Is that crypto recovery agent a scam?
Almost certainly. The FBI warns that 'recovery agents' who contact victims, guarantee results, or charge upfront fees are scammers — usually the same crews, harvesting the same victims twice.
Lose money to a crypto scam and something predictable happens: you start hearing from people who can get it back. They message you on Telegram or Instagram, reply to your complaint in a Reddit thread or a Facebook victims' group, or run polished 'blockchain forensics' websites with testimonials and official-looking certifications. For an upfront 'retainer,' 'tracing fee,' or 'tax payment,' they'll recover your stolen funds. The FBI's IC3 has issued repeated alerts about this exact follow-on fraud.
It works because it targets people at maximum desperation with a story that sounds plausible — blockchains are public, so 'tracing' feels real. But recovery-scam operations often buy victim lists from the original scammers, or are the original scammers wearing a new hat: they already know exactly how much you lost and to whom. Once you pay the fee, there's a new fee — court costs, wallet-unlocking charges, a 'refundable' deposit to prove ownership. Some ask for your wallet's seed phrase or remote access 'to process the return,' and drain whatever you have left. No funds are ever recovered.
How does the scam work?
- 01
They find you, not the other way around
Recovery scammers monitor complaint threads, victim support groups, and social media hashtags — and buy 'sucker lists' of prior victims, complete with loss amounts. The stranger vouching for a recovery firm in the comments is usually the firm.
- 02
A convincing story of tracing and seizure
The pitch leans on real concepts — blockchain analysis, exchange subpoenas, 'partnered with Interpol' — and fake credentials, badges, and testimonials. Knowing details of your loss (from the purchased list) makes them sound legitimate.
- 03
Fees multiply until you stop paying
The activation fee unlocks a tracing fee, which surfaces a 'tax' the foreign court requires, then a wallet-verification deposit. Each payment is framed as the last step before your money returns. It never returns.
- 04
The final harvest: your seed phrase or your screen
To 'deposit the recovered funds,' they need your wallet's recovery phrase, private key, or a remote-access session. Hand over any of those and whatever crypto you still hold leaves with them.
What are the red flags to check?
They contacted you, or a 'fellow victim' vouched for them
Legitimate investigators don't cold-DM fraud victims or astroturf comment sections. Unsolicited recovery offers — especially ones that know your loss amount — come from victim lists, not detective work.
Upfront fees before any recovery
Retainers, activation fees, tracing charges, refundable deposits: the FBI flags advance fees as the defining mark of a recovery scam. Whatever the fee is called, it's the product.
Guaranteed results and fast timelines
Nobody can guarantee recovery of stolen crypto — not law enforcement, not a lawyer, certainly not a Telegram contact. '100% success rate' and '72-hour recovery' are promises only scammers make.
They ask for your seed phrase, private keys, or remote access
No legitimate process requires your recovery phrase — ever. Anyone who asks for it is attempting to take the rest of your funds, full stop.
The 'firm' is unverifiable and its site is brand new
A registered address that doesn't exist, credentials no regulator lists, business only through Telegram or WhatsApp, and a website registered weeks ago. Domain age alone unmasks most of these operations.
Unsure even after checking these? That’s exactly what the $2 Instant URL Check is for — paste the link and get a researched verdict with evidence, instead of guessing.
What should you do right now?
- Don't pay anyone an upfront fee to recover crypto, and never share your seed phrase or private keys — with anyone, for any reason.
- Report the original scam (and the recovery approach) at ic3.gov and reportfraud.ftc.gov. Real fund seizures happen through law enforcement, and reporting is how they start.
- Save everything: wallet addresses, transaction hashes, chat logs, and the recovery agent's details. They're evidence for real investigators.
- Be honest with yourself about the odds: recovery of stolen crypto is rare, and grief makes the second scam land harder than the first. We don't sell fund recovery — and anyone who guarantees it is scamming you twice.
What the check does: a one-time, researched risk report on the URL you paste. What it doesn’t do: continuous monitoring, takedowns, fund recovery, or legal advice — and we’ll never pretend otherwise.