TL;DR
A warning has been issued about a scam targeting people who have lost access to cryptocurrency wallets. Fraudsters posing as crypto recovery specialists offer to retrieve lost private keys or seed phrases, then steal remaining funds or extract upfront fees without delivering any service. The FCA's ScamSmart tool confirms crypto assets are largely unregulated, meaning victims have limited recourse. Action Fraud reported crypto fraud losses of £226 million in 2023-24.
Last reviewed: 28 June 2026
|
Key Facts Crypto fraud losses UK: £226m (2023-24, Action Fraud)FCA protection: Limited — crypto largely unregulatedRecovery firm red flag: Upfront fee requiredReport to: Action Fraud: 0300 123 2040 |
How the crypto recovery scam works
Cryptocurrency recovery scams target individuals who have genuinely lost access to their wallets -- typically because they have forgotten their private key or seed phrase, lost the device holding their wallet, or had their recovery codes destroyed. The fraudster identifies potential victims through online forums, social media groups where people discuss lost crypto, or by cold-calling.
The fraudster presents themselves as a specialist recovery service with technical expertise in retrieving lost wallet access. They typically show fabricated testimonials, create professional-looking websites and claim success rates of 90 percent or higher. To begin the recovery process, they ask for an upfront fee -- often framed as a deposit, technical assessment charge or software licence. Once paid, the fraudster either disappears or invents further reasons why additional payments are needed before recovery can proceed.
A more sophisticated variant involves the fraudster gaining remote access to the victim's device ostensibly to run recovery software. Once inside the device, they access any cryptocurrency wallets or exchanges the victim has open, stealing funds directly. Victims in this scenario lose both any remaining accessible crypto and the upfront fee.
Why crypto recovery is almost always impossible
The fundamental design of cryptocurrency networks makes genuine private key or seed phrase recovery effectively impossible without the original information. Private keys are cryptographically generated strings that cannot be derived from other account information. Seed phrases (typically 12 or 24 words) are the only backup for a private key. No third party -- legitimate or otherwise -- can recover a private key or seed phrase from the blockchain or from an exchange.
Where crypto is held on an exchange (a custodial arrangement), the exchange controls the private keys on the user's behalf. In these cases, account recovery follows the exchange's own identity verification process -- not a third-party recovery service. No legitimate recovery firm has any ability to access exchange-held funds that a third party has been locked out of.
FCA regulation and your rights
Most cryptoassets are not regulated financial products under the Financial Services and Markets Act 2000. This means the protections that apply to regulated investments -- including access to the Financial Ombudsman Service and the Financial Services Compensation Scheme -- do not apply to most crypto losses. Cryptoasset businesses operating in the UK must register with the FCA for anti-money laundering purposes under the Money Laundering Regulations 2017, but registration is not authorisation and does not provide consumer protection equivalent to FCA regulation.
From January 2024, the FCA has regulated cryptoasset financial promotions. Any firm promoting crypto investments to UK consumers must be FCA-authorised or have their promotions approved by an authorised firm. Fraudulent recovery firms operating in the UK would not hold FCA authorisation. Always check the FCA register at register.fca.org.uk and the FCA Warning List before engaging any financial firm.
What to do if you have lost crypto access
If you have genuinely lost access to a cryptocurrency wallet, the first steps are to search systematically for any written or digital backup of your seed phrase or private key, check whether any hardware wallet backup exists, and contact the wallet provider's official support channel through their verified website. Do not search for recovery services through Google, social media or unsolicited contacts.
If you have been approached by a recovery firm, do not pay any upfront fee and do not grant remote access to your device. Report approaches to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. If you have already been defrauded, report immediately to Action Fraud and contact your bank if any payment was made by bank transfer -- the Payment Systems Regulator's APP reimbursement scheme (effective October 2023) may provide recourse if the payment was made by Faster Payments.
|
Related Guides |
|
Disclaimer This article is for information only and does not constitute financial or legal advice. Kael Tripton Ltd is an independent editorial publisher and is not regulated by the FCA. |
Frequently asked questions
Can anyone genuinely recover a lost crypto private key?
No. Private keys and seed phrases are cryptographically generated and cannot be derived from any other information. No third party has the ability to recover a lost private key or seed phrase from the blockchain. Any firm claiming to offer this service is either fraudulent or misleading about what they can do. The only genuine route to access is finding your own backup of the key or seed phrase.
Is the FCA involved in crypto regulation?
The FCA regulates cryptoasset financial promotions and requires cryptoasset businesses to register for AML purposes. Most cryptoassets are not regulated investments, meaning FOS and FSCS protections do not apply to crypto losses. From January 2024, promotions of qualifying cryptoassets must comply with FCA financial promotion rules. Check register.fca.org.uk to verify whether any crypto firm is registered or authorised.
What is the APP reimbursement scheme?
The Authorised Push Payment (APP) fraud reimbursement scheme, introduced by the Payment Systems Regulator in October 2023, requires banks to reimburse victims of APP fraud where money was sent by Faster Payments to a fraudster's account, up to £85,000 per claim. If you were defrauded into sending money to a crypto recovery scammer via bank transfer, you may be entitled to reimbursement from your bank under this scheme. Contact your bank immediately after discovering the fraud.
How do I check if a crypto recovery firm is legitimate?
Check the FCA register at register.fca.org.uk and the FCA Warning List at fca.org.uk/scamsmart. Legitimate financial firms in the UK are FCA-authorised. Search Action Fraud's fraud alert database. Be extremely sceptical of any firm found via a Google search, social media advert or unsolicited contact -- these are the primary channels fraudsters use to identify victims. No legitimate recovery service exists for lost private keys.
Where do I report a crypto recovery scam?
Report to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. If money was transferred from your bank, contact your bank immediately to report the fraud and request a recall. Report the firm to the FCA at fca.org.uk/consumers/report-scam-us if it is presenting itself as a financial services firm. If the firm is advertising on social media, report the advert to the platform.
|
Sources FCA ScamSmart: Crypto Scams |
