CyberThreats.au

Independent cybersecurity education

SearchScammed or hacked?Get help

Scam types

Money recovery scams: offers to get your lost money back

Money recovery scams target people who've lost money, posing as recovery firms, lawyers or government. Warning signs and what Scamwatch and ASIC say.

Last reviewed
Reading time
10 minutes

If someone offers to get your lost money back

ASIC says that if you have been scammed and someone contacts you offering to help recover money, it is a scam. These are the steps ASIC, Scamwatch and the National Anti-Scam Centre describe.

  1. Hang up, delete or ignore the offerASIC says 'the best thing to do is to hang up, delete the email or otherwise ignore the contacts'. The National Anti-Scam Centre describes blocking repeated contact.What official sources say to do
  2. Don't pay a fee or give personal details or remote accessScamwatch says never to accept offers from anyone who says they can get your money back, and never to give strangers your personal details or remote access to your devices.Warning signs of a recovery scam
  3. Work with your own bank insteadScamwatch says to work with your bank or financial institution to try to recover money. If you're unhappy with its response, the National Anti-Scam Centre points to AFCA, which is free.Where official sources point people
  4. If you've already paid a 'recovery' fee, contact your bank and IDCAREScamwatch says to contact your bank or card provider right away and ask it to stop transactions, and to contact IDCARE on 1800 595 160 for free help.What official sources say to do next
  5. Report the offerScamwatch says to report third-party recovery offers to police, and takes reports of recovery scams as well as the original scam.Where to report

Based on ASIC's follow-up scams alert, Scamwatch's money recovery scams page and the National Anti-Scam Centre's warning, checked October 2026.

Key points

  • Scamwatch describes money recovery scams as scammers contacting previous scam victims and offering to recover stolen money, then taking more.
  • The National Anti-Scam Centre says scammers may pose as government agencies, lawyers, cyber security organisations, recovery services, consumer groups or charities.
  • Scamwatch says recovery scammers also set up websites and ads that people may find while searching online for help after a scam.
  • IDCARE says: 'If your bank is unable to recover your funds, it is highly unlikely that another organisation will.'

A money recovery scam targets people who have already lost money to a scam. Scamwatch explains that scammers contact previous victims and offer to get their money back. Its warning is direct: “You won’t recover any stolen money and the scammers will just steal more money from you.”

These scams arrive at the worst possible moment. Someone has just lost savings, feels embarrassed, and is desperate for a way to undo it. A confident voice saying “we’ve traced your funds” can feel like a lifeline. Scamwatch and Moneysmart both warn people who have been scammed to expect follow-up offers like this.

How it works

Scamwatch says recovery scammers may contact people by email, phone, message or social media. They also set up recovery websites and ads, which people may find while searching online for help after a scam.

The National Anti-Scam Centre (NASC) says scammers may pose as:

  • government agencies
  • cyber security organisations
  • fund recovery services
  • lawyers
  • consumer advocacy groups
  • charities.

Scamwatch adds that people may be approached by other “victims” who say a particular service got their money back.

IDCARE says scammers often describe themselves as “Funds Recovery Agents, Crypto Investigators, or Block Chain Experts”. ASIC describes scammers using fake reviews, or contacting real victims directly while posing as fellow victims. The NASC notes these scams can come with websites that “look professional” and “detailed guides and other paperwork” to make the recovery seem genuine.

The money is then taken in stages. IDCARE describes further payment requests following the first, described as “administrative costs, taxes or other associated fees”. ASIC notes requests for upfront fees, especially in cryptocurrency, and claims that tax or fees must be paid to “release” funds.

Why recovery scams work

A recovery scam doesn’t need to invent a problem. The loss is real, and the person already wants it fixed. That gives the scammer three advantages.

  • Hope. Getting money back is exactly what the person wants to hear, so doubts are easier to push aside.
  • Sunk cost. Once a first “fee” is paid, walking away means losing that too. Each new request feels like the last step before the money is released.
  • Credibility on loan. Scammers pose as the very organisations people expect to help after a scam: government agencies, police, lawyers and consumer groups. Our guide to impersonation scams explains how these contacts are made to look genuine.

