Guide · Crypto recovery · Updated July 2026
How to Recover Money From a Crypto Scam (Honest 2026 Guide)
The blunt truth first: full recovery of crypto sent to a scammer happens in under 5% of cases. Partial recovery is more common but still under 15%. Everything that improves your odds happens in the first 72 hours, through IC3 and regulated-exchange compliance — not through a "recovery service." Here is what actually works and what to refuse.
If it just happened
- Send nothing more — no "unlock fee," no "tax," no "verification deposit."
- Screenshot everything: dashboard, chats, wallet addresses, TX hashes.
- File ic3.gov this hour — speed matters more than perfect wording.
- Email the receiving exchange's compliance team with the TX hashes.
Why time is the only thing that matters
Blockchain transactions are irreversible, but centralized exchanges are not. Almost every large-scale scam routes stolen funds through at least one regulated exchange before final withdrawal — Binance, Coinbase, Kraken, OKX, Bybit. If your report reaches that exchange's compliance team before the criminal cashes out, the funds can be frozen. This window is usually hours to days. Waiting a week almost guarantees the money is gone through a mixer.
The 6-step real playbook
- Step 1
Stop sending anything — including 'recovery fees'
Every follow-up request (unlock fee, tax, VIP tier, customer service) is the same scam extending itself. There is no balance to release, no locked profit, no bank fee — the whole platform was a puppet show. Send nothing more, ever, to anyone claiming to help you recover.
- Step 2
Screenshot everything within the first hour
Capture the fake trading platform dashboard, every chat message, every wallet address given to you, every transaction confirmation on your end (exchange withdrawal history, wallet outbound TX), and the scammer's profile photos. Once you go quiet you'll be blocked within hours.
- Step 3
Trace the wallet on-chain
Paste the receiving wallet into a block explorer (etherscan.io for ETH/USDT-ERC20, tronscan.org for TRC20, blockchain.com for BTC). Note every hop the funds made and the ending address — if it terminated at a known exchange deposit address, that exchange's compliance team may be able to freeze it if you're fast.
- Step 4
File IC3.gov and contact the receiving exchange
IC3.gov is the single most important report — it's the FBI's cybercrime intake and it's what gets funds frozen at US-regulated exchanges. Simultaneously email the compliance@ or abuse@ address of any exchange the funds ended at, referencing your IC3 case number.
- Step 5
File FTC, state AG, and Chainabuse
reportfraud.ftc.gov, your state attorney general's consumer protection division, and chainabuse.com (public wallet blocklist consulted by exchanges). Also submit the wallet to the GACS scanner so it's flagged for future victims.
- Step 6
Consider a licensed attorney only if loss is >$50K
Above ~$50K loss, a consumer-protection attorney who works crypto cases can subpoena exchange records, sue the scammer's exchange in some jurisdictions, and coordinate with law-enforcement. Below that threshold the legal fees exceed likely recovery. Avoid any 'crypto recovery firm' that isn't a licensed law firm.
The "recovery scam" — always the second wound
20–40% of crypto-scam victims get scammed again — by "recovery services." Sometimes the same criminals sell the victim list to accomplices; sometimes they contact you directly under a new name. The pitch is always the same: "I can trace and recover your funds — just an upfront legal/tax/network fee." Do not engage. Every one of these signals is a scam:
- ▸"Certified crypto recovery expert" DMs you after your loss — always a scam
- ▸Anyone asking for an upfront 'recovery fee' or 'IRS clearance fee' — always a scam
- ▸Fake law firm websites created in the last 6 months — check WHOIS registration date
- ▸Recovery services that only accept payment in crypto — always a scam
- ▸Videos on YouTube/TikTok claiming to 'hack back' the scammer's wallet — always a scam
- ▸Anyone who contacts you first about recovery — legit lawyers and IC3 don't cold-call victims
Legit recovery paths, in order
- Yourself, filing IC3 within 72 hours — free and highest impact.
- The receiving exchange's compliance team — free and time-sensitive.
- Chainalysis, TRM Labs, Elliptic — used by law enforcement, not consumers directly.
- A licensed attorney (law firm, not "recovery agency") for losses over ~$50K.
Frequently asked
Can I actually recover money from a crypto scam?
Sometimes, but the honest odds are low — most estimates put full recovery under 5% and partial recovery around 10–15%. The best chances happen when (1) the funds haven't been withdrawn from a centralized exchange yet, (2) you report to IC3 within hours not days, (3) the receiving exchange is US or EU-regulated. Once funds pass through a mixer or hit an unregulated exchange, on-chain recovery becomes nearly impossible.
