Security · Explainer
Crypto Recovery Scams: Red Flags and How to Check a Firm Before You Pay
A crypto recovery scam asks you to pay to get lost crypto back. Learn the red flags, what real help can do, and how to check a firm first.
- Author
- How2BuyCrypto Editorial
- Last updated
- Updated
- Reading time
- 8 min read
Written with AISources checked How our guides are made
At a glance
- Someone who asks you to pay upfront to recover lost crypto is very likely running a second scam. Do not pay or share a phrase.
- Check a firm with your country's regulator and a lawyer with the licensing body, using contact details you found yourself, before paying.
- A private recovery company cannot issue seizure orders for crypto. Your options are reports, requests and, in some cases, a court claim, with no promise of a result.
- If you already paid, stop paying, tell your bank or exchange, keep every message and wallet address, and report the recovery scam.
On this page9 sections
- How crypto recovery scams work
- Red flags of a recovery scam before you pay anyone
- Can you recover scammed bitcoin? What real help can and cannot do
- Check a recovery firm or lawyer before you pay
- If you already paid a recovery service
- Common misconceptions
- Risks to understand
- Frequently asked questions
- Sources
A crypto recovery scam targets people who already lost money to a scam: someone offers to trace and return your cryptocurrency, but you must pay first. A person or firm that asks for money upfront to get lost crypto back is very likely running a second scam. Paying again, or handing over a recovery phrase, makes the loss bigger.
As of October 2026, the FBI's IC3 (opens in a new tab) states: "The IC3 does not work with any non-law enforcement entity, such as law firms or crypto services, to recuperate lost funds or investigate cases."
The US Federal Trade Commission (opens in a new tab) says: "Don’t trust calls, letters, emails, texts, or messages on social media from someone who says they can recover money you lost in a scam for a fee."
How crypto recovery scams work
As of October 2026, the latest full-year figures are for 2025. In the FBI's IC3 2025 annual report (opens in a new tab), IC3 counted 10,516 recovery-scam complaints and $1.4 billion in reported losses. People aged 60 and over filed 2,529 of those complaints, with about $540.5 million in reported losses.
IC3 notes that the losses may also include losses from the earlier scams that led to the contact with the recovery company, so part of that total may be the first loss. These are complaints to a US agency, not a worldwide count.
The pattern starts with the first loss. Scammers buy, sell and trade lists of people who have been scammed (opens in a new tab), expecting them to be good targets again. The people behind the original scam may also run the recovery room themselves, contacting you again as a different firm.
Contact can come as a direct message on social media or a messaging app. Ads for fraudulent crypto recovery services (opens in a new tab) can also appear in comment sections of crypto news and videos, in crypto search results and on social media.
In an August 2025 alert (opens in a new tab), the FBI warned that fictitious law firms target cryptocurrency scam victims and offer to recover their funds.
Then comes the fee loop. Fraudsters charge an upfront fee (opens in a new tab), then either stop answering after the first deposit or send an incomplete or inaccurate tracing report and ask for more fees.
Red flags of a recovery scam before you pay anyone
| Red flag | What it looks like | Why it gives the scam away |
|---|---|---|
| Fees first | A "tax," administrative or processing fee before anything is recovered, or a request to pay in crypto or gift cards | Never pay upfront for help with a refund. US law enforcement does not charge victims a fee (opens in a new tab) for investigating crimes |
| "Tracing" claims | A business claims to trace crypto, promises to recover it and may message you first on social media or a messaging app | A tracing claim is how the fee loop starts |
| Guaranteed recovery | A promise you will get your money back, backed by success stories | Legitimate organizations will not guarantee you get your money back. Recovery-room websites often make false claims of past recoveries |
| Official ties | A claim to work with IC3, the FBI, the police, a regulator or the government | No law firm is an officially authorized partner of US government agencies. Scammers also claim to work with police and regulators |
| Phrase or device access | A request for your recovery phrase, wallet access or remote access to your computer or phone | Anyone with your recovery phrase or private keys can control your assets. Never allow an unknown person remote access |
| Chat-app contact | A WhatsApp group chat with "attorneys" and "bank processors," no video meetings, no license shown | The FBI (opens in a new tab) lists these as red flags, with bank fees said to be required to "verify identity" and withdraw funds |
| Pressure | Out-of-the-blue contact about recovering money, a push to pay quickly, a promise that sounds too good to be true | Be wary of each one, even on its own |
Can you recover scammed bitcoin? What real help can and cannot do
Nobody can promise it. Crypto payments typically cannot be reversed: once you pay with cryptocurrency, you can usually only get your money back (opens in a new tab) if the person you paid sends it back.