IDCARE, Australia and New Zealand’s national identity and cyber support service, sums up the reality: “If your bank is unable to recover your funds, it is highly unlikely that another organisation will.”

A fictional example

This example is fictional. Names and the website are invented.

Several weeks after losing money to a fake investment platform, Sam searches online for “how to get scammed money back”. Near the top of the results is an ad for recover-funds.example. The website has testimonials, a “case tracker” and a badge saying it works with “international authorities”.

Sam fills in a form. Within an hour, a “case officer” calls. She’s sympathetic, knows the name of the platform Sam used, and says their investigators have already traced his money to a crypto wallet. To start the legal process, there’s a processing fee, paid in cryptocurrency “so it can be matched to the wallet”.

Sam pays. A week later, the case officer has good news: the funds are ready, but a “release tax” must be paid first. Then a “compliance fee”. She also asks him to install an app “so our technician can set up your wallet safely”.

Every step matches a warning sign Scamwatch, ASIC and IDCARE describe: a recovery ad, an upfront fee, crypto payment, a “tax” to release funds, repeated requests for more, and a request for remote access.

Warning signs of a money recovery scam

Scamwatch lists these signs:

  • someone contacts you after a previous scam, saying they can recover your money
  • other “victims” tell you about a service that got their money back
  • you’re asked to pay a fee, a percentage of the stolen funds, or a tax payment
  • they offer to track stolen cryptocurrency
  • you’re asked for more money to continue the “investigation”
  • you’re asked for personal information or remote access to your devices
  • a website or ad promises to recover funds, including cryptocurrency.

The NASC also mentions requests to set up a cryptocurrency wallet.

Why remote access is a particular risk

Scamwatch and the NASC both list requests for remote access to your device as a warning sign. IDCARE says people who allowed criminals remote access to their device may later be told the criminals can recover their losses. See remote access scams.

How to check someone who says they can help

ASIC’s position is the simplest check of all: “If you have been scammed, and someone contacts you with an offer to help recover money, it is a scam.” The checks below are for when someone claims to be a licensed firm, a lawyer or an agency.

How to check a financial firm on ASIC’s registers

Based on ASIC’s “Use ASIC’s resources to help avoid scams” page and its June 2026 media release (checked October 2026; ASIC’s pages have the latest details):

  1. Go to ASIC’s Professional Registers search (linked from asic.gov.au).
  2. Search using the firm’s name, ABN, ACN or licence number.
  3. Check whether it holds an Australian financial services (AFS) licence or an Australian credit licence, and that the licence number and company details match what you were told.
  4. Check the Principal website field and the Websites section. ASIC says that if the website you were given isn’t listed, be cautious and contact the licensee using details from its principal website on the register.
  5. Check ASIC’s Investor Alert List, which ASIC describes as listing companies, businesses and websites that could be fraudulent.

ASIC notes that criminals copy the names, licence numbers and websites of real licensees, which is why it’s adding website addresses to the register. It also says a register listing “does not guarantee that the business is trustworthy”. ASIC said in June 2026 that it aims to list most licensee websites within the coming months, so not every licensee may have one listed yet. Our investment scams guide covers the same ASIC register checks for investment offers.

How to check a lawyer

The NASC says to use only lawyers registered with your state or territory’s Law Society or Bar Association. As with any check, the NASC says to contact the person or firm using details you find yourself, not those in the message.

How to check a caller who says they’re from government or police

The NASC describes verifying any caller by contacting the organisation using details you find yourself. In practice, that means ending the call, finding the agency’s number on its official website, and asking whether it contacted you. ASIC also says “ASIC cannot assist in getting money back”, so a caller claiming to be from ASIC and offering to recover funds is a red flag on ASIC’s own account.

What official sources say to do with a recovery offer

  • ASIC says “the best thing to do is to hang up, delete the email or otherwise ignore the contacts”.
  • The NASC says that if you’ve been scammed before and are offered help recovering money for an upfront fee, “it’s a scam”. It describes saying no, hanging up and blocking repeated contact.
  • Scamwatch says “Never accept offers from anyone who says they can get your money back” and “Never give strangers your personal details or remote access to your devices”.

