Why Past Scam Victims Are Being Targeted Again by a Second Scam

Getting scammed once is bad enough. But thousands of Americans are learning that the first scam was only the opening move. Weeks or months after losing money to fraud, the same people are getting phone calls, texts, and emails from people claiming they can get that money back. All they need is a small fee upfront.

This is called a recovery scam, and it's quietly become one of the fastest-growing frauds in the country. Fraud experts predict recovery scams will rank among the top frauds of 2026. If you've ever lost money to a scam and then gotten an unexpected call from someone claiming they can recover it, you already know how convincing this second con can sound.

This guide breaks down exactly how these operations find their targets, what the pitch usually looks like, and what to do if you get one of these calls.

What Is a Recovery Scam

A recovery scam (sometimes called a refund scam or a "recovery room" scheme) is a con where criminals contact someone who has already lost money to fraud and offer to help get it back, for a fee paid in advance. The fee might be labeled a retainer, a processing charge, a tax, or a release fee. Whatever it's called, the money goes straight into the scammer's pocket and the "recovered funds" never show up.

This isn't a new trick. The FTC has been prosecuting so-called recovery rooms since at least the 1990s. In one early case, a federal court upheld FTC charges against a Georgia telemarketing operation that promised to recover money for people who'd lost cash investing in radio licenses, ordering the operators to pay over $161,000 in consumer redress and permanently stop offering recovery services. That case is over three decades old. The tