What to Do If You Think You've Been Scammed (Steps & Reporting Guidance)

Read This If You Need Help RIGHT NOW

If you're reading this because you think you've just been scammed, here are your immediate first three steps — do these before reading anything else:

1. STOP all transactions — do not send any more funds, even if someone says it will "fix" the problem
2. Revoke token approvals — if you interacted with a suspicious DeFi contract, revoke permissions immediately at revoke.cash
3. Move remaining funds — transfer assets from the compromised wallet to a brand-new wallet with a new seed phrase

Now take a breath. The sections below walk you through everything in detail — including how to report fraud, what realistic recovery looks like (honest answer: usually not possible), and how to protect yourself going forward.

Immediate Actions (First 30 Minutes)

If you think you've been scammed, act immediately. Every minute counts.

Step 1: Stop All Further Transactions

Don't send more money:

• Scammers may contact you claiming they can "fix" the problem
• May ask for "verification fees" or "taxes" to release funds
• May create urgency: "Act now or lose access"

Any follow-up contact is part of the scam. Don't fall for it twice.

Step 2: Secure Your Accounts

If you gave away sensitive information:

Seed Phrase Compromised

If you shared your seed phrase:

1. Immediately create new wallet with new seed phrase
2. Transfer any remaining funds to new wallet
3. Don't use compromised wallet ever again
4. Scammer has full access to old wallet forever

Speed is everything. Scammers often drain wallets within minutes.

Password or Login Credentials Compromised

If you entered credentials on phishing site:

1. Change password immediately on legitimate site
2. Change passwords on any accounts using same password
3. Enable authenticator app 2FA if not already enabled
4. Review account activity for unauthorized changes
5. Check withdrawal/transaction history

Email Account Compromised

If scammer accessed your email:

1. Change email password from different device
2. Review and remove unknown devices/sessions
3. Check for forwarding rules (scammers set these up)
4. Review security questions and recovery options
5. Enable 2FA with authenticator app or hardware key

Step 3: Revoke Malicious Approvals

If you approved a contract interaction:

Many scams involve you approving a malicious smart contract that then has permission to spend your tokens.

Tools to revoke approvals:

• Revoke.cash: revoke.cash
• Etherscan Token Approvals: etherscan.io → Connect wallet → Token Approvals
• Approved.zone: approved.zone

Process:

1. Go to revoke tool
2. Connect affected wallet
3. See all active token approvals
4. Revoke any you don't recognize or all of them (costs gas fee per revocation)
5. Prioritize revoking approvals for tokens with remaining balances

This won't get stolen funds back, but prevents the scammer from taking more.

More info: Safe Transaction Habits

Step 4: Contact Your Exchange

If scam involved exchange account:

Contact exchange support immediately:

• Report unauthorized access
• Request account freeze
• Change passwords
• Review withdrawal addresses
• Cancel any pending withdrawals if possible

Note: Exchanges can't reverse completed withdrawals, but may freeze accounts or block new withdrawals.

Important: Contact support through official website only, not through email or DM (those could be more scammers).

Step 5: Check All Connected Accounts

Scammers often don't stop at one account:

Review:

• Other exchanges you use
• Bank accounts (if you provided banking info)
• Other wallets
• Email accounts
• Social media (scammers may hijack to scam your contacts)

Change passwords and enable 2FA on everything.

Document Everything

Even if recovery is unlikely, documentation is important:

What to Save

Transaction Details:

• Transaction IDs (hashes)
• Wallet addresses involved
• Amounts sent
• Timestamps
• Token types

Communications:

• Screenshot all messages with scammer
• Save emails (full headers)
• Screenshot social media posts/profiles
• Save URLs of fake websites
• Record phone numbers or usernames

Website Information:

• URL of phishing/scam site
• Screenshots of site
• Any email addresses or contact info provided
• Names of people/companies involved

How You Found the Scam:

• Where you saw the ad or link
• Who referred you
• How you were contacted

Save everything to multiple locations (computer, cloud, external drive).

Why Documentation Matters

Even if recovery doesn't happen:

• Helps law enforcement track patterns
• Needed for police reports
• Useful for warning others
• Required for any potential legal action
• May help with taxes (capital loss documentation)

Reporting the Scam

Report through multiple channels—even if you don't expect recovery.

