Reporting Crypto Scams and Recovery: A Step-by-Step Guide for 2026

You just sent 0.5 ETH to a wallet address that turned out to be a scammer’s trap. The screen goes dark, the chat window closes, and panic sets in. You’re not alone. In 2024 alone, the FBI reported that US citizens lost $9.3 billion to internet crime, with cryptocurrency scams making up a massive chunk of that total. The good news? It’s not always game over. While recovering stolen crypto is tough, reporting it correctly gives you the best shot at freezing assets or helping law enforcement shut down the operation.

This guide cuts through the noise. We’ll walk you through exactly which agency to contact, what data you need to gather from your wallet history, and how new AI-driven threats are changing the landscape in 2026. No fluff, just actionable steps to protect yourself and potentially get your funds back.

Quick Summary / Key Takeaways

• Act fast: Stop all communication with the scammer immediately and secure any remaining assets in separate wallets.
• Know your agency: Use the FBI Internet Crime Complaint Center (IC3) for criminal fraud, the FTC for consumer protection patterns, and state regulators like California’s DFPI for local enforcement.
• Data is king: Recovery depends on specific blockchain details: transaction hashes, wallet addresses, and exact timestamps. Screenshots help, but raw data works better.
• New threats: Be wary of AI deepfakes and "pig butchering" schemes, which have become the most common sophisticated scams in 2025-2026.
• Kiosk risks: If you used a crypto ATM (CVC kiosk), note that nearly half of these cases start with phone calls, per FinCEN’s 2025 notice.

Which Agency Should You Contact First?

The biggest mistake victims make is filing reports everywhere without knowing who actually does what. There isn’t one single button to press. Instead, there’s a network of federal and state agencies, each with a different job. Picking the right one speeds up the process significantly.

If you’re unsure where to start, the FBI IC3 is generally the safest bet for direct criminal fraud. They handle the heavy lifting on investigations. However, if you live in California, the Department of Financial Protection and Innovation (DFPI) offers a parallel path that can sometimes move faster for state-level regulatory violations. Don’t hesitate to file with both if the lines blur; they often share data.

Gathering the Evidence: What Data Actually Matters

Law enforcement doesn’t need your story as much as they need your data. Blockchain is transparent, but only if you give them the keys to read it. When you file a report, vague statements like “I lost money on a fake app” won’t trigger an investigation. You need precise technical identifiers.

Here is the checklist of data points you must extract from your wallet or exchange history before filing:

1. Transaction Hash (ID): This is the unique fingerprint of your transfer. It looks like a long string of random letters and numbers (e.g., 0xfa485de419011ceefdd3cd00a4ff64e52bf9a0dfa528e4fff8bb4c9c). Without this, investigators can’t trace the flow of funds.
2. Scammer’s Wallet Address: The destination address where you sent the funds. Example format: 0x58566904f57eac4E9EDd81BbC2f877865ECd35985. Double-check this against your send confirmation.
3. Exact Amount and Asset Type: Specify precisely what was sent. Not just “some ether,” but “1.02345 ETH.” Precision helps match transactions across multiple victim reports.
4. Date and Time (with Timezone): Include the exact timestamp. For example: “January 1, 2023, 12:01 AM EST.” Timezones matter because blockchain explorers use UTC, and mismatches cause delays.
5. Communication Records: Save screenshots of chats, emails, and social media profiles. If the scam started on Telegram or WhatsApp, export the chat log if possible. Note the domain names or website URLs associated with the scam.

If you don’t have all this information, don’t wait. The FBI explicitly states that you should submit a report with whatever you have. But the more complete your dossier, the higher the chance of recovery or case closure.

Understanding Modern Scam Tactics in 2026

Crypto scams aren’t just phishing emails anymore. By 2025 and 2026, fraudsters had industrialized their operations. Understanding the type of scam you fell for helps you frame your report correctly.

AI Deepfakes: This is the newest frontier. Imagine seeing a live video of Elon Musk on YouTube telling you to send Bitcoin to a specific wallet. It wasn’t him-it was an AI-generated deepfake. In a documented case between March 2024 and January 2025, scammers used deepfake videos to collect over $5 million in under 20 minutes. These funds were quickly moved to exchanges like MEXC and darknet markets. If you were targeted by a video or voice call that felt slightly “off,” mention AI manipulation in your report.

Pig Butchering: Also known as “love bombing,” this scheme involves building a long-term romantic or friendly relationship with the victim before convincing them to invest in a fake crypto platform. These scams take weeks or months. Report these to the FTC and FBI, emphasizing the emotional manipulation and the fake trading platform’s URL.

CVC Kiosk Fraud: Did you go to a physical crypto ATM? FinCEN issued a notice in August 2025 highlighting that 47% of fraud cases involving Convertible Virtual Currency (CVC) kiosks started with a phone call. Scammers talk victims into buying gift cards or sending cash to ATMs. If this happened, note the location of the kiosk and the phone number that initiated the contact.

The Reality of Crypto Recovery

Let’s be honest: recovery rates are low, and agencies rarely publish success metrics. Why? Because once crypto leaves your wallet, it’s gone unless someone freezes it at an exchange or a court orders its return. However, reporting still matters for three reasons:

• Freezing Assets: If the scammer moves funds to a centralized exchange (like Coinbase or Binance) to cash out, law enforcement can subpoena the exchange to freeze those accounts. This only works if the transaction hash is reported quickly.
• Pattern Recognition: Your report adds to a database. If ten people report the same wallet address, the FBI prioritizes the investigation. You might not get your money back directly, but you could stop the scammer from hurting others.
• Tax Write-offs: In some jurisdictions, a police report is required to claim crypto theft as a casualty loss on your taxes. Check with a tax professional.

Don’t trust “recovery experts” who promise to get your money back for a fee. Most of these are secondary scams. Stick to official government channels.

How to File a Report: Step-by-Step

Ready to act? Follow these steps to ensure your report is processed efficiently.

1. Secure Your Remaining Assets: Change passwords, enable two-factor authentication (2FA) using an authenticator app (not SMS), and move any remaining funds to a new hardware wallet.
2. Document Everything: Create a folder on your computer. Save screenshots of the scammer’s profile, the fake website, and your transaction receipts. Export browser history if relevant.
3. Go to ic3.gov: This is the primary portal for the FBI. Fill out the online form. Be detailed. Paste the transaction hashes and wallet addresses clearly.
4. File with the FTC: Visit ReportFraud.ftc.gov. This helps track broader consumer trends and can flag identity theft.
5. Contact State Regulators (if applicable): If you’re in California, use the DFPI portal. Other states may have similar bureaus of financial regulation.
6. Notify Your Exchange: If the scam involved a centralized platform, contact their support team immediately. They may have internal tools to flag suspicious activity.

Preventing Future Scams: Pro Tips

Recovery is hard; prevention is easier. Here’s how to stay safe in 2026.

• Verify Video Calls: If someone claims to be a celebrity or expert via video, ask a question only they would know, or check a verified source. AI deepfakes can look real, but they often glitch under pressure.
• Use Hardware Wallets: Keep large amounts of crypto offline. Even if your computer is hacked, the private keys never leave the device.
• Beware of Urgency: Scammers create false urgency (“Send now or lose your bonus!”). Legitimate opportunities don’t expire in five minutes.
• Check Contract Addresses: Before buying a token, verify the contract address on multiple sources. Fake tokens often have similar names but different addresses.