Discover exactly how to report an inmate deposit scam, protect your family, and recover fast with this step-by-step guide.
Families searching for how to send money to someone in jail are among the most targeted groups in financial fraud. Scammers exploit urgency, confusion about unfamiliar systems, and the emotional weight of having a loved one detained. This guide walks through how to recognize inmate deposit fraud, document what happened, and report it to every authority that can act.
Why Inmate Deposit Scams Are So Effective
Correctional systems are genuinely confusing to navigate for the first time. Families urgently searching for a jail commissary deposit option or scrambling to send money to an incarcerated person often encounter lookalike websites that appear nearly identical to legitimate facility providers. Scammers count on that confusion to intercept payments before families realize anything is wrong.
The pressure is real. Families believe their loved one is waiting on funds for food, hygiene supplies, or phone minutes. That emotional urgency causes people to move faster than they otherwise would, reducing the mental bandwidth available for careful verification. Scammers specifically design their pages, ads, and outreach to appear in that gap.
These schemes are not amateur operations. Many use professional-quality web design, fake customer support chat windows, copied logos, and search engine advertising to place themselves above legitimate providers in search results. Some impersonate specific county facilities or known commissary services to add a layer of false credibility. Spotting them requires knowing what warning signs to look for before entering any payment information.
Recognizing the Warning Signs Before You Pay
The most reliable early indicator is a payment method that does not match how legitimate correctional facility providers operate. Official providers for jail commissary deposits typically accept payments through their own verified portals, and funds route directly to the facility. If a site asks for wire transfers, gift card codes, peer-to-peer app payments, or cryptocurrency, stop immediately. Legitimate facility payment systems do not operate that way.
Check the URL carefully. Fraudulent sites frequently use domain names that add extra words, swap letters, or add hyphens to mimic a recognized provider's address. A site ending in a legitimate brand name but with a different top-level domain, or one that inserts words like "official" or "inmate" into the URL, should raise immediate suspicion. The padlock icon alone does not confirm a site is safe — scammers can and do obtain SSL certificates for fake domains.
Watch for an absence of verifiable contact information. Legitimate providers publish physical addresses, licensed business registrations, and phone numbers that connect to actual customer service. Fraudulent sites often list only a generic contact form or an email address with no other identifying information. If you cannot independently verify that a company exists and is licensed to operate in your state, treat it as suspect.
Unsolicited outreach is another major signal. Scammers sometimes contact families directly via text, social media, or email claiming to represent a facility or commissary provider. No official jail or correctional facility will contact you uninvited to ask for money through a third-party app or unusual payment channel. Any message of that kind is almost certainly fraudulent.
Documenting the Incident Before You Report
Thorough documentation dramatically improves the usefulness of any report you file. Begin immediately after you recognize the fraud, because digital evidence disappears quickly. Your goal is to preserve every piece of information about what happened, who appeared to be involved, and what money moved.
Take screenshots of every page you interacted with, including the website, any confirmation pages, and any error screens that appeared after payment. Capture the full URL in each screenshot so investigators can see the exact domain. If the site has since disappeared, check whether it was cached by a web archive service and capture that version as well.
Save every email, text message, or chat transcript associated with the interaction. If you received a confirmation email, do not delete it. Export or screenshot the full message including header information if your email client allows it. These headers contain routing data that can help investigators trace the origin of the message.
Gather your payment records. Pull your bank or credit card statement and identify the exact charge, including the payee name as it appears on the statement, the transaction date and time, and the amount. If you paid via a peer-to-peer payment app, screenshot the transaction record before it can be reversed or edited. Note any reference numbers or confirmation codes the fraudulent site provided.
Write down a timeline of events while your memory is fresh. Note when you first found the site, what you searched to reach it, what steps you took, and when you realized something was wrong. This narrative context helps investigators understand how the fraud operated and may assist them in linking your case to others.
How to Report an Inmate Deposit Scam to Federal Agencies
The first federal body to contact is the Federal Trade Commission. The FTC accepts consumer fraud reports at reportfraud.ftc.gov, and every report you file contributes to a national database that informs enforcement actions. When completing your report, include the name or URL of the fraudulent site, the payment method used, the amount lost, and a description of how the contact was initiated. The FTC may not investigate individual cases, but aggregated reports trigger investigations and enforcement actions against repeat operators.
The FBI's Internet Crime Complaint Center, known as IC3, handles online fraud and financial crimes with an internet component. File a complaint at ic3.gov with the same documentation you gathered. IC3 analysts route credible complaints to the appropriate federal or state law enforcement agencies. If your case involves significant financial loss or shows signs of an organized operation, IC3 is particularly important to contact.
If the scam involved any use of the postal service — including a letter, a mailed check, or instructions delivered by mail — report it to the United States Postal Inspection Service. Mail fraud is a federal crime, and postal inspectors have broad jurisdiction over schemes that touch the mail system at any point, even if the primary channel was digital.