Where official sources point people instead

Scamwatch says to work with your bank or financial institution to try to recover money, and to report any third-party recovery offers to police. Our help page sets out what official sources say to do first if you sent money. ASIC notes that a bank may be able to reverse a bank transfer or credit card payment if contacted quickly, but that crypto payments are generally very hard to reverse. myGov notes that it isn’t always possible to recover money lost to cybercrime.

If you’re unhappy with your bank’s response, the NASC points to the Australian Financial Complaints Authority (AFCA), a free, independent dispute resolution service. IDCARE offers free support for individuals on 1800 595 160.

Common questions

Is a company offering to recover my scammed money legit?

ASIC’s position is direct: “If you have been scammed, and someone contacts you with an offer to help recover money, it is a scam.” Scamwatch says to never accept offers from anyone who says they can get your money back. Official sources point to your own bank first, and to AFCA, a free, independent dispute resolution service, if you’re unhappy with the bank’s response. See What official sources say to do with a recovery offer.

Can I get my money back after a scam?

It isn’t always possible. myGov notes that money lost to cybercrime can’t always be recovered. ASIC says a bank may be able to reverse a bank transfer or credit card payment if contacted quickly, but that crypto payments are generally very hard to reverse. Scamwatch says to work with your bank or financial institution to try to recover money. See Where official sources point people instead.

Should I pay a fee to get my scammed money back?

The NASC says that if you’ve been scammed before and are offered help recovering money for an upfront fee, “it’s a scam”. IDCARE describes further payment requests following the first, described as “administrative costs, taxes or other associated fees”, and Scamwatch says the scammers “will just steal more money from you”. The steps official sources describe are contacting your bank, IDCARE and Scamwatch. See Warning signs of a money recovery scam.

Can a crypto recovery service trace my stolen crypto?

Scamwatch lists offers to track stolen cryptocurrency, and websites or ads promising to recover it, among the warning signs of a recovery scam. IDCARE says scammers often call themselves “Funds Recovery Agents, Crypto Investigators, or Block Chain Experts”, and the NASC mentions requests to set up a cryptocurrency wallet. ASIC says crypto payments are generally very hard to reverse. See How it works.

How do I check if a recovery firm or lawyer is real?

ASIC describes searching its Professional Registers and Investor Alert List, and checking that the licence number, company details and listed websites match what you were told. The NASC says to use only lawyers registered with your state or territory’s Law Society or Bar Association, and to contact anyone using details you find yourself. ASIC also says it “cannot assist in getting money back”. See How to check someone who says they can help.

What do I do if I’ve already paid a recovery scammer?

Scamwatch’s steps are to contact your bank or card provider right away and ask it to stop transactions, contact IDCARE on 1800 595 160 for free help planning your response, and report the scam to Scamwatch. If the “recovery” firm was given remote access to a device, the steps for remote access scams apply too. The NASC describes blocking repeated contact. See If it’s already happened.

If it’s already happened

Scamwatch’s steps:

  1. Contact your bank or card provider right away to report the scam and ask them to stop transactions. Update passwords on important accounts (see how to secure your online accounts).
  2. Contact IDCARE on 1800 595 160 for free help planning your response.
  3. Report the scam to Scamwatch.

If you gave the “recovery” firm remote access to a device, the steps in remote access scams apply too. The NASC describes blocking repeated contact, as recovery scammers often try again.

Where to report

Scamwatch takes reports of recovery offers as well as the original scam, at scamwatch.gov.au/report-a-scam. Cybercrime can be reported to police through ReportCyber at cyber.gov.au. See where to report scams and cybercrime in Australia and first steps after a scam.

Looking after yourself

Being targeted again after a scam can be very distressing. These scams are deliberately aimed at people who have already lost money, so being contacted says more about the scammers than about you. Moneysmart lists Lifeline (13 11 14) and Beyond Blue (1300 22 4636) for emotional support, and the National Debt Helpline (1800 007 007) for money problems. IDCARE also suggests telling friends and family, who can help with recovery.

Sources

money recovery scamsrecovery scamfollow-up scamfake recovery firmcrypto recovery scamscammed again