A private recovery company cannot order an exchange to freeze your coins. The FBI says (opens in a new tab) private sector recovery companies cannot issue seizure orders to recover cryptocurrency, and that cryptocurrency exchanges freeze accounts only under their own internal processes or in response to legal process. So crypto recovery services that promise to seize or freeze your coins are promising something outside their power.
What remains are requests, with no guarantee of a result:
- Report the scam to law enforcement. Where to report a crypto scam lists services by country.
- Contact the crypto exchange or ATM operator you used, tell them it was a fraudulent transaction and ask them to reverse it. They may say no.
- Tell the bank or card issuer that paid for the purchase.
The ordered first steps are in what to do first after a crypto scam.
Check a recovery firm or lawyer before you pay
As of October 2026, do these checks before you pay anything:
- Do not use a link, phone number or email from the firm's message. Look up the firm's contact details yourself. If it claims a tie to a government agency, find that agency's number on your own and call to confirm, not a number the caller gave you.
- A fake crypto recovery company or law firm can copy a real name. The FBI says (opens in a new tab) fake law firms may impersonate real lawyers with fake letterhead.
- Ask a supposed lawyer for video verification or a photo of their law license, and assume they are not legitimate if they cannot readily provide it. A photo can be faked, so also check the name with the body that licenses lawyers where you live.
- Be cautious of crypto recovery lawyers or law firms that contact you unexpectedly, especially if you have not reported the crime to law enforcement.
A listing on a register is not a promise that a firm can recover your coins.
United States
Search the organization's name online with words like "complaint," "scam" or "review," and check with your state attorney general (opens in a new tab) to see if other people have complained about it.
United Kingdom
The FCA says (opens in a new tab) recovery room scams claim to offer services usually provided by claims management companies, and a firm must be authorized by the FCA to advertise or carry out these services in the UK. Search for the firm on the FCA Firm Checker (opens in a new tab), and if a financial business contacts you unexpectedly, reply only using the contact details listed there.
Clone firms copy a real, authorized firm, so make sure the contact details you were given match those on the Firm Checker. The FCA also keeps a Warning List of firms it has published warnings about. If you cannot find the firm on the Firm Checker, call the FCA on 0800 111 6768.
Everywhere else
Check the firm with your country's financial regulator, and check a lawyer with the body that licenses lawyers where you live, before you pay.
If you already paid a recovery service
- Stop paying and end all contact. Do not give any banking details.
- Tell the bank, card issuer or exchange you paid from that the money went to a recovery scam.
- Keep every message, wallet address and receipt, plus recordings of video chats. Do not delete the chat.
- Report the recovery scam as a scam in its own right. In the US, the FBI asks (opens in a new tab) victims of fraudulent law firm scams, or those who suspect it, to report to their local FBI field office and to IC3. For other countries, see where to report a crypto scam.
If you gave out a recovery phrase, read scams that target your seed phrase or your losses.
Common misconceptions
As of October 2026:
- "IC3 works with recovery companies." IC3 will never directly contact you (opens in a new tab) for information or money. An April 2025 FBI alert (opens in a new tab) adds that IC3 will not ask for payment to recover lost funds or refer a victim to a company that does. If someone claims an FBI affiliation, contact your local FBI field office to confirm.
