GACS Research Team

Guide · For fraud victims · Updated June 2026

Financial Recovery Services: How to Spot a Legitimate Expert vs. a Recovery Scam

After a fraud loss, two kinds of people want to talk to you: a small number of licensed lawyers and investigators who can sometimes help, and a much larger number of recovery scammers running the second scam. This guide shows you exactly how to tell them apart before you pay anyone anything.

Read this first

A real financial recovery service is a licensed firm you found yourself, who you can verify on a government registry, and who sends a written fee agreement before taking money. Anyone else — especially someone who DM'd you — is a recovery scam.

8 signals of a legitimate financial recovery service

✓Licensed law firm or registered investigator — you can verify their bar number, PI license, or company registration on a government regulator site (not a link they sent you).
✓Physical office address that matches their licensing record and shows up on independent maps and corporate filings.
✓Written engagement letter with scope, hourly or flat fee, and a clear refund/withdrawal clause — signed before any payment.
✓Charges by the hour or a flat retainer for documented work (drafting demand letters, subpoenas, exchange compliance requests). Never a percentage of "recovered" funds collected upfront.
✓Will tell you the truth: most consumer fraud loses under $10,000 are not economically recoverable through private counsel. A legitimate expert says no.
✓Accepts payment to the firm's bank account or trust account — never to a personal wallet, gift cards, or crypto.
✓References you can call, plus public court filings or case numbers you can look up yourself.
✓Works with — not around — your bank, the receiving exchange, IC3/Action Fraud/CAFC, and local police.

8 red flags of a fraud-recovery scam

✕Cold DM, comment reply, or email contact after you posted about your loss publicly.
✕Calls themselves a "certified blockchain forensics expert," "ethical hacker," or "asset-recovery agent" — titles that don't correspond to any real license.
✕Promises a specific recovery percentage or a guaranteed outcome. No legitimate lawyer or investigator can guarantee recovery.
✕Demands an upfront fee, retainer, "gas fee," "tax release," or "insurance bond" in crypto, gift cards, or wire transfer.
✕Shows screenshots of "frozen funds" inside a fake dashboard you have to log into to see your balance.
✕Pressures you with a 48-hour deadline or claims funds will be "permanently lost" if you wait.
✕Refuses a live video call from a verifiable office, or every video has a different background.
✕Asks for your seed phrase, exchange password, 2FA code, or remote access to your computer.

5-step vetting checklist

1. Verify the license — yourself, on a government site
If they claim to be a US attorney, look them up on the state bar's website. UK solicitor? Solicitors Regulation Authority register. Private investigator? Your state or province's PI licensing board. Don't trust badges or PDFs they email you.
2. Match the office address
The address on their site should match the address on the licensing record AND show up on Google Maps, Companies House (UK), OpenCorporates, or your country's business registry. A mismatch is the single most common giveaway.
3. Demand a written engagement letter before paying
A real firm sends a scope-of-work and fee agreement. It defines what they will do, what they cost, and what triggers a refund. If they push payment first, they're not a law firm.
4. Ask for case numbers and outcomes
Real attorneys can point to filed cases (court records are public). Real recovery investigators can describe specific exchange-compliance wins. Vague "we've recovered millions" with no public record is theater.
5. Get a second opinion
Before you sign or pay anything, run the firm's name past the state bar, your local consumer-protection office, or post the engagement letter (with personal details redacted) on r/Scams or r/legaladvice. Recovery scammers fall apart under a second pair of eyes.

Next steps

It's happening now — Panic Guide Recovery scams red flags Report to authorities

Trusted sources

United States

Canada

Europe & UK

FAQ

What is a financial recovery service?

A financial recovery service is a firm — usually a licensed law office, regulated investigator, or specialized accountant — that helps fraud victims pursue legal and procedural channels to claw back stolen funds. Legitimate services document the loss, file with regulators, push compliance requests to receiving exchanges or banks, and (rarely) file civil suits. They charge for the work, not for a guaranteed result.

How do I find a legitimate fraud recovery expert?

Start with your state or country's bar association referral service for attorneys who handle financial fraud. For crypto specifically, look for firms publicly cited by Chainalysis, TRM Labs, or the DOJ in real seizure cases. Cross-check every firm against a government licensing registry before you make contact. Never accept the first DM that finds you.

How much does a real financial recovery service cost?

Hourly rates of $250–$700 for licensed attorneys are normal in the US and UK. Some firms offer flat-fee triage ($500–$2,500) to assess whether your case is recoverable before committing further. Anyone offering "no fee until we recover" combined with an upfront "processing fee" is running the recovery scam — real contingency work doesn't ask for money upfront.

Is my loss large enough to be worth hiring someone?

As a rough rule, civil legal recovery becomes economical above $25,000–$50,000 in the US (lower in some EU jurisdictions). Below that, your best paths are free: file with IC3 / Action Fraud / CAFC, dispute with your bank or card issuer, notify the receiving exchange, and submit the entity to public registries like GACS so the next victim finds the warning.

Can a recovery service get my crypto back?

Sometimes — usually by getting a court order that forces a centralized exchange to freeze the destination wallet's funds. This only works if (a) the stolen crypto landed on a regulated exchange, (b) it hasn't been moved out, and (c) you act within days. Nobody can pull funds out of a self-custody wallet they don't control, and any service claiming otherwise is lying.

What's the difference between this and a recovery scam?

A legitimate recovery service has a license you can verify, an office you can visit, and a fee agreement that's signed before money changes hands. A recovery scam contacts you out of the blue, promises a guaranteed outcome, and demands an upfront fee in crypto or gift cards. See our companion guide on recovery scams for the full red-flag list.

Related scam-safety guides

Browse the full scam-safety guide library →