Back to Guides

What to Do If You've Been Scammed — A Step-by-Step Action Plan

Updated March 2026

If you're reading this, you've likely just realized you've been scammed with cryptocurrency. Take a deep breath. You're not alone — crypto fraud affects thousands of people every week. What you do in the next few hours and days can make a real difference in whether your funds are recoverable. Here is your action plan.

The First 24 Hours (Critical)

The window for freezing stolen funds is narrow. Scammers routinely move cryptocurrency through multiple wallets within hours and cash out at exchanges. Every minute counts. Work through these steps as quickly as possible.

1

Stop all communication with the scammer

Do not reply to any more messages, calls, or emails. Block them on every platform. Continued engagement gives scammers opportunities to manipulate you further or extract additional funds. There is nothing they can say that will help you — anything they offer at this point is part of the scam.

2

Do NOT send more money

This is the single most important rule. Scammers will fabricate reasons you need to send more: “tax fees,” “unlock charges,” “withdrawal processing costs,” “insurance deposits.” These are all lies. Legitimate platforms never require additional payments to release your own funds. Every additional payment is money lost.

3

Document everything

Before websites disappear and chat histories are deleted, save every piece of evidence. Take full-page screenshots of conversations, emails, the scammer's website, social media profiles, and any documents they sent you. Copy all wallet addresses and transaction hashes (TXIDs) — you can find these in your exchange account history or wallet app. Write down a timeline of events while details are fresh: when you first made contact, what was promised, and every payment you made.

4

Secure your accounts

Change passwords on all cryptocurrency exchanges and email accounts immediately. Enable two-factor authentication (2FA) everywhere — use an authenticator app, not SMS. Revoke any API keys or active sessions. If there is any chance the scammer has your seed phrase or private keys, move remaining funds to a completely new wallet immediately.

5

Contact your bank or exchange

If the transaction is recent, contact your exchange's fraud or support team right away. Major exchanges like Coinbase, Binance, and Kraken have compliance departments that can flag destination addresses and freeze incoming funds. If you funded the transaction with a bank transfer or credit card, contact your bank — chargebacks and wire recalls are sometimes possible if you act within hours.

Time-Sensitive: The 24-72 Hour Window

Research shows that the best chance of freezing stolen crypto is within 24 to 72 hours of the transaction. After that, funds are typically moved through mixers, split across dozens of wallets, or cashed out at exchanges. Acting immediately is not optional — it is the difference between recovery being possible and being nearly impossible.

The First Week

Once you have secured your accounts and documented the evidence, the next steps are about building an official record and starting the tracing process.

1

File a police report

Even if you believe local police will not investigate, file a report anyway. You need the official case reference number. It is required by exchanges to process freeze requests, by insurance companies for claims, and by attorneys for legal proceedings. Without a police report number, most institutions will not take action on your behalf.

2

Report to your country's cybercrime unit

In the United States, file with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. In the United Kingdom, report to Action Fraud. In Germany, file with the Zentrale Stelle Cybercrime of your state's prosecutor's office. European victims should also consider Europol's European Cybercrime Centre. These agencies aggregate reports to identify large-scale operations — your individual report contributes to the bigger picture.

3

Get a blockchain analysis of the scam address

Blockchain transactions are public and permanent. A professional trace can follow exactly where your funds went — through intermediate wallets, across chains, and into exchange deposit addresses. This evidence is what exchanges and law enforcement need to take action. Start a free investigation on ChainEvidence to trace the scam address and generate an evidence report.

4

Check scam databases for the same address

Search the scammer's wallet address on databases like ChainAbuse, Bitcoin Abuse, and ScamAlert. If others have reported the same address, it strengthens your case and may connect you with a broader investigation. Report the address on these platforms as well — every report helps warn future victims.

5

Consider consulting a crypto fraud attorney

For losses above a few thousand dollars, a solicitor or attorney specializing in cryptocurrency fraud can advise on civil remedies: asset freezing orders, Norwich Pharmacal orders (compelling exchanges to reveal account holder identities), and proprietary injunctions. Many work on contingency or partial contingency for strong cases. The evidence you have assembled — blockchain traces, communications, police report — forms the foundation of any legal claim.

