Cryptocurrency Scam Recovery: Reports, Freeze Orders, and Restitution

Recovering money lost to a cryptocurrency scam is sometimes possible, but the odds fall sharply within hours of the transfer. A realistic cryptocurrency scam recovery effort has four moving parts: alerting the exchange that received your funds, preserving the blockchain evidence, filing with federal agencies, and, when the trail leads somewhere reachable, paying a lawyer to seek a court order that freezes the account before the scammer cashes out. None of it is guaranteed, and much of it costs money on top of what you’ve already lost.

Move Within Hours, Not Days

Cryptocurrency moves at the speed of a mouse click. A scammer who receives your Bitcoin can split it across dozens of wallets, route it through a mixing service, or convert it to a different coin within minutes. Once funds leave a regulated exchange and enter an anonymous wallet or a privacy-focused coin, the window for recovery effectively closes.

The single most useful thing you can do first is report the fraud to the exchange where you sent the funds, or where you believe the scammer holds an account. Major exchanges have compliance teams that can flag and temporarily freeze suspicious accounts based on a fraud report. That temporary hold buys time for law enforcement or your attorney to follow up with a formal legal request. Wait days or weeks and the funds are almost certainly gone.

Evidence to Collect Before Anything Else

Before contacting any agency or attorney, gather every piece of information tied to the scam. The most critical item is the transaction hash (sometimes called a TXID), the unique alphanumeric string assigned to your transfer on the blockchain. You can find it in your exchange account’s transaction history or your wallet software, and you can look up the transaction on a blockchain explorer such as Etherscan or Blockchain.com.

Beyond the hash, document:

Wallet addresses, both yours and the scammer’s, for every transaction involved.
Communication records: emails, text messages, chat logs, social media messages, usernames, profile links.
Website evidence: screenshots of fake investment dashboards, phishing sites, or fraudulent platforms, with URLs. These sites disappear fast.
Financial records: the type and amount of cryptocurrency sent, its dollar value at the time of the transfer, and any receipts from the exchange or wallet you used.
A written timeline of how the scam unfolded, with dates.

Put all of it into a single document. Forensic analysts, attorneys, and law enforcement need the same core data, and having it ready in one place prevents delays that kill recovery efforts. The IRS also expects you to keep records of virtual currency transactions, including those involving fraud, which matters if you later claim a tax deduction.¹

Where to File Reports

Filing with federal agencies does two things: it creates an official record of the crime, which you need for tax deductions and any later legal proceeding, and it feeds data into systems that help build larger cases. No agency will act as your personal lawyer or chase your individual loss.

FBI Internet Crime Complaint Center

IC3 is the FBI’s central intake point for cybercrime complaints. Submit through ic3.gov with your transaction details, wallet addresses, dollar amounts, and narrative.² You’ll receive a complaint ID. Don’t expect a call back: IC3 explicitly states it does not contact complainants, and any investigation is at the discretion of the agencies that receive the forwarded data.³ Because of complaint volume, only a fraction result in active investigations. If your situation is time-sensitive, contact your local FBI field office directly rather than waiting on IC3 processing.

IC3 publishes no minimum dollar threshold. In practice, larger losses and cases that link to known fraud rings get more attention, but filing still matters for smaller losses because your complaint may connect to dozens of others targeting the same scammer.

FTC, SEC, and CFTC

The Federal Trade Commission takes fraud reports at ReportFraud.ftc.gov and enters them into Consumer Sentinel, a database used by law enforcement worldwide to detect fraud patterns.⁴ If the scam involved a fake investment or securities fraud, file a tip with the SEC through its Tips, Complaints, and Referrals system.⁵ For scams involving commodity futures or derivatives, the CFTC has its own complaint portal.⁶

None of these agencies will return your money directly. They use aggregated complaint data to build enforcement actions. When the Department of Justice does seize assets from a large scheme, a report on file can make you eligible for victim restitution.

When Blockchain Tracing Can Still Work

The same feature that makes cryptocurrency hard to reverse also makes it traceable. Every transaction on a public blockchain like Bitcoin or Ethereum is permanently recorded. Blockchain analytics firms use specialized software to follow stolen funds from wallet to wallet, visualizing the path and flagging addresses tied to criminal activity, sanctioned entities, or regulated exchanges.

Scammers rarely leave stolen funds sitting where you sent them. They typically split the balance across multiple wallets in a technique called “peeling,” where small amounts are shaved off and sent to different addresses. Analysts trace each branch until the funds reach a destination where recovery becomes possible.

The most promising outcome is when the trail leads to a regulated exchange or other Virtual Asset Service Provider. These businesses are required to verify their users’ identities through Know Your Customer protocols, which means collecting government-issued ID, addresses, and other personal information.⁷ When stolen funds land at one of those platforms, the anonymous wallet becomes tied to a real person, and legal recovery becomes possible.

When the Trail Goes Cold

Mixers, sometimes called tumblers, pool transactions from many users, scramble them, and send different coins back out to different addresses. The link between incoming and outgoing funds gets severed. The U.S. Treasury sanctioned Tornado Cash in 2022 for facilitating anonymous transactions “with no attempt to determine their origin” and repeatedly failing to prevent money laundering.⁸ Once your funds pass through a sanctioned mixer, recovery becomes far harder.

Privacy coins are worse. If a scammer converts your stolen funds into Monero, the trail may end entirely. Monero uses cryptographic techniques that hide the sender, recipient, and amount of every transaction by default. Some forensic firms claim limited tracing ability under specific conditions, but funds swapped to a well-implemented privacy coin are rarely recoverable.

A forensic analyst can usually tell you within a few days whether the trail is followable. If it isn’t, you’re better off focusing on law enforcement reports and a possible tax deduction rather than spending money on litigation.

Court Orders to Freeze and Return the Funds

When tracing shows that stolen funds are sitting on a regulated exchange, legal action can force the exchange to freeze the account and eventually return the assets. This is the most direct path, but it requires a lawyer, court filings, and enough money in the account to justify the costs.

The John Doe Lawsuit

If you know which exchange holds the scammer’s funds but not the scammer’s name, you can file a “John Doe” lawsuit against an unidentified defendant. That procedural tool lets the court issue a subpoena compelling the exchange to turn over the account holder’s identity information. Once the exchange reveals who controls the account, the case transitions to a named lawsuit where you can pursue a judgment for return of your property.

Emergency Freeze Orders

Courts can issue emergency orders to keep the scammer from withdrawing funds while the case is pending. A temporary restraining order or preliminary injunction directed at the exchange effectively locks the account. To get one, you generally need to convince the judge that you’ll suffer irreparable harm without it. Courts have recognized that the volatile, instantly transferable nature of cryptocurrency meets that standard, since funds can vanish in seconds if not frozen. These emergency motions carry significant legal fees, and total cost depends on the complexity of the case and whether the defendant fights back.

Getting the Funds Back

After a judgment, the court can order the exchange or the defendant to transfer the funds to you. If the defendant refuses, the court can hold them in contempt, with potential fines or jail time. The practical work at this stage is coordinating the transfer, since the recovered cryptocurrency needs to go to a wallet you securely control. Your attorney typically works with the exchange’s compliance team to execute it.

Offshore Exchanges Are a Wall

Many cryptocurrency exchanges operate outside the United States, and that creates a serious jurisdictional problem. Federal Rule of Civil Procedure 45, which governs subpoenas in U.S. courts, generally does not allow service on foreign nationals or entities located abroad.⁹ Courts have held that litigants cannot use alternative service methods like email to get around that territorial limit. For exchanges based in countries party to international judicial cooperation treaties, you may be able to pursue recovery through those channels, but the process is slow, expensive, and uncertain. If the scammer moved your funds to an unregulated exchange in a weak-enforcement jurisdiction, court-based recovery is unlikely regardless of how strong your evidence is.

If Recovery Fails: Tax Deduction and DOJ Restitution

When the funds are gone for good, two options remain that can reduce the damage.

Theft Loss Deduction

If you held the stolen crypto as an investment or in a profit-motivated activity such as trading, staking, or mining, your theft loss is deductible under Section 165 of the Internal Revenue Code.¹⁰ The IRS has confirmed that victims of financial scams can claim the deduction when three conditions are met: the loss resulted from conduct classified as theft under your state’s criminal law, there is no reasonable prospect of recovery, and the loss arose from a transaction entered into for profit.¹¹ You report the loss on Section B of IRS Form 4684 (Casualties and Thefts).¹²

This is where most crypto fraud victims land, because most people buy crypto as an investment. The deduction is an ordinary loss, offsetting regular income rather than only capital gains. You’ll need your cost basis in the stolen coins, the date you discovered the theft, and documentation of the steps you took to attempt recovery, including law enforcement filings. The IRS points to Chief Counsel Advice memorandum 202511015 for additional guidance on financial scam losses.¹¹

If the stolen crypto was held for personal use rather than investment, the deduction is not available. The limitation restricting personal casualty and theft loss deductions to federally declared disasters, originally enacted by the Tax Cuts and Jobs Act for 2018 through 2025, has been made permanent.¹⁰ Crypto theft is not a federally declared disaster.