Should I hire a crypto recovery service?
Almost never. The 'crypto recovery service' industry is over 90% follow-up scam — the same actors who took your money in the first place, or copycats who bought your data from them. Real recovery goes through law enforcement (FBI, IC3), regulated exchanges' compliance teams, and licensed attorneys. If anyone contacts you unsolicited promising to recover crypto for a 'small upfront fee,' it is 100% a scam.
How long do I have to report a crypto scam?
Report within 24 hours if possible, absolutely within 72. On-chain funds can be frozen at receiving centralized exchanges only if compliance teams are alerted before the criminal withdraws. After 72 hours the money is usually gone through Tornado Cash, Wasabi Wallet, or peer-to-peer mixers.
What information do I need to file a real recovery attempt?
The scammer's receiving wallet address(es), every transaction hash (TXID), the platform or website you were pushed to, all chat transcripts, the crypto asset and amount, timestamps in UTC, and any payment method you used to buy the crypto originally (Coinbase, Kraken, credit card, wire). Without wallet addresses and TXIDs, recovery is impossible.
Will my crypto exchange (Coinbase, Kraken) refund me?
No. Once you withdrew crypto to your personal wallet or a scammer's address, exchanges have no obligation or ability to reverse it. Their compliance team can, however, freeze incoming funds if the scammer sends them back through their platform — this is why prompt IC3 reporting matters.
Who do I actually report a crypto scam to?
US: IC3.gov (FBI), reportfraud.ftc.gov, your state attorney general, and Chainabuse.com for the wallet. If over $10K, contact FBI field office directly. UK: reportfraud.police.uk. EU: national cybercrime unit. Also file with the exchange the scammer used (most have abuse@ addresses). The GACS scanner mirrors wallet reports to the public database so the next victim sees the warning.
Contacted by a "recovery" firm?
Paste the recovery firm's website, email, or wallet into GACS before you engage. We'll flag known re-victimization patterns.
Learn to spot these yourself — free money-laundering & crypto-tracing course
The same tracing and red-flag skills investigators use on crypto and money-movement cases — taught free, at your own pace, with a verifiable certificate at the end.
Start the free courseFree dispute letter & evidence checklist
Copy the letter, fill in the brackets, and send it to your bank or card issuer. Not legal advice.
- Screenshots of every charge (statement lines with dates and amounts)
- Cancellation confirmation or proof you tried to cancel
- All emails / chats with the merchant (dated)
- The ad, website page or message that misled you
- Report receipts: FTC (reportfraud.ftc.gov) and, for losses, FBI IC3 (ic3.gov)
- PayPal: open the dispute in the Resolution Center within 180 days of payment
Show the dispute letter template
Subject: Dispute of unauthorized / unwanted charge To: [Bank or card issuer] Dispute Department Cardholder: [Full name] Card / account ending: [last 4 digits] I am disputing the following charge(s): - Merchant: [name] - Date(s): [date] - Amount(s): [amount] Reason: [I did not authorize this charge / I cancelled before renewal / I was deceived about what I was buying]. I contacted the merchant on [date] by [email/chat] and [they refused / did not respond]. Copies are attached. Please reverse the charge(s), issue a provisional credit while you investigate, and block future charges from this merchant. Attached evidence: receipts, screenshots, cancellation confirmation, merchant correspondence. Signed: [Name] Date: [date]
Stay ahead of the next scam
Set up your free alerts, or check something suspicious right now.
Did you find this guide useful?
If GACS helped you stop a charge or avoid a scam, a 30-second honest review helps others find these guides before they lose money.
Related scam-safety guides
- Romance scam recovery — the survivor's playbook
Eight steps after a romance scam: evidence, bank disputes, FTC/IC3, credit freeze, avoiding recovery-scam second-hits.
- Recovery scams — the second wound
Why 20-40% of victims get scammed again.
- Financial recovery services — what's real
Chargebacks, bank recalls, licensed attorneys.
- Bitcoin ATM scams
Why fraudsters send victims to crypto kiosks — and the first hour.
Authoritative sources
Independent primary sources used to check and corroborate the guidance on this page.
US Commodity Futures Trading Commission — Customer AdvisoriesRegulator advisories on crypto investment and romance-investment fraud.
US Securities and Exchange Commission — Investor.gov AlertsInvestment fraud warnings and firm/registration lookups.
FBI Internet Crime Complaint Center (IC3)Report crypto-investment losses and read the annual IC3 report.
Chainalysis Crypto Crime ReportsIndependent on-chain research on illicit crypto flows.