Scam recovery scams: how fake recovery services re-victimize you
Quick answer
Anyone who contacts you offering to get your lost money back for an upfront fee is probably running a second scam. The FBI says law enforcement doesn't charge victims to investigate and private firms can't issue seizure orders. Don't pay, and report it at ic3.gov.
- Comes by
- Social media, Website, Email, Phone call, Ad
- First reported
- Latest official alert
- (FBI IC3)
- Last updated
How it works
If you lost money to a scam, especially in cryptocurrency, a second set of scammers may find you. The FBI's Internet Crime Complaint Center (IC3) has warned about this since 2023.
They reach you on social media or messaging platforms, in ads under news articles and crypto videos, or in search results. Some pose as lawyers at fictitious law firms and say they work with, or got your case from, the FBI, the Consumer Financial Protection Bureau or another agency.
Then they ask for things like:
- Your personal or banking details "to verify your identity".
- An upfront fee, with the rest due when the money is recovered.
- Payments for back taxes and other fees you supposedly owe to release the funds.
Some stop answering after the first deposit. Others send an incomplete or wrong tracing report and ask for more. IC3 reported that crypto scam victims who were further targeted by fictitious law firms lost more than $9.9 million between February 2023 and February 2024.
Red flags
- Someone contacts you first, offering to recover money you lost
- An upfront fee or a payment for "taxes" before funds are released
- Promises that they can get your money back
- A "law firm" or "agent" with a minimal online presence and vague language
- A claim that the FBI or another agency referred your case to them
- A request for your ID or bank details to "verify" you
Example message
We're a licensed recovery firm and we've been given your case file by federal investigators. We can trace and return the full amount you lost. To begin, pay a $500 processing fee and send a photo of your ID at [link].
What to do
- 1
Don't send money or ID
The FBI says not to release financial or personal identifying information to anyone who contacts you offering recovery. Law enforcement doesn't charge victims a fee for investigating a crime.
- 2
Check any agency claim yourself
If someone says they're linked to the FBI, the FBI advises contacting your local FBI field office to confirm, using contact details you find yourself.
- 3
Be skeptical of recovery ads
The FBI tells people to research any recovery company and to be wary if it uses vague language, has little online presence and promises results.
- 4
If you already paid or shared documents
Contact your bank or card issuer, change passwords and consider a credit freeze. Our guide on what to do after a data breach covers the steps if your ID was exposed.
- 5
Report both scams
File with IC3 and include how the person contacted you, their name, phone number, email or username, and the payment details, including any crypto addresses.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
After a scam, your name and contact details are already in circulation, and scammers target people who have just lost money. Phone numbers and addresses also sit on people-search sites. Serus finds the people-search and data broker listings that show your phone number and address and removes them, and alerts you when your details turn up in a breach, so fewer scammers can build a believable story about you.
Official alerts
Frequently asked
Can a recovery company really get my cryptocurrency back?
The FBI says private sector recovery companies cannot issue seizure orders, and exchanges only freeze accounts through their own processes or in response to legal process.
Does the FBI charge to investigate?
No. The FBI says law enforcement doesn't charge victims a fee for investigating crimes.
What if the recovery firm says the FBI sent them?
Don't take their word for it. Contact your local FBI field office using details you look up yourself.
What should I include in a report?
IC3 asks for how the person contacted you, identifying details such as name, phone, email and username, and transaction details including dates, amounts, account numbers and crypto addresses.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
