How to recover cryptocurrency depends entirely on how it left your control. If you still have your seed phrase and just can’t get into a wallet, restoring access is usually a matter of minutes. If an exchange locked your account, a documented support claim can resolve it in days or weeks. If the exchange went bankrupt, you’re a creditor and you file a claim in court. If someone stole your funds, you report to the FBI fast, because tracing works only while the trail is warm. Each path has its own deadline, and missing the deadline is often what turns a recoverable loss into a permanent one.
Recovering Access to Your Own Wallet
Your crypto doesn’t live inside a wallet app or a hardware device. It lives on the blockchain, and the wallet is just a window into it. Any compatible window works. That’s why self-custody recovery is almost always possible if you kept your seed phrase.
Self-custody wallets generate that phrase when you first set them up: typically 12 or 24 English words drawn from a standardized list of 2,048 possibilities, which encode the private keys behind every address you use.1Ledger. Understanding BIP-39 The Origin of Your Seed Phrase Enter those words into any wallet that follows the same BIP39 standard and your full balance reappears.2Bitcoin Wiki. Seed phrase A broken hardware device doesn’t need repair. Import the seed into a replacement device from the same manufacturer or into a reputable software wallet and the keys regenerate.
One technical detail trips people up: the derivation path. This is the filing system the wallet uses to organize your keys. Ethereum wallets typically use m/44’/60’/0’/0; Bitcoin wallets use a different one. If you restore your seed and see a zero balance, the derivation path is almost certainly wrong. Switch to the correct path in the wallet’s settings and your funds surface.
When a Word or Two Is Missing
If you wrote down your seed phrase but a word is smudged or illegible, tools like BTCRecover can brute-force the missing word by trying each of the 2,048 possibilities in that position, which a modern computer finishes in minutes.3BTCRecover. Basic Seed Recovery Examples Two missing words means roughly 4.2 million combinations, still feasible but slower. Three missing words is more than 8.5 billion combinations. Four is effectively unrecoverable on consumer hardware. Past two, a professional recovery service with GPU clusters is your only realistic option, and even then set expectations low.
Once you’re back in, make a durable backup. Paper stored securely, or a metal plate that survives fire and water. Never a text file, email draft, or cloud folder; digital storage creates digital attack surfaces. If your wallet supports a passphrase (the “25th word”), back that up separately from the seed phrase itself.
Recovering an Exchange Account
A centralized exchange holds your crypto for you, so getting back in works like restoring a bank account: you prove you’re the rightful account holder. Start from the email address you registered with, because that’s the anchor of your identity in the exchange’s system. If you still have that inbox, a password reset often ends the story right there.
When you’ve lost the password and your two-factor device, expect a document-heavy process. Most major exchanges will ask for a government-issued ID, and many require a photo of you holding the ID next to a handwritten note with the current date and a reference code they provide. That combination verifies a living person whose face matches the ID. They may also ask for your approximate balance, the specific assets you held, and transaction IDs from earlier deposits or withdrawals.
After you submit, response times run from about three business days to several weeks while a compliance officer reviews the file. You may get follow-up questions or a short video call. When you clear review, the exchange sends an unlock notification or a password reset link.
Recovering Funds From a Bankrupt Exchange
When an exchange collapses, recovery moves out of customer support and into bankruptcy court. If your assets are trapped on an insolvent exchange, you’re a creditor of that company, and what you get back depends on the bankruptcy proceeding.
The step that decides everything is filing a proof of claim before the court’s bar date. Under federal bankruptcy law, claims filed after that deadline can be disallowed entirely.4Office of the Law Revision Counsel. 11 US Code 502 – Allowance of Claims or Interests Bar dates are set by the bankruptcy court and published on the exchange’s restructuring website and in court filings. Miss it and you can forfeit your claim, so find and monitor the official case portal immediately.
To file, you’ll generally need your account email, records of deposits and withdrawals, and screenshots of balances if you kept any. Most bankrupt exchanges set up a dedicated claims portal for electronic submission.
Recovery percentages vary widely. Some cases return substantial portions to creditors; others pay pennies on the dollar. These cases typically last years. The uncomfortable reality is that keeping meaningful amounts on an exchange means trusting that company’s solvency without the protections a bank depositor has. No federal equivalent of FDIC insurance covers crypto held on exchanges.
Reporting Stolen Cryptocurrency
If someone took your crypto through hacking, phishing, or a fraudulent investment scheme, report it to the FBI’s Internet Crime Complaint Center right away.5Internet Crime Complaint Center (IC3). Home Page – Internet Crime Complaint Center (IC3) IC3 is the central federal intake for cyber-enabled crime, and complaints filed there are analyzed and routed to the appropriate federal, state, or international agencies.6Internet Crime Complaint Center (IC3). FAQ – Internet Crime Complaint Center (IC3)
Speed is the whole game. Federal investigators and their private-sector partners use blockchain analysis to trace stolen funds as they move between wallets, and when the funds land at a major exchange, law enforcement can request an emergency freeze before the thief cashes out. A joint Secret Service and FBI operation seized over $225 million in a single cryptocurrency fraud case, and cumulative seizures from the federal Scam Center Strike Force have topped $580 million.7U.S. Department of Justice. Largest Ever Seizure of Funds Related to Crypto Confidence Scams Recovery does happen, but not after the trail goes cold.
