If you have already lost money to a forex or crypto scam, there is a hard truth you need to hear before anyone calls you. The people most likely to contact you next are not investigators, not regulators, and not a benevolent law firm that stumbled across your case. They are very often the same network that took your money the first time, or an affiliate who bought your details from them. This is the second wave, and in the recovery industry it has a name: the recovery scam.
The mechanics are simple and cruel. A victim who has lost CHF 40'000 to a fake broker is far more motivated than a cold lead, and far more willing to pay to undo the damage. The original fraud network knows exactly how much you lost, when, and through which platform, because they have the records. Selling you a second story is cheaper than finding a new target. This article explains how the second scam works, how to recognise a fake recovery agent, and what a legitimate firm will never do.
How the recovery scam actually works
A typical scheme begins with an unsolicited contact. You receive a cold call, a WhatsApp message, or an email from someone presenting themselves as a recovery specialist, a blockchain forensic expert, a representative of a regulator, or even an officer of a court. They reference details only an insider would know. That specificity is the hook. It feels like proof, but it is simply the original fraudster reading from your file.
Then comes the promise. They claim your funds have been located, frozen, or earmarked for release. There is usually a deadline and a reason for urgency. To unlock the money, you are asked to pay something first: a fee, a tax, a clearance charge, an anti-money-laundering deposit, a wallet activation cost, or a percentage paid in crypto to a wallet they control. This is the defining feature. It is classic advance fee fraud dressed in the language of recovery. The moment you pay, the goalposts move. A new obstacle appears, requiring a new payment, until you stop.
Some versions are more elaborate. The scammer may show you a fake dashboard displaying your recovered balance, send a forged court order or a counterfeit letter on a regulator's letterhead, or impersonate FINMA, BaFin, the FCA, or CySEC. No genuine regulator cold-calls victims to arrange a payout, and none asks for money to release your own funds.
Red flags that signal a fake recovery agent
- They contacted you first. Legitimate recovery counsel is engaged by you. A firm that finds you through an unsolicited call or message, especially one that already knows your loss, should be treated as hostile until proven otherwise.
- They demand an upfront fee to release funds. Releasing money never requires you to send money. Taxes, clearance fees, and activation deposits paid to a third party are fiction.
- They ask for payment in crypto or to a personal wallet. Traceability is the enemy of a scammer. A request for USDT, BTC, gift cards, or transfers to a private individual is a clear signal.
- They guarantee recovery. No honest lawyer guarantees an outcome. Recovery depends on where the money went, whether it can be traced, and whether a counterparty is solvent and within reach of a court.
- They want remote access to your device or wallet. No legitimate professional needs AnyDesk, TeamViewer, or your seed phrase to assess a claim.
- They impersonate a regulator or court. Verify any such claim independently using contact details from the official website, never the number the caller gives you.
- They pressure you with deadlines. Urgency exists to stop you checking. Real legal work moves at the speed of courts and banks, not the speed of a sales script.
What a legitimate law firm actually does
Real fund recovery is unglamorous and evidence-driven. It does not begin with a promise. It begins with an assessment of what happened and whether a viable route exists. Understanding that route is the best defence against the second scam, because a fake agent cannot describe it credibly.
If you paid a fraudulent broker by card, a real adviser will look at whether a chargeback is still in time and which reason code applies. Disputes for goods or services not provided, or for processing errors, run under Visa reason code 13.5 and the older Mastercard codes such as 4837 (no cardholder authorisation) and 4863 (questionable merchant activity). These are concrete, rule-bound mechanisms with strict deadlines, not a magic refund.
If your money moved on-chain, the work is blockchain tracing. We follow the funds across wallets using clustering analysis, identify where they entered a regulated exchange, and then pursue KYC unmasking through legal channels to attach a real identity to a deposit address. Where a counterparty can be identified, civil tools come into play: a Norwich Pharmacal disclosure order to compel a third party to reveal who is behind an account, an Arrest under SchKG Art. 271 to freeze Swiss-held assets, or a European Account Preservation Order across the EU. The underlying conduct may also engage StGB Art. 146 (fraud) and support a criminal complaint, or a regulatory complaint to CySEC, BaFin, or the FCA against a licensed entity.
You can read more about these routes on our pages covering forex fund recovery and crypto tracing and asset identification, and about how a contested claim proceeds through cross-border litigation.
How to tell a real firm from a recovery scam
A genuine firm can be checked. It has a registered name and a physical office, lawyers admitted to a recognised bar, and a transparent fee structure set out in a written engagement letter (an Auftrag or Mandatsvertrag) before any work begins. It will explain the risks honestly, including the real possibility that funds cannot be recovered, and it will never ask you to pay a third party to release your own money. Fees are billed to the firm under a clear mandate, not wired to a wallet to unlock a balance.
If you are unsure about a caller, do three things. Stop the conversation. Verify the firm independently through the relevant bar register and its official website. Then make contact yourself through a channel you found, not one you were given. Our step-by-step process shows what a real engagement looks like from first review to filing.
If you have already been hit twice
Many people who reach us have paid a recovery scam on top of the original loss. There is no shame in it. These operations are professionally designed to exploit exactly the moment when you are most distressed and most hopeful. Keep every message, receipt, wallet address, and transaction hash. That evidence can sometimes help trace the second payment as well, and at minimum it supports a criminal complaint.
Disclaimer: This article is general information and not legal advice. Every case turns on its own facts, outcomes vary, and no recovery can be guaranteed. For a confidential assessment of your situation, please contact our team.
