You lost money to a fake investment platform on Monday. By Thursday, a stranger replies under your angry post on X: "I was a victim too. A hacker on this page recovered my funds in 48 hours." You want to believe it, and that's exactly the point. This person is not rescuing you. They are the second scam.
Recovery fraud is built on one fact: people who have just lost money are desperate, embarrassed and willing to pay again. This guide explains how these schemes work, how to recognise them early, what a legitimate path looks like, and what to do if you've already paid one.
What a "recovery agent" scam actually is
A recovery scammer claims they can trace, hack back, or "reverse" stolen crypto for a fee. They may call themselves a blockchain forensic expert, a licensed asset retriever, an ethical hacker, or a law-firm partner. Some operate polished websites. Many just work from social media comments, Telegram and WhatsApp.
The business model is simple. They collect fees from many victims, deliver nothing, and keep inventing new reasons to ask for more. Often the original scammers and the "recovery" people are linked, or they buy lists of victims from each other. Even when they aren't linked, the result for you is the same: a bigger loss.
Why you can't "hack back" a crypto transfer
Understanding the mechanics protects you from the sales pitch.
- Blockchain transfers can't be reversed by a third party. There is no central office that cancels a transaction. If someone says they can "reverse" it, they are describing something the technology doesn't do.
- Tracing is real, but it is not recovery. Anyone can follow a transaction on a block explorer (see our guide to reading a transaction hash). Seeing where the money went doesn't give you the power to pull it back.
- Actual recovery happens through institutions. Where funds land at a regulated exchange, a court order or a law enforcement request can lead to a freeze. That route is slow, uncertain, and not something a stranger on Telegram controls.
So the honest answer to "can I get it back?" is: sometimes partially, through formal channels, and never guaranteed.
The warning signs, in the order you'll usually meet them
1. They contacted you first
Real professionals don't scan scam-complaint threads for customers. If a stranger replies to your public post, sends a direct message, or appears in a scam-victims group offering help, treat it as a scam until proven otherwise. A common variant is a "friend" in a support group who happens to know a miracle expert.
2. They ask for an upfront fee
The fee is often labelled "activation", "gas", "legal clearance", "tax", "verification" or "wallet unlock". Whatever the label, a payment before any result is the central red flag. Another version asks for a percentage "deposit" and promises the rest is paid from recovered funds.
3. They guarantee success or give a timeline
"100% recovery in 72 hours" is a sales line. Nobody honest can promise it, because recovery depends on where the funds went and on third parties.
4. They want access to your wallet
Some ask for your seed phrase, private key, exchange login, or to install remote-access software or connect your wallet to a "recovery portal". This is how victims lose what remained. Your seed phrase should never be typed anywhere or shared with anyone; our post on protecting your seed phrase covers why.
5. They show fake proof
Expect screenshots of "recovered" balances, edited chat testimonials, fake court letters, and certificates with official-looking logos. A screenshot proves nothing. Fake agency names and badges are cheap to make.
6. They claim government or police links they can't prove
Be wary of anyone saying they work "with the EFCC" or "with the SEC" but who communicates only through WhatsApp and asks you to pay into a personal account. Official bodies don't collect recovery fees into personal accounts or through private chat.
7. The fees keep changing
First it's a small amount, then "the funds are ready but a release fee is needed", then a "tax" to a supposed authority. Each payment is framed as the last one. It never is.
8. Pressure and secrecy
"Act now before the funds disappear" and "don't tell anyone, it will alert the hackers" are designed to stop you from asking a friend or checking independently.
A hypothetical example
Say Tunde lost ₦800,000 to a fake trading app. Two days later, a "recovery specialist" messages him. He asks for ₦60,000 as a "blockchain trace fee". Tunde pays. The specialist sends a believable-looking report, then says the funds are in a frozen wallet and a "court release fee" of ₦150,000 is needed. Tunde, now hoping to cover his earlier payment, pays again. Then comes a "tax clearance" of ₦200,000.
