$5.7B
FTC-reported investment scam losses in 2024
FTC says investment-related scams caused the biggest reported losses in 2024, creating a large pool of victims that recovery scammers target afterward.
Crypto recovery agent scam
After a person loses money in crypto, a second scam appears claiming funds can be recovered for a fee or wallet access.
“crypto recovery scam”
↑ 822%Key indicators
Usually targetsPrevious fraud victims
Often hitsFreelancers and contractors
Common regionGlobal
Last updated2026-04-02
Estimated impact
$5.4K
median reported loss
Typical range$900 – $54K
Recovery rate~2%
Annual reports14,000
Scam breakdown
1
Scammers scrape public complaint channels and target victims who are already emotionally vulnerable.
2
They pose as investigators, lawyers, or recovery specialists.
3
They extract one more payment or gain access to remaining wallet assets.
What to do first
Assume unsolicited recovery outreach is fraudulent.
Related terms
wallet recovery scamfake blockchain investigatorRecovery fraudTelegramRisingPrevious fraud victimsRetail crypto tradersFreelancers and contractorsTech workers and developersInvestors and tradersGlobalwallet recovery scamfake blockchain investigator
Real-world example
How this scam plays out in practice
Based on reported patterns. Names and details are illustrative.
The setup
Wei, 35, a previous fraud victims, encountered what appeared to be a legitimate recovery fraud situation while using Telegram. Scammers scrape public complaint channels and target victims who are already emotionally vulnerable.
Step 2
What happened next was calculated: They pose as investigators, lawyers, or recovery specialists.
Step 3
The pressure escalated quickly: They extract one more payment or gain access to remaining wallet assets.
The outcome
Wei realized something was wrong when recovery expert contacts the victim first. By that point, significant damage had already been done — money sent, personal information shared, or trust exploited.
The lesson
Assume unsolicited recovery outreach is fraudulent. Wei's experience shows why recovery expert contacts the victim first and upfront fee required before any proof of work are the clearest early warning signs.
How to identify it
- Recovery expert contacts the victim first
- Upfront fee required before any proof of work
- Requests for seed phrase or wallet control
- Assume any unsolicited recovery outreach is suspicious, especially if it mentions your earlier loss without you contacting them first.
- A legitimate recovery path does not require you to hand over a wallet seed phrase, remote access, or another upfront recovery fee.
- Treat fake investigators, fake lawyers, and blockchain tracing promises as part of the same scam chain unless you independently verify the firm or authority.
What to do now
- ✓Assume unsolicited recovery outreach is fraudulent.
- ✓Never share seed phrases or wallet control.
- ✓Document the first fraud and report it through legitimate channels only.
What to save before reporting
- ✓Keep the original wallet addresses, transaction hashes, case numbers, screenshots, and complaint confirmations from the first scam.
- ✓Save the recovery pitch, expert name, domain, chat handle, and any fee quote or contract.
- ✓Do not move or consolidate remaining funds until you understand the real reporting or recovery path.
- ✓Save the full chat or call log before blocking the sender so the reporting path still has the original context.
- ✓Keep wallet addresses, transaction hashes, and exchange or payment-app identifiers before you move remaining funds.
How big is this problem
You are not alone — this scam affects millions of people.
These numbers come from government agencies and official reports. If you have been affected, know that this is a widespread problem — not something that only happens to careless people.
FTC 2024 fraud losses
$9.9M
Recovery room scam losses in Canada (2023)
The Canadian Anti-Fraud Centre says losses tied to recovery room scams reached $9.9 million in 2023.
118,960
Reported investment-related reports in 2024
FTC's Consumer Sentinel Data Book lists 118,960 investment-related reports in 2024.
History and evolution
- Recovery scams are a second-wave fraud. They target people after a first loss, often by watching public complaint posts or social media.
- This pattern has become more organized as crypto losses and online investment scams create a steady stream of emotionally vulnerable targets.
- Recovery scams often appear after public complaints or social posts about losses.
Recovery and follow-up
- ✓Save the messages, receipts, account alerts, and transaction details before you block or delete anything.
- ✓Report the scam through the official platform or government channel that best matches where it happened.
- ✓If crypto or online investments were involved, move any remaining funds only through the official wallet or exchange controls you already trust.
