Recovery scamming — targeting victims of crypto fraud a second time with false promises of getting their money back — is one of the most predatory forms of fraud in existence. Understanding the warning signs is your best defence. Here are the ten most reliable indicators that a crypto recovery service is itself a scam.
1. They Charge Upfront Fees
This is the single most reliable indicator of a recovery scam. Legitimate recovery services operate on a success-only basis — they charge a percentage of what they actually recover. If a service asks for any payment before recovery has occurred — regardless of how it is framed (registration fee, investigation deposit, legal retainer, tax payment) — it is a scam. There is no exception to this rule.
2. They Guarantee Results
No legitimate recovery service guarantees success. Recovery outcomes depend on case-specific factors — how quickly the case was reported, which exchanges were involved, how funds were moved. An honest provider gives you a realistic probability assessment. Any service guaranteeing "100% recovery" or "money-back guarantees" is lying.
3. They Contacted You First
Legitimate recovery services do not cold-call, send unsolicited emails, or DM victims on social media or WhatsApp offering to recover their funds. If someone reached out to you after you lost money — especially if they somehow knew about your loss — they are targeting you for a secondary scam. Block and report them.
4. Their Website Was Created Recently
Check the domain registration date using a WHOIS lookup tool (whois.domaintools.com). Recovery scam websites are typically created days or weeks before you encounter them. A service claiming to have "operated since 2015" on a domain registered in 2024 is a red flag. Legitimate services have verifiable operating histories.
5. No Named Team Members
Legitimate forensics and recovery professionals have verifiable identities — names, certifications, LinkedIn profiles, professional body memberships. If a service has no named team at all, or uses obviously fake stock-photo profiles, their credentials cannot be verified. Anonymity protects scammers, not clients.
6. They Claim Unrealistic Success Rates
Claims of 98%, 99%, or 100% success rates are fabricated. Real recovery success rates vary significantly by case type — wallet recovery cases where the holder has partial credentials succeed at a high rate; scam cases where funds have been fully converted to cash have much lower rates. Any service claiming near-perfect success across all case types is inflating its figures.
7. Pressure Tactics and Urgency
Recovery scammers use manufactured urgency — "your funds are about to be permanently deleted", "this offer expires in 24 hours", "act now before the window closes." Legitimate recovery professionals explain timelines honestly (yes, speed matters in genuine cases) but do not manufacture fake deadlines to pressure you into sending money.
8. They Ask You to Keep It Secret
If a recovery service asks you not to tell family, friends, or authorities about the engagement, this is a significant warning sign. Scammers request secrecy to prevent you from getting advice that would reveal their fraud. Legitimate services have nothing to hide.
9. Payment Requested in Cryptocurrency
If a recovery service requests payment in cryptocurrency — particularly through a specific wallet address — this is a major red flag. Recovery scammers prefer crypto payment because it is irreversible and difficult to trace. Legitimate services that do charge fees (after recovery) typically accept bank transfer.
10. No Verifiable Physical Presence or Registration
A legitimate professional services firm has verifiable registration — a company number, a registered address, memberships in professional bodies. If a recovery service has none of these and cannot be found in any official register, treat it with extreme caution.
If You Have Been Targeted by a Recovery Scammer
Report the secondary scam to the same authority you reported the original fraud. In the US, this is IC3.gov. In the UK, Action Fraud. In Australia, ReportCyber. Then contact a legitimate recovery service for an honest assessment of whether your original loss is recoverable.