Skip to content

Recovery scam: the second fraud after a loss

A recovery scam contacts someone who has already lost money and promises restitution in exchange for upfront fees, credentials, or new transfers.

In simple terms — A recovery scam targets someone who has already suffered a loss. A fake lawyer, investigator, hacker, or official promises to recover the money but first asks for a fee, financial data, or wallet access.

The approach may look credible because it cites real amounts, platforms, and dates. That information may come from the first fraudsters, victim lists shared between criminals, or details published while seeking help.

How the second loss begins

The supposed recovery agent says funds have been located, a legal case exists, or an authority has approved repayment. To proceed, the victim must pay a tax, bond, “insurance fee”, send money to a new wallet, or disclose a private key. Once the first payment arrives, further charges and urgent deadlines appear.

Documents, logos, case numbers, and even the names of real authorities may be copied. Contact details contained in the same message do not verify its sender.

Recovery scam: one loss can become two Recognise the sequence, check outside the message, stop the flow. Previous loss, Unexpected contact, Upfront demand, Official channel. DEFENCE MAP Recovery scam: one loss can become two Recognise the sequence, check outside the message, stop the flow Previous loss: Someone who suffered fraud may be contacted again because victim details circulate among scammers. 1 Previous loss Data and vulnerabilityalready exposed Unexpected contact: A logo, case number, and official language can be invented or copied to manufacture trust. 2 Unexpected contact Fake lawyer, agency,or recovery service Upfront demand: With an unsolicited or unverifiable contact, an upfront request for money or credentials is a strong warning sign. 3 Upfront demand Tax, bond, wallet,or private key Official channel: Preserve messages and transfers; contact authorities and providers through details you find independently. 4 Official channel Stop paymentsand report directly Tab or tap: explore the four stages
The defence is to separate an unexpected approach from the official channel and avoid adding money to the first loss.
Select the highlighted points to explore the detail

Verify without relying on the approach

Do not send money, documents, passwords, authentication codes, or private keys to someone offering unexpected recovery. Independently find the contact details for the authority, intermediary, bank, or professional firm and ask through that channel. A government body does not guarantee repayment or require crypto or credentials to release it.

A professional fee alone does not prove fraud. The warning comes from the combination of unsolicited contact, unverifiable identity, guaranteed recovery, and advance payment to an opaque party. A legitimate professional service defines its engagement, costs, and limits without promising a certain outcome.

Preserve the original message, email headers, phone numbers, wallet addresses, and receipts. Report directly to relevant authorities and the payment provider. No procedure can ensure the funds will be recovered.

Sources

Anti-scam · Red flags · Due diligence · Confidence-enabled investment fraud