The Consumer Financial Protection Bureau handles complaints related to financial products and payment systems. If the scam used a payment method overseen by the CFPB — such as a prepaid card or a digital wallet — filing a report there adds regulatory pressure on the payment infrastructure that scammers exploit.
Reporting to Your State Attorney General
Every state has an Attorney General's office with a consumer protection division. State attorneys general can investigate and prosecute fraud that occurs within their jurisdiction, and they have legal tools that federal agencies may deploy more slowly. Find your state's consumer protection complaint portal through your state government's official website, not through a third-party search result.
Include the same documentation package you prepared for federal reports. Many state portals allow file attachments, so upload screenshots, payment records, and your written timeline directly. If the portal does not accept attachments, mail physical copies to the consumer protection division and keep copies for yourself.
Some states have specific units focused on elder fraud, military family fraud, or technology-based scams. If you believe your case fits one of those categories, request that your report be routed to the relevant specialized unit. Scams targeting incarcerated people's families often qualify as targeted vulnerable-population fraud, which can accelerate how seriously a complaint is prioritized.
Reporting to Your Financial Institution
Contact your bank or credit card issuer as soon as you recognize the fraud. If you paid by credit card, initiate a chargeback immediately. Credit card networks generally offer strong dispute protections for fraudulent charges, and the sooner you act, the better your chances of recovering funds. Provide your bank with the same documentation package you compiled for regulators.
If you paid by debit card, contact your bank the same day. Debit card protections are weaker than credit card protections under federal law, but many banks have internal policies that provide additional recovery options. Ask specifically about your bank's fraud claim process and request a case number for your complaint.
If the payment went through a peer-to-peer payment app, report it to that platform's fraud or dispute team immediately. Recovery through these channels is difficult because many app transactions are treated as voluntary payments, but reporting creates a record and may freeze accounts associated with the fraudulent recipient. The platform may also be able to flag the recipient's account to prevent future victims.
For wire transfers, act within the same business day if at all possible. Contact your bank and ask them to initiate a recall through the wire transfer network. Success is not guaranteed, but speed is the primary variable — the longer you wait, the more likely the funds have already been withdrawn at the receiving end.
Reporting to the Payment Platform or App
File a separate fraud report directly with the payment platform used, independent of any bank dispute. Whether the transaction went through a digital wallet, a prepaid card network, or another payment service, those platforms have internal fraud teams. Your report may not result in immediate recovery, but it helps those teams identify patterns and block fraudulent accounts.
Provide the platform with every transaction identifier you have — confirmation numbers, recipient account identifiers, timestamps, and any usernames or profiles associated with the transaction. If the scammer communicated with you through the platform's messaging system, preserve those messages and include them in your report.
Follow up if you do not receive a response within a few business days. Document each contact attempt, including the date, the name of the representative you spoke with if applicable, and the outcome. This paper trail matters if you later need to escalate to a regulator or pursue other recovery options.
Reporting to Local Law Enforcement
File a police report with your local law enforcement agency even if you believe they have limited jurisdiction over an online scam. A police report creates an official record of the crime, which may be required by your bank, insurance provider, or other institutions. It also contributes to local crime data that can inform regional investigations.
When you file the report, bring printed copies of your documentation package. Explain clearly that this is an online financial fraud involving a fake inmate deposit service. Ask the officer to note that in the report and request a copy of the report with a case number before you leave. Some departments have cybercrime units that can take more active investigative steps.
If local law enforcement tells you they cannot help, ask whether they can refer the case to your county sheriff's office, a regional cybercrime task force, or the state police. These bodies sometimes have more resources for digital fraud investigations than individual municipal departments.
How to Warn Others and Reduce Future Harm
Reporting to regulators is essential, but sharing your experience through verifiable public channels can protect other families. Many people who search for information about how to report an inmate deposit scam are doing so because they suspect fraud but want to confirm their suspicion before acting. Your account, filed with the FTC's public-facing review system or with the Better Business Bureau, can be the warning that stops someone else from losing money.
Submit a report to the Better Business Bureau's Scam Tracker at bbb.org/scamtracker. This tool is publicly searchable, so your report is immediately visible to anyone researching the same fraudulent site or phone number. Include the website URL, any contact information the scammer used, and a brief description of how the scheme worked.
Consider reporting the fraudulent website to Google Safe Browsing through Google's report phishing page, and to Microsoft through their browser's built-in reporting tool. These reports feed into warning systems that flag dangerous sites for users before they load. Even if the fraudulent site shuts down, reporting it contributes to pattern recognition that affects future flagging.
How Legitimate Deposit Services Differ
Understanding how legitimate services operate is the most effective long-term protection against scam-avoidance failure. Authorized facility deposit services are contracted directly with correctional facilities. They are named explicitly on the facility's official website, accessible through the jail's own booking or visitation information pages, and they never solicit contact through social media, unsolicited email, or text messages.