Why Blockchain Evidence Matters

Unlike cash, cryptocurrency transactions leave a permanent, public trail. Every Bitcoin and Ethereum transaction is recorded on the blockchain and visible to anyone. This is a significant advantage for fraud victims. Here is why blockchain evidence is central to any recovery effort:

  • Transactions are traceable. Every transfer from your wallet to the scammer's address, and every subsequent hop, is permanently recorded. Professional tracing tools follow the money through intermediate wallets, peel chains, and cross-chain swaps.
  • Exchanges have KYC requirements. When stolen funds arrive at a regulated exchange, that exchange knows the identity of the account holder. With proper evidence and a law enforcement request, they can freeze the account and disclose information to investigators.
  • Funds CAN be frozen. Major exchanges including Coinbase, Binance, Kraken, and OKX have compliance teams that process freeze requests daily. A well-documented request with blockchain evidence, a police report number, and a clear transaction trail has a real chance of success.
  • Speed is everything. The window is 24 to 72 hours for the best results. After that, scammers typically cash out or move funds through mixing services that make tracing significantly harder. The sooner you have blockchain evidence in hand, the sooner exchanges and law enforcement can act.

Trace Your Stolen Funds

ChainEvidence automatically follows the flow of your stolen cryptocurrency, identifies exchange deposit addresses, checks scam databases, and generates a professional evidence report ready for law enforcement and legal proceedings. The initial scan is free.

Start Free Investigation

Common Recovery Scams to Avoid

After being scammed, you are a target all over again. Scammers monitor social media, forums, and scam reporting sites for victims, then approach them posing as recovery specialists. This is called a “recovery scam” or “advance fee fraud,” and it is devastatingly common. Be on high alert for the following red flags:

!“Recovery agents” who demand upfront fees. Anyone who promises to get your money back in exchange for a fee paid first is running a scam. They will take your money and disappear. No legitimate recovery service charges thousands of dollars before producing any results.
!“Certified blockchain recovery experts” on social media. There is no such certification. Accounts on Instagram, Twitter, Telegram, or Reddit claiming to recover funds through “advanced blockchain techniques” are scammers. They fabricate testimonials and fake success stories.
!Anyone who asks for your private keys or seed phrase. No legitimate service, law enforcement agency, exchange, or attorney will ever ask for your private keys or recovery phrase. If someone asks, they are trying to steal your remaining funds.
!Companies that guarantee recovery. Cryptocurrency recovery is uncertain by nature. Anyone who guarantees they will get your money back is lying. Legitimate blockchain analysis firms provide evidence and tracing — they do not promise outcomes because outcomes depend on factors like speed, jurisdiction, and whether funds have been cashed out.
!Unsolicited contact after you post about being scammed. If you mention your situation on Reddit, Twitter, or a forum and someone reaches out with a “solution,” treat it as a scam until proven otherwise. Legitimate professionals do not trawl social media for clients.

Legitimate services like ChainEvidence provide evidence reports based on blockchain data. We never promise recovery, never ask for wallet access, and never charge thousands upfront. See our transparent pricing.

Realistic Expectations About Recovery

Honesty matters, especially when you are in a vulnerable position. Here is what actually determines whether stolen cryptocurrency can be recovered:

  • Speed of action. Victims who act within 24 hours have the highest chance of funds being frozen. After 72 hours, the probability drops significantly as funds are moved through multiple hops or laundered.
  • Where the funds ended up. If stolen crypto was deposited at a major, regulated exchange (Coinbase, Binance, Kraken), there is a genuine chance of freezing. If it went through a mixer, to a decentralized exchange, or to an unregulated offshore platform, recovery is much harder.
  • Quality of evidence. Exchanges and law enforcement are far more likely to act on a request backed by a blockchain tracing report, police report number, and documented communications than on a vague complaint. Strong evidence is the foundation of everything.
  • Jurisdiction. Cases involving exchanges and entities in jurisdictions with strong regulatory frameworks (US, UK, EU, Singapore, Japan) have better outcomes than those involving entities in unregulated jurisdictions. Cross-border cases are slower but not hopeless.
  • Amount involved. Larger losses are more likely to receive attention from law enforcement and justify the cost of legal action. But even smaller cases benefit from proper documentation — they contribute to aggregate investigations that take down scam operations.

The honest truth: not every case results in full recovery. But building a strong evidence trail gives you the best possible chance, and it makes the ecosystem safer for everyone by contributing to the identification and prosecution of scam networks.

Additional Resources

Learn more about the specific steps in your recovery process with our detailed guides:

Weitere Ratgeber

Ready to Trace Your Funds?

Enter the scam wallet address or transaction hash and get a professional blockchain evidence report. The initial scan is free — no payment information required.

Start Free Investigation