If the fraud was a Ponzi scheme, where the operator used new investors’ money to pay fake returns to earlier ones, you may qualify for a safe harbor under IRS Revenue Procedure 2009-20, which lets you claim the loss in the year the fraud is discovered. You report this on Section C of Form 4684.¹³ To use the safe harbor, the operator must have been charged with or admitted fraud, or a receiver must have been appointed.

DOJ Asset Forfeiture Restitution

When federal law enforcement successfully prosecutes a large-scale crypto fraud and seizes the perpetrator’s assets, victims may be eligible for restitution through the DOJ’s Asset Forfeiture Program. Once the government announces a compensation process for a specific case, victims file claims and receive a share of the recovered funds.¹⁴

There is no general federal victim compensation fund for crypto fraud. Restitution only happens when the government actually recovers assets in a specific case, and the process typically takes years. Having an IC3 complaint and law enforcement report on file strengthens your position when a compensation process opens. The DOJ never asks victims to pay a fee to participate.¹⁴

Watch Out for Recovery Scams

Scammers specifically target people who have already lost money to crypto fraud, knowing they’re desperate. The CFTC classifies these as advance-fee fraud and warns that criminals use victim lists containing contact details and loss amounts to pick their next targets.¹⁵

The pattern is consistent. A “recovery specialist” contacts you by email or social media, often knowing specific details about your original loss. They claim to have cutting-edge blockchain technology, connections at the exchange, or that they’ve already located your funds and just need a fee to release them. Some build professional-looking websites with fake press releases quoting themselves as experts, and a few reference real CFTC or FBI advisories to look legitimate.¹⁵

Red flags:

Upfront fees of any kind, especially those labeled as a tax, donation, or administrative fee. Legitimate attorneys use retainers with clear engagement letters, not Bitcoin payments to unlock a recovery.
Guaranteed recovery. No one can guarantee it.
Contact only through Telegram, WhatsApp, or web-based email addresses like Gmail. Legitimate professionals have verifiable business addresses, phone numbers, and websites.
Anyone claiming to be from the FBI, SEC, or another agency. Government agencies never demand payment, never ask for cryptocurrency, and never contact victims through personal email. Legitimate government email addresses end in.gov.¹⁵
Requests for your bank account information to “deposit recovered funds.” That’s data harvesting for the next theft.

Some operations even hand over impressive-looking tracing reports, then charge escalating fees for the next “phase” that never arrives. If someone contacts you unsolicited about recovering your lost crypto, the safest assumption is that they’re the next scam. Legitimate blockchain forensic firms and attorneys do not cold-call victims from leaked complaint lists.

1
Internal Revenue Service. Frequently Asked Questions on Virtual Currency Transactions
2
Internet Crime Complaint Center. About – Internet Crime Complaint Center
3
Internet Crime Complaint Center. Frequently Asked Questions
4
Federal Trade Commission. ReportFraud.ftc.gov
5
U.S. Securities and Exchange Commission. Welcome to Tips, Complaints, and Referrals
6
Commodity Futures Trading Commission. CFTC Complaint
7
Financial Action Task Force. Updated Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers
8
U.S. Department of the Treasury. U.S. Treasury Sanctions Notorious Virtual Currency Mixer Tornado Cash
9
United States Bankruptcy Court, Southern District of New York. In re: Three Arrows Capital, Ltd. (Memorandum Opinion and Order)
10
Office of the Law Revision Counsel. 26 USC 165 Losses
11
Internal Revenue Service. Instructions for Form 4684 (2025)
12
Internal Revenue Service. Form 4684, Casualties and Thefts
13
Internal Revenue Service. Revenue Procedure 2009-20
14
U.S. Department of Justice. Justice Department Announces Compensation Process for OneCoin Fraud Victims With Funds Recovered Through Asset Forfeiture
15
Commodity Futures Trading Commission. Don’t be Re-Victimized by Recovery Frauds