A recovery scam targets people who have already lost money to a scam, with a false promise to get their funds back for an upfront fee, sometimes posing as law enforcement, a regulator, or a specialist recovery firm. It re-victimizes known victims, whose contact details often circulate on scammer lists, and legitimate authorities never charge people to recover their money.
What is a recovery scam, in plain English?
A recovery scam is a second strike on someone who has already been defrauded. The victim of an earlier scam is contacted by someone claiming they can retrieve the lost money: a recovery agent, a fund-recovery firm, a lawyer, or even a police officer or regulator. The catch is the same advance-fee trick, an upfront payment for taxes, legal costs, or a processing fee, before the supposed recovery can happen.
The people running these scams often already know the victim was scammed, because victim contact lists are traded among fraudsters. That knowledge makes the approach feel credible: they may reference the exact scam, the amount lost, and the platform involved. Some pose as officials handling the case, which adds pressure and authority to the request for a fee.
In the fraud stack, a recovery scam is an advance-fee fraud layered on top of a prior loss. It is uniquely cruel because it exploits the victim's hope of getting whole again, and it frequently follows investment scams, romance baiting, and pig butchering, where losses are large and victims are desperate for a way back.
How a recovery scam unfolds
- Target — Find a known victim. The scammer uses traded victim lists to reach someone who recently lost money to a scam.
- Pose — Claim they can help. They present as a recovery firm, lawyer, regulator, or police officer able to retrieve the funds.
- Charge — Demand an upfront fee. A payment for taxes, legal costs, or processing is required before any recovery can proceed.
- Repeat — Extract and vanish. More fees follow, no money is ever returned, and the victim loses again on top of the original loss.
What it looks like in practice
In practice
Months after losing savings to a fake crypto platform, a customer is contacted by someone claiming to be from a fund-recovery unit. The caller knows the platform name and roughly how much was lost, which makes them seem legitimate, and says the funds have been traced and can be released once a small legal fee and tax are paid.
Relieved and hopeful, the customer pays. Then a further clearance fee is requested, then a wallet-unlock charge. The pattern mirrors the original scam: escalating advance fees for a recovery that never comes. The fraud team sees a previously scammed customer now sending fresh payments to new recipients.
Why it matters for operators
Recovery scams turn a resolved loss into a repeat loss, and they hit customers when they are most vulnerable. A powerful operational signal is history: a customer who recently reported a scam is a prime target for a recovery approach, so flagging follow-on payments from known victims, especially to new recipients described as recovery agents or officials, catches the second hit before it lands.
The clearest rule to share with customers is that legitimate authorities and genuine recovery routes do not demand upfront fees. Any request to pay in order to get your money back is itself the scam. Because these approaches lean on impersonation of police, regulators, and agencies, teams should reinforce that real bodies do not charge victims and can be verified independently through official channels.
What to watch for
- Prior scam on file. A customer who recently reported a loss is the classic recovery-scam target; treat new outbound payments with extra scrutiny.
- Unsolicited recovery offers. Out-of-the-blue contact promising to retrieve lost funds is a defining red flag.
- Upfront fees. Any demand for taxes, legal costs, or processing charges before recovery is the advance-fee tell.
- Impersonated authority. Callers posing as police, regulators, or agencies handling the case to add pressure and legitimacy.
- Requests for more access. Asks for additional account details or credentials on top of a fee compound the harm.
Quick questions
Why are scam victims targeted again?
Their details circulate on lists traded among fraudsters, marking them as people who already lost money and may be desperate to recover it. That desperation and the scammer's inside knowledge make the recovery approach convincing.
How can a victim tell a recovery offer is fake?
The clearest sign is an upfront fee. Legitimate authorities do not charge victims to recover funds, so any demand to pay taxes, legal costs, or processing charges before getting money back confirms the scam.
Do real recovery services exist?
Legitimate routes usually run through banks, card schemes, law enforcement, and regulators, which do not cold-call victims demanding upfront payment. Genuine help can be verified independently through official channels rather than a number the caller provides.
Why do scammers pose as police or regulators?
Authority adds credibility and pressure. If the victim believes an official body is handling their case, they are more likely to comply with a fee request and less likely to question it.
What is the connection to the original scam?
Recovery scams often follow investment scams, romance baiting, and pig butchering, sometimes run by the same networks. The prior loss is the entry point, and the recovery promise is a way to extract more.
How should a team respond?
Flag follow-on payments from recently scammed customers, pause and question any payment to a recovery agent or official, and reinforce that no legitimate recovery requires an upfront fee. Direct victims to verified official channels.
Go deeper
- FTC Consumer Advice: Scams ↗ — US consumer guidance on current scams and fraud, and how to report them.
- FBI IC3 ↗ — The FBI Internet Crime Complaint Center. Fraud reporting and annual trend reports.