- "A firm that charges only a small fee upfront is different." The rule has no size limit: never pay upfront for help with a refund.
- "Wallet password recovery and scam recovery are the same service." A forgotten password or a lost recovery phrase is a different problem from money sent to a scammer. See if your phrase is lost.
Risks to understand
- Paying a recovery scammer can cost more than the first loss: upfront charges described as tax, solicitor or administrative fees can lead to losses greater than the initial loss (opens in a new tab).
- If you give a fake firm personal or financial account information, your money will disappear and they could steal your identity (opens in a new tab).
Next, read where to report a crypto scam for your country, and how to spot the first scam before it happens again.
Frequently asked questions
Is it a scam if the recovery firm only asks for payment after it gets my money back?
A pay-later promise does not make an offer safe: check the firm before you agree to any terms, whatever the payment timing. Look up its contact details yourself and check it with your country's financial regulator. For what a recovery company can and cannot do, see the section on what real help can and cannot do.
Can a lawyer get my crypto back from a scammer?
The FBI says victims can choose to pursue civil litigation to seek recovery of their funds, but no firm can promise a result. The FBI also warns that fictitious law firms target crypto scam victims. Ask for video verification or a photo of the lawyer's license, then check the name with the body that licenses lawyers where you live, using contact details you found yourself.
Why did a recovery firm contact me when I never gave them my details?
Scammers buy, sell and trade lists of people who have been scammed, the US FTC says. Separately, the UK's FCA says the people behind the original scam may sell your details to other recovery rooms. Knowing your earlier transfers does not prove a firm is real: the FBI lists knowledge of exact amounts and dates of previous wire transfers and the company you sent money to as a fake law firm red flag. Do not reply, and do not click links in the message.
Will reporting to IC3 get my money back?
Not as a promise. As of October 2026, in a section of its 2025 annual report on bank transactions, the FBI's IC3 says it may be able to assist both the financial institutions and law enforcement in freezing funds, and asks you to file a complaint at ic3.gov whatever the amount lost, with the full transaction details. That statement describes a possible freeze, not a refund, and it does not give a freeze rate for crypto.
Sources
- Internet Crime Complaint Center (IC3) home page, FBI Internet Crime Complaint Center (IC3). Accessed .
- FBI Warns of Scammers Impersonating the IC3 (Alert I-041825-PSA), FBI Internet Crime Complaint Center (IC3). Accessed .
- Federal Bureau of Investigation Internet Crime Report 2025, FBI Internet Crime Complaint Center (IC3). Accessed .
- Fictitious Law Firms Targeting Cryptocurrency Scam Victims Combine Multiple Exploitation Tactics While Offering to Recover Funds (Alert I-081325-PSA), FBI Internet Crime Complaint Center (IC3). Accessed .
- Increase in Companies Falsely Claiming an Ability to Recover Funds Lost in Cryptocurrency Investment Scams (Alert I-081123-PSA), FBI Internet Crime Complaint Center (IC3). Accessed .
- Refund and Recovery Scams, Federal Trade Commission. Accessed .
- What To Do if You Were Scammed, Federal Trade Commission. Accessed .
- What To Know About Cryptocurrency and Scams, Federal Trade Commission. Accessed .
- Recovery room scams, Financial Conduct Authority. Accessed .
- How to check a firm or individual is authorised, Financial Conduct Authority. Accessed .
- Recovery pitch, Canadian Anti-Fraud Centre. Accessed .
- Basic security tips for MetaMask users, MetaMask (Consensys). Accessed .
This guide was researched and written with AI using the sources above. It is general information, not financial advice. Cryptoassets are volatile and you could lose the money you invest. Check the rules in your country before you buy. Some links on this site may be affiliate links; they never change what we write. Spotted an error? Email contact@how2buycrypto.org.