Reviewed guide | 2026-10-17
After a crypto loss, the recovery agents arrive: how the second scam works in South Africa
People who lose money to a crypto scam are often targeted again by so-called recovery experts, hackers or lawyers. How the pitch works, the signs that give it away, and the legitimate steps South Africans can take instead.
Multiple exchanges | South Africa | ZAR | fees, access and account safety
The first loss is painful. The second one is often worse, because it lands on someone already desperate. After a fake investment platform disappears or a wallet is drained, victims post about it in Facebook groups, on X or in the comments under exchange posts. Within hours, messages arrive: a certified blockchain investigator, an ethical hacker, a law firm that specialises in crypto, sometimes even someone claiming to work for Binance, OKX, Bybit or Bitget. They all promise to trace and return the funds, for a fee. In practice the fee is the scam.
How the pitch usually goes
The contact is friendly and confident. They mention having helped others recover large amounts, may share screenshots of successful cases and quote technical terms about tracing wallets. They ask for an upfront fee for software, a deposit to unlock the funds, or a percentage paid in advance. Some ask for your exchange login or seed phrase so they can access the funds directly. Once you pay, a new obstacle appears, such as a tax or a release fee, and the payments continue until you stop.
Signs that give it away
They contacted you first, often after you posted publicly. They want payment before doing anything, typically in crypto. They promise certainty about getting your money back, which no honest investigator can do once funds have moved on-chain. They ask for passwords, two-step codes or recovery phrases. Their company cannot be found in any official register, or the name is very close to a real firm. Any one of these is enough to end the conversation.
What legitimate help looks like
If the loss involved an exchange account, contact that exchange through the support chat or ticket form inside its app, explaining what happened and providing transaction IDs. Exchanges cannot reverse on-chain transfers but can sometimes freeze funds that reach an account on their platform, particularly when law enforcement is involved. Report fraud to the South African Police Service and keep the case number. If a bank transfer was involved, contact your bank's fraud line immediately.
Protect yourself while you deal with it
Stop posting details of the loss in public groups, because each post attracts more fake helpers. Set social media messages to restricted where possible. Change passwords on any account that might be affected and secure your email first. Keep a single folder with transaction IDs, screenshots, chat logs from the original scam and your police case number. Tell family members what happened; scammers sometimes contact relatives with the same recovery story.
Risk boundary: South Africa Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Treat anyone who contacts you first offering to recover lost crypto as a likely scammer.
- Never pay an upfront fee or share passwords, two-step codes or recovery phrases for recovery.
- Report the loss to the exchange through its in-app support and to SAPS, keeping the case number.
- Stop posting the loss in public groups and keep all evidence in one folder.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.