Scammed Once, Targeted Twice: The Crypto Recovery Scam Hitting Australians

You lost money to a fake crypto platform. Weeks later, a stranger calls with good news: they can get it back. That second call is almost always the start of a second scam.

Crypto recovery scams are one of the fastest-growing frauds aimed at Australians, and they prey on the most vulnerable target of all — people who have already been burned once. ASIC has repeatedly warned that so-called "fund recovery services" sell false hope to victims desperate to claw back their savings, charging upfront fees and delivering nothing.

With Australians reporting $2.18 billion in scam losses in 2025 — including $837.7 million to investment scams alone — the pool of previous victims is enormous. And recovery scammers know exactly where to find them.

A person looking at a laptop showing a fake crypto fund recovery service website

How a Crypto Recovery Scam Works

The mechanics are simple and ruthless. The fraudster's only goal is to extract a second payment from someone who has already lost money.

Typically, the approach follows a pattern:

  1. The cold contact. A "recovery agent", "blockchain forensic specialist" or fake government officer contacts the victim by phone, email or social media — often within weeks of the original loss.
  2. The credibility play. They impersonate ASIC, AUSTRAC, the AFP, a law firm, or a real overseas regulator. Some send fake documents bearing the ASIC logo and the Commonwealth Coat of Arms.
  3. The proof. They claim to have "located" the victim's stolen crypto in a wallet or frozen account and show convincing screenshots or a dashboard showing the balance.
  4. The fee. To "release" the funds, the victim must pay an upfront fee, a "tax", a "wallet unlock" charge or a "legal retainer" — frequently demanded in cryptocurrency, which is almost impossible to trace or reverse.
  5. The disappearance. Once the fee is paid, the recovered money never arrives. New excuses and new fees follow until the victim stops paying.

Why victims fall for it twice

Recovery scammers exploit grief and shame. Many victims have not told family or friends about the first loss, so they have no one to sanity-check the offer. The promise of getting everything back — at the very moment they feel most powerless — is psychologically powerful. Scammers reinforce it with fake five-star reviews, testimonials and "clients" who claim the service worked.

How Recovery Scammers Find Previous Victims

This is not random. Recovery scams are often run by the same criminal networks behind the original fraud, or by groups that buy victim data on the dark web. European regulators call these operations "recovery rooms", and ASIC has flagged the same playbook in Australia.

Common ways scammers identify and re-target victims include:

  • Reusing their own victim lists from the initial fake trading platform or investment group.
  • Buying leads — names, phone numbers and loss amounts traded between scam syndicates.
  • Planting fake recovery firms in search results and review sites, so victims Googling "how to get my crypto back" find the scammers themselves.
  • Posing as fellow victims in online forums and comment sections, recommending the "service that helped me".

Warning Signs of a Crypto Recovery Scam

Treat any unsolicited offer to recover lost funds as a scam until proven otherwise. Be especially alert to these red flags:

  • An upfront fee of any kind — a genuine recovery process does not require you to pay first, particularly not in cryptocurrency or gift cards.
  • Claims of a government link. ASIC does not recover funds, never holds crypto-assets, and would never demand a fee to "release" money.
  • Unrealistic success rates — fake firms routinely claim they recover 90–95% of losses.
  • Pressure and urgency — "the wallet will be frozen permanently if you don't pay today".
  • Requests for remote access to your computer, banking, or crypto wallet.
  • Contact that arrives out of the blue, especially soon after you reported or discussed your original loss.
  • Documents with logos of ASIC, AUSTRAC or the AFP that direct you to a third-party website to "proceed".

How To Protect Yourself

If you have already lost money, you are now a prime target. Protecting yourself from the second hit is just as important as avoiding the first.

  1. Assume every recovery offer is a scam. No legitimate Australian agency cold-calls victims to offer paid fund recovery.
  2. Never pay an upfront fee. If money is requested before any funds are returned, walk away.
  3. Verify independently. Check whether a firm holds an Australian financial services licence on ASIC's registers, and check crypto businesses against AUSTRAC's Virtual Asset Service Provider Register. Find contact details yourself — never use the numbers or links the caller provides.
  4. Contact your bank immediately if you have sent money. Card and bank transfers may sometimes be reversed; crypto payments rarely can be.
  5. Report it. Lodge a report with the National Anti-Scam Centre via Scamwatch, and report cybercrime through ReportCyber. Reports help disrupt the networks.
  6. Get free, genuine help. IDCARE, a government-funded service, can build a personalised response plan. It will never contact you out of the blue.

Recovery from a scam is real, but it comes through your bank, official complaints bodies like the Australian Financial Complaints Authority, and law enforcement — not through a stranger promising a miracle for a fee.

The Bottom Line

Crypto recovery scams turn a financial loss into a deeper wound by weaponising hope. If someone contacts you out of the blue claiming they can recover your lost crypto, the safest assumption is that they are trying to scam you again. Hang up, don't pay, and verify everything through official channels.

Sources