Losing money to a scam is painful enough. Then, just when you are desperate to undo the damage, someone contacts you with wonderful news: your money has been found, and they can get it back. All you have to do is pay a small fee first. This is a recovery scam — the second con that targets people who have already been victimized once. The Federal Trade Commission calls these operators “the worst of the worst,” and the numbers are staggering: recovery scams cost Americans a reported $1.4 billion in 2025 alone. This guide explains how the scheme finds you, the fee trap at its center, and what legitimate help actually looks like.
How a Recovery Scam Finds You
Recovery scammers do not guess who to contact — they know. The FTC explains that scammers buy, sell, and trade lists of people who have already paid scammers. These “sucker lists” include your name, address, and phone number, along with the kind of scam that tricked you and how much money you paid. That is why the second scammer can sound so convincing: they already know details about your original loss. Being scammed once puts you on a list for the next attempt.
Once they have your details, they reach out through calls, emails, texts, letters, or social media messages. They typically pose as one of the following:
Fake law firms. In August 2025, the FBI warned about fictitious law firms specifically targeting cryptocurrency scam victims. These operations impersonate real lawyers and legitimate firms — even producing documents with a real firm’s letterhead — and claim they can recover stolen crypto through “legal channels.” The FBI lists their hallmarks: claims of affiliation with government agencies (no law firm is an officially authorized partner of US government agencies), references to fictitious regulators like the “International Financial Trading Commission,” and demands for payment in cryptocurrency or gift cards.
Fake government agents and agencies. Some pose as the FTC, the FBI, or other authorities, claiming your case has been selected for reimbursement. The FBI reports that scammers impersonating its own Internet Crime Complaint Center (IC3) tell victims their lost funds have been “recovered” — then use that claim to extract financial information and payments. Others invent official-sounding agencies that do not exist at all.
“Hackers for hire” and fund-recovery companies. On social media and in comment sections, you will find services advertising that they can trace and retrieve stolen crypto or hacked accounts. The FBI’s April 2025 alert describes one variant in detail: scammers create fake profiles in online support groups for fraud victims, pose as fellow victims, and steer real victims toward a supposed IC3 “chief director” on Telegram who claims the money is already recovered. From there, it is a short step to demands for “verification” payments and harvested bank details.
The original scammers, in a new disguise. Sometimes the same criminals come back wearing a different mask — posing as a consumer advocacy group or as the fraudulent company itself, offering “refunds to dissatisfied customers.” If you did not even realize you were scammed the first time, the FTC notes, they will helpfully “tell” you about the earlier fraud as part of the new story.
The Upfront-Fee Trap
Every recovery scam funnels toward the same moment: before you can get your money back, you must pay something first. The FTC documents the vocabulary they use — a “retainer fee,” “processing fee,” “administrative charge,” “tax,” or “shipment and handling charge.” Sometimes, instead of money, they ask for your Social Security number or bank account details so they can “deposit the refund directly.”
There is no refund waiting. The fee is the theft, and the “verification” is identity theft. Pay it and the money disappears — and because you are now marked as someone who pays, you can expect more attempts.
Note the payment methods, too. The FTC warns that only scammers insist on being paid in cash, gift cards, cryptocurrency, wire transfers through companies like Western Union or MoneyGram, or payment apps. A demand for any of these is a confession, not a procedure.
The $1.4 Billion Recovery Scam Problem
The scale of this secondary fraud is hard to overstate. According to the FBI’s Internet Crime Complaint Center 2025 annual report, recovery scams generated a reported $1.4 billion in losses in 2025 — including $540.5 million taken from victims aged 60 and over. The FBI notes these figures may also include money lost in the original scam that prompted the victim to contact the “recovery” entity, which tells you something important about how the two crimes blur together in victims’ lives.
For context, the IC3 received just over one million complaints covering $20.9 billion in total reported losses in 2025. Recovery fraud is one of the largest single categories in that total — a remarkable fact for a crime that exists only because other crimes happened first. And as with all fraud statistics, reported losses are a floor, not a ceiling: many victims never report, often out of embarrassment at having been fooled twice.
Red Flags: Recovery Scam Checklist
- Someone contacts you out of the blue offering to recover money you lost — by call, text, email, letter, or social media message.
- They already know details about your original loss (amount, dates, method) — this comes from a traded victim list, not from an investigation.
- They claim to be with a government agency, a law firm, a consumer group, or the company that scammed you — but you never contacted them first.
- They ask for an upfront fee of any kind: retainer, processing, administrative, tax, or handling charges.
- They ask for your Social Security number, bank account, or other financial details to “process” your refund.
- They insist on payment via gift cards, cryptocurrency, wire transfer, cash, or a payment app.
- They reference agencies you have never heard of, or claim to be an “authorized partner” of a government agency.
