Recovery begins with your provider, not a new stranger.

What is changing now

The current pattern.

Recovery scams use accurate details about an earlier loss to appear unusually credible. The contact may claim to be a regulator, police officer, lawyer, blockchain investigator, bank agent or claims company. They promise recovered funds but require a retainer, tax, wallet connection, identity document or remote access before release.

How it works

Confidence first, then pressure.

Victim details can come from the original scammers, public complaint posts, data leaks or lead lists sold between criminal groups. Knowing the amount, platform and timeline proves access to information—not access to recovered money.

The recovery contact creates a visible success: a traced wallet, court document, frozen balance or refund cheque. Release then depends on one more payment or disclosure. Each fee receives a plausible label such as tax, gas, insurance, verification, administration or anti-money-laundering clearance.

Legitimate dispute and law-enforcement processes vary, and recovery is never guaranteed. The safest route begins with the provider that handled the original payment and an official public reporting channel, not with a stranger who guarantees an outcome.

Worked example

A realistic pattern, separated into evidence.

This composite example is educational. It does not describe a real person or reproduce a live malicious message.

Warning signs

Reasons to stop and verify.

• An unexpected contact who already knows details of an earlier scam
• A guarantee that all or most money has been recovered
• Upfront retainers, taxes, gas fees, insurance or release charges
• A request to connect a wallet, share a recovery phrase or install remote access
• Official-looking documents or balances visible only through the contact’s portal
• Pressure to keep the recovery confidential or act before a case deadline

Independent verification

Test the request without using its evidence.

These checks deliberately move the decision away from the person, link, number or account that introduced the request.

1. 01

   Return to the original provider

   Use the bank, card issuer, payment app, exchange or wire service that handled the transaction. Ask for its official fraud and dispute process.

2. 02

   Verify the authority independently

   Find the regulator, police service, court or agency through its public website and ask whether the case, employee and process exist.

3. 03

   Check the fee logic

   A demand for new money, wallet access or identity data before release creates fresh risk and is not proof of recovered funds.

4. 04

   Protect the existing case record

   Add new evidence to the original report. Do not let a new contact take over accounts, devices or communication with providers.

Safer response

Move the decision outside the contact.

1. 01

   Refuse upfront payment

   Do not pay a recovery fee, tax or deposit to someone who contacted you unexpectedly.

2. 02

   Keep wallets and devices private

   Never share a recovery phrase, approve a wallet connection or grant remote access for tracing or reimbursement.

3. 03

   Use official case channels

   Communicate through the provider and authority contact details you found independently.

4. 04

   Expect repeat targeting

   Treat new investment, job, romance and recovery approaches with extra caution after a reported loss.

If you already acted

Protect access and contact the real provider.

Sources

Official guidance used for this article.

Stop & Verify summarises these sources for general education. Reporting routes and legal protections vary by location.