higher the success rate of emergency bank payment holds.
Steps:
- Call 110 and tell the operator: "I've been a victim of online/telecom fraud"
- Provide your name, ID number, and contact information
- Briefly describe the scam: when, how, amount lost, recipient account
- The operator will direct you to the nearest police station to give a statement
- Bring your ID and phone (with evidence) to the police station
Materials needed: Original ID, transfer receipt screenshots (printed or shown on phone), chat records, case statement
Expected response: After filing, if the amount is significant (typically over 3,000 yuan), the emergency payment hold process will be initiated immediately, with a criminal case decision within 24-48 hours. Report even smaller amounts — the information enters the national anti-fraud database for case consolidation.
Important: After reporting, you'll receive a police report receipt — keep it safe, as it's essential for subsequent bank freezes and insurance claims.
2. Call 96110 (Anti-Fraud Hotline)
The national unified anti-fraud consultation/reporting hotline, operated by local anti-fraud centers.
Three key functions:
| Function | Use Case |
|---|---|
| Consultation | Not sure if you've been scammed — call 96110 for professional assessment |
| Reporting | Provide leads on fraud-related phone numbers, URLs, apps |
| Intervention | If 96110 calls you proactively, it means the system detected you may be getting scammed — answer the call |
Steps:
- Call 96110 (auto-routes to your city's anti-fraud center)
- Follow prompts to select "Consultation" or "Report"
- Describe the situation or provide suspicious leads
- Staff will provide professional assessment
Note: 96110 is not an emergency number. For emergencies, call 110 first, then call 96110 to supplement your report. Some cities only operate 96110 during business hours (9:00-17:00 on weekdays).
3. National Anti-Fraud Center APP
The official anti-fraud tool from the Ministry of Public Security — powerful features, recommended for everyone.
Steps (reporting):
- Search "国家反诈中心" (National Anti-Fraud Center) in your app store and download (look for the official Ministry of Public Security version)
- Register with phone number + real-name verification
- On the homepage, tap "I want to report"
- Select scam type (task rebates, pig butchering, law enforcement impersonation, fake customer service, investment fraud, etc.)
- Fill in detailed description, upload chat screenshots, transfer records, and other evidence (supports images, video, audio)
- After submission, check processing status in "Report History"
Other useful features:
- Case assistant: Guides you through organizing report materials and generates standardized documents
- Incoming call warnings: Automatically blocks scam calls when enabled
- Identity verification: Verify whether a caller claiming to be "law enforcement" is genuine
- Risk inquiry: Enter a phone number/bank card number/URL to check if it's been flagged
Expected response: A dedicated person will follow up after reporting, typically with processing updates available in the app within 3-7 business days.
4. 12321 Network Abuse and Spam Reporting Center
A dedicated reporting channel for online fraud information.
Reporting methods:
- Website: www.12321.cn
- Phone: 010-12321
- SMS: Send report content to 12321
- WeChat official account: Search "12321举报中心"
Applicable scenarios: Receiving scam texts, harassment call bombarding, discovering scam websites or apps.
Required information: Original scam text/phone number, scam website URL, app name and download link.
Expected response: Once accepted, fraudulent numbers will be flagged and blocked, and scam websites will be blacklisted. Usually processed within 1-3 business days.
5. Online Crime Reporting Website
URL: www.cyberpolice.cn (operated by the MPS Cybersecurity Bureau)
Steps:
- Visit www.cyberpolice.cn
- Click "I want to report"
- Select the report type (online fraud/online gambling/personal information violation, etc.)
- Fill in scam details and upload evidence
- After submission, receive a report number for tracking processing status
Applicable scenarios: All types of cybercrime. Especially useful when making a phone call is inconvenient.
6. Local Public Security Bureau Cybercrime Division
Applicable scenarios: High-value cases or when submitting large amounts of physical evidence in person.
Steps:
- Bring your ID and all evidence materials (a printed copy is recommended) to your local public security bureau
- At the service window, state you want to "report a cyber fraud case"
- You'll be directed to the cybercrime division or anti-fraud center
- Give a detailed statement and submit all evidence
- Receive a police report receipt
Written materials needed:
- ID photocopy
- Case statement (chronological description of the scam)
- Printed transfer receipts
- Printed chat records
- Printed website screenshots
6. Filing Complaints Against Scam Website Service Providers (Getting Sites Taken Down)
After reporting to police, you can also take proactive steps — file complaints to get scam websites taken down as quickly as possible, preventing more victims. Many people don't know about this step, but it's very effective.
Step 1: Look Up Domain Registration Information
Use WHOIS lookup tools to find the scam website's domain registrar and hosting provider:
- Method 1: Open the ScamLens report page — domain registration info is automatically parsed and displayed
- Method 2: Visit whois.com or who.is and enter the scam domain
You need to note: Domain Registrar and DNS provider/hosting provider.
