"We can recover your money": the second scam that follows the first

After a scam, there is almost always one more call. Someone claiming to represent a law firm, a government agency, a fund recovery company, or even the support team of the platform where you lost the money. They know real details about what happened, and they offer exactly what you want to hear: it can still be recovered.

This is a second scam, and it is especially damaging because it arrives when the person is already exhausted, embarrassed, and in a hurry to fix the damage.

Why they are calling you specifically

Anyone who has been defrauded once ends up on lists that fraud groups buy, sell and trade. Those lists usually include a name, a phone number, the type of fraud suffered, and the approximate amount lost. That is why the call sounds credible: they are not guessing anything, they are reading it.

That prior knowledge is the main tool of the fraud. If someone recites correct details about a scam you suffered, they are not proving authority; they are proving they bought information.

The usual script

1. Unexpected contact by phone, email, text message, or social media.
2. Instant credibility: they quote the amount, the date, or the name of the platform.
3. A borrowed identity: a public body, a law firm, a consumer association, a "frozen funds department".
4. A specific promise: full recovery, a case already opened, or a priority place on a compensation list.
5. The upfront payment: fees, an "administrative charge", a tax, processing costs, or a refundable deposit.
6. The escalation: if you pay, new costs appear; if you hesitate, urgency appears.

There is also a version that asks for no money at first: they request bank details "to deposit the refund", account credentials, a one-time code, or permission to install remote-access software. The outcome is the same or worse, because it adds account theft to the original fraud.

Signals that let you end the call in thirty seconds

• They contacted you. You were not responding to a process you started.
• They ask for money upfront in order to return money. No legitimate recovery works that way.
• They guarantee the outcome. No bank, lawyer or authority can promise a refund.
• They request credentials, codes or remote access. None of that is needed to file a claim.
• They demand hard-to-reverse payment methods: cryptocurrency, gift cards, instant transfers, or cash.
• They create urgency. Deadlines that expire today, files that "close this afternoon".
• They resist verification. Say you will call the organisation yourself and they push back or insist on their own number.

One rule resolves almost every case: a public body or a legitimate organisation will never ask you to pay in order to get your own money back, and will never ask for your passwords to do it.

How money is actually recovered

The real routes are slower and less dramatic, but they exist and they never require an advance payment:

• Your bank or payment provider. Call the number on your card or use the official app, explain what happened, and ask them to review, flag or attempt to reverse the transaction. Always ask for a case number.
• The payment or transfer platform you used, through its official support channel.
• A report to the police or the competent authority in your country, following their published process.
• Consumer protection or financial supervision bodies relevant to your case.
• Professional advice that you seek out and verify yourself, with written terms and no guaranteed outcome.

None of these routes begins with an incoming call asking you for a fee.

What to do if a "recovery" company has already contacted you

1. Do not pay anything and do not share credentials or codes.
2. Hang up or stop replying. Do not argue or explain yourself.
3. Verify independently whether the organisation exists, searching its name alongside "scam", "reviews" or "complaint", and calling only an official number you found yourself.
4. Keep the evidence: number, time, names used, amounts requested, and screenshots.
5. Tell your bank if you shared financial details, and change passwords if you handed over credentials.
6. Report the attempt, even if you did not pay: it helps stop the next call to someone else.
7. Report the number in NoCall's directory so others can find it before answering.

If the contact already led to payments or shared data, immediately apply the containment order in the first-hour guide after a phone scam.

How to reduce the risk of a second round

• Assume more attempts will come after a fraud, and warn the people you live with.
• Do not post case details in open forums, comments or social media: that is where these lists are fed.
• Keep everything in the official channels you have already opened, with their case numbers.
• Apply the same filter to every new contact: hang up and verify through a channel you control, as described in the guide to verifying an unknown call or message.

In short

A recovery scam is not after the money you lost: it is after the money you still have. Recognising it is straightforward if you look at the structure rather than the story, because it always asks for something upfront and always promises what nobody can guarantee. Hang up, verify independently, use official channels only, and report the attempt even if you never paid.