GACS Research Team

Guide · Critical victim warning · Updated June 2026

Recovery Scams: The Second Scam After the First

If you recently lost money to a scam, you are now on a list that scammers buy. Every "asset-recovery expert" who contacts you out of the blue is running a second scam against the same victims.

The hard rule

Nobody legitimate cold-DMs you, asks for an upfront fee, or promises a recovery percentage. Real recovery channels are your bank, the receiving exchange, and law enforcement — and none of them message you first.

8 red flags of a recovery scammer

✕Contacted you out of nowhere days or weeks after your loss
✕Knows specifics about your case you never posted publicly (because they bought the victim list)
✕Claims to be a 'blockchain forensics expert,' 'ethical hacker,' or 'asset-recovery attorney'
✕Asks for an upfront fee, retainer, 'gas fee,' or 'tax release' before recovery
✕Wants payment in crypto, gift cards, or wire — the same methods that took the original loss
✕Shows fake court documents, fake government letterheads, or fake exchange screenshots
✕Pressures you with deadlines ('your funds will be permanently lost in 48 hours')
✕Refuses video verification or a real licensed law firm address you can independently check

What actually works

1. Notify the receiving exchange immediately. Many exchanges can freeze a deposit if you reach them within hours.
2. Call your bank or card issuer. Wire and card transactions can sometimes be reversed inside 24-48 hours.
3. File with the right cybercrime unit. IC3.gov (US), Action Fraud (UK), CAFC (Canada), Cybercrime.gov.au (Australia), or your country's equivalent.
4. Submit the entity to GACS. Wallet, website, phone, or handle — gets it into search results before the next victim arrives.
5. Hire only a licensed law firm with a verifiable address. And only after you've checked their bar registration on the official regulator site, not the link they sent you.

Next steps

It's happening now — Panic Guide Stolen Crypto Recovery Report to authorities

Thinking about hiring help? Read how to vet a legitimate financial recovery service before you pay anyone — most "fraud recovery experts" who DM victims are the second scam.

Trusted sources

United States

Canada

Europe & UK

FAQ

What is a recovery scam?

A recovery scam targets people who have already lost money to fraud. The scammer poses as a recovery expert, hacker, lawyer, or government agent, promises to claw the funds back, and demands an upfront fee. They never recover anything — the fee is the second loss.

Can stolen crypto really be recovered?

Sometimes, but only through legitimate channels: the receiving exchange (if you act fast and they freeze the deposit), your bank (for wire reversals inside 24-48 hours), and law enforcement asset seizures (rare and slow). Nobody who DMs you out of the blue can recover funds. If they could, they wouldn't need your fee.

Who should I actually contact after a scam?

File at IC3.gov (US), Action Fraud (UK), CAFC (Canada), or your country's cybercrime unit. Notify the receiving exchange directly through their official support form. Call your bank or card issuer. Submit the wallet/website/handle to GACS so future victims see the warning when they search. No upfront fees, no DMs.

How do recovery scammers find me so fast?

Victim lists are bought and sold. If you posted about your loss in a public forum, comment thread, Reddit, or scam-report site, your handle is on a list within days. That's why the 'recovery expert' contacting you seems to know your case — they read the same public post you did.

Related scam-safety guides

Browse the full scam-safety guide library →