What to Do After a Crypto Scam

Realizing you've been scammed out of cryptocurrency is a specific kind of awful: the transaction is already confirmed, and unlike a credit card chargeback, there's no central authority that can simply reverse it. That doesn't mean there's nothing to do. Here's an honest, practical rundown of what actually helps — and the one trap that catches an enormous number of scam victims a second time.

First: stop any further loss

If the scam is still active — you're mid-conversation with someone, or you suspect a device or account is compromised — the first priority is stopping additional damage, not investigating what already happened.

Stop sending anything else. Don't send "one more transaction to unlock the rest" or pay any fee someone claims is required to release funds. That request is itself almost always the scam continuing.
If you still control the wallet involved, move remaining funds immediately to a brand-new wallet with a freshly generated recovery phrase — not one restored from the same backup, and not on the same possibly-compromised device.
If malware or a phishing site was involved, get off that device. Disconnect it from the network. Don't log into anything else sensitive on it until it's been cleaned or reformatted.

Document everything, immediately

Before memory fades and browser tabs get closed, write down or screenshot:

The transaction ID(s) involved, and the addresses on both ends.
Amounts and approximate timestamps.
Every piece of communication with the scammer — messages, emails, the website URL, usernames, wallet addresses they gave you.
How you were first contacted, and what the pitch was (this pattern-matching detail is genuinely useful to investigators).

This record is exactly what a police report or an exchange's fraud team will ask you for, and it's much harder to reconstruct later than it is to save now.

Report it — even without a guaranteed outcome

Reporting doesn't guarantee recovery, but it's still worth doing, for your own case and for the broader pattern data it feeds:

File a police report with your local law enforcement. Get a case number — some exchanges and follow-up processes require one.
File with a national cybercrime reporting body. In the US, that's the FBI's IC3 (ic3.gov); the UK has Action Fraud; most countries have an equivalent. These aggregate patterns across many victims, which sometimes matters more than any single case.
If the funds moved to an address you can trace to a known exchange, contact that exchange's fraud or compliance team directly, and reference your police report. Exchanges can sometimes freeze funds still sitting in an account — but only if you (or law enforcement) reach them before those funds are withdrawn, and only if the destination was actually an exchange account and not a private wallet.

Speed matters here more than almost anything else. The realistic odds of any recovery drop sharply once funds have had time to move through several more hops or get swapped into another asset.

The trap: recovery scams targeting scam victims

This is the single most important thing in this article, so it's not buried: there is an entire secondary scam industry built around contacting people who were just scammed, offering to recover their funds for a fee. If you post about your loss publicly, or even just search for help, expect to be approached by exactly this.

The pattern is consistent enough to spot every time:

They guarantee recovery, or use language like "we have a 95% success rate." Nobody can guarantee this. Bitcoin transactions cannot be reversed by a third party at all — there is no technical mechanism for it, no matter who claims otherwise.
They ask for money upfront — a "processing fee," "gas fee," or "tax" before they'll release your recovered funds. Once paid, they vanish, or invent another fee.
They ask for your seed phrase or private keys, sometimes framed as "we need it to trace/reverse the transaction." This makes no sense if you think about it for a second: your seed phrase controls your wallet, not the scammer's. Nobody needs your keys to look at a public blockchain, and nobody can use your keys to touch funds that are already sitting in someone else's wallet. A request for your seed phrase in a "recovery" context is not a red flag — it's a confirmation that you're being scammed again.
They contacted you first, often within hours of you posting about your loss somewhere public.

If something looks like it might be legitimate, apply a simple test: a real, honest service does not need your seed phrase, does not guarantee an outcome on an irreversible ledger, and does not ask for payment before doing anything. This site's own Recover and Trace tools follow that same rule for the same reason — recovery computation runs entirely in your browser and never asks for or transmits a seed phrase, and tracing shows you public information without ever claiming it can move funds.

Setting realistic expectations

It's worth being honest about the odds. Once stolen funds have passed through a mixer, been split across many addresses, swapped to another cryptocurrency, or moved off an exchange that could otherwise have frozen them, recovery becomes very unlikely — not impossible in every conceivable case, but not something any legitimate party can promise you. Tracing can tell you where funds went and support a case; it cannot, by itself, get them back.

Reducing the odds of a repeat

Once the immediate situation is handled:

Move to a hardware wallet if you aren't already using one.
Never enter a seed phrase into a website, a support chat, or a "wallet recovery" tool that isn't provably offline.
Treat any unsolicited contact offering help — especially anything urgent or fee-based — as a scam by default.
Verify URLs and app sources directly rather than through links sent to you.

None of this undoes a loss that's already happened. But it's the difference between one bad incident and a second one layered on top of it — which is, unfortunately, the more common outcome for people who don't know this pattern exists.