Step 2: File a Complaint with the Domain Registrar
Based on the registrar you found, send a complaint to their abuse department:
| Registrar | Complaint Method | Notes |
|---|---|---|
| GoDaddy | Email [email protected] or online form at supportcenter.godaddy.com/AbuseReport | Response typically 24-72 hours |
| Namecheap | Email [email protected] or www.namecheap.com/support/abuse | Responds quickly, typically 24-48 hours |
| Cloudflare | Email [email protected] or www.cloudflare.com/abuse/form | Cloudflare is often DNS/CDN only — will cooperate but you should also file with the actual hosting provider |
| Alibaba Cloud / Wanwang | Alibaba Cloud console → Report Center → Domain abuse report, or email [email protected] | Requires domain, fraud evidence, and police report receipt |
| Tencent Cloud | Tencent Cloud console → Report Center, or email [email protected] | High cooperation rate for domestic domains |
| ICANN (fallback channel) | www.icann.org/complaint → Submit domain abuse complaint | For when the registrar doesn't respond |
Complaint email template (English, for overseas registrars):
Subject: Abuse Report - Fraudulent/Phishing Domain: [scam domain]
Dear Abuse Team,
I am reporting the domain [scam domain] for fraudulent activity. This website is operating as [scam type: e.g., investment scam / phishing site] and has defrauded victims including myself.
Evidence:
- ScamLens threat report: https://scamlens.org/en/report/[domain]
- Police report filed: [report receipt number]
- [other evidence description]
I request immediate suspension of this domain to prevent further victims.
Regards, [your name]
Step 3: File a Complaint with the Hosting Provider
The domain registrar and website hosting provider may be different companies. Find the hosting provider via IP address:
- Check the server IP on the ScamLens report page
- Look up the IP at ipinfo.io or whois.com to find the hosting company
- Send an abuse email to that hosting company (same format as above)
Step 4: Report to Search Engines
Get the scam website removed from search results:
- Google Safe Browsing: Visit safebrowsing.google.com/safebrowsing/report_phish/ to submit a report
- Baidu: Visit jubao.baidu.com to submit a report
- WeChat Security: Open the scam link in WeChat → tap "..." in the top right → "Report" → select "Webpage contains fraudulent information"
Step 5: Report to Payment Channels
If the scam website has online payment capabilities:
- Stripe: Contact the support team via stripe.com to report merchant fraud
- PayPal: Log in to PayPal → Disputes and Claims → Report unauthorized transaction
- Alipay: Call 95188 → Complaints and reports → Select "Suspected fraudulent merchant"
- WeChat Pay: Call 95017 → Complaint → Merchant fraud
Step 6: File a Complaint with the SSL Certificate Authority
If the scam website has HTTPS (green lock icon), you can file a complaint to have its certificate revoked:
- Click the lock icon in the address bar to view the certificate authority (e.g., Let's Encrypt, DigiCert, Comodo)
- Visit the authority's website and find the abuse/revocation portal
- Let's Encrypt revocation request: Send an email to [email protected]
Tip: For every complaint above, it's recommended to include the ScamLens detection report link as third-party evidence to increase credibility and processing speed.
7. Fund Recovery Methods
Bank Transfer: Seize the Golden 30 Minutes
- Call your bank's hotline immediately: ICBC 95588, CCB 95533, ABC 95599, BOC 95566, CMB 95555
- Request emergency freeze of the involved bank card + apply for emergency payment hold
- Simultaneously call 110 — police can freeze the recipient's account within minutes through the emergency payment hold system
- The sooner you act, the better — after 24 hours, funds have almost certainly been transferred out
Third-Party Payment: Alipay / WeChat Pay
- Alipay: Open the app → Me → Settings → Security Settings → "Stolen/Scammed" → Initiate claim. Also call 95188 to explain the situation.
- WeChat Pay: Open WeChat → Me → Services → Wallet → Security Protection → "Scam claim." Also call 95017.
- Submitting the police report receipt can speed up processing.
