How to Handle a Wire Recall Request After Funds Have Already Disbursed
Contact the sending bank immediately, report suspected fraud, preserve evidence and track recovery without treating a wire recall as a guaranteed undo.

A wire recall after disbursement is a request for recovery, not a guaranteed undo. Contact the sending bank immediately when an error or suspected fraud is discovered. Do not wait to decide whether the transfer is legally reversible before reporting it.
This guide covers the bank call, the parallel office response and the record to preserve. The applicable payment system, bank agreements, law and facts determine available remedies.
Recall, cancellation and return are different
A settled wire generally cannot be unilaterally retrieved by the sender. But it is too broad to say the beneficiary’s consent is always required or that no remedy exists once funds move onward. Banks, law enforcement and courts may have different recovery or restraint mechanisms. Counsel should assess the transaction-specific legal position.
Do not assume every wire uses SWIFT. Fedwire supports a request-for-return message, and other systems have their own procedures. Ask the sending bank to identify the actual route and initiate the appropriate urgent action.
First actions after discovery
1. Call the sending bank’s fraud or wire team
Report suspected fraud or error immediately. Supply the transaction reference, amount, date, sending and beneficiary details, and a reliable callback number. Request recall or reversal, contact with the receiving institution and any available hold. Ask what written documentation or indemnity the bank requires; have an authorized person review it promptly.
Record the contact, time, case number and exact request. A bank’s acceptance of a report does not establish that a hold or return has occurred.
2. Report suspected fraud to IC3
File a detailed complaint promptly with the FBI’s Internet Crime Complaint Center. Include the banking details and preserve the complaint number. Update the bank and law enforcement as material facts emerge. Do not promise a freeze or recovery on the basis of an IC3 submission.
3. Hold affected pending actions
Notify the owner or designated incident lead. Hold affected pending disbursements while the office checks for altered instructions or wider compromise. Review related files and shift sensitive communications to independently established channels.
4. Follow reporting and notice duties
For a California DFPI-licensed escrow office, the Department’s Escrow Bulletin addresses immediate shortage reporting and reports to DFPI and EAFC under Financial Code section 17414. Do not wait for recall results to evaluate those duties.
Check actual insurance policies and partner agreements for notice obligations. An independent escrow office does not necessarily have a title-underwriter contract. Engage counsel promptly for legal deadlines, affected-party communications and potential claims.
Preserve evidence without rewriting history
Keep the original payment instruction, every changed version, original communications and headers, callback records, approval logs and bank confirmations. Maintain a chronological incident log of facts, requests, responses and open questions.
If a note is reconstructed later, label when it was written and the sources used. Do not present a later reconstruction as a review completed before release. Preserve existing records and coordinate account containment with IT so evidence is not needlessly destroyed.
Recovery timing and outcomes
Act immediately, including after business hours through the bank’s available incident channel. Do not assume the receiving bank can only act the next business day. Availability and processing depend on the institution and payment system.
Recovery is uncertain and funds can move quickly. This guide does not establish that most recalls fail, a universal recovery percentage, or a fixed “golden window” after which reporting is pointless. Continue reporting and follow-up even when discovery is delayed.
Record the outcome and repair the control
Obtain written bank status where possible: request received, hold confirmed, return pending, funds returned or recovery unsuccessful. Reconcile any return to the account and affected file. A partial return is not a full recovery.
Review the underlying failure separately from the recall outcome. Independent verification, access controls, second-person review and current instructions remain important. A Review Record preserves what was checked and unresolved; it does not replace verification or guarantee that an automated gate stops a bank transfer.
Frequently asked questions
Who pays recall fees?
Ask the bank for applicable fees and any receiving-bank deductions. Charges and refunds depend on the agreements and outcome.
Should the office wait until morning?
No. Report through the sending bank’s available fraud or emergency channel immediately and document any unsuccessful attempts. Follow its instructions for written requests and further contact.
Does account verification guarantee the instruction is legitimate?
No. Review what the specific service actually checked and its limitations. A valid account or name result alone does not establish the requester’s authority.
Can the office be liable if recovery fails?
Liability depends on the facts, instructions, agreements and applicable law. Preserve accurate evidence and obtain counsel’s advice; a completed checklist or review record is not immunity.
Sources
- FBI IC3: Business Email Compromise response
- DFPI: February 2025 Escrow Bulletin, shortage reporting and social engineering
- Federal Reserve Financial Services: Fedwire return requests
- Federal Reserve: Fedwire disclosure and finality
These sources support the legal and security points identified above. Suggested office workflows are operational guidance, not a finding of compliance, insurance coverage or legal protection.
One page in the file before money moves.
Your office decides. Veto records what was reviewed, what stayed open, and who reviewed it.
