Crypto Recovery Scams on Telegram: The Second Scam After a Loss

Losing money to a scam is bad. What often comes next is worse. Within days, sometimes hours, the victim starts getting messages from people who say they can recover the funds. A “blockchain forensics team”. An “ethical hacker”. A lawyer. A friendly stranger who “got his money back with these guys”.

Nearly all of them are scammers too, and they’re targeting you precisely because you’ve just lost money. This guide explains how recovery scams work on Telegram and what you can realistically do instead. If you’ve just lost funds, read the last section first. This is part of our guide to finding good crypto Telegram channels.

How they find you

Recovery scammers don’t need to hack anything to find victims. People announce themselves:

Posting in exchange or wallet groups: “I’ve been scammed, what can I do?”
Replying under scam warnings: “This happened to me last week.”
Commenting on investigation threads about a hack or rug pull.
Joining groups set up for victims of a specific scam, some of which are run by the scammers themselves.

The original scammers may also pass on or sell lists of people who paid them. Someone who sent money once is seen as likely to send again.

What the pitch sounds like

The details vary, but the structure is consistent:

Sympathy and credibility. “We’re sorry this happened. Our team has recovered funds for many clients.” They may mention blockchain analysis, police contacts, or a law firm.
Fake evidence. Screenshots of “recovered” balances, testimonials from accounts that all joined recently, a professional-looking website registered last month.
A diagnosis. They ask for your transaction hash, then tell you they’ve “traced” your funds to a wallet and can “freeze” or “reverse” them.
A fee. An upfront “service fee”, a “gas fee” to release funds, a “tax”, a “legal filing fee”, or a “verification deposit” to prove you own the wallet.
More fees. After the first payment there’s always another obstacle, and another fee.

Some variants ask for your seed phrase or remote access to your computer “to run the recovery tool”. That turns a past loss into a new one.

Why it can’t work the way they say

A few facts about how crypto works make most recovery pitches impossible:

Blockchain transactions can’t be reversed by an outsider. Once a transaction is confirmed, nobody, no hacker or “team”, can undo it.
Tracing isn’t recovery. It’s true that funds can often be traced on-chain. Investigators like ZachXBT publish where stolen money went after hacks. But knowing where funds are doesn’t give anyone the power to move them back.
Freezing requires a custodian. Stablecoin issuers and exchanges can sometimes freeze funds in accounts they control, usually in response to law enforcement. A private “recovery agent” can’t make them do it for a fee.
No legitimate service asks for your seed phrase. Ever.

When recovery does happen, it’s typically because law enforcement, an exchange or a stablecoin issuer acted, often over months, and without anyone charging the victim an upfront fee through Telegram.

Red flags in one list

They contacted you first.
They guarantee success or give a percentage chance.
They want payment upfront, in crypto.
They say your funds are “located” and only a fee stands between you and them.
They want your seed phrase, private key, or remote access.
Their testimonials come from new accounts, or their website is very new.
They claim to work with police or a government agency, but contact you through Telegram.
They push you to act fast before “the funds move again”.

What you can actually do after a loss

None of this guarantees you’ll get anything back. It does give you the best realistic chance, and it doesn’t cost you more money.

1. Secure what’s left. If you shared a seed phrase or signed something suspicious, move remaining funds to a brand-new wallet with a new seed phrase. Revoke token approvals using a block explorer’s approval checker. Change passwords and 2FA on any exchange accounts involved. On Telegram, check Settings → Privacy and Security → Active Sessions and end anything unfamiliar.

2. Collect evidence. Transaction hashes, wallet addresses, usernames of the people involved (the @username, not just the display name), screenshots of chats, website addresses, dates and times. Do it before chats are deleted.

3. Tell the exchange, if one is involved. If funds went to or came from an exchange account, report it through the exchange’s official support (from its website). Exchanges can sometimes freeze funds that arrive in accounts they control, and they need to know quickly.

4. Report to the police. Many countries have online fraud or cybercrime reporting portals. A police report is often required for an exchange or issuer to act, and it creates a record.

5. Report the accounts on Telegram. Open the scammer’s profile, use Report, and choose the closest reason. Do the same for any recovery scammers who contact you.

6. Be careful who you talk to. If you post about your loss, expect recovery offers. Ignore DMs. Get advice only from sources you’ve verified independently: your bank, the police, the exchange’s official support, or a lawyer you found yourself.

If you’ve already paid a recovery service

Stop paying. There will always be another fee. Add their details (usernames, wallet addresses, website) to your police report. Then go through the steps above, because if they had access to anything (a seed phrase, a remote session, an account login) you need to lock it down now.

Preventing the first loss

Recovery scams feed on earlier scams. The most common earlier ones on Telegram are fake admins and fake support, which we cover in the “admin will DM you” scam, and fake token addresses in group chats, covered in how to verify a token contract address. For anti-phishing and drainer warnings, the Scam Sniffer community is worth following, and the security category lists other hack and exploit alert channels.

Being scammed is not stupidity. These operations are built by people who do it full time. The one thing that reliably helps is a simple rule: nobody who contacts you first is going to get your money back.

Part of our series on crypto Telegram. Start with the overview: How to Find Good Crypto Telegram Channels (and Skip the Junk).