
You just made a payment on a site that seemed reliable, and then doubt sets in. The confirmation page is strange, customer service is nowhere to be found, and online reviews are alarming. This scenario affects an increasing number of internet users in France every year. Knowing how to react in the first hours after a payment on a dubious platform drastically changes your chances of recovering your funds.
Card blocking and payment dispute: the immediate banking reflex
The first concrete action is to cut off the tap. As long as your card remains active and linked to the suspicious platform, an additional charge can occur at any moment.
Recommended read : Practical guide: how to use a Kadéos voucher to shop on Amazon
Open your banking app. Since 2023-2024, several French banks (BNP Paribas, Crédit Agricole, among others) offer a dispute process directly in the mobile app. You can block your card, report the dubious site, and initiate a dispute without going through the branch or calling a representative.
If your bank does not offer this feature, call the opposition number on the back of your card. This service operates 24/7. Specify that you wish to block your card and dispute the recent payment.
Read also : How to Manage Your Online Messaging Effectively: Tips and Practical Advice
A regulatory point works in your favor. The European Payment Services Directive (PSD2), communicated by the ACPR and the Banque de France, imposes a clear principle: if you have not committed serious negligence, the bank must refund you. The burden of proving this negligence lies with the banking institution, not with you. In practical terms, this means that disputing a fraudulent payment is not a favor, it’s a right.
To understand in detail what to do after a payment on vatrab.com, the process remains the same regardless of the suspicious site: block, dispute, document.

Gathering evidence before reporting fraud
Before any official steps, gather the traces of your transaction. This file will serve the bank, the police, and possibly a mediator.
Have you noticed that fraudulent sites often disappear within a few days? That’s why speed is just as important as method. Here are the elements to collect:
- Screenshots of the site (homepage, product page, payment page, legal notices if they exist), with the date and URL visible in the address bar
- The bank statement or payment notification showing the amount, date, and description of the debit
- All exchanges via email, SMS, or messaging with the site or a supposed customer service, including email headers if possible
- Your browsing history or the link through which you discovered the platform (advertisement on a social network, search result, received message)
Keep these elements in a dedicated digital folder. Do not delete any messages, even those that seem trivial. A seemingly insignificant detail to you may constitute a technical clue for an investigator.
Reporting to the authorities: THESEE platform and filing a complaint
The official report serves two functions. It protects your legal rights and feeds investigations that help shut down these platforms.
Online complaint via THESEE
The THESEE platform, managed by the Ministry of the Interior, allows you to file a complaint online for internet fraud. The procedure takes about fifteen minutes. You describe the facts, attach your evidence, and receive a receipt.
This complaint has the same legal value as a filing at a police station or gendarmerie. It is forwarded to specialized cybercrime investigation services.
Supplementary reporting on Cybermalveillance.gouv.fr
The site Cybermalveillance.gouv.fr offers an online diagnosis. You answer a few questions about your situation, and the platform generates tailored advice as well as a connection with referenced service providers if necessary. This report does not replace the complaint; it complements it.

Recovery scams: the trap that follows the trap
This risk is less known but is on the rise. After a first payment on a fraudulent site, some victims are contacted by supposed law firms, “fund recovery” companies, or fake police officers offering to recover the lost money.
The scheme is always the same: you are asked to pay “administrative fees,” “unlocking taxes,” or “advanced fees” to initiate a procedure. No legitimate organization asks for payment to start a fraud refund.
Authorities and specialized associations have observed a significant increase in these recovery scams since 2023. Vigilance does not stop at the first report. If someone contacts you spontaneously claiming they can recover your funds, consider them suspicious by default.
Here are some indicators to identify these attempts:
- The contact is unsolicited (email, phone, message on social media)
- The interlocutor knows details about your initial scam, which seems reassuring but simply means that your data is circulating among fraudulent networks
- You are pressured to pay quickly to “not lose your rights”
If in doubt, reach out to your bank or the Scam Info service, which provides free guidance to victims.
Changing access and monitoring bank accounts over time
Payment on a dubious site may have exposed more than just your card number. Email address, password, phone number: this data fuels other fraud attempts for months.
Immediately change the password of the email account used during registration on the suspicious platform. If you used the same password elsewhere, change it everywhere. One compromised password can grant access to multiple services.
Monitor your bank statements for several weeks. Fraudulent debits do not always appear immediately. Some sites make a small initial charge to test the validity of the card, then increase the amounts.
Enable real-time payment notifications in your banking app. This simple reflex turns your phone into a sentinel: each debit triggers an immediate alert, reducing the reaction time to a few seconds instead of a few days when checking the monthly statement.
The reaction after a payment on a dubious platform takes place in the first hours. Blocking the card, gathering evidence, filing a complaint via THESEE, and remaining wary of recovery offers: these four steps cover the essentials of the process. The rest is ordinary vigilance applied to your accounts and identifiers, week after week.