An estimated 30 to 40% of crypto-fraud victims are subsequently targeted by a “recovery service” that promises to retrieve the original loss and disappears with upfront fees. This is not a side issue. It is the second-largest source of victim losses after the original fraud — and unlike the original loss, it is almost entirely preventable.
The economics of the recovery scam
Fresh victims are a high-conversion market. They are emotionally exhausted, financially damaged, and motivated to act. Anyone offering a credible-sounding path to recovery has unusual leverage. Operators who target this market do so deliberately. They monitor scam-related forums, comment threads, victim Telegram groups, and dating-app metadata. They reach out within days of a public loss event. They ask for upfront payments — typically in cryptocurrency, sometimes via “investigation deposits” or “court fees” — and they disappear.
How to identify a recovery scam
The list is short and reliable:
- Cold contact via DM, WhatsApp, comment, or wrong-number text
- Demands upfront payment, especially in cryptocurrency
- Asks for your seed phrase or private keys, for any reason
- Guarantees a specific recovery amount or timeline
- Operates only through messaging — no published office, no NDA, no engagement letter
- Claims to be “white-hat” hackers who can break into the perpetrator’s wallet
Any one of these is disqualifying. A legitimate forensic firm — and there are several globally — accepts payment through standard business channels, refuses seed phrases under any circumstances, refuses to guarantee outcomes, and will document its engagement in a written letter you can review with counsel.
If you have already paid one
The wallet a recovery-scam operator collected your fees in is often more recoverable than the original loss. Recovery scammers tend to use exchange-deposit addresses for fee collection because they want to convert quickly to fiat. Those addresses are forensically tractable through compliance channels. Cointiverse handles recovery-scam-recovery cases regularly; loss amounts are smaller but recovery rates are higher than the original-fraud average.
The takeaway: recovery scams compound the original loss until they are recognized. Once recognized, they become tractable cases of their own.