When using a legitimate provider, your funds never pass through an intermediary. Payment goes from your account directly to the provider's secure system, which credits the account at the facility. No legitimate provider will ask you to send money to a personal account, use a gift card, or route payment through an app not associated with their verified platform.
Families doing a county jail inmate search or trying to find a loved one in jail free of charge should verify every provider against information published directly by the facility. If you cannot find the provider listed on the facility's own official page, do not use it. This one step eliminates most scam risk before any payment is initiated.
InMato is an information, search, and referral service that points families toward official, licensed providers — never lookalike payment sites. When you use InMato to look up a facility, the deposit instructions you receive reflect what the facility itself has designated, so your money routes through the correct channel. InMato never touches user money, and that boundary is structural, not just a policy.
Using Verification Tools Before You Pay
Several free tools can help you evaluate a website before entering any payment information. The WHOIS database, accessible through icann.org, lets you look up when a domain was registered. Fraudulent sites are often registered within days or weeks of their discovery, while legitimate providers operate on domains registered years ago. A brand-new domain claiming to be an established commissary service is a serious red flag.
Google's Transparency Report includes a Safe Browsing check where you can paste a URL and see whether it has been flagged for phishing or malware. This check takes seconds and costs nothing. Make it a habit before using any commissary or deposit site you have not previously verified.
Search the provider's name plus the word "scam" or "complaint" in a general web search and look at recent results. If others have reported the same site, you will likely find reports in consumer complaint forums, BBB listings, or news coverage. The absence of results is reassuring but not conclusive — new fraudulent sites appear constantly.
What InMato Does to Protect Families
InMato was built around the principle that families navigating the correctional system deserve accurate information without exploitation. For families trying to figure out how to find someone in jail, the InMato app and website provide a county jail inmate search across 289 county jail systems in 14 states, always free, with no time limit or account required. That free access matters because families should never feel pressured to pay for basic location information.
InMato reviews each provider listed on its platform to confirm official licensure and facility authorization. By directing families only to authorized providers, InMato eliminates the discovery risk — the moment when a vulnerable family might otherwise land on a fraudulent site instead of a legitimate one. The referral function is the core protection.
For families who want ongoing support, InMato+ is available at $19.99 per month per loved one, with self-service cancellation at any time. It adds jail booking alerts, release and transfer alerts, court date notifications, and real-time case tracking with document summaries — all tools that help families stay informed through an inherently stressful process without needing to search from scratch each time. InMato LLC, incorporated as a Delaware limited liability company, was built to treat this need with the seriousness and care it deserves.
If you are uncertain whether a site is legitimate and want a verified starting point, InMato offers a free search at inmato.com. From there, the path to the correct, official provider is clear. Is InMato legit? The answer is in how it operates: no money passes through the service, every referral goes to a licensed provider, and the basic search is always free.
After Reporting: What to Expect
Filing reports with multiple agencies is the right move, but recovery timelines vary significantly by agency and payment method. Credit card chargebacks can resolve in as little as a few weeks. Federal investigations take much longer and may not result in individual restitution even when they succeed in prosecuting fraud operators. Setting accurate expectations protects you from additional stress.
Stay organized. Keep a master folder — physical, digital, or both — with copies of every report you filed, every case number you received, and every follow-up communication. Regulators sometimes contact reporters for additional information months after a complaint is filed, and having everything in one place makes that follow-up straightforward.
If you lost a significant amount, consult a consumer protection attorney about your options. Some attorneys handle these cases on contingency, meaning you pay nothing unless they recover funds. State bar association referral services can connect you with attorneys who specialize in consumer fraud without charging for the initial consultation. InMato is not a legal service and does not provide legal advice, but pointing families toward the right professional resources is part of how the platform supports families at every stage.
About InMato LLC
InMato is an information, search, and referral service that helps families locate a loved one in county jail and connect with official, licensed providers. Founded by J.T. Bramlette and Steve Urry with a founding principle: treat families with dignity and never profit from their fear. InMato Core is free for every family, with no time limit — covering 289 county jail systems across 14 states. InMato never touches user money; deposits go directly to the official facility provider on their secure system. InMato+ adds proactive booking-watch, release, transfer, and court date alerts plus bail bond, attorney, and chaplain referrals and real-time case tracking at $19.99/month per loved one, cancel anytime. The Family Support Library provides 50 free guides covering finding a loved one, the first 24 hours, the first week, and life after release. Available in English and Spanish. InMato LLC, a Delaware limited liability company, headquartered in Santa Barbara, California.
Get Started with InMato LLC
Search for your loved one now at inmato.com — free for every family, with no time limit. Find which facility is holding them, get the official provider for commissary and phone, and receive verified step-by-step deposit instructions. No account required to search. Available in English and Spanish.
Originally published at https://www.inmato.com/blog/how-to-report-an-inmate-deposit-scam
Written by InMato
Looking for someone right now?
Search participating county jails for free and connect to the facility’s official, licensed providers — no money ever passes through InMato.