Who This Is For

If you suspect you've been scammed, gave away your seed phrase, approved a malicious transaction, or lost funds to fraud, this guide provides immediate action steps. Time is critical—the faster you act, the better chance of limiting damage (though recovery is usually not possible).

Immediate Actions (First 30 Minutes)

If you think you've been scammed, act immediately. Every minute counts.

Step 1: Stop All Further Transactions

Don't send more money:

• Scammers may contact you claiming they can "fix" the problem
• May ask for "verification fees" or "taxes" to release funds
• May create urgency: "Act now or lose access"

Any follow-up contact is part of the scam. Don't fall for it twice.

Step 2: Secure Your Accounts

If you gave away sensitive information:

Seed Phrase Compromised

If you shared your seed phrase:

1. Immediately create new wallet with new seed phrase
2. Transfer any remaining funds to new wallet
3. Don't use compromised wallet ever again
4. Scammer has full access to old wallet forever

Speed is everything. Scammers often drain wallets within minutes.

Password or Login Credentials Compromised

If you entered credentials on phishing site:

1. Change password immediately on legitimate site
2. Change passwords on any accounts using same password
3. Enable authenticator app 2FA if not already enabled
4. Review account activity for unauthorized changes
5. Check withdrawal/transaction history

Email Account Compromised

If scammer accessed your email:

1. Change email password from different device
2. Review and remove unknown devices/sessions
3. Check for forwarding rules (scammers set these up)
4. Review security questions and recovery options
5. Enable 2FA with authenticator app or hardware key

Step 3: Revoke Malicious Approvals

If you approved a contract interaction:

Many scams involve you approving a malicious smart contract that then has permission to spend your tokens.

Tools to revoke approvals:

• Revoke.cash: revoke.cash
• Etherscan Token Approvals: etherscan.io → Connect wallet → Token Approvals
• Approved.zone: approved.zone

Process:

1. Go to revoke tool
2. Connect affected wallet
3. See all active token approvals
4. Revoke any you don't recognize or all of them (costs gas fee per revocation)
5. Prioritize revoking approvals for tokens with remaining balances

This won't get stolen funds back, but prevents the scammer from taking more.

More info: Safe Transaction Habits

Step 4: Contact Your Exchange

If scam involved exchange account:

Contact exchange support immediately:

• Report unauthorized access
• Request account freeze
• Change passwords
• Review withdrawal addresses
• Cancel any pending withdrawals if possible

Note: Exchanges can't reverse completed withdrawals, but may freeze accounts or block new withdrawals.

Important: Contact support through official website only, not through email or DM (those could be more scammers).

Step 5: Check All Connected Accounts

Scammers often don't stop at one account:

Review:

• Other exchanges you use
• Bank accounts (if you provided banking info)
• Other wallets
• Email accounts
• Social media (scammers may hijack to scam your contacts)

Change passwords and enable 2FA on everything.

Document Everything

Even if recovery is unlikely, documentation is important:

What to Save

Transaction Details:

• Transaction IDs (hashes)
• Wallet addresses involved
• Amounts sent
• Timestamps
• Token types

Communications:

• Screenshot all messages with scammer
• Save emails (full headers)
• Screenshot social media posts/profiles
• Save URLs of fake websites
• Record phone numbers or usernames

Website Information:

• URL of phishing/scam site
• Screenshots of site
• Any email addresses or contact info provided
• Names of people/companies involved

How You Found the Scam:

• Where you saw the ad or link
• Who referred you
• How you were contacted

Save everything to multiple locations (computer, cloud, external drive).

Why Documentation Matters

Even if recovery doesn't happen:

• Helps law enforcement track patterns
• Needed for police reports
• Useful for warning others
• Required for any potential legal action
• May help with taxes (capital loss documentation)

Reporting the Scam

Report through multiple channels—even if you don't expect recovery.

