Active Incident? 24/7 Response →
SleuthX

Beware of recovery scams

No legitimate service can guarantee it will get your money or account back for an up-front fee.

The FBI warns that “recovery scheme fraudsters charge an up-front fee and either cease communication with the victim after receiving an initial deposit or produce an incomplete or inaccurate tracing report and request additional fees to recover funds.” These schemes deliberately target people who have already been scammed once. Never pay an up-front feeto a company that contacts you promising to recover lost funds, accounts, or cryptocurrency — especially if they ask for payment in gift cards, wire transfer, or cryptocurrency. FBI sources: IC3 Public Service Announcement I-081123-PSA · FBI San Diego — Seizes Cryptocurrency Recovery Websites

Scam & Fraud Recovery

Scam & Fraud Recovery Help

If you were just scammed, start here. Honest answers about what's recoverable, the free reporting steps to take today, and how to avoid the recovery scam that targets victims a second time.

Self-serve forensic tool

Run the AI forensic agent yourself — every tool unlocked, no subscription. $995 once — lifetime license.

Start in the app

Being scammed is disorienting, and the next thing that happens is often a second scam: someone contacts you claiming they can get the money back for an up-front fee.

The FBI warns that these “recovery” operations deliberately target people who have already been defrauded.

The honest version of recovery help is less dramatic — report it for free, move fast with your bank, preserve evidence, and get a realistic read on what can actually be done.

This page is the map.

First: report it for free (do this today)

These channels are free, run by the U.S. government, and the reason a later investigation or bank claim has anything to stand on.

File them before you do anything else:

The honest part: what recovery really looks like

No legitimate service can guarantee it will get your money or account back for an up-front fee.

Recovery is genuinely possible in narrow circumstances — usually when regulated U.S. institutions were involved and can be reached within roughly 72 hours, before funds are withdrawn.

Crypto sent to an unknown attacker is generally final: industry tracing finds that only on the order of ~$1 is recovered for every ~$65 stolen.

A trustworthy investigator tells you that up front instead of selling a doomed effort.

Where the money went: tracing by payment rail

Every payment rail keeps records, and every rail has its own recovery mechanics and deadlines.

The short honest version, rail by rail — the full deadlines, odds, and exact first calls live in can you get scammed money back:

Evidence that gets reports and disputes taken seriously

Banks, card networks, and police all act on the same thing: a clear, dated, complete record.

Before anything disappears, preserve the full conversations, payment identifiers, and account or wallet addresses — then package them once and reuse the package everywhere.

How to report digital evidence to law enforcement covers the reporting hierarchy and what a police report needs; the deception-dispute evidence checklist covers what wins with a bank or card issuer.

Find the guide for your situation

Each guide leads with the same FBI warning and sticks to verified facts.

Tracing the money & getting it back

Crypto & investment scams

Elder fraud & impersonation

Wire, payment & romance fraud

When a forensic investigator can help

If the loss was large, the case is going to court, the victim is elderly or vulnerable, or an attacker keeps getting back in, a credentialed digital-forensics examiner can preserve court-admissible evidence, trace attribution where possible, and support a filing.

SleuthX works these cases by loss type:

There is no charge to ask, and a reputable investigator will tell you honestly when the free rails above are all you need — and when they are not.

If a guide above fits your situation, read it first; it will tell you exactly what to preserve and who to call.

Primary sources

  1. FBI Internet Crime Complaint Center (IC3), Public Service Announcement I-081123-PSA — fraudulent recovery schemes targeting scam victims, 2023. https://www.ic3.gov/PSA/2023/PSA230811
  2. FBI San Diego Field Office, FBI San Diego — Seizes Cryptocurrency Recovery Websites. https://www.fbi.gov/contact-us/field-offices/sandiego/news/fbi-san-diego-seizes-cryptocurrency-recovery-websites
  3. FBI Internet Crime Complaint Center (IC3), 2024 Internet Crime Report, 2024. https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf
  4. U.S. Federal Trade Commission, Consumer Sentinel Network Data Book 2024. https://www.ftc.gov/reports/consumer-sentinel-network-data-book-2024
  5. U.S. Federal Trade Commission — Consumer Advice, How To Recover Your Hacked Email or Social Media Account. https://consumer.ftc.gov/articles/how-recover-your-hacked-email-or-social-media-account
  6. Consumer Financial Protection Bureau, Regulation E §1005.6 / §1005.11 — unauthorized-transfer liability and error resolution. https://www.consumerfinance.gov/rules-policy/regulations/1005/6/
  7. Consumer Financial Protection Bureau, Regulation Z §1026.13 — credit-card billing-error resolution (FCBA). https://www.consumerfinance.gov/rules-policy/regulations/1026/13/
  8. Zelle / Early Warning Services, Report a scam — Zelle's imposter-scam reimbursement policy. https://www.zelle.com/support/report-scam

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 9 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Certified Expertise

GIAC

Scam recovery: quick answers

Can a service guarantee it will get my scammed money back?
No. The FBI is explicit that no legitimate service can guarantee recovery for an up-front fee, and it has seized websites that posed as crypto-recovery firms to scam victims a second time. Anyone who contacts you out of the blue promising to recover funds — especially if they ask for payment in gift cards, wire, or cryptocurrency — is running a recovery scam. Honest help starts with the free government reporting channels and a realistic read of what is recoverable in your specific situation.
What should I do first after being scammed?
Stop sending money and stop talking to the scammer. Then file free reports: the FBI's Internet Crime Complaint Center at ic3.gov, the FTC at reportfraud.ftc.gov, and — if your identity was used — IdentityTheft.gov. If money moved by bank wire, Zelle, or card, call your bank's fraud department the same day; some claim windows start ticking on the transaction date. Preserve everything (messages, receipts, wallet addresses, phone numbers) before you delete anything.
Is it worth hiring a forensic investigator?
Sometimes. A forensic investigator can preserve court-admissible evidence, trace digital infrastructure for attribution, and support a civil or criminal filing — but a reputable one will tell you honestly when recovery is unlikely rather than charge for a doomed effort. For many victims the free reporting rails and a bank claim are the right first (and sometimes only) steps. Read the guide that matches your scam type below before deciding.

Self-serve forensic tool

Want professional help with recovering from a scam?

$995 once — lifetime license

Run the AI forensic agent yourself — every tool unlocked, no subscription.

Quinnlan Varcoe, Founder & CEO
Quinnlan Varcoe
GIAC-certified · Founder & CEO

Schedule Your Session

Schedule a confidential consultation

A direct conversation with Quinn, the founder and CEO who oversees every engagement. NDA-protected. No sales process. Most engagements begin within 48 hours.

Free, confidential · NDA-protected · no obligation.

  1. 1. Book a 15-minute call — we scope your situation, no charge.
  2. 2. You get a written scope — deliverables, timeline, and price — before any work begins.
  3. 3. Approve it and we start; most engagements begin within 48 hours.

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management