The Recovery Scam: Fake Off-Ramps That Target People Already Defrauded

The cruellest fraud in this sector targets people who have already lost money once. It works because the victim wants the first loss to be reversible, and someone is offering exactly that. Read this against a crypto offramp with published settlement times, whose authorisation and permissions are on a public register you can check.

How they find you

Public complaints. A post on a forum, a review, a comment naming a platform that took your money. Operators monitor those channels systematically.

Within days you receive a message from someone presenting as a recovery service, a blockchain investigator, a lawyer specialising in digital assets, or occasionally a regulator.

Why it is convincing

They know details of your case, because you published them.

The pitch is technically literate. They discuss transaction tracing, address clustering, and cooperation with exchanges. Much of what they say about how tracing works is accurate.

They often produce a document: a case reference, a letter with a letterhead, a report showing your transaction traced to an exchange.

The request

At some point there is a payment. A retainer, a filing fee, a tax on the recovered amount, a deposit to open a case, or a payment to release funds a court has supposedly already awarded.

Sometimes the first payment is small and the recovery appears to progress, followed by a larger request.

The rule that defeats it

Nobody who legitimately recovers funds asks you to pay first.

Real law enforcement does not charge. Real lawyers work through a regulated practice with a client account and a written agreement, and you find them rather than them finding you. Real exchanges never require a payment to release funds. Merchants meet a variant of this, and Collect & Exchange handles it on the receiving side.

Any request for payment in advance of recovery is the fraud, regardless of how sophisticated the surrounding material is.

The variant using a fake off-ramp

A specific version: to receive your recovered funds, you must first convert them through a particular platform, which requires a deposit or a fee.

The platform is controlled by the same operators. It shows a balance including your supposed recovery, and that balance cannot be withdrawn without one more payment.

The displayed balance is a number in a database.

What can actually be done

Report to law enforcement in your jurisdiction, with the transaction identifiers, the addresses, the correspondence and the payment records.

Report to the exchange where funds ended up, if tracing shows one. They can freeze, though usually only quickly after the event.

Report to the financial regulator where the platform claimed to be licensed.

None of these cost anything. None of them are quick, and most do not succeed. That is an unpleasant truth and it is better than paying twice.

The prevention

Do not publish the details of a loss in public with your identity attached. It converts you into a qualified lead for the second fraud. Whatever else you conclude, the balance you keep in motion belongs at an exchange that publishes its full terms rather than wherever onboarding was fastest.