1. Law Enforcement

United States

FBI Internet Crime Complaint Center (IC3):

• Website: ic3.gov
• File official complaint
• Provide all documentation
• Include crypto transaction details

Local Police:

• File report at local police department
• Bring printed documentation
• Get case number for records
• Expect limited action on individual cases

What to expect:

• Police rarely recover funds in crypto scams
• Reports help build larger cases
• May be useful for tax documentation
• Provides official record

Other Countries

Canada: Canadian Anti-Fraud Centre (antifraudcentre-centreantifraude.ca)

UK: Action Fraud (actionfraud.police.uk)

Australia: Scamwatch (scamwatch.gov.au)

EU: Report to national cybercrime unit

2. Federal Trade Commission (US)

• Website: reportfraud.ftc.gov
• Federal agency tracking fraud
• Data used for consumer protection
• No direct recovery assistance

3. Cryptocurrency Exchange/Platform

If scam involved an exchange:

• Report through official support ticket
• Provide transaction IDs and details
• Request account review
• Ask if withdrawal can be frozen (rarely possible)

If scam involved a fake version of legitimate platform:

• Report to real company
• Helps them take down fake sites
• May prevent others from being scammed

4. Report the Scam Website/Account

Phishing websites:

• Google Safe Browsing: safebrowsing.google.com/safebrowsing/report_phish/
• Report to domain registrar (lookup via whois)
• Report to web host

Social media scam accounts:

• Report to platform (Twitter, Facebook, Instagram, Discord, Telegram)
• Include screenshots and evidence
• Request account suspension

Fake apps:

• Report to app store (Apple App Store, Google Play)
• Request removal
• Leave warning review

5. Blockchain Analysis Firms

Some companies track stolen crypto:

Chainalysis: chainalysis.com CipherTrace: ciphertrace.com Elliptic: elliptic.co

What they do:

• Track movement of stolen funds
• Flag addresses for exchanges
• Assist law enforcement
• May help if funds move to tracked exchange

What they don't do:

• Recover funds directly
• Work on individual small cases
• Charge individuals (they work with institutions)

Your report may contribute to larger investigations.

6. Community Warnings

Help others avoid the same scam:

Post warnings on:

• Reddit (r/CryptoCurrency, r/CryptoScams)
• Twitter with #cryptoscam hashtag
• Relevant Discord/Telegram communities

Include:

• Scam website/person
• How the scam worked
• Warning to others
• Don't include personal details that identify you

Don't:

• Name potential suspects without proof (legal risk)
• Share others' personal information
• Attempt vigilante justice

What NOT to Do

DON'T Pay "Recovery Services"

Common scam after being scammed:

Someone contacts you:

• "I can recover your funds"
• "I'm a blockchain investigator"
• "Pay my fee and I'll trace your crypto"

Reality:

• These are scammers targeting scam victims
• They can't actually recover your funds
• They just want more money from you

Red flags:

• Contact you unsolicited
• Ask for upfront payment
• Promise guaranteed recovery
• Request payment in crypto
• Operate via Telegram/WhatsApp only

Legitimate recovery:

• Almost never happens for individual cases
• Law enforcement doesn't ask for payment
• Real lawyers don't guarantee results
• Professional services don't use Telegram

DON'T Try to "Hack Back"

Some victims consider:

• Tracking down the scammer
• Attempting counter-hack
• Threatening scammer

Problems:

• Likely illegal in your jurisdiction
• Won't recover funds
• May expose you to more risk
• Could face legal consequences yourself

Leave investigation to authorities.

DON'T Ignore Follow-Up Scam Attempts

Scammers often:

• Contact you as "support" offering help
• Pretend to be law enforcement
• Offer "insurance" or "recovery"
• Try romance angle after investment scam

Block and ignore all follow-up contact.

DON'T Post Scam Details in Scam Comments

Some scam posts/videos have comments from other "victims" who "got their money back" with help from "recovery expert @username."

These are fake comments from the scammers. They're trying to scam you again.

DON'T Wait and Hope

Some victims hope:

• "Maybe it's legitimate and I'll get my funds"
• "Maybe I misunderstood"
• "Maybe they'll return it"

If it's a scam, waiting only makes it worse:

• Scammer moves funds further
• Trail gets harder to follow
• More time for scammer to target others
• Can't undo damage of compromised accounts

Act immediately on suspicion.

Realistic Expectations

Recovery Likelihood

Honest assessment:

• 99%+ of crypto scams result in permanent loss
• Law enforcement has limited resources
• Crypto transactions are irreversible
• Scammers operate internationally
• Most scammers are never caught

The rare exceptions:

• Large-scale scams (millions of dollars, many victims)
• Scammer makes mistake (sends to tracked exchange)
• Scammer is within same jurisdiction as victim
• Major fraud operation with international cooperation

Your individual case is unlikely to result in recovery.

