You already lost money. You already feel foolish. You already spent weeks trying to recover what was taken.
And now someone is calling to tell you they can help.
Stop. Before you listen to another word, you need to understand something uncomfortable but critical: being scammed once makes you a more valuable target, not a less likely one.
I spent 17 years inside bank fraud investigations. I have reviewed customer dispute files where victims returned weeks after the first loss because someone contacted them offering to recover their money. They lost more the second time. The scammers knew exactly what to say because they were working from a script — and a list.
This is how the second scam works. This is why you are on that list. And this is how you make sure it stops with you.
“If someone asks you to pay to recover your money, stop and verify.”
— Rebecca Harlow
Key Takeaways
Being scammed once is a known risk factor for being scammed again. Nearly one in five scams reported in 2025 involved a recovery room scam — where the criminal falsely promised to recover money lost in a prior scam in exchange for an upfront fee.
Scammers buy and sell “sucker lists” containing names, addresses, phone numbers, the type of scam that worked, and how much the victim paid. The FTC has documented this practice directly.
Recovery scammers impersonate the FTC, the FBI's IC3, law firms, and consumer advocacy groups. Between January 2025 and July 2026, the FBI received nearly 61,000 complaints of law enforcement or government impersonation scams, with losses exceeding $1.6 billion.
The FBI and FTC never contact you by text or messaging app to offer recovery help. A real FTC employee will not claim to help you recover money and ask you to pay them or move money to an account they specify.
Shame and isolation make repeat targeting easier. Victims who withdraw from family and institutions become more vulnerable to further exploitation.
The List You Didn't Know You Were On
Here is how the machinery works.
When you were first scammed, your information — name, phone number, email, address, the type of scam that worked, and the amount you lost — became a data point. Scammers buy, sell, and trade these lists. The FTC calls them “sucker lists”.
These lists circulate among criminal networks. They are sometimes stolen from legitimate complaint databases. They are sometimes generated by the original scammers themselves, who sell their own victims' information to other fraudsters. Scammers in the cryptocurrency space have found these lists particularly valuable, since 70% of recovery room scams in 2025 were associated with cryptocurrencies.
The logic is brutally simple. If you fell for a scam once, you are statistically more likely to fall for a second one — especially when the second scam offers exactly what you want most: your money back.
A TransUnion executive put it plainly: “Once you've been a victim, fraudsters can seize the opportunity to target you a second time, and in a lot of cases, this can be effective because they hold verified information on the individual from the original scam”.
They know what to say because they know what happened to you.
The Psychology of Repeat Victimization
Why do people who have already been burned fall again?
Research suggests that being defrauded once is a risk factor for a second or third round of fraud, which compounds the financial and emotional damage.
Part of it is neurobiological. Scam survivors face increased risk of revictimization due to trauma-related changes in brain function — particularly an imbalance between heightened threat detection and impaired decision-making. Hyperactivation of the brain's alarm system reduces the ability to pause, analyze, and evaluate new situations, leading to impulsive reactions or validation-seeking behavior.
Part of it is emotional. Scam victims commonly experience anger (86%), stress (73%), anxiety (63%), and depression (18%). Shame and guilt lead victims to avoid telling family, friends, and even law enforcement about the scam, resulting in non-reporting and isolation. That isolation creates the perfect conditions for a second attack.
Part of it is that victims simply cannot accept that they were fooled. Researchers describe a “rationalisation trap” where the person cannot admit to themselves that they were a victim of scams, even when confronted with overwhelming evidence. The mind clings to the belief that the money can still be recovered — which makes a recovery scam feel like hope rather than danger.
AARP's research on fraud communication notes that scammers deliberately trigger heightened emotional states to bypass logical thinking. The organization described this as getting targets “under the ether” — and it works because that is how human brains are wired to respond under emotional pressure.
The shame you feel? The desperation? The hope that someone can make it right? These are not weaknesses. They are human responses to betrayal. And they are exactly what the second scam is designed to exploit.
How the Second Scam Works: A Step-by-Step Anatomy
Recovery scams follow a predictable pattern. Recognizing the steps makes them harder to fall for.
Step 1: The Contact
Someone reaches out to you. It may be a phone call, a text message, an email, a social media message, or even a letter. You did not initiate this contact. You do not know this person.
They mention the scam you already experienced. They know details about it — what happened, how much you lost, how you paid. This is not a coincidence. They have your information from the list.
Step 2: The Pretense
They claim to be someone with authority. Common impersonations include:
FTC employees or “agents.” The FTC has issued alerts about scammers pretending to be FTC employees who claim they can help you recover money lost in a scam. They may send you a photo of a fake employee ID and badge to “verify” their identity.
FBI or IC3 personnel. The FBI has repeatedly warned that scammers impersonate IC3 employees, contact victims through phone calls or messaging apps, and direct them to fake IC3 update pages. IC3 has no social media presence, never initiates contact by phone, email, or chat app, and never asks for payment to recover lost funds.
Law firms or “consumer advocacy groups.” They may use professional-sounding names, fake websites with five-star reviews, and official-looking documents.
The original scammer's company. Some scammers pretend to be with the company that scammed you in the first place, claiming they are now offering refunds to dissatisfied customers.
Step 3: The Trust-Building
They use the details from your original scam to sound credible. They may reference transaction amounts, dates, or the payment method you used. They may cite a “case number” or “claim ID.” They may say they are holding recovered funds for you.
Some scammers have escalated their tactics. The FBI has warned about scammers using AI-generated deepfake videos impersonating IC3 leadership to add legitimacy to the scheme.
Step 4: The Ask
This is the moment the scam reveals itself. They need something from you before they can “recover” your money.
It may be:
An upfront fee — called a “retainer fee,” “processing fee,” “administrative charge,” “tax,” or “shipment and handling charge”.
Your financial information — bank account number, Social Security number, or checking account details, supposedly to deposit the recovered funds.
A gift card or cryptocurrency payment — because these are untraceable and irreversible.
Access to your accounts — login credentials, a one-time code, or remote access to your device.
Step 5: The Repeat
If you pay, they will ask for more. The “recovery” will encounter “complications.” There will be “legal fees” or “clearance charges.” Or they will simply disappear with your money and your information.
What Real Agencies Will Never Do
The FBI and FTC have both published clear guidelines about what their employees will and will not do. Learn these. They are your defense.
A real FTC employee will NOT:
Contact you by text message or a messaging app like WhatsApp
Text you a photo of their employee ID to “verify” their identity
Claim to help you recover money you lost in a scam and ask you to pay them, move your money into an account they specify, or give them your financial information
The FBI's IC3 will NOT:
Have any social media presence
Initiate contact by phone, email, or chat app
Ask for payment to recover lost funds
No legitimate organization will:
Ask you to pay upfront for a refund or for help getting one. Under the Telemarketing Sales Rule, recovery room operators cannot request or receive payment until seven business days after they deliver the recovered money to you.
Guarantee that you will get your money back.
Ask you to keep the process secret from your bank or family.
If someone does any of these things, they are a scammer. The FTC states this in plain language: “Anyone who does is a scammer”.
Red Flags: How to Spot the Second Scam Before It Costs You
Run through this list before you engage with anyone who contacts you about recovering lost money.
The contact came out of nowhere. You did not seek them out. They found you. Legitimate recovery services do not cold-call scam victims.
They know details about your original scam. This feels reassuring. It should feel alarming. It means they have your information from a list.
They ask for an upfront fee. This is the single most reliable red flag. Legitimate recovery services do not charge upfront. Under the Telemarketing Sales Rule, it is illegal for recovery room operators to request or receive payment until seven business days after they deliver the recovered money.
They ask for your bank account information to “deposit” recovered funds. They do not need your account number to deposit money. They need it to steal from you.
They want payment by gift card, cryptocurrency, wire transfer, or payment app. These methods are untraceable and irreversible. No legitimate business operates this way.
They create urgency. “The funds will be released today only.” “You must act within 24 hours.” “Your claim will expire.” Urgency is a manipulation tactic.
They tell you to keep it secret. Legitimate processes do not require secrecy from your bank or family. Secrecy isolates you, which is exactly what they want.
They claim to be from a government agency. The FTC, FBI, and other agencies do not call you to offer recovery services. They do not charge fees. They do not ask for your financial information.
What to Do If You Are Contacted Again
If someone contacts you claiming they can recover your lost money, here is your sequence.
Do not engage. Do not call back. Do not reply. Do not click links. Do not provide any information.
Document the contact. Write down the phone number, email address, name used, and what they said. This information is valuable for reporting.
Verify independently. If they claim to be from a government agency, look up that agency's contact information on your own — do not use any number or link they provide. The FBI advises typing ic3.gov directly into your address bar and avoiding sponsored search results.
Report it. File a report with the FTC at ReportFraud.ftc.gov. If the scam involves cryptocurrency, a fake law firm, or online fraud, report it to the FBI's IC3 at ic3.gov. If they impersonated a government employee, that is a federal crime and should be reported.
Warn others. If you are part of a support group, online community, or family network, share what happened. Your experience protects others.
Protecting Yourself Going Forward
You cannot remove your name from every list. But you can make yourself a harder target.