1. Law Enforcement

United States

FBI Internet Crime Complaint Center (IC3):

• Website: ic3.gov
• File official complaint
• Provide all documentation
• Include crypto transaction details

Local Police:

• File report at local police department
• Bring printed documentation
• Get case number for records
• Expect limited action on individual cases

What to expect:

• Police rarely recover funds in crypto scams
• Reports help build larger cases
• May be useful for tax documentation
• Provides official record

Other Countries

Canada: Canadian Anti-Fraud Centre (antifraudcentre-centreantifraude.ca)

UK: Action Fraud (actionfraud.police.uk)

Australia: Scamwatch (scamwatch.gov.au)

EU: Report to national cybercrime unit

2. Federal Trade Commission (US)

• Website: reportfraud.ftc.gov
• Federal agency tracking fraud
• Data used for consumer protection
• No direct recovery assistance

3. Cryptocurrency Exchange/Platform

If scam involved an exchange:

• Report through official support ticket
• Provide transaction IDs and details
• Request account review
• Ask if withdrawal can be frozen (rarely possible)

If scam involved a fake version of legitimate platform:

• Report to real company
• Helps them take down fake sites
• May prevent others from being scammed

4. Report the Scam Website/Account

Phishing websites:

• Google Safe Browsing: safebrowsing.google.com/safebrowsing/report_phish/
• Report to domain registrar (lookup via whois)
• Report to web host

Social media scam accounts:

• Report to platform (Twitter, Facebook, Instagram, Discord, Telegram)
• Include screenshots and evidence
• Request account suspension

Fake apps:

• Report to app store (Apple App Store, Google Play)
• Request removal
• Leave warning review

5. Blockchain Analysis Firms

Some companies track stolen crypto:

Chainalysis: chainalysis.com CipherTrace: ciphertrace.com Elliptic: elliptic.co

What they do:

• Track movement of stolen funds
• Flag addresses for exchanges
• Assist law enforcement
• May help if funds move to tracked exchange

What they don't do:

• Recover funds directly
• Work on individual small cases
• Charge individuals (they work with institutions)

Your report may contribute to larger investigations.

6. Community Warnings

Help others avoid the same scam:

Post warnings on:

• Reddit (r/CryptoCurrency, r/CryptoScams)
• Twitter with #cryptoscam hashtag
• Relevant Discord/Telegram communities

Include:

• Scam website/person
• How the scam worked
• Warning to others
• Don't include personal details that identify you

Don't:

• Name potential suspects without proof (legal risk)
• Share others' personal information
• Attempt vigilante justice

What NOT to Do

DON'T Pay "Recovery Services"

Common scam after being scammed:

Someone contacts you:

• "I can recover your funds"
• "I'm a blockchain investigator"
• "Pay my fee and I'll trace your crypto"

Reality:

• These are scammers targeting scam victims
• They can't actually recover your funds
• They just want more money from you

Red flags:

• Contact you unsolicited
• Ask for upfront payment
• Promise guaranteed recovery
• Request payment in crypto
• Operate via Telegram/WhatsApp only

Legitimate recovery:

• Almost never happens for individual cases
• Law enforcement doesn't ask for payment
• Real lawyers don't guarantee results
• Professional services don't use Telegram

DON'T Try to "Hack Back"

Some victims consider:

• Tracking down the scammer
• Attempting counter-hack
• Threatening scammer

Problems:

• Likely illegal in your jurisdiction
• Won't recover funds
• May expose you to more risk
• Could face legal consequences yourself

Leave investigation to authorities.

DON'T Ignore Follow-Up Scam Attempts

Scammers often:

• Contact you as "support" offering help
• Pretend to be law enforcement
• Offer "insurance" or "recovery"
• Try romance angle after investment scam

Block and ignore all follow-up contact.

DON'T Post Scam Details in Scam Comments

Some scam posts/videos have comments from other "victims" who "got their money back" with help from "recovery expert @username."

These are fake comments from the scammers. They're trying to scam you again.

DON'T Wait and Hope

Some victims hope:

• "Maybe it's legitimate and I'll get my funds"
• "Maybe I misunderstood"
• "Maybe they'll return it"

If it's a scam, waiting only makes it worse:

• Scammer moves funds further
• Trail gets harder to follow
• More time for scammer to target others
• Can't undo damage of compromised accounts

Act immediately on suspicion.

Realistic Expectations

Recovery Likelihood

Honest assessment:

• 99%+ of crypto scams result in permanent loss
• Law enforcement has limited resources
• Crypto transactions are irreversible
• Scammers operate internationally
• Most scammers are never caught

The rare exceptions:

• Large-scale scams (millions of dollars, many victims)
• Scammer makes mistake (sends to tracked exchange)
• Scammer is within same jurisdiction as victim
• Major fraud operation with international cooperation

Your individual case is unlikely to result in recovery.

What Reporting Accomplishes

Even without recovery, reporting helps:

Builds data for law enforcement:

• Identifies scam patterns
• Connects related cases
• May lead to arrests in large operations

Helps others:

• Gets scam sites taken down
• Removes fake social media accounts
• Warns community

Personal documentation:

• Official record of loss
• May be useful for taxes (consult tax professional)
• Establishes timeline if legal action becomes possible

Psychological value:

• Feeling of taking action
• Contributing to prevention
• Moving forward

Tax Implications

Consult a tax professional, but generally:

United States:

• Scam losses may qualify as theft losses
• Requires documentation (police report helpful)
• Rules changed in recent years—get professional advice
• Not all losses are deductible

Other jurisdictions:

• Rules vary by country
• Professional advice needed

Don't assume losses are automatically deductible. Get proper tax advice.

