Cryptocurrency$50M+ in annual losses

Crypto Recovery Scam

Also known as: fund recovery scam, recovery agent scam, blockchain trace scam

After a victim loses money to a crypto scam, a 'recovery service' contacts them promising to trace and recover the stolen funds — for an upfront fee. These 'recovery agents' are scammers themselves, and the victim loses more money.

Check if something looks like this scam

Paste any suspicious text, link, or phone number into our scanner.

Scan now

How it works

Crypto recovery scams are a second victimization. Scammers target people who have already lost money to another crypto scam, often buying or scraping lists of victims.

The contact: The victim receives a message — email, LinkedIn, Facebook, Telegram, WhatsApp — from someone claiming to be a blockchain forensics expert, fund recovery specialist, or 'licensed investigator.' They may even claim to be working with law enforcement.

The credibility build: The 'recovery agent' may have details about the original scam (because they bought the victim's info). They produce a professional-looking website. They cite real blockchain analytics companies like Chainalysis or CipherTrace. They show fake case studies.

The 'evidence': They claim to have located the stolen funds. They show the victim a wallet address where the money supposedly sits, sometimes with a professional-looking blockchain explorer view.

The fee: To recover the funds, the victim must pay upfront — a 'retainer,' 'court fee,' 'customs clearance,' 'wallet unlock fee,' or 'tracing payment.' Fees range from $500 to tens of thousands.

The second scam: Once the victim pays, new obstacles emerge requiring more fees. Eventually the scammer disappears. The victim has now been scammed twice.

Reality check: Legitimate crypto recovery is rare, expensive, works on contingency with licensed attorneys, and never requires upfront fees through Telegram or WhatsApp. Blockchain analytics firms don't take retail clients for small cases. Anyone cold-contacting a crypto scam victim promising recovery is running a second scam.

Warning signs

  • Unsolicited contact about recovering funds from a previous scam
  • Promises to recover funds for an upfront fee
  • Contact through Telegram, WhatsApp, or Facebook
  • Claims to be affiliated with Chainalysis, CipherTrace, or law enforcement
  • 'Guaranteed' recovery
  • Professional-looking website but no real business presence
  • Demand for payment in gift cards or cryptocurrency
  • Escalating fees after initial payment

Who does this target?

Recent victims of pig butchering scamsRecent victims of crypto investment fraudAnyone who posted publicly about losing crypto

Where does it happen?

EmailLinkedInTelegramWhatsAppFacebook

What to do if you've encountered this

  1. 1.Stop all contact with the scammer immediately. Do not respond, do not send more money, do not try to "reason" with them.
  2. 2.Document everything — screenshots of conversations, phone numbers, email addresses, websites, and any transaction details.
  3. 3.If money was sent, contact your bank immediately. Wire and ACH reversals are measured in hours, not days.
  4. 4.Report the scam to the appropriate agencies:

Warning: After any scam, watch out for "recovery scammers" who promise to get your money back for an upfront fee. They are always a second scam. See our recovery scam warning guide.

Related scam patterns