Place a fraud alert or credit freeze. A fraud alert with one credit bureau notifies the other two and requires businesses to verify your identity before opening new accounts. A credit freeze is stronger — it prevents creditors from accessing your credit file at all.
Review your credit reports regularly. Get free reports at AnnualCreditReport.com. Look for accounts or inquiries you do not recognize. Monitoring can spot fraud but generally cannot prevent it, so pair it with a freeze or alert.
Use multi-factor authentication everywhere. Especially on banking, email, and any account linked to payments. MFA remains one of the most effective barriers against account takeover.
Tell someone. Isolation is the scammer's ally. Tell a family member, a friend, or a support group what happened. If you are contacted again, tell them. They can help you spot what you might miss.
Contact the AARP Fraud Watch Network Helpline. This free resource is available to people of any age at 877-908-3360. Trained volunteers can help you evaluate suspicious contacts.
If You Have Already Been Contacted or Paid a Second Scammer
Do not blame yourself. That is the first thing.
The shame you feel is the scammer's most effective tool. It keeps you from calling your bank. It keeps you from filing a report. It keeps you from telling anyone. The system is designed to make you feel stupid so you stay silent.
You are not stupid. You were targeted by professionals who do this for a living.
Here is what to do now:
Stop all contact. Do not send more money. Do not provide more information.
Contact your bank immediately. If you paid by debit card, credit card, wire, or payment app, report the transaction. Use the language from our guide on unauthorized vs. authorized transactions. If the payment qualifies as unauthorized under Regulation E, you may have liability protections.
Report to the FTC and IC3. File at ReportFraud.ftc.gov and ic3.gov. Even if recovery is unlikely, the report creates a record and helps authorities connect your case to broader patterns.
Secure your identity. If you shared personal information, place a fraud alert or freeze with the credit bureaus. Report to IdentityTheft.gov if your Social Security number or other sensitive information was exposed.
Tell someone. You do not have to carry this alone.
The Bottom Line
The second scam is not an accident. It is an industry.
There are people whose entire business model is finding scam victims and selling them hope. They buy lists with your name on them. They study what worked the first time. They call you with a story that sounds like exactly what you want to hear.
But here is what they do not know: you are reading this. You know they are coming. You know what the red flags look like. You know that no legitimate agency charges upfront fees, that no real investigator asks for gift cards, and that anyone who contacts you out of the blue offering to recover your money is almost certainly running a scam.
Being scammed once does not make you weak. Being targeted again does not make you foolish. Staying silent after either? That is the only thing that helps them.
You may not be able to undo what happened. But you can make sure the next move is yours.
Your next move is to write down this rule: If someone asks you to pay to recover your money, stop and verify. Every time. No exceptions.
Frequently Asked Questions
How did scammers get my information after the first scam?
Scammers buy and sell lists of known scam victims. These lists contain names, addresses, phone numbers, the type of scam that worked, and how much was lost. The FTC calls them “sucker lists.” Your information may also have been compromised if the original scammer sold it, or if you publicly discussed the scam on social media or in a forum.
Will the FTC or FBI ever call me to help recover my money?
No. The FTC does not contact consumers by text or messaging app to offer recovery help, and it will not ask you to pay or move money. The FBI's IC3 has no social media presence, never initiates contact by phone, email, or chat app, and never asks for payment to recover lost funds.
I received a call from someone claiming to be from the FTC who knew details about my scam. Is this real?
No. The FTC has issued specific warnings about scammers impersonating FTC employees, sometimes sending fake employee ID photos and badges. A real FTC employee will not text you a photo of their ID to verify their identity.
What should I do if I already paid a recovery scammer?
Stop all contact immediately. Call your bank and report the transaction using the language in our unauthorized vs. authorized guide. File a report with the FTC at ReportFraud.ftc.gov and IC3 at ic3.gov. If you shared personal information, place a fraud alert or credit freeze.
How do I protect myself from being targeted a third time?
Place a credit freeze. Review your credit reports regularly. Use multi-factor authentication on all accounts. Tell someone about what happened — isolation makes you vulnerable. And share what you have learned with others, because awareness is the best defense.
Is there any legitimate way to recover money lost to a scam?
Sometimes. If the transaction qualifies as unauthorized under Regulation E, your bank may be required to reimburse you. Credit card chargebacks under the Fair Credit Billing Act offer another path. But legitimate recovery processes never require an upfront fee from you. If someone asks for payment before recovering anything, it is a scam.
What if the recovery scammer is threatening me or my family?
If you feel physically unsafe, contact local law enforcement immediately. Threatening calls and messages are a crime. Document everything and report it to the FBI at tips.fbi.gov in addition to your local police.
No comments yet.