- Capture evidence first: clone sites are taken offline within days and the page becomes unprovable
- Card and PayPal payments have a formal dispute route; crypto and bank transfers effectively do not
- Dispute windows are commonly around 120 days under card scheme rules, so do not wait and hope
- Reusing the checkout password elsewhere is the second loss, and usually the larger one
If you have just realised the site you paid was not the one you meant to pay, the useful thing to know is that the next couple of days matter far more than anything else. Not because a fast reaction is more virtuous, but because both the evidence and the dispute routes have deadlines attached, and clone sites are usually offline within a fortnight.
This page is the practical sequence, in order: what to capture before it vanishes, how to open a dispute depending on how you paid, where to report it in your country, and what to do about the password and card details you handed over. It is written for any IPTV seller, not only clones of this brand.
If you have not paid yet and are simply unsure about a site, you want the verification checks instead. Nothing on this page will help you as much as thirty seconds spent there.
Capture the evidence before it disappears
Do this first, ahead of contacting anybody. Fraudulent checkout pages have short lives, and once the domain stops resolving you are left arguing about a site nobody else can see. A dispute handler who can view what you saw is in a very different position from one taking your word for it.
Screenshot the full page including the address bar, so the hostname is captured alongside the content. Save the payment confirmation, whatever form it took, along with any email that arrived and the exact address it came from. Note the date and time you paid, and record the price you were shown. If the site had a chat window or a support handle, screenshot that conversation in full rather than the last few messages.
Two extras that carry weight. Save the page itself, not only an image, using your browser's save function, because the underlying source records where the form submitted to. And look up the domain's registration date now while the record is live, through ICANN's lookup service; a domain created three weeks before it took your money is a persuasive fact in a dispute.
Open the dispute, and describe it correctly
Contact the card issuer or PayPal next, and use the phrase that matches what happened: services not received. That is a recognised dispute category with an established process behind it, and it is a stronger framing than fraud, which can send the case down a slower route about whether you authorised the payment. You did authorise it. What you did not get was the thing you paid for.
The US Federal Trade Commission sets out the statutory process for disputing credit card charges, which runs from your statement date and is measured in weeks. Debit cards follow different rules, governed by Regulation E in the US, and the protections are generally weaker than for credit. UK buyers who paid by credit card have a stronger position again, because section 75 of the Consumer Credit Act makes the issuer jointly liable on qualifying purchases.
Send the evidence with the initial claim rather than waiting to be asked. Include the domain, the registration date, the screenshots, and the fact that no credentials ever arrived. These disputes are frequently uncontested, because the merchant on the other side has no interest in responding to a bank, and an unanswered dispute is normally resolved in your favour.
If you paid by crypto or bank transfer
Be prepared for a worse answer here, because it is better than being strung along by a recovery service. A completed crypto transfer cannot be reversed by anyone, including the exchange you sent it from. There is no dispute process because there is no intermediary holding the funds.
There are still two things worth doing. Report the receiving address to the exchange you used and to any exchange you can identify at the other end, since addresses linked to reported fraud do sometimes get frozen when funds move through a regulated platform. And file the report described in the next section, because addresses are aggregated across complaints in a way that single victims cannot replicate.
For a bank transfer, call the bank immediately and ask specifically about a recall, which occasionally succeeds if the money has not moved on. Ask separately whether their reimbursement scheme for authorised push payment fraud applies, as coverage varies by country and by bank.
One warning that belongs here more than anywhere. Any account that contacts you offering to recover the lost funds for a fee is a second fraud, targeting people already identified as having paid once. There are no exceptions to this and no legitimate service works that way.
Where to report it
Use the national body rather than a local police station. Individual small cross-border transactions are rarely investigated on their own, and reports are still worth filing because they are pooled to map networks, and a reference number often helps a payment dispute along.
In the United States, file with the FBI's Internet Crime Complaint Center and with the FTC at reportfraud.ftc.gov. In the United Kingdom, use Action Fraud, which issues a reference number you can quote to your bank.
In Canada, report to the Canadian Anti-Fraud Centre. In Australia, use Scamwatch, run by the ACCC.
Anywhere else, or where the seller is clearly in another country, econsumer.gov shares complaints between participating countries.
The second loss, which is usually the bigger one
Money is the visible damage and often the smaller part. Consider what else the checkout collected: an email address, a password you chose at that moment, a name, sometimes a postal address and a phone number.
If that password resembles one you use anywhere else, change it everywhere now, starting with the email account itself, because email is the reset mechanism for everything else you own. This is the step people skip, and it is the one that turns an annoying loss of fourteen dollars into something considerably worse a month later.
Then expect follow-up contact. Details submitted to a fraudulent site are commonly resold, so a rise in convincing messages about the same subject is normal rather than coincidental. Anything arriving afterwards that references your subscription, your payment, or a refund should be treated as connected to the original incident until proven otherwise.
If you entered card details without completing the payment, ask your issuer for a replacement card anyway. Numbers are often stockpiled and used later, so an uneventful first week means nothing.
Reporting the domain, and getting back to a real subscription
Two reports shorten a clone's life. Tell the brand being impersonated, which for us means our contact page or Telegram, and include the hostname and screenshots. Legitimate operators pursue takedowns because clones damage them directly, but they can only act on domains they know about.
Also flag the site to Google through the Safe Browsing reporting route, which is what surfaces browser warnings for the next person. Neither report recovers your money. Both reduce the number of people who repeat your week.
When you are ready to buy properly, start from the list of addresses this brand actually operates and take the shortest term available rather than the best-value one, because rebuilding confidence on a one-month plan costs very little. The seven pre-payment checks cover the rest of the ground, and the verification routine is the habit that prevents a repeat.
Frequently asked questions
01Can I get my money back after paying a fake IPTV site?+
It depends almost entirely on how you paid, and not much on anything else. A credit or debit card payment, or one through PayPal, goes through a dispute process that succeeds reasonably often for services never delivered, because the seller has to respond and a clone operator generally will not. A crypto transfer is effectively final. A bank transfer sits in between and depends on your bank's own reimbursement policy. Act quickly either way: the routes that exist are all time-limited.
02How long do I have to dispute the charge?+
Sooner than you would like, and the exact limit depends on the rule you are relying on. Statutory credit card protections in the US run from the statement date and are measured in weeks rather than months. Card scheme chargeback rules are usually more generous, commonly around 120 days from the transaction or from when the service should have been delivered. Because the windows differ and none of them is long, treat the first 48 hours as the deadline that matters.
03Should I report an IPTV scam to the police?+
Report it to the national fraud reporting body rather than a local station, which is what those bodies exist for. Realistically, a single small overseas transaction will not be investigated individually, and it is still worth doing for two reasons: reports are aggregated to identify networks, and a reference number often strengthens a payment dispute. The links for each country are further down this page.
04Will the real provider replace a subscription I bought from a clone?+
No, and any seller who offers to is worth avoiding as well. A legitimate operator never received your money and has no record of your order, so there is nothing to honour. What genuine support can usefully do is confirm whether a domain belongs to them and whether a set of credentials is real, which is helpful evidence for a dispute. Expect that rather than a free subscription.
05What if I only entered card details but never completed the payment?+
Treat the card as compromised and call your issuer to replace it, because entering the number was enough. Details submitted to a fraudulent checkout are frequently sold on rather than used immediately, so nothing happening in the first week is not reassurance. Replacing a card is free and takes a few days; the alternative is monitoring statements indefinitely.
Prefer chat help? Message Telegram support or browse current plans.