Is this crypto recovery agent message a scam?
Commonly seen since 2024. Last reviewed 2026-06-05.
Check your exact messageExample only - do not act on it
Example only: We are fund-recovery specialists and can trace and recover the money you lost. Pay an upfront fee to begin.
Why this message is suspicious
- Genuine recovery is handled by banks, authorities, or courts - not cold outreach.
- Upfront fees to 'recover' money are a second scam.
- They often target people who were already scammed.
What the scammer wants
- A new upfront fee
- More personal and banking details
Common variations
- 'Certified' recovery agent
- Claims to have traced your funds
- Upfront fee or 'tax' to release recovered money
- Targets previous scam victims
Red flags to watch for
What to do now
- Do not pay any upfront recovery fee.
- Report the original scam through official channels only.
- Block the 'agent'.
What not to do
- Do not pay to 'recover' funds.
- Do not share more details.
- Do not trust unsolicited recovery offers.
If you already responded
Act quickly - the sooner you respond, the more you can limit. Find the situation that matches what you did:
If you clicked a link: If you entered details on their site, change those passwords from a trusted device.
If you paid: Contact your bank to stop or dispute the fee, and report the recovery scam.
If you shared a code, OTP, or login: Secure any linked account by changing the password and contacting the provider.
If you only clicked the link but entered nothing: close the page, don't enter anything, and watch the linked accounts for unusual activity. Full steps →
If you entered card details: contact your bank now to freeze the card and dispute charges, then watch your statement. Full steps →
If you shared an OTP or one-time code: the scammer may be logging in right now - change the password, sign out other sessions, and turn on app-based 2FA. Full steps →
If you sent money: contact your bank or payment provider immediately to try to stop or recall it, and report it. Full steps →
If you installed an app / gave remote access: disconnect from the internet, uninstall it, and change key passwords from a different, trusted device. Full steps →
If you shared passport, ID, or KYC documents: watch for identity theft, consider a credit freeze or fraud alert, and keep the evidence. Full steps →
Watch out for a second scam. People who've just lost money are often contacted again by a fake "recovery" service promising to get it back for an upfront fee. Legitimate recovery never starts with a fee paid to someone who contacted you - see recovery scams.
First time dealing with this? Start with the first 24 hours after a scam checklist and how to save evidence.
How to report it
Report through official channels for your country. Use our scam reporting directory to find the right authority, and never use phone numbers or links from the suspicious message itself. If an official link looks outdated, tell us so we can review it.
Official sources checked
- CFPB - Classic warning signs of fraud and scams High reliability
Government consumer advisory
-
Law-enforcement alert
Reviewed 2026-06-05. See our methodology for how we select sources.
Related pages
- Recovery scam
- Crypto investment scam
- What to do if you paid a recovery scammer
- What to do if you sent crypto to a scammer
Related platforms
Frequently asked questions
Can anyone recover scammed crypto for a fee?
Be very wary. Cold offers with upfront fees are almost always recovery scams. Report the original loss through official channels instead.