- They send you a check for more than you lost and ask you to return the difference (the check is fake; it can take weeks for a bank to discover that).
- They pressure you to act immediately or warn you not to tell anyone — including your bank, family, or the police.
- They found you in a victim support group or forum and steered you to a private chat on Telegram or WhatsApp.
- They cannot provide verifiable credentials: no real law license, no video meeting, no independently confirmable office.
The FTC’s rule covers every variation: if someone unexpectedly contacts you and asks for an upfront fee or your financial information in exchange for recovering your money, that is a scammer — no matter how official they sound.
What Legitimate Recovery Actually Looks Like
Here is the part that matters most. Real avenues for getting money back exist, but they look nothing like a recovery agent’s pitch:
Your bank or card issuer — fast. If you paid by bank transfer, debit, or credit card, call your bank immediately and ask it to stop or recall the payment. Card payments may be eligible for chargebacks or disputes, but these have strict time limits — days matter. This costs nothing.
Law enforcement reports — free. File a complaint with the FBI’s IC3 at ic3.gov and report to the FTC at ReportFraud.ftc.gov. Also file a report with your local police. These reports are free, they feed the investigations that actually catch criminals, and in some cases — such as FBI asset seizures — recovered funds are returned to victims through official channels. Nobody legitimate charges you to file.
Real FTC refund programs — never solicited by cold call. When the FTC or the Department of Justice takes action against scammers, they sometimes distribute recovered money to victims through official refund programs. Here is the critical difference: these programs never cold-contact you demanding a fee, and the FTC never asks for your bank account number or Social Security number to release a refund. If you are ever unsure, look up the agency’s number yourself and call to confirm — never use a number the caller gave you.
Your state attorney general and consumer protection offices. These are free resources that can advise you on your options and take complaints that build enforcement cases.
And the single most important fact, stated plainly by both the FTC and the FBI: government agencies and legitimate organizations will never ask for money to help you get a refund. The IC3 will never contact you directly by phone, email, social media, or messaging apps, and it will never ask for payment to recover lost funds. Anyone who does any of these things is a scammer — including someone claiming to be from the FBI itself.
What To Do Instead — Step by Step
If you have lost money to a scam, follow these steps in order:
- Stop all contact with the original scammer and anyone offering to recover the money for a fee. Do not argue, threaten, or try to negotiate.
- Call your bank or payment provider immediately. Explain you paid a scammer and ask them to stop, recall, or dispute the transaction. Ask specifically about chargeback rights and deadlines.
- Preserve the evidence. Save every message, email, phone number, profile, website address, receipt, and cryptocurrency wallet address. Do not delete conversations.
- Report to the FBI’s IC3 at ic3.gov with as much detail as possible — this is free and feeds real investigations.
- Report to the FTC at ReportFraud.ftc.gov and to your state attorney general.
- Report the profiles and pages to the platforms where contact happened so they can be removed.
- Warn your circle. Tell family and friends what happened. Victim lists get traded; the people around you may be targeted next, and your warning is their best defense.
- Be skeptical of every “helper” who finds you first. For weeks and months afterward, treat any unsolicited recovery offer as a recovery scam until proven otherwise through channels you looked up yourself.
Conclusion: The Only Recovery Scam Test You Need
A recovery scam is cruelty stacked on cruelty: it finds people at their most desperate and sells them hope at a price. But the test is simple and absolute. No legitimate agency, law firm, or organization will ever cold-contact you and demand an upfront fee — or your bank details — to return money that is supposedly already yours. Real help is free: your bank’s fraud department, a police report, IC3, the FTC, and your state attorney general. If someone you never contacted asks you to pay to get your own money back, you are not talking to a recovery agent. You are talking to the second scammer. Hang up, keep your money, and report them.
Sources
- Federal Trade Commission, “Refund and Recovery Scams” (Consumer Advice) — https://consumer.ftc.gov/articles/refund-and-recovery-scams
- Federal Bureau of Investigation, Internet Crime Complaint Center, “FBI Warns of Scammers Impersonating the IC3” (PSA250418, April 18, 2025) — https://www.ic3.gov/PSA/2025/PSA250418
- Federal Bureau of Investigation, Internet Crime Complaint Center, “Fictitious Law Firms Targeting Cryptocurrency Scam Victims Combine Multiple Exploitation Tactics While Offering to Recover Funds” (PSA250813, August 13, 2025) — https://www.ic3.gov/PSA/2025/PSA250813
- Security Boulevard, “$20.9 Billion and It’s Not Phishing: The Scams That Actually Drained Americans in 2025” (September 2026) — figures verified against the FBI IC3 2025 Internet Crime Report — https://securityboulevard.com/2026/09/20-9-billion-and-its-not-phishing-the-scams-that-actually-drained-americans-in-2025/
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.