$5.7B
FTC-reported investment scam losses in 2024
FTC says investment-related scams caused the biggest reported losses in 2024, creating a large pool of victims that recovery scammers target afterward.
A business whose social page was hijacked is targeted by a service promising fast admin restoration for a fee or remote access.
“social media scam”
↑ 470%Key indicators
Estimated impact
$5.4K
median reported loss
Scam breakdown
Attackers monitor public complaint channels, hacked-account posts, and victim communities.
They position themselves as the fast path to getting money, access, or accounts back.
The victim is charged again or loses remaining access while already emotionally vulnerable.
What to do first
Use the platform's official admin recovery path and avoid remote-control sessions.
Related terms
Real-world example
Based on reported patterns. Names and details are illustrative.
The setup
David, 35, a small businesses, encountered what appeared to be a legitimate recovery fraud situation while using Facebook. Attackers monitor public complaint channels, hacked-account posts, and victim communities.
Step 2
What happened next was calculated: They position themselves as the fast path to getting money, access, or accounts back.
Step 3
The pressure escalated quickly: The victim is charged again or loses remaining access while already emotionally vulnerable.
The outcome
David realized something was wrong when the helper requests a screen-share session or ad account login.. By that point, significant damage had already been done — money sent, personal information shared, or trust exploited.
The lesson
Use the platform's official admin recovery path and avoid remote-control sessions. David's experience shows why the helper requests a screen-share session or ad account login. and the recovery expert or lawyer contacts the victim before being hired. are the clearest early warning signs.
How to identify it
What to do now
What to save before reporting
How big is this problem
These numbers come from government agencies and official reports. If you have been affected, know that this is a widespread problem — not something that only happens to careless people.
$5.7B
FTC says investment-related scams caused the biggest reported losses in 2024, creating a large pool of victims that recovery scammers target afterward.
$9.9M
The Canadian Anti-Fraud Centre says losses tied to recovery room scams reached $9.9 million in 2023.
118,960
FTC's Consumer Sentinel Data Book lists 118,960 investment-related reports in 2024.
History and evolution
Recovery and follow-up
Why this pattern keeps working
Recovery scams are second-order scams: they target people after a first loss, when urgency and hope are highest.
Scammers often scrape victim forums, social replies, or public complaint threads so the outreach feels specific and credible.
Recovery scams cluster wherever victims publicly describe the first loss.
Expanded launch family for secondary fraud after an initial loss.
Where to report it
If you have been targeted by this scam, reporting it helps authorities track the pattern and protect others. Global has dedicated agencies that handle fraud reports.
Report cross-border scams
econsumer.gov (ICPEN)
International Consumer Protection and Enforcement Network portal for reporting cross-border online scams. Reports are shared with consumer protection agencies in 40+ countries.
Interpol financial crime guidance
Interpol
International policing guidance on online financial fraud, romance scams, and investment fraud operating across borders.
Report phishing emails
Anti-Phishing Working Group
Global industry coalition for reporting phishing emails and URLs. Forward phishing to [email protected].
Explore further
Who is most at risk
Primary targets
Small businesses, Creators
Geographic concentration
Global
Primary channel
Facebook — Recovery fraud
Why this group is vulnerable
Small businesses are particularly vulnerable because this scam exploits trust in familiar brands, authority figures, and time-sensitive decisions. The rapid increase in reports suggests that awareness among this demographic remains low.
Sources and methodology
OpenScam tracks scam patterns using a combination of government consumer protection databases (FTC, IC3, Action Fraud), platform-specific fraud reports, and verified consumer complaint data. Each entry is cross-referenced against at least two independent sources before publication.
Severity ratings are based on financial impact potential, reversibility of damage, and volume of reports across multiple reporting channels. Trend velocity reflects the rate of change in report volume over the most recent 90-day window.
This page was last verified on 2026-04-03. Red flags, recovery steps, and reporting resources are reviewed quarterly against current agency guidance.
Evidence and indicators
Source notes
Frequently asked questions
Attackers monitor public complaint channels, hacked-account posts, and victim communities. They position themselves as the fast path to getting money, access, or accounts back. The victim is charged again or loses remaining access while already emotionally vulnerable.
The helper requests a screen-share session or ad account login. The recovery expert or lawyer contacts the victim before being hired. Upfront fees, wallet access, passwords, or remote access are required.
Use the platform's official admin recovery path and avoid remote-control sessions. Assume unsolicited recovery outreach is fraudulent until proven otherwise. Use only official support, bank, exchange, or complaint channels for recovery steps.
This scam primarily targets Small businesses, Creators. It is most commonly reported in Global and typically appears on Facebook.
Business page recovery service scam is currently surging — reports are increasing rapidly. It has been reported across Global. Last updated 2026-04-03.
Related scams
After a person loses money in crypto, a second scam appears claiming funds can be recovered for a fee or wallet access.
Assume unsolicited recovery outreach is fraudulent.
Previous fraud victims
Global
A criminal takes over a target's phone number through carrier manipulation and then resets passwords, intercepts OTPs, and drains financial or social accounts.
Set a carrier account PIN.
Professionals
U.S.
A text says electricity or gas will be disconnected within hours unless a payment is made through a mobile link.
Contact the utility using the number on your statement.
Households
U.S.
Help someone avoid this scam.
Scammers succeed because people do not talk about it. If you or someone you know has been affected, there is no shame in it — it happens to millions of people every year. Share this page with friends and family so they know what to look for.
Relevant collections