Fake Law Firm Crypto Recovery Scam

The email, letter or Telegram message follows a tight formula. It names the exact platform or wallet where you lost crypto — proof, apparently, that they know your case. It cites a case number, sometimes a real-looking court reference. It states that the firm has been retained by the SEC, the FCA, the FBI, Europol, or a court-appointed receiver to distribute recovered funds to identified victims. Your share is quantified — often close to the amount you actually lost — and payment is imminent, subject only to a small administrative or legal fee paid upfront.

Every element is fabricated. Regulators do not delegate victim contact to private law firms. Court-appointed receivers do not solicit fees from victims — they are paid out of the recovered estate. And no legitimate distribution has ever required a victim to send more money to receive their own back.

Retainer or filing fee. The opening ask is usually modest — $500 to $3,000 — framed as a court filing fee, a case-opening retainer, or a share of the class-action costs.

Escrow deposit. Once you have paid the first fee, an 'escrow account' is opened in your name. A deposit is required to 'activate' it before the recovered funds can be transferred in.

Anti-money-laundering tax. The recovered sum is now supposedly ready, but the jurisdiction requires an AML clearance tax — typically a percentage of the recovery — before release. This is the largest fee and often the point where the victim finally stops.

Insurance / bond. A fresh 'insurance bond' is required to guarantee the international wire. Every payment triggers a new obstacle. No funds are ever released.

A common variant clones the identity of a real, regulated law firm — the FCA calls this 'clone firm' fraud. The scammer copies the firm's name, address, partner biographies and bar registration number, then registers a lookalike domain (e.g. clifford-chance-legal.com instead of the real cliffordchance.com). The victim who does a cursory search sees the real firm and is reassured.

The defence is simple: never use contact details from the message itself. Look the firm up on the official bar or law society register (the SRA in England, the ABA in the US, the Law Society of NSW in Australia) and call the number listed there. If the number you were given does not match the register, the firm contacting you is fake — even if the name is real.

1. Search the regulator directly. The SEC (sec.gov/litigation), FCA (fca-scam-list), FBI (ic3.gov) and ASIC list every real enforcement action. A case that does not appear is not real.
2. Cross-check the law firm on the official bar or law society register. Compare the phone and address against those on the register.
3. Run the firm's website through Scam AI to check domain age and fraud reports.
4. Search "[firm name] scam" and "[firm name] recovery" on Reddit and Trustpilot.
5. If in doubt, phone your national fraud line: IC3 (US), Action Fraud 0300 123 2040 (UK), Scamwatch (AU), Canadian Anti-Fraud Centre 1-888-495-8501.

The law-firm variant targets victims who believe in the legal system. The technical variant targets victims who believe in the technology. Both are the same underlying advance-fee fraud with different theatre. If you have been contacted by a firm claiming proprietary 'blockchain reversal' or 'one-time-use recovery' software, see our crypto asset recovery scam explainer, and the broader advance fee scam overview for the shared playbook.

Pay nothing. Do not share your ID documents, wallet keys, exchange logins or bank details — these get monetised even if you never send funds. Preserve every message and URL, and report to your national fraud agency and to the regulator being impersonated. Then run the firm's website through Scam AI before you make any further decision. If the verdict is red, treat every claim in the letter as false.