Saltar al contenido
← All articles

United States · November 2, 2026 · 4 min read

Zelle scam fake screenshot: why the money is never in your account

A screenshot proves someone made an image, not a deposit. How pushed payments work, the overpayment trick, and what sellers should check first.

The message arrives before the question does. "Just sent it, here's the screenshot."

The buyer is pleasant. They haggled twice and agreed on your number. What you are looking at is a purple box with a checkmark, a name, an amount and today's date. It is also just pixels.

Then comes the nudge. They need it today. A cousin is coming to pick it up, and the car is already outside.

A screenshot is an image. It can be real, three days old, cropped, retyped into a template in ninety seconds, or spat out by an app that sells fake receipts. You cannot tell by looking. Neither can anyone else, and that is the point.

What Zelle says about the money

Zelle's own security page is blunt: once you authorize a payment, "you can't cancel it if the recipient is already enrolled," because the money goes "directly into the recipient's bank account typically within minutes."

Chase's Zelle page answers "Can I reverse or cancel a payment?" with "No, Zelle payments cannot be reversed."

There is no hold and no claw-back. Screenshots are free; the money leaves immediately and does not come back.

Pushed, not pulled

A card payment is a pull. You hand over a number, the bank asks, and you can dispute it after the fact. A peer-to-peer transfer is a push: you authorize it, and you have let go.

The FTC put it in one line in a 2023 alert: "sending money through a payment app is like sending cash — it's very hard to get it back."

Zelle goes further on the same point. Its security page states that "Zelle does not offer a protection program for any authorized payments," and gives the examples sellers care about most: the item never arrives, or it is not what was described.

So a stranger who claims he overpaid and wants the difference back is not asking a favor. He is asking you to push your own money to him.

The refund with no counterpart

The dangerous version is small. "I typed $600 instead of $400, my bad, send $200 back." Or a $300 deposit on a $1,200 item, refundable if you change your mind.

The incoming transfer is the fake part: an image, a template, a confirmation email with a bank logo pasted into the header. The $200 you send back is real, and it left your checking account.

He pays with a picture. You pay with money.

The seller behind the folding table

Denise runs a two-person bike shop outside Columbus, Ohio, and moves wheelsets on Facebook Marketplace on weekends. A buyer wanted a $480 pair, sent a screenshot with the familiar purple and the last four digits of her number, and asked to send his brother for the box because he was stuck at work.

She had it taped and labeled. She never opened her banking app, because the picture looked like the ones her regulars send.

The tell was not in the image. It was the ask that followed: "the transfer is pending on your end, can you refund $30 for gas?" No refund makes sense in a sale that already happened.

Marketplace meetups and Craigslist deals fail on this constantly. Small businesses feel it more, because $480 is a week of margin on parts.

Checks that cost nothing

Open your banking app, on your own phone, logged into your own account. If the balance did not move, the money did not arrive. Ask for the confirmation number from their app and say you will wait — a real transfer lands in minutes, and a fake one never does.

At a marketplace meetup, cash in hand. If you take a transfer, take it in person at the handover and confirm the balance before the box leaves your hands.

And when someone volunteers a refund, a courier, or urgency you did not create, that is the sentence where you end the conversation.

Where this sits nationally

The FBI's Internet Crime Complaint Center logged 1,008,597 complaints in 2025, with losses of $20.877 billion, a 26% increase in losses from 2024. That counts everything reported to IC3, not this scheme alone, but it shows who ends up holding the loss.

The Consumer Financial Protection Bureau sued JPMorgan Chase, Bank of America and Wells Fargo over Zelle fraud on December 20, 2024. It voluntarily dismissed the case in March 2025. Enforcement comes and goes. Your balance does not.

Thirty seconds

Before anything leaves your hands: open the banking app, look at the number, and do not hand over the item until a balance you can see has changed.

If you want to rehearse the version where the buyer is charming and the screenshot is flawless, CiberPulso builds those scenarios: https://ciberpulso.com/demo

Sources

Would your team spot these messages?

The demo is five messages and sixty seconds. At the end you see which signals you missed.

Play the demo
CiberPulso

Aprende jugando

Demo jugable de ciberseguridad para pymes. Cinco mensajes, sesenta segundos y una explicación de cada señal.

Beta privada

La demo

Antes de que sigas

  • Todas las marcas, bancos, dominios y personas de la demo son ficticias. Se usan como ejercicio educativo.
  • Los simulacros reales se envían solo al propio equipo de la empresa y con autorización de su administrador.
  • CiberPulso — Los reportes muestran capacitación: no prometen inmunidad ni cumplimiento garantizado ante ninguna aseguradora.
  • En esta beta, tu email se guarda en nuestro servidor solo si lo dejas en una función Pro. La medición de uso no recibe emails ni datos personales.

© 2026 CiberPulso · Demo de validación de producto

Hecho para equipos chicos que reciben correos todos los días.