- ✓Assume unsolicited recovery outreach is fraudulent.
- ✓Never share seed phrases or wallet control.
Why this pattern keeps working
Recovery scams are second-order scams: they target people after a first loss, when urgency and hope are highest.
Scammers often scrape victim forums, social replies, or public complaint threads so the outreach feels specific and credible.
Recovery scams often appear after public complaints or social posts about losses.
Important for future API and AI anti-scam checks.
Where to report it
If you have been targeted by this scam, reporting it helps authorities track the pattern and protect others. Global has dedicated agencies that handle fraud reports.
Report cross-border scams
econsumer.gov (ICPEN)
International Consumer Protection and Enforcement Network portal for reporting cross-border online scams. Reports are shared with consumer protection agencies in 40+ countries.
Interpol financial crime guidance
Interpol
International policing guidance on online financial fraud, romance scams, and investment fraud operating across borders.
Report phishing emails
Anti-Phishing Working Group
Global industry coalition for reporting phishing emails and URLs. Forward phishing to [email protected].
Explore further
Understand the bigger picture
Who is most at risk
Who this scam targets
Primary targets
Previous fraud victims, Retail crypto traders
Geographic concentration
Global
Primary channel
Telegram — Recovery fraud
Why this group is vulnerable
Previous fraud victims are particularly vulnerable because this scam exploits trust in familiar brands, authority figures, and time-sensitive decisions. The growing number of reports suggests that awareness among this demographic remains low.
Sources and methodology
How we verify this information
OpenScam tracks scam patterns using a combination of government consumer protection databases (FTC, IC3, Action Fraud), platform-specific fraud reports, and verified consumer complaint data. Each entry is cross-referenced against at least two independent sources before publication.
Severity ratings are based on financial impact potential, reversibility of damage, and volume of reports across multiple reporting channels. Trend velocity reflects the rate of change in report volume over the most recent 90-day window.
This page was last verified on 2026-04-02. Red flags, recovery steps, and reporting resources are reviewed quarterly against current agency guidance.
Evidence and indicators
- Recovery scams often appear after public complaints or social posts about losses.
Source notes
- Important for future API and AI anti-scam checks.
Frequently asked questions
Common questions about crypto recovery agent scam
How does the crypto recovery agent scam work?+
Scammers scrape public complaint channels and target victims who are already emotionally vulnerable. They pose as investigators, lawyers, or recovery specialists. They extract one more payment or gain access to remaining wallet assets.
What are the warning signs of crypto recovery agent scam?+
Recovery expert contacts the victim first Upfront fee required before any proof of work Requests for seed phrase or wallet control
What should I do if I encounter crypto recovery agent scam?+
Assume unsolicited recovery outreach is fraudulent. Never share seed phrases or wallet control. Document the first fraud and report it through legitimate channels only.
Who is most at risk for crypto recovery agent scam?+
This scam primarily targets Previous fraud victims, Retail crypto traders. It is most commonly reported in Global and typically appears on Telegram.
Is crypto recovery agent scam on the rise?+
Crypto recovery agent scam is currently on the rise with growing reports. It has been reported across Global. Last updated 2026-04-02.
Related scams
Similar scams to watch out for
Employment fraud
↑ 80%Freelance project unlock fee scam
A freelancer wins a project but is told they must buy a platform license, ID badge, or portfolio review to start.
What to do first
Do not buy access tools or badges to start freelance work.
Targets
Freelancers
Seen in
Global
Marketplace fraud
→ 0%Fake escrow release marketplace scam
A seller insists on a private escrow site that mimics a trusted payment service and claims funds are protected there.
What to do first
Use only major payment tools or in-person transactions you can verify.
Targets
Collectors
Seen in
Global
Recovery fraud
↑ 76%Hacked Instagram recovery scam
After an account compromise, a supposed recovery expert promises to restore the profile faster than official support for an upfront fee.
What to do first
Use only official recovery tools and treat helper DMs as suspect.
Targets
Creators
Seen in
Global
Help someone avoid this scam.
Scammers succeed because people do not talk about it. If you or someone you know has been affected, there is no shame in it — it happens to millions of people every year. Share this page with friends and family so they know what to look for.