They target people who have already lost money — the cruelest target list in fraud and the easiest to assemble. Here is why no private company can return a confirmed crypto transfer, and the single line that ends every version of the pitch. Part of Know the Scam by SimpleSwap.
The worst day is not the day you lose the money. A few weeks later, someone contacts you and says they can get it back.
They know the amount. They know the platform. Sometimes they know the transaction hash. That accuracy is what makes the offer feel like rescue rather than another approach, and it has an unglamorous explanation: recovery operators monitor social media for people posting about losses, scrape public complaint databases, and buy victim lists, sometimes from the people who ran the original scam.
An attorney in the Federal Trade Commission’s Division of Marketing Practices put it plainly to AARP: what makes this so insidious is that they know these people have already been scammed, making them good targets. Some analysts expect recovery scams to be among the most significant frauds of 2026.
Why recovery does not work the way they claim
This is the part worth understanding properly, because it makes the rest of the article unnecessary.
A confirmed on-chain transaction cannot be reversed. Not by an exchange, not by a wallet provider, not by a swap service, not by a court, not by anybody. There is no undo function to unlock, no administrative override, no technical procedure that rewinds a settled transfer. Any service offering a “hack-back” or a guaranteed reversal is describing something that does not exist.
Private recovery companies have no power to seize or freeze anything. This is the structural point people miss. A private firm cannot compel an exchange to freeze an account or hand over funds. That authority belongs to law enforcement acting through legal process. A recovery agency claiming special access, government partnerships, or an inside track is claiming a power that no private entity holds.
Tracing is not recovery. Legitimate blockchain forensics firms exist and do real work, following funds across wallets and identifying where they landed. But tracing tells you where the money went. It does not bring it back. One realistic recovery path is when traced funds reach a regulated exchange, a valid legal request arrives, and the funds are still there.. That is a narrow path, usually pursued through law enforcement, and it is rare.
So the honest summary: real asset recovery is slow, uncertain, conducted through official channels, and never sold to you by someone who contacted you first.
The pitch and how it escalates
The approach usually wears a costume: a crypto law firm, an asset recovery bureau, a blockchain forensics company, a compensation fund, sometimes an exchange’s security team. Credentials are forged freely, including badges, case numbers, and employee IDs.
Then comes the advance fee, and it never stops at one.
The structure is designed to escalate. An initial retainer secures the case. Then funds are located, and a liquidity injection is needed to move them. Then a blockchain tax must be cleared. Then a wallet synchronization fee, a gas payment, a verification deposit, and a customs charge on the release. Each payment is framed as the last obstacle, and each one is made more likely by the money already spent.
Two requests deserve particular alarm. Any request for your recovery phrase, framed as connecting your wallet to a recovery system or verifying ownership, is theft in progress. And requests for your national identification or bank details, supposedly needed to deposit your refund, feed straight into identity fraud.
The regulators are unusually blunt about this
Consumer agencies normally hedge. On this subject, they do not.
The FTC’s guidance on refund and recovery scams boils the issue down to a single test: did someone contact you and ask for an upfront fee? That is a scammer. It adds that government agencies and legitimate organizations will never ask for money to help you get a refund, never ask for your financial account numbers, and never guarantee that you will get your money back.
It also lists the vocabulary to expect. Retainer fee, processing fee, administrative charge, tax, shipping, and handling charge. And it notes that insisting on payment specifically by cryptocurrency, gift card, or wire transfer is itself a red flag for fraud.
A consumer education specialist at the FTC described the current version to WISH-TV in August 2026: callers often know what kind of scam it is, claim to be from a federal agency, a consumer advocacy group, or a law firm, and increasingly use AI to look and sound legitimate. Her summary of the red flag is one sentence. Never pay an upfront fee to get a refund.
State regulators publish case-level warnings too. Washington’s Department of Financial Institutions issued an alert about a crypto recovery operation promising resolution in 24 to 48 hours, whose process could involve sending them your wallet file or hardware, or granting remote control of your computer, and whose stated California address corresponded to no business registered in that state. The DFI’s own assessment of the underlying premise is worth repeating: recovering cryptocurrency sent to scammers is very difficult, if not impossible, even with advanced blockchain analytics.
What to do instead
Stop paying immediately. No further fee will produce a different outcome. The sunk cost is exactly what the structure is built to exploit.
Tell the platform the transaction hash. If any part of the route touched an exchange, give them the order ID and hash. They cannot reverse anything, but a documented case has value that an undocumented one does not.
Secure everything. Change passwords, move remaining assets to a new wallet, revoke approvals. Assume your contact details are now on a list.
Say it out loud to someone. Shame is the mechanism that keeps victims isolated and makes the second approach effective. Telling one person breaks it.
Where we stand
This pattern attaches itself to recognizable names, so we will be specific rather than reassuring.
Two versions of this use our name directly. In the first, the message arrives dressed as help after a phishing attack: you were caught by a site imitating SimpleSwap, and the sender can recover what the clone stole. In the second, the claim is that a swap service is holding your funds and the sender can get them released. The second one borrows a real situation, which is what makes it work. A swap can be temporarily paused while a compliance review is completed, and someone waiting on that is exactly the person ready to believe an outside party can speed it up. No outside party can. A case under review moves through official support with your order ID, and anyone offering to unlock it for a fee is selling access nobody has.
We do not message you first. Not by DM, not by email, not by phone. If someone contacts you claiming to be SimpleSwap offering to recover funds, it is not us, regardless of what they know about your transaction.
We cannot reverse a confirmed transfer, and we will always tell you so. Anyone using our name to say otherwise is lying about something we ourselves say plainly.
We never ask for a recovery phrase. There is no support scenario, including a lost or misdirected transfer, in which we would need it.
Our support is accessed via an order ID and is available through live chat and the help center on our site.
For anyone checking whether SimpleSwap is legit, this is a more useful test than reviews: compare what a message claims against the four rules above. A crypto scam that borrows our name still has to break one of them.
What comes next
Every question above traces back to a scam with its own mechanics, and each one gets a full breakdown in “Know the Scam by SimpleSwap“. The whole series is in our Safety Academy, so the way to stay ahead of a pattern is to read it before it reaches you, not after.
This article is for educational purposes only and is not financial or legal advice. If you have lost funds, report it through official channels rather than paying a private service that contacted you. SimpleSwap’s only official domain is simpleswap.io.
Originally published at SimpleSwap.io
