Fraud prevention

Pay to recover your crypto? Pause before sending more

Recognize an unsolicited recovery-fee demand and prepare an evidence record without exposing keys or paying a second loss.
A hidden fishing hook behind a lifebuoy over water
Conceptual illustration, not a record of a real transaction or systemCoinFom · AI-generated illustration with OpenAI

At a glance

An unsolicited promise to recover lost crypto in exchange for an upfront payment is a serious scam warning. Verify help independently, preserve transaction evidence and contact the relevant provider or local authorities; no recovery is guaranteed.

On this page

After a loss, a message claiming to have found your funds can feel like progress. A displayed balance, legal-looking document or confident promise is not evidence that the sender controls recoverable money. The next requested payment may be another loss.

Identify the second-payment demand

The FTC's recovery-scam guidance warns about unsolicited recovery offers that demand upfront money or sensitive information. A demand may be described as a release charge, tax or administrative fee. The label does not authenticate the sender.

This warning concerns suspicious recovery solicitations, not a claim that every legitimate professional service is free. Verify any provider and engagement independently, using contact information you locate yourself rather than a number supplied in the message.

An original hypothetical message analysis

Suppose a stranger claims they recovered 2,000 USDT and asks you to send 100 USDT to unlock it. Then they request another 200 for clearance. The arithmetic you can verify is 300 USDT of additional payments requested. The claimed 2,000 is not an asset you have established control over.

Claim or requestWhat it fails to prove
Screenshot of a recovered balanceOwnership or withdrawability
Official-looking logoAuthentic affiliation
Deadline to payA legitimate obligation
Request for a recovery phraseA safe support procedure

Do not “test” the offer by sending a smaller amount. That only establishes that you can pay the requester.

Preserve an evidence packet

Keep transaction hashes, network, amounts, timestamps, public recipient addresses, messages and the website address. Preserve them privately; do not post personal documents, secrets or authentication codes. Stop sharing remote access and contact the actual payment provider or exchange through a verified route promptly.

The FTC's response guide distinguishes actions by payment method and warns about the difficulty of reversing cryptocurrency payments. Reporting channels depend on your country; the FTC is a US resource, not a universal recovery service. Contact appropriate local authorities where relevant.

Separate account safety from recovery

If a password, device or recovery phrase was exposed, address that compromise separately. Recovering login access does not reverse transfers. Avoid publishing your full evidence packet to strangers offering help: it can create new impersonation opportunities.

Our wallet recovery map explains which access layer may be affected. CoinFom cannot retrieve lost funds, freeze another platform's account or guarantee a refund.

CoinFom editorial note: research, writing, translation and review used AI assistance. No live transaction was performed for this article. Numerical examples are hypothetical and do not demonstrate returns. Sources checked September 26–27, 2026. Educational content, not personalized advice. See About CoinFom, our editorial and affiliate policy, or send a correction. CoinFom may earn referral commissions on other pages; this article contains no signup link.

All articles ↗