What Reporting Accomplishes

Even without recovery, reporting helps:

Builds data for law enforcement:

• Identifies scam patterns
• Connects related cases
• May lead to arrests in large operations

Helps others:

• Gets scam sites taken down
• Removes fake social media accounts
• Warns community

Personal documentation:

• Official record of loss
• May be useful for taxes (consult tax professional)
• Establishes timeline if legal action becomes possible

Psychological value:

• Feeling of taking action
• Contributing to prevention
• Moving forward

Tax Implications

Consult a tax professional, but generally:

United States:

• Scam losses may qualify as theft losses
• Requires documentation (police report helpful)
• Rules changed in recent years—get professional advice
• Not all losses are deductible

Other jurisdictions:

• Rules vary by country
• Professional advice needed

Don't assume losses are automatically deductible. Get proper tax advice.

Emotional Recovery

Being scammed is emotionally difficult:

Common Reactions

• Shame and embarrassment
• Anger at scammer and yourself
• Anxiety about financial impact
• Depression
• Loss of trust
• Obsessive thoughts about recovery

These are normal reactions to victimization.

Healthy Coping

Do:

• Talk to trusted friends or family
• Join victim support groups
• Focus on lessons learned
• Take steps to improve security
• Forgive yourself (scammers are professionals)
• Seek professional help if needed

Don't:

• Isolate yourself
• Make impulsive financial decisions to "recover losses"
• Fall for recovery scams
• Blame yourself excessively (scammers are skilled at manipulation)

Learn and Move Forward

Use experience to:

• Better understand security practices
• Recognize red flags
• Help others avoid scams
• Become more cautious but not paralyzed

Many people get scammed once and never again because they learned the signs.

Preventing Future Scams

After being scammed, implement better security:

Immediate Changes

• [ ] Use authenticator app or hardware key 2FA (not SMS)
• [ ] Use password manager with unique passwords
• [ ] Remove phone number from accounts where possible
• [ ] Enable withdrawal whitelisting on exchanges
• [ ] Bookmark official sites (don't use search/links)

Ongoing Practices

• [ ] Never share seed phrase with anyone
• [ ] Verify URLs before entering information
• [ ] Ignore unsolicited contact about crypto
• [ ] Test small amounts before large transfers
• [ ] Question anything that sounds too good to be true
• [ ] Take time with transactions (urgency is red flag)
• [ ] Learn about common scams

More guidance:

• Common Crypto Scams: How to Avoid Them
• Phishing and Fake Support
• Two-Factor Authentication Guide

Scam Victim Action Checklist

Immediate (First Hour)

• [ ] Stop all further transactions
• [ ] Create new wallet if seed phrase compromised
• [ ] Transfer remaining funds to secure wallet
• [ ] Change all passwords
• [ ] Enable/upgrade 2FA to authenticator app or hardware key
• [ ] Revoke malicious contract approvals
• [ ] Contact exchange if account compromised
• [ ] Check all connected accounts

Documentation (First Day)

• [ ] Screenshot all communications with scammer
• [ ] Save transaction IDs and addresses
• [ ] Document timeline of events
• [ ] Save URLs and website screenshots
• [ ] Record how you encountered the scam

Reporting (First Week)

• [ ] File IC3 report (or equivalent for your country)
• [ ] File police report
• [ ] Report to FTC (or equivalent)
• [ ] Report to relevant platforms (exchange, social media)
• [ ] Report phishing sites to Google Safe Browsing
• [ ] Warn community (Reddit, Twitter, forums)

Recovery and Prevention (Ongoing)

• [ ] Implement stronger security practices
• [ ] Consult tax professional about reporting
• [ ] Join support community if needed
• [ ] Learn about scam red flags
• [ ] Help others recognize scams
• [ ] Move forward with lessons learned

Key Takeaways

• Act immediately—every minute counts for damage control
• Secure remaining assets before attempting recovery
• Document everything even if recovery unlikely
• Report through multiple channels
• Avoid "recovery service" follow-up scams
• Recovery is rare—focus on prevention going forward
• Don't blame yourself—scammers are professional criminals
• Use experience to improve security and help others

Remember: Being scammed doesn't mean you're stupid. It means you encountered a criminal who specializes in manipulation. Learn from it, improve your security, and move forward.

Further Reading

• Common Crypto Scams: How to Avoid Them
• Phishing and Fake Support
• SIM Swaps and Account Takeovers
• Safe Transaction Habits