Recovery fraud/SMS

Stolen phone data recovery scam

After a phone is stolen, a fake support agent promises to restore data or locate the device if the victim signs in to a special portal or pays a fee.

“refund scam”

↑ 57%

Key indicators

Usually targetsTravelers
Common regionGlobal
Last updated2026-04-04

Estimated impact

$5.4K

median reported loss

Typical range$900 – $54K
Recovery rate~2%
Annual reports14,000

Scam breakdown

1

Scammers hunt for people who have already lost money or access and are emotionally vulnerable.

2

They pose as investigators, lawyers, support agents, or specialists with special access.

3

The victim loses another payment, more identity data, or the remaining account itself.

What to do first

Use the device maker's official recovery tools instead of any message claiming a shortcut.

Related terms

lost phone recovery scamdevice locator fraudRecovery fraudSMSRisingTravelersProfessionalsStudentsTech workers and developersEducators and studentsNonprofit and charity workersGloballost phone recovery scamdevice locator fraud

Real-world example

How this scam plays out in practice

Based on reported patterns. Names and details are illustrative.

The setup

Patricia, 35, a travelers, encountered what appeared to be a legitimate recovery fraud situation while using SMS. Scammers hunt for people who have already lost money or access and are emotionally vulnerable.

Step 2

What happened next was calculated: They pose as investigators, lawyers, support agents, or specialists with special access.

Step 3

The pressure escalated quickly: The victim loses another payment, more identity data, or the remaining account itself.

The outcome

Patricia realized something was wrong when the message claims your device was found but can only be released after verification or payment.. By that point, significant damage had already been done — money sent, personal information shared, or trust exploited.

The lesson

Use the device maker's official recovery tools instead of any message claiming a shortcut. Patricia's experience shows why the message claims your device was found but can only be released after verification or payment. and the helper reaches out before being hired or verified. are the clearest early warning signs.

How to identify it

  • The message claims your device was found but can only be released after verification or payment.
  • The helper reaches out before being hired or verified.
  • The recovery plan starts with fees, passwords, wallet access, or remote access.
  • Assume any unsolicited recovery outreach is suspicious, especially if it mentions your earlier loss without you contacting them first.
  • A legitimate recovery path does not require you to hand over a wallet seed phrase, remote access, or another upfront recovery fee.
  • Treat fake investigators, fake lawyers, and blockchain tracing promises as part of the same scam chain unless you independently verify the firm or authority.

What to do now

  • ✓Use the device maker's official recovery tools instead of any message claiming a shortcut.
  • ✓Assume unsolicited recovery help is fraudulent until verified through an official channel.
  • ✓Use only real support or reporting paths from the affected platform, bank, or authority.

What to save before reporting

  • ✓Keep the original wallet addresses, transaction hashes, case numbers, screenshots, and complaint confirmations from the first scam.
  • ✓Save the recovery pitch, expert name, domain, chat handle, and any fee quote or contract.
  • ✓Do not move or consolidate remaining funds until you understand the real reporting or recovery path.
  • ✓Save the full chat or call log before blocking the sender so the reporting path still has the original context.
  • ✓Keep wallet addresses, transaction hashes, and exchange or payment-app identifiers before you move remaining funds.

How big is this problem

You are not alone — this scam affects millions of people.

These numbers come from government agencies and official reports. If you have been affected, know that this is a widespread problem — not something that only happens to careless people.

$5.7B

FTC-reported investment scam losses in 2024

FTC says investment-related scams caused the biggest reported losses in 2024, creating a large pool of victims that recovery scammers target afterward.

FTC 2024 fraud losses

$9.9M

Recovery room scam losses in Canada (2023)

The Canadian Anti-Fraud Centre says losses tied to recovery room scams reached $9.9 million in 2023.

CAFC recovery scams

118,960

Reported investment-related reports in 2024

FTC's Consumer Sentinel Data Book lists 118,960 investment-related reports in 2024.

FTC Data Book 2024

History and evolution

  • Recovery scams are a second-wave fraud. They target people after a first loss, often by watching public complaint posts or social media.
  • This pattern has become more organized as crypto losses and online investment scams create a steady stream of emotionally vulnerable targets.
  • Recovery fraud succeeds because the victim is still trying to undo the original loss.

Recovery and follow-up

  • ✓Save the messages, receipts, account alerts, and transaction details before you block or delete anything.
  • ✓Report the scam through the official platform or government channel that best matches where it happened.
  • ✓If crypto or online investments were involved, move any remaining funds only through the official wallet or exchange controls you already trust.
  • ✓Tell close contacts if a phone or text scam used your identity, so scammers cannot reuse the same story against people around you.
  • ✓Use the device maker's official recovery tools instead of any message claiming a shortcut.

Why this pattern keeps working

Recovery scams are second-order scams: they target people after a first loss, when urgency and hope are highest.

Scammers often scrape victim forums, social replies, or public complaint threads so the outreach feels specific and credible.

Recovery fraud succeeds because the victim is still trying to undo the original loss.

Next batch family deepening secondary-fraud coverage.

Where to report it

If you have been targeted by this scam, reporting it helps authorities track the pattern and protect others. Global has dedicated agencies that handle fraud reports.

All reporting options for Global

Explore further

Understand the bigger picture

Who is most at risk

Who this scam targets

Primary targets

Travelers, Professionals, Students

Geographic concentration

Global

Primary channel

SMS — Recovery fraud

Why this group is vulnerable

Travelers are particularly vulnerable because this scam exploits trust in familiar brands, authority figures, and time-sensitive decisions. The growing number of reports suggests that awareness among this demographic remains low.

Sources and methodology

How we verify this information

OpenScam tracks scam patterns using a combination of government consumer protection databases (FTC, IC3, Action Fraud), platform-specific fraud reports, and verified consumer complaint data. Each entry is cross-referenced against at least two independent sources before publication.

Severity ratings are based on financial impact potential, reversibility of damage, and volume of reports across multiple reporting channels. Trend velocity reflects the rate of change in report volume over the most recent 90-day window.

This page was last verified on 2026-04-04. Red flags, recovery steps, and reporting resources are reviewed quarterly against current agency guidance.

Evidence and indicators

  • Recovery fraud succeeds because the victim is still trying to undo the original loss.

Source notes

  • Next batch family deepening secondary-fraud coverage.

Frequently asked questions

Common questions about stolen phone data recovery scam

How does the stolen phone data recovery scam work?+

Scammers hunt for people who have already lost money or access and are emotionally vulnerable. They pose as investigators, lawyers, support agents, or specialists with special access. The victim loses another payment, more identity data, or the remaining account itself.

What are the warning signs of stolen phone data recovery scam?+

The message claims your device was found but can only be released after verification or payment. The helper reaches out before being hired or verified. The recovery plan starts with fees, passwords, wallet access, or remote access.

What should I do if I encounter stolen phone data recovery scam?+

Use the device maker's official recovery tools instead of any message claiming a shortcut. Assume unsolicited recovery help is fraudulent until verified through an official channel. Use only real support or reporting paths from the affected platform, bank, or authority.

Who is most at risk for stolen phone data recovery scam?+

This scam primarily targets Travelers, Professionals, Students. It is most commonly reported in Global and typically appears on SMS.

Is stolen phone data recovery scam on the rise?+

Stolen phone data recovery scam is currently on the rise with growing reports. It has been reported across Global. Last updated 2026-04-04.

Related scams

Similar scams to watch out for

Back to index

Help someone avoid this scam.

Scammers succeed because people do not talk about it. If you or someone you know has been affected, there is no shame in it — it happens to millions of people every year. Share this page with friends and family so they know what to look for.

Relevant collections