By the end, Tunde has lost an additional ₦410,000 on top of the original ₦800,000, a total of ₦1,210,000. The real danger isn't the first fee. It's the sunk-cost trap, where each payment feels like protecting the one before. The right moment to stop is the first request for money.
Real help versus recovery fraud
| Feature | Legitimate route | Recovery scam |
|---|---|---|
| Who starts contact | You do, after checking the organisation yourself | They message you unprompted |
| Fees | Clear, written, tied to real services; no "success" promises | Upfront, shifting, paid in crypto or to personal accounts |
| Promises | "We will assess; outcome is uncertain" | Guaranteed recovery, fixed timeline |
| Access needed | Transaction records and wallet addresses (public information) | Seed phrase, passwords, remote access |
| Identity | Verifiable business, office, regulated status | Anonymous handle, new social accounts, only messaging apps |
What you can do instead, step by step
- Stop sending money. To anyone claiming they can recover funds.
- Secure what remains. If you shared a seed phrase or connected a wallet, move any remaining funds to a brand-new wallet with a new seed phrase, created on a clean device. Change exchange passwords and enable app-based two-factor authentication. If you approved a suspicious contract, see how to revoke approvals.
- Collect evidence. Save wallet addresses, transaction hashes, chat exports, website URLs, payment receipts, and the names or handles used. Take screenshots with dates visible.
- Tell your bank or the exchange. If naira left your account, contact your bank quickly with the transaction details. If funds went through an exchange, send its support team the hash and the receiving address and ask them to review it. Speed matters, though no outcome is guaranteed.
- Report it formally. Our guide on reporting a crypto scam in Nigeria walks through the steps. The official homepages of the SEC Nigeria and the EFCC are where to find current contact and complaint channels. Use the contacts listed there, not numbers given by a "recovery agent".
- Report the recovery scammer too. Report the social media account, Telegram channel or website for impersonation or fraud. It won't get your money back, but it limits further victims.
How to vet anyone offering help
If you still want professional help, for example a lawyer to pursue a case, check these before any payment:
- Verify independently. Find the firm through an official directory or a referral from your bank or a lawyer you trust, not through the link they sent you.
- Ask for a written engagement letter. It should state scope, fees, and what is not guaranteed.
- Pay only to a company account matching the registered name. Never to a personal account, never in crypto.
- Check the company registration. Names on the public CAC register should match what they tell you.
- Be suspicious of any firm that is happy to work "no win, no fee" while also asking for an upfront "processing" cost.
Also expect an honest professional to tell you the odds may be poor. That candour is a good sign.
Protecting your mind as well as your wallet
Scam victims often feel shame, and shame keeps people quiet, which is when recovery scammers win. Tell one trusted person what happened. Ask them to read any message before you reply. Delete your phone number from public posts and set your social accounts to limit who can message you, since scam lists circulate. Treat any new "helper" in the first week after a loss as high risk.
Frequently asked questions
Can crypto ever be recovered after a scam?
Sometimes, but only in limited cases, such as when funds reach a regulated exchange that freezes them following a valid request. It's slow and uncertain. Nobody can promise it.
What if the recovery agent has a real-looking website and reviews?
Websites and reviews are easy to fake. Judge them by behaviour: unsolicited contact, upfront fees, guarantees, and requests for your seed phrase.
I already paid a recovery agent. What now?
Stop paying, keep all evidence, tell your bank if naira was involved, and report it. Don't pay further "release" fees to get the earlier ones back.
Is it a scam if the recovery service only asks for a fee after success?
That is a better structure than upfront payment, but still verify the company, get a written contract, and never share wallet access. Some scammers claim success-only fees and then invent a "final" payment.
Why do scammers target previous victims?
Because they've already shown they'll move money, and they're emotionally motivated to try again. That makes them easier to convince.
Your next step
Open a note on your phone today and write one rule: "I never pay anyone who contacts me first about recovering money." If you've been hit, start with the evidence checklist above and file a report through the official channels. Then share the rule with someone who trades or invests in crypto.
This article is for general information only and is not financial, legal, or tax advice. Prices, rates and rules change quickly, so check current details before making money decisions.