Cryptocurrency: ScamLens Crypto Trace
Cryptocurrency transactions are irreversible, but on-chain data is publicly transparent — tracking is still possible:
- Record the transaction hash: Find the transfer's Transaction Hash from your wallet or exchange
- Use ScamLens Crypto Trace: Visit scamlens.org/zh/check-crypto, enter the recipient address or transaction hash. Supports 18 blockchains, traces up to 20 hops, automatically labels 200+ known entity addresses
- Contact exchanges: If tracing shows funds entered a centralized exchange (Binance, OKX, Huobi, etc.), immediately contact that exchange's security team with the transaction hash + police report receipt to request a freeze
- USDT special opportunity: Tether has the power to freeze funds in any USDT address. Submit a freeze request to Tether through law enforcement — there are multiple successful precedents
Credit Card: Chargeback
- Contact your issuing bank's dispute department
- Explain the transaction is fraudulent and request a chargeback
- The bank will initiate a dispute with Visa/Mastercard/UnionPay
- Processing typically takes 30-90 days — credit card chargebacks have a relatively high success rate
Recovery Success Rate Reference by Payment Method
| Payment Method | Recovery Likelihood | Key Factors |
|---|---|---|
| Bank transfer (reported within 30 min) | ★★★★☆ | Emergency payment hold has high success rate |
| Bank transfer (after 24 hours) | ★★☆☆☆ | Funds usually already transferred |
| Credit card payment | ★★★★☆ | Chargeback mechanism is well-established |
| Alipay/WeChat Pay | ★★★☆☆ | Depends on recipient account status |
| Cryptocurrency (entered an exchange) | ★★☆☆☆ | Requires law enforcement cooperation for freeze |
| Cryptocurrency (passed through mixer) | ★☆☆☆☆ | Fund trail is broken |
| Gift cards/prepaid cards | ★☆☆☆☆ | Almost impossible to recover |
The harsh reality: In most cases, stolen funds cannot be fully recovered. But every police report you file helps law enforcement accumulate data and identify criminal networks. Even if recovery fails in your case, your information could be the key to dismantling an entire criminal operation.
8. Supplementary Information for Hong Kong, Taiwan, and Macau
Hong Kong Special Administrative Region
- Anti-Deception Coordination Centre (ADCC): Call 18222 (24 hours) — can initiate immediate payment holds
- Emergency: 999
- Online reporting: www.erc.police.gov.hk
- Scameter APP: Check suspicious calls and URLs
- Securities and Futures Commission complaints: 2840 9222 (investment scams)
Taiwan
- 165 Anti-Fraud Hotline (24 hours): The primary channel — can initiate "account hold/freeze," with records of successful freezes within 15 minutes
- Emergency: 110
- Online reporting: Criminal Investigation Bureau www.cib.gov.tw
- Financial Supervisory Commission: 0800-818-885 (investment scams)
Macau Special Administrative Region
- Judiciary Police: Call (853) 993
- Public Security Police: (853) 999 (emergencies)
- Monetary Authority: (853) 2856 8898 (financial fraud)
- Website: www.pj.gov.mo
Cross-border scams: If you're scammed on the mainland by someone in Hong Kong, Taiwan, or Macau (or vice versa), first file a report with local police, then report to the other region. Greater China has established a coordinated anti-fraud mechanism for cross-border cases.
9. Prevention Tips + ScamLens Tool Recommendations
The best anti-fraud strategy is identifying the scam before you get scammed. These habits can dramatically reduce your risk:
Daily Protection
- Install the ScamLens browser extension: Visit scamlens.org/zh/extension to install. The extension automatically pops up warnings when you visit suspicious websites — no manual checking needed
- Build a "check before you click" habit: When you receive a link from an unknown source, check the domain's trust score on ScamLens first before deciding whether to open it
- Follow ScamLens community updates: Regularly check the latest reports to stay informed about current scam methods
- Enable two-factor authentication (2FA): Enable it on all important accounts, preferring Authenticator apps over SMS
- "Urgent" requests deserve 10 minutes of calm: Every scam exploits urgency. For any demand to "transfer money immediately," stop for 10 minutes first
Protect Your Family
- Help elderly family members install the National Anti-Fraud Center APP and enable incoming call warnings
- Help family members install the ScamLens browser extension
- Bookmark this article and share it with your family
10. Mental Health Support Resources
The deepest pain after being scammed is often not the money — it's the self-blame and shame. You need to know:
Being scammed is not your fault. Modern scams are carefully designed social engineering attacks. Scam teams have professional scripts, psychological training, and AI tools. Professors, doctors, engineers, and financial professionals have all been scammed. High intelligence doesn't immunize you against a carefully crafted con.
If you're feeling anxious, having trouble sleeping, or blaming yourself, please seek help:
| Resource | Contact | Hours |
|---|---|---|
| National Psychological Aid Hotline | 400-161-9995 | 24 hours |
| Beijing Psychological Crisis Research and Intervention Center | 010-82951332 | 24 hours |
| Hope 24 Hotline | 400-161-9995 | 24 hours |
| Lifeline (Nationwide) | 400-821-1215 | Daily 8:00-22:00 |
What you can do:
- Tell someone you trust — a family member or friend — don't carry this alone
- Channel your anger into action — report the scammer on ScamLens, your report could prevent the next victim
- Remember: the scammer should feel ashamed, not you
Being scammed is not the end of the world — not knowing what to do is. This manual covers every step from identification to reporting, from complaints to fund recovery. Bookmark it and share it. Your one share could help someone make the right decision at the most critical moment.
If this article helped you, please share it with more people on the ScamLens community.
Related Articles
Chrome Companion for Safer Browsing
Save useful links, spot risky sites before you open them, and keep important research easy to find across devices.
Available on Chrome Web Store. Works on all Chromium browsers.