In your IC3 report, describe what happened in plain language: how you were contacted, what you were told, where you sent funds, and every wallet address and transaction ID involved. Don’t try to cite statutes; investigators handle that. Also file a report with your local police, because the police report creates an official record you’ll need later for insurance claims, tax deductions, or a civil suit.
Blockchain Tracing
Blockchain forensic firms follow the money. Every transaction on a public blockchain is permanently recorded, so investigators can trace funds as they bounce through dozens of intermediary wallets. The goal is the “off-ramp,” the point where the thief tries to convert crypto to traditional currency at an exchange. Exchanges that follow anti-money-laundering rules collect identity documents from users, which is how anonymous addresses get connected to real people.
Private blockchain investigators typically charge $20 to $50 per hour, with complex cases requiring expert testimony running higher. For smaller thefts, forensic costs can exceed the amount stolen, so weigh the likely recovery against the fee before hiring anyone.
Suing to Get Your Funds Back
Criminal prosecution is the government’s job. A civil lawsuit is yours. If forensics or exchange records identify who took your crypto, you can sue for return of the funds and additional damages. When you don’t yet know the thief’s real identity, you can file a “John Doe” lawsuit and subpoena exchanges to turn over the account holder’s name, address, and other identifying information tied to the receiving wallet.8Justia Law. Ramirez v Doe et al, No. 2:2025cv01576 – Document 14 Courts have authorized this kind of discovery specifically against crypto exchanges to unmask anonymous defendants.
The Computer Fraud and Abuse Act carries a private right of action for compensatory damages and injunctive relief, but with a hard deadline: you must sue within two years of the act itself or within two years of discovering the damage, whichever is later.9Office of the Law Revision Counsel. 18 USC 1030 – Fraud and Related Activity in Connection With Computers Miss that window and you lose the ability to sue under the statute. State fraud and conversion claims run on different clocks, so talk to an attorney promptly.
Filing fees for civil cases run roughly $50 to $400 depending on the court, with attorney fees adding significantly more. Some attorneys in this area take high-value cases on contingency, keeping a share of what they recover instead of billing hourly.
Deducting a Crypto Loss on Your Taxes
The IRS treats cryptocurrency as property, not currency.10Internal Revenue Service. Frequently Asked Questions on Virtual Currency Transactions That classification opens the door to a loss deduction, but the rules changed sharply after 2017 and most people misread what still qualifies.
If your crypto was stolen in a scam or hack and you held it as an investment, you may be able to claim a theft loss deduction. The requirements are that the loss arose from a transaction entered into for profit, that the conduct qualifies as theft under your state’s criminal law, and that you have no reasonable prospect of recovering the funds.11Internal Revenue Service. Instructions for Form 4684 If law enforcement is actively pursuing your case with a realistic chance of recovery, you may need to wait before claiming.
Personal-use crypto losses follow a different rule. Since 2018, personal casualty and theft losses are deductible only when they result from a federally declared disaster.12Office of the Law Revision Counsel. 26 US Code 165 – Losses A hack isn’t a federally declared disaster, so personal-use crypto stolen outside that context isn’t deductible.
If your crypto is permanently inaccessible rather than stolen (tokens sent to a dead contract address, a seed phrase lost with no path back) the IRS treats that as an abandonment question. You’d need to show an affirmative act of abandonment coupled with intent to abandon the property.13Internal Revenue Service. Applicability of IRC Section 165 to Cryptocurrency That Has Declined in Value Forgetting a password doesn’t automatically qualify. Report theft losses on Form 4684, and get professional advice before claiming abandonment, because the IRS looks at those hard.
Avoiding the Second Loss: Fake Recovery Services
This is where victims often get hurt a second time. After losing crypto, people search for help and find “recovery specialists” who promise to retrieve stolen funds with advanced blockchain tools. Most of these operations are themselves scams.
The FTC has warned specifically that anyone who contacts you claiming they can recover your lost crypto is almost certainly trying to steal more from you.14Federal Trade Commission. Worried About Crypto Exchange Losses? Don’t Pay Money for Help Recovering Money Legitimate law enforcement and blockchain forensic firms don’t cold-call victims on social media or in inbox blasts.
Signs of a recovery scam:
- Upfront fees, especially paid by wire transfer, gift card, or more crypto. Legitimate forensic firms bill for documented work.
- Guaranteed results or promises of funds back within 24 to 48 hours. No one can guarantee recovery.
- Requests for remote access to your computer or your wallet file. That hands over whatever you have left.
- Unsolicited contact through social media, forum posts, or comments where you mentioned being scammed. Scammers monitor those channels to find fresh victims.
If you do want professional help tracing funds, look for licensed private investigators or established blockchain analytics firms with verifiable track records and published business addresses. Even then, understand that tracing and recovery are two different things. Tracing shows where the money went. Getting it back requires law enforcement cooperation or a court order, and neither comes with a guarantee.