Emotional Recovery

Being scammed is emotionally difficult:

Common Reactions

• Shame and embarrassment
• Anger at scammer and yourself
• Anxiety about financial impact
• Depression
• Loss of trust
• Obsessive thoughts about recovery

These are normal reactions to victimization.

Healthy Coping

Do:

• Talk to trusted friends or family
• Join victim support groups
• Focus on lessons learned
• Take steps to improve security
• Forgive yourself (scammers are professionals)
• Seek professional help if needed

Don't:

• Isolate yourself
• Make impulsive financial decisions to "recover losses"
• Fall for recovery scams
• Blame yourself excessively (scammers are skilled at manipulation)

Learn and Move Forward

Use experience to:

• Better understand security practices
• Recognize red flags
• Help others avoid scams
• Become more cautious but not paralyzed

Many people get scammed once and never again because they learned the signs.

Preventing Future Scams

After being scammed, implement better security:

Immediate Changes

• [ ] Use authenticator app or hardware key 2FA (not SMS)
• [ ] Use password manager with unique passwords
• [ ] Remove phone number from accounts where possible
• [ ] Enable withdrawal whitelisting on exchanges
• [ ] Bookmark official sites (don't use search/links)

Ongoing Practices

• [ ] Never share seed phrase with anyone
• [ ] Verify URLs before entering information
• [ ] Ignore unsolicited contact about crypto
• [ ] Test small amounts before large transfers
• [ ] Question anything that sounds too good to be true
• [ ] Take time with transactions (urgency is red flag)
• [ ] Learn about common scams

More guidance:

• Common Crypto Scams: How to Avoid Them
• Phishing and Fake Support
• Two-Factor Authentication Guide

Scam Victim Action Checklist

Immediate (First Hour)

• [ ] Stop all further transactions
• [ ] Create new wallet if seed phrase compromised
• [ ] Transfer remaining funds to secure wallet
• [ ] Change all passwords
• [ ] Enable/upgrade 2FA to authenticator app or hardware key
• [ ] Revoke malicious contract approvals
• [ ] Contact exchange if account compromised
• [ ] Check all connected accounts

Documentation (First Day)

• [ ] Screenshot all communications with scammer
• [ ] Save transaction IDs and addresses
• [ ] Document timeline of events
• [ ] Save URLs and website screenshots
• [ ] Record how you encountered the scam

Reporting (First Week)

• [ ] File IC3 report (or equivalent for your country)
• [ ] File police report
• [ ] Report to FTC (or equivalent)
• [ ] Report to relevant platforms (exchange, social media)
• [ ] Report phishing sites to Google Safe Browsing
• [ ] Warn community (Reddit, Twitter, forums)

Recovery and Prevention (Ongoing)

• [ ] Implement stronger security practices
• [ ] Consult tax professional about reporting
• [ ] Join support community if needed
• [ ] Learn about scam red flags
• [ ] Help others recognize scams
• [ ] Move forward with lessons learned

If You're Reading This Right Now Because It Just Happened to You

Take a breath. I know your heart is racing. I know you feel sick, angry, and ashamed — probably all at once. I want you to know something important: being scammed does not mean you are stupid. Crypto scams are designed by professionals who do this for a living. They exploit trust, urgency, and normal human emotions. Doctors, lawyers, engineers, and cybersecurity professionals have all been victims. You are not alone.

Right now, focus only on damage control. Don't try to recover the money yourself — most "recovery services" that contact scam victims are themselves scams (this is called a recovery scam, and it specifically targets people who are desperate and not thinking clearly). Don't send more money to "unlock" or "recover" your funds — this is always a lie, no matter how convincing the explanation.

The actions that actually help — filing reports with the FBI's IC3, contacting your exchange, documenting everything — are covered in detail above. They're not guaranteed to get your money back. In many cases, stolen crypto is not recoverable. But these steps create a paper trail that helps law enforcement track and eventually shut down scam operations, protecting future victims. That matters, even when it doesn't feel like enough right now.

Frequently Asked Questions

Further Reading

• Common Crypto Scams: How to Avoid Them
• Phishing and Fake Support
• SIM Swaps and Account Takeovers
• Safe Transaction Habits

Sources & References

All claims in this article are supported by the following sources. We encourage readers to verify information independently.

1. Internet Crime Complaint Center (IC3) — Federal Bureau of Investigation (FBI)
2. Report Fraud — Federal Trade Commission (FTC)
3. SEC Complaint Center — U.S. Securities and Exchange Commission
4. Submit a Complaint — Consumer Financial Protection Bureau (CFPB)
5. Cryptocurrency Fraud — Federal Bureau of Investigation (FBI)