Crypto Recovery Scam Checker: 14 Tests to Run Before You Pay Anyone
Recovery fraud is the second scam, and it targets people who already lost money. Run these 14 tests on any recovery offer before you send a cent — with the exact red flags regulators have documented.
The Second Scam Is Designed for People Who Already Know About the First. That Is the Whole Trick.
Why recovery fraud works better on informed victims than on naive ones.
What this guide says in 5 lines
- Recovery fraud targets people who already lost money, and it works because the victim is motivated and informed — not because they are gullible.
- The single strongest test: did they contact you first? Legitimate firms do not cold-call scam victims.
- No legitimate service asks for an upfront fee, a percentage of unrecovered funds, or payment in crypto.
- Regulators have seized the websites of multiple recovery firms. Check the enforcement record before you check the testimonials.
- If you have already paid a recovery firm, treat it as a new fraud and report it separately.
Recovery fraud is the most predictable crime in this space. The victim list is public in the sense that it is self-selecting: anyone searching for how to get money back is a candidate, and anyone who has already filed a complaint has handed over their contact details to a system that leaks. The approach usually arrives within days of the loss, when the victim is most motivated and least patient.
What makes it effective is that it does not ask you to believe something false about crypto. It asks you to believe something false about the firm. You already know the blockchain is traceable, so a “blockchain investigator” who shows you a real trace is showing you something true — and then charging you for a service that cannot deliver what it implies. These fourteen tests are designed to catch that specific move.
The four tests that settle it immediately
If any of these four is true, stop. You do not need the other ten.
| Test | Disqualifying if… | Why it is decisive |
|---|---|---|
| Who made contact | They contacted you first — call, email, DM, WhatsApp, Telegram | Legitimate forensics firms are engaged by lawyers and institutions. They do not cold-call victims. |
| Upfront payment | They ask for any fee before any work is delivered | A genuine engagement is contracted and invoiced. An upfront crypto fee is the fraud itself. |
| Guarantee | They guarantee recovery, or state a success rate above zero as a promise | No one can guarantee recovery. The blockchain does not permit it and no firm can promise it. |
| Payment method | They want payment in crypto, gift cards, or a wire to a personal account | Legitimate firms invoice in fiat to a business account. Crypto payment removes your only recourse. |
The FBI has seized the websites of multiple recovery firms for defrauding victims. A professional-looking site, a real address and a company number prove nothing — they are cheap to produce and frequently recycled.
The ten tests that separate a firm from a front
If the four disqualifying tests passed, run these. A legitimate engagement will pass nearly all of them; a front will fail several.
- 01Is the firm engaged through a lawyer, or does it deal with you directly? Legitimate forensics work is usually instructed by counsel.
- 02Can you verify the company in an official registry, with a filing history older than the scam you suffered?
- 03Does the firm have a physical address you can independently confirm, not just a website footer?
- 04Are the named analysts real people with verifiable professional histories, or stock photos with invented credentials?
- 05Does the contract state a defined deliverable — a report, an affidavit, a court-ready exhibit — rather than “recovery”?
- 06Is the fee structure a flat professional fee, rather than a percentage of funds recovered?
- 07Does the firm refuse to promise an outcome in writing, and say so plainly?
- 08Can you find independent, non-testimonial references — court filings, regulator mentions, press coverage that is not a press release?
- 09Does the firm tell you what it cannot do, including that most losses are never recovered?
- 10Will it put everything in a written engagement letter before any payment, and let you take that letter to a lawyer?
The strongest single signal is a refusal to promise. A firm that tells you the odds are poor and explains why is behaving like a professional. A firm that tells you it is confident is behaving like a sales operation.
The scripts they use, and what they mean
Recovery fraud is a scripted business, and the scripts are recognisable once you have seen them. Each line below is a signal, not a coincidence.
| What they say | What it means |
|---|---|
| “We have traced your funds to a specific exchange and can freeze them.” | They have run a public explorer search you could run yourself, and are selling it back to you. |
| “We need a release fee / gas fee / tax clearance to unlock your funds.” | There is no such mechanism. This is the fraud, and it will be followed by another fee. |
| “Your case has been assigned to our senior investigator.” | Manufactured urgency and status. Real firms do not assign investigators before engagement. |
| “We work with law enforcement and can expedite your case.” | No private firm can expedite a police investigation. This is a claim designed to borrow authority. |
| “We recovered $2.4M for a client last month.” | Unverifiable, and irrelevant to your case. Ask for a court filing instead. |
| “Sign this NDA before we share details.” | Prevents you from comparing notes with other victims, which is how these operations get exposed. |
| “Pay in USDT to this address to begin.” | Removes your recourse entirely. This is the single clearest red flag. |
What a legitimate engagement actually looks like
It is worth knowing the real version, because it is much less exciting than the fraud and that is the point.
A legitimate engagement is usually instructed by a lawyer, produces a written report or an affidavit rather than funds, is billed as a flat professional fee, and comes with an explicit statement that recovery is not guaranteed and often not achievable. The deliverable is evidence for a legal or institutional process — not money.
For most individual victims, the honest answer is that this service is not worth the cost. The trace you can run yourself, the reports you can file yourself, and the documents you can generate yourself cover the same ground for the vast majority of cases.
If a firm's deliverable is a document, it can be legitimate. If its deliverable is money, it cannot be. That distinction is the whole test.
If you have already paid a recovery firm
Treat it as a new fraud, because that is what it is, and report it separately. Recovery fraud is a distinct offence with its own reporting route, and it is taken seriously precisely because it targets victims.
- 01Stop all contact and do not send any further payment, however convincing the reason.
- 02Preserve everything: the contract, the invoices, the payment addresses, the chat, the emails, the phone numbers.
- 03Report to IC3.gov as a separate incident, referencing your original complaint number.
- 04Report to the FTC at ReportFraud.ftc.gov, and to your state attorney general.
- 05If you paid by card or bank transfer, dispute that payment — it is a separate transaction with its own dispute route.
- 06Warn others in the same position: recovery fraud relies on victims not comparing notes.
Do not pay a second firm to recover what the first firm took. That is the third scam, and it is a documented pattern.
The honest alternative
Everything a recovery firm claims to do for you, you can do yourself for free, and the parts you cannot do yourself are the parts no firm can do either.
You can run the trace on a public explorer. You can write the evidence set. You can file at IC3 and the FTC. You can send a freeze request to an exchange. You can generate a complaint, a demand letter and a police statement. None of that requires paying anyone, and all of it is what a legitimate engagement would produce anyway.
What you cannot do is compel an exchange to freeze funds or a police force to investigate. Neither can a firm that contacts you first. That is the honest limit, and understanding it is the best protection against the second scam.
The money you would spend on a recovery firm is better spent on a lawyer, if your loss is large enough to justify one. A lawyer can compel things a “recovery agent” cannot.
Common questions
Check the offer against your own evidence
Run the trace yourself first. If a firm is charging you for a public explorer search, you will see it immediately — free, in your browser.
Primary sources and further reading
- FBI IC3 — Internet Crime Report www.ic3.gov
- FTC — What To Know About Cryptocurrency and Scams consumer.ftc.gov
- FTC — Report Fraud reportfraud.ftc.gov
- Chainalysis — Crypto Crime Report www.chainalysis.com
External links open in a new tab and are provided so you can verify the underlying material yourself. TrueMoneyTalk is not affiliated with these organisations.
Keep reading
Someone you know may be in this situation right now.
Disclaimer: this guide is general information, not legal, financial or recovery advice, and it is not a substitute for advice from a licensed professional in your jurisdiction. Individual outcomes vary and are never guaranteed.