Cryptocurrency Recovery Scams: A Second Round of Fraud

Losing money to a cryptocurrency scam is bad enough on its own. What many people do not realise is that it often marks the start of a second round of fraud, not the end of the first. Within weeks, sometimes days, victims start receiving messages from people claiming they can get the money back. These are recovery room scams, and both Action Fraud and the FCA have flagged them as a significant and growing problem in the UK.

The pattern is familiar. Someone contacts you out of the blue saying they know about your loss. They might call themselves a recovery agent, a blockchain forensics expert, a lawyer specialising in digital assets, or an investigator working alongside the police. They sound confident. They use technical language. They tell you there is a good chance the funds can be traced and returned, but you will need to pay a fee upfront to begin the process.

You pay. Then there are more fees. Legal costs, tax clearance, wallet release charges, anti-money laundering deposits. Each one is presented as the last hurdle. None of it is real, and the money you have lost is gone for good, along with whatever you paid the so-called recovery service.

How these scammers find you

This is the part that catches people out. The people contacting you are not strangers who happened to guess. According to reports from victims and fraud investigators, they are often the same criminals who scammed you the first time, or others who have obtained your details from them. Lists of people who have already lost money are believed to circulate among fraud groups, because anyone who has fallen for one crypto scam is seen as a strong target for another.

That is why the timing can feel uncanny. The caller knows the platform you used, the rough amount you lost, sometimes even the name of the broker or wallet involved. It is not magic. It is your own information being used against you again.

The signs of a recovery room scam

The pitch varies, but the same features tend to come up:

• Contact you did not ask for, by phone, email, WhatsApp, Telegram or social media.
• Claims of links to the police, the FCA, the National Crime Agency, or named law firms.
• Talk of specialist blockchain tracing tools that can "freeze" or "reverse" transactions.
• A fee required before any work begins, often payable in crypto or by bank transfer to a personal account.
• Pressure to act quickly because a "wallet freeze window" or "court deadline" is about to close.
• Requests for your ID documents, bank details or remote access to your computer.
• Professional looking websites and certificates that fall apart on closer inspection.

Some operations go further and produce fake court papers, fake FCA letters, or invented case reference numbers. The presentation can be convincing, especially to someone who badly wants the original loss to be recoverable.

Real fraud investigations in the UK do not begin with a cold call. The police, Action Fraud and the FCA do not phone or message victims offering to recover crypto for a fee. They do not ask for upfront payments, and they do not work through private investigators who happen to contact you on Telegram.

Tracing stolen cryptocurrency is technically possible in some cases, and international law enforcement does occasionally recover funds in coordinated operations. Recovery is much harder once funds have been moved through mixing services or sent to exchanges in jurisdictions that do not cooperate with UK authorities. Any private service guaranteeing a return, or quoting a specific percentage they can recover, is not being honest with you.

Legitimate solicitors who handle crypto fraud cases do exist, but they are regulated by the Solicitors Regulation Authority, they have a verifiable office and history, and they will not approach you out of the blue. The sensible course is to seek out a legal adviser yourself rather than respond to anyone who has contacted you uninvited.

Scam Detector

Got a text, call, email or offer that feels off? Paste it in below and we will tell you how scammy it looks, the warning signs to spot, and exactly what to do next.

Try our Scam Detector free, here on this site →

What to do if you have already lost money

Stop and take stock before doing anything else. It is better not to respond to anyone offering to recover the funds, however plausible they sound. Block the numbers and accounts contacting you. If you have given a recovery service your bank details or made any payments, contact your bank straight away and explain what has happened. Ask about chargebacks if you paid by card, and report any unauthorised activity.

Then report the original scam and any recovery attempt to the proper channels:

• Action Fraud is the UK's national reporting centre for fraud and cybercrime. You can report online at actionfraud.police.uk or by phone on 0300 123 2040. In Scotland, report to Police Scotland on 101.
• The Financial Conduct Authority runs a consumer helpline on 0800 111 6768 and keeps a warning list of firms known to be operating scams. If the original platform or the recovery firm claims to be FCA authorised, check the FCA Register directly rather than trusting any link they send you.
• Your bank should be told as soon as possible. Some victims of authorised push payment fraud can get money back under the Contingent Reimbursement Model Code, which is voluntary but adopted by several major UK banks. This protection generally does not extend to payments made in cryptocurrency, so outcomes depend heavily on how the money left your account.
• Citizens Advice can help if you are unsure what to do next or need support with the wider fallout, including debt or stress.

If your personal data has been misused, you can also report concerns to the Information Commissioner's Office. It is also worth tightening the security on your remaining accounts, with strong unique passwords and two-factor authentication wherever it is offered, since your contact details and habits are likely now known to the people who targeted you.

Your situation may be slightly different. ask a question below ↓ and our editorial team will reply with our advice.

Protecting yourself from a second hit

Assume that once you have been scammed, your details are on a list. Be sceptical of anyone who contacts you about the loss, even if they appear to know details only an insider would know. That knowledge is not proof they are genuine. More often, it is proof of the opposite.

As a rule of thumb, never pay upfront fees to anyone promising to recover lost crypto. Do not hand over ID copies, bank statements or remote access. If a caller insists they are from the FCA, Action Fraud or the police, hang up and call the organisation back on a number you have looked up yourself.

The first loss is painful. The second one is avoidable, and the way to avoid it is to treat every offer of help that arrives uninvited as part of the scam, not the cure for it.

Related warnings

• Authorised Push Payment Fraud and Your Refund Rights
• Pig Butchering Crypto Romance Scams
• Cloned Investment Firm Scams
• Fake Bank Fraud Team Calls

See more recent scams on the Latest Scam Warnings page.

The Next Step

Now that you have read through the advice above, you might want to put it into practice. Our Scam Detector lets you got a text, call, email or offer that feels off? Paste it in below and we will tell you how scammy it looks, the warning signs to spot, and exactly what to do next. Try it now →