RECOVERY SCAMS · ANATOMY OF A CONJune 8, 20269 min read
Someone says they can get your lost money back. This is exactly what a recovery scam looks like — and why it works on people who already know better.
The cruelest fraud is the one that comes second. After you have lost money, a rescuer appears — an agent, a lawyer, an official — who has found your funds and only needs a small fee to release them. It is engineered for the exact moment you are most desperate to be made whole. Here is the real shape of that message, the fake badge they now send to prove themselves, and a step-by-step decode of why each part of it lands.
June 3
FTC warns of fake-agent ID 'verification' (2026)
$0
What a genuine agency charges to recover your money
Twice
Why recovery scams hunt people scammed once
$15.9B
Lost by US consumers to fraud in 2025 (FTC)
The short answer
A recovery scam is the second con — a fraud aimed at people who have already lost money once. Someone contacts you posing as an agency, a lawyer, or a "fund recovery" service, says your money has been found, and offers to return it. To seem real they may text a photo of an official ID or badge (a trick the FTC warned about on 3 June 2026), quote a case number, or show a "recoverable" balance. Then comes the catch: an upfront fee, a "release charge", your bank details, or remote access to your device. There is no recovered money — the fee is the whole scam. The one rule that defeats every version: no genuine authority ever cold-contacts you to recover funds, and none charges a fee to return money you lost. Below are recreated examples, then a beat-by-beat decode.
If you or someone you know has just lost money to a scam, this is the message to watch for next — and the most useful thing you can do is recognise its shape before it arrives, because it is built to bypass judgement at the exact moment judgement is hardest. Below is the real form of the opening contact, recreated.
The opening message of a recovery scam, recreated. The 'agent' offers your money back and texts a fabricated badge to prove it. The example is labelled and inert — no real number, agency contact, or ID.
What a recovery scam is
A recovery scam is a fraud that targets the victims of an earlier fraud. The criminal — sometimes the same operation that scammed you, sometimes one that bought your details — contacts you with the one thing you want most: your money back. They pose as someone with the authority to deliver it. A government agency. A lawyer or "asset recovery" firm. A crypto exchange's "security team". Even the police or a financial regulator.
The reason it spreads is the same reason it is so cruel. People who have just been scammed are, by definition, a pre-qualified audience: they have already shown they can be reached and persuaded, they are emotionally raw, and their contact details are now circulating on what the US Federal Trade Commission calls "sucker lists" — sold and re-sold among criminals. That is why a person scammed in one month frequently gets a "good news, we can recover your funds" contact in the next. In 2025 US consumers reported $15.9 billion in fraud losses to the FTC; the recovery scam is the machine that goes back for a second bite.
How to spot a recovery scam: five signs
Recovery scams share the same fingerprints, whatever uniform they wear. If a "we can get your money back" contact shows even two or three of these, treat it as a scam:
—It came to you. An unexpected call, text, or email offering to recover money — from someone you never hired and didn't contact first. The unsolicited offer is the tell.
—It already knows you were scammed. It leads with your loss as proof of legitimacy. But your details are on lists that criminals buy — knowing you were a victim proves nothing.
—It hands you proof you didn't ask for. A texted photo of an ID or badge, a case number, an official-looking email. All trivially faked — the FTC flagged the badge-photo trick on 3 June 2026.
—Your money has been “found”. A specific recoverable sum, ready to release. The number is bait, designed to make the fee feel small by comparison.
—At some point, you must pay. A fee, “tax”, “release charge”, your bank login, gift cards, crypto, or remote access. This is the scam, every time.
The one rule that beats every recovery scam: no legitimate authority ever cold-contacts you to recover lost money, and none charges an upfront fee to return it. Real refunds — through your bank, a regulator, or a court — are ones you start, and they never require a "release" payment. The moment a "recovery" contact asks you to pay or hand over access, stop. That request is the scam.
Anatomy of a recovery scam — decoded beat by beat
A recovery scam is a sequence, each step engineered to lower your guard for the next. Naming the move at each stage is what inoculates you — once you see the lever, you can't unsee it.
1The list — they already know you lost money
“We are contacting victims of the investment-platform case. Our records show $4,200 recoverable in your name.”
The lever — False authority + insider knowledge. Opening with your own loss feels like proof only an official could have. It isn't. Victim lists are bought and sold, so knowing you were scammed is the cheapest fact in the world to obtain. It lands because it arrives when you are still raw and want to believe someone is finally on your side.
The counter — Knowing you were a victim proves nothing about who's calling. Treat the fact that they 'know' as a warning sign, not a credential.
2The rescuer in uniform
“This is Agent R. Mercer, Federal Trade Commission, Division of Consumer Recovery.”
The lever — Authority + the desire to be rescued. A title does the persuading. We are conditioned to comply with officials, and a fresh victim desperately wants a competent rescuer to exist. The scammer simply becomes one. The more official the costume — FTC, FBI, a regulator — the less the claim gets questioned.
The counter — Government agencies do not phone individuals to hand their money back. The agency name is the disguise, not the proof.
3The proof theatre — a texted badge
“To verify my identity, here is my federal ID badge.” (an image arrives)
The lever — Manufactured credibility. It answers the exact question a wary person asks — 'how do I know you're real?' — with something that looks like an answer. On 3 June 2026 the FTC warned this is now a documented move: impersonators text a photo of a fabricated ID to win trust. A picture of a badge can be made in minutes.
The counter — Proof handed to you by someone who contacted you first is not proof. Real verification only runs the other way — the call you place, to a number you found.
The fake badge, close up. This is the kind of image the FTC warned scammers now text victims. Recreated and watermarked — not a real credential and not reusable as one.
4The recoverable sum
“Your funds are approved for release today — $4,200 back to your account.”
The lever — Hope + anchoring. A specific number you can almost touch reactivates the hope the first scam crushed. It also anchors the deal: against $4,200 'coming back', a $300 fee sounds like a rounding error rather than a fresh loss. The bigger the promised recovery, the smaller the fee is made to feel.
The counter — A number someone else controls is not your money. If recovery were real, no genuine process would make you pay to receive it.
5The fee to “release”
“A one-time $300 processing fee clears the transfer. Card or crypto?”
The lever — The sunk-cost reversal + irreversibility. Framed as the last small step to undo a big loss, paying feels like recovering money rather than losing more. Crypto, gift cards, and wires are requested because they're irreversible. The urgency — 'today' — exists to stop you pausing long enough to check.
The counter — This is the whole scam, in one line. No real authority charges a fee to return your money. The moment payment is requested, the answer is no.
6The escalation
“The transfer was held by compliance — one more clearance fee and it releases in full.”
The lever — Loss-chasing / the sunk-cost trap. Having paid once to recover a bigger sum, paying again to protect that payment feels rational. Each fee raises the stakes, so stopping feels like accepting a larger loss. The cycle runs until you run out of money or finally break it.
The counter — The first fee is the last decision that matters. There is no final payment that releases the money — there was never any money to release.
This is why the recovery scam is so dangerous. The first scam takes your money. The recovery scam takes what's left, plus the last of your trust — and it specifically preys on the shame that stops victims reporting. Being targeted twice is a pattern the criminals engineer, not a failing on your part. If a contact like this reached you, see exactly how the agency-impersonation version works in our breakdown of the fake-FTC-agent warning.
What to do
1Got the contact? Don't engage — every reply tells them you're reachable. If you want a second opinion, run the message through the Scam Checker first.
2Hold the one rule: no genuine authority cold-contacts you to recover money, and none charges a fee to return it. The instant a "recovery" contact wants a payment or your account access, it's a scam, full stop.
3Verify the only way that works: end the contact, find the agency's number on its official website yourself, and call to ask. Never use a number, link, or "case portal" the contact gave you.
4If you already paid, move fast on the money — contact your bank, card issuer, or crypto exchange and report fraud today; the fastest reversals happen within hours. Follow the 72-hour recovery playbook.
From the field. The recovery scam is the only fraud that needs you to have already been hurt. It doesn't sell greed — it sells repair, to people who just want to undo a loss and feel foolish for falling once. That shame is the real weapon: it isolates the victim, makes them reluctant to ask anyone, and makes a confident stranger with a badge feel safer than admitting it to family. You don't beat it by being harder to fool. You beat it by knowing, before the call ever comes, one fact that no costume changes: real help to recover money never arrives unbidden, and never asks you to pay to receive what's yours.
Someone says they can recover your money? Talk to us before you pay them.
Before you send a "release fee" to anyone, send us the message instead. A real expert reviews every case and replies within 24 hours — and our consultation exists for exactly this moment: a calm second opinion from someone who knows the playbook, before money moves. Free case review, confidential, no pressure.
A recovery scam is a second fraud aimed at someone who has already lost money to a first one. Someone contacts you — often posing as a government agency, a lawyer, a 'fund recovery' firm, or even the platform where you were scammed — and offers to get your lost money back. To seem real they may send a photo of an official ID or a badge, quote a case number, or show a 'recoverable' balance in your name. Then comes the catch: an upfront fee, a 'tax' or 'release charge', your bank details, or remote access to your device to 'process' the refund. There is no recovered money; the fee is the entire point. Victim contact lists are bought and sold among criminals, which is why a person scammed once is often targeted again within weeks.
What does a recovery scam look like?
It usually arrives as an unexpected call, text, or email weeks or months after a loss, from someone who already seems to know you were scammed. They present as an authority — an 'FTC agent', a 'recovery specialist', a lawyer, or the regulator — and lead with good news: your money has been found and can be returned. They offer proof you didn't ask for, such as a texted photo of an ID badge (a trick the FTC specifically warned about on 3 June 2026). The conversation always bends toward one thing: a payment or your account details to 'release' the funds. See the recreated examples in this article for the exact shape of the message and the fake badge.
Why do recovery scams ask for a fee to return your money?
Because the fee is the scam. The promise of a refund is the bait that gets a desperate, already-hurt victim to act, and the 'fee', 'tax', or 'release charge' is how the second loss is taken. No legitimate authority works this way: real agencies, courts, banks, and regulators never charge an upfront fee to return money you lost, and government bodies do not cold-contact individuals to recover funds at all. The moment a 'recovery' contact asks you to pay anything — or to hand over banking logins, gift cards, cryptocurrency, or remote access — the offer itself is the proof it is fake.
Is there any legitimate way to get scammed money back?
Yes, but it never starts with a stranger contacting you. The real routes are ones you initiate: report the fraud to your bank or card issuer as fast as possible (the fastest reversals happen within hours through the payment system), report to your national agency such as the FTC at ReportFraud.ftc.gov, and in some cases work with police or a genuine, regulated lawyer you found and vetted yourself. None of these charge an upfront 'release' fee, and none promise a guaranteed recovery. If you want the practical steps, our 72-hour recovery playbook lays them out by payment method.
Someone claiming to recover my money sent me a photo of their ID. Is it real?
Treat it as fake. On 3 June 2026 the FTC warned that scammers impersonating its staff now text victims a photo of an employee ID and badge to 'verify' themselves — all fabricated. A photograph of a credential can be lifted, edited, or invented in minutes, so proof handed to you by someone who contacted you first is not proof at all. Real verification only works one way: you end the contact, find the agency's official number yourself, and call to ask whether the person is genuine. A real official will never object to that; a scammer will pressure you not to.
Sources & further reading
Claims in this piece are attributed to these sources. Click any of them to verify.
