Spot the Signs. Protect Your Finances.

Scammers may pose as law firms or government agencies and claim they can recover cryptocurrency lost to fraud. These recovery scams can cause further financial loss by taking more money or personal information from people who have already been targeted.

Red Flags to Watch For:

• They know details about a previous scam and use them to gain your trust.
• They pressure you to stay on the phone, act quickly, or follow their instructions without checking with anyone else.
• They claim to be an “authorized partner” of a government agency. Treat these claims with caution and verify them independently.
• They use official-sounding names for agencies that may not exist or impersonate legitimate organizations, such as the Federal Trade Commission (FTC).
• They ask you to pay fees using cryptocurrency or gift cards.
• They ask you to join WhatsApp groups or other chats and may insist that you keep the conversation secret.
• They pressure you to open bank accounts or send money to other people or businesses.

Protect Yourself:

• Be cautious of unexpected calls, messages, or emails offering to recover money or cryptocurrency.
• Verify a lawyer’s credentials and any claimed government affiliation using independent, official sources.
• Do not pay recovery fees in cryptocurrency or gift cards, and be wary of requests for upfront payments.
• Be honest with your financial institution about why you are withdrawing or transferring money. Never let someone pressure you into providing a false explanation.
• If someone claims to be working with your financial institution or a government agency, contact the organization directly using a trusted phone number. Do not rely on contact information or links supplied by the person who contacted you.

You can report suspected online scams to the FBI’s Internet Crime Complaint Center (IC3) at ic3.gov.

👉 Learn more: FBI Public Service Announcement

Deposit scams often involve receiving money that appears legitimate and being asked to send some of it to another person. Later, the original payment may turn out to be fraudulent, leaving you responsible for the money you sent.

Scammers may use checks that look like cashier’s checks from real banks, U.S. Postal Service money orders, or other forms of supposedly “guaranteed funds.” They may also ask for your online banking credentials to arrange a deposit or receive payments. Never share your online banking username, password, or one-time security codes.

A check may take several business days or longer to be identified as fraudulent, even if the funds appear in your account or are initially made available. If the check is later returned unpaid, you may be responsible for the amount you sent or spent. Contact your financial institution if you are unsure whether a payment is legitimate.

Common Deposit Scam Warning Signs

• You receive an online job offer that involves cashing checks, depositing money, or forwarding payments. Examples may include mystery shopping, interpreting, car-wrap advertising, or cashing checks for an overseas company.
• You sell something online, and the buyer sends more than the agreed price or extra money for a supposed shipping agent, then asks you to send the difference elsewhere.
• You are told you have won a foreign lottery or prize but must pay taxes or fees upfront to receive your winnings.
• Someone you have met online offers to send you money and asks you to transfer it to another person or invest it on their behalf.
• A prospective roommate sends you a check for rent or expenses, then claims there has been an emergency and asks you to return some or all of the money before the check is confirmed as legitimate.

You may receive an unexpected call, email, or pop-up message claiming your computer has a virus or that suspicious activity has been detected. The message may urge you to call a phone number, click a link, pay for unnecessary protection, or allow someone remote access to your computer. These are common tactics used in tech support scams.

Be cautious of unexpected virus alerts that ask you to call a phone number, make a payment, or give someone remote access to your device. Scammers may use alarming messages or pretend to represent a trusted technology company to gain your confidence. If you are concerned about your computer, contact a reputable support provider using contact information you find independently, rather than information provided in the alert.

Phishing messages are designed to trick you into sharing personal information or clicking a link. An email or text may claim you need to protect your account, unlock access, or prevent fraud urgently. The link may lead to a fake website that looks like a legitimate one but is designed to steal your login details or other sensitive information. If a message concerns your account, do not use the links or phone numbers it provides. Instead, contact the organization using a trusted phone number or website you find independently.

Some phishing links may also download harmful software onto your device or direct you to websites that try to steal your information. Keeping your operating system, browser, and security software up to date can help reduce these risks.

Don't Get Hooked

Be cautious with unexpected emails and messages, especially those that ask you to act quickly, share personal information, or open an attachment. Avoid clicking suspicious links or opening unexpected attachments. If you need to verify a message, contact the organization using a trusted phone number or website.
You can hover over a link on a computer to preview its destination, but remember that a convincing-looking address is not proof that a site is safe. When possible, use a saved bookmark or type the official website address directly into your browser.

Look closely at the sender's email address and website links for misspellings, extra characters, or unusual domains. For example, a fraudulent address may resemble a familiar company name but contain subtle differences. When in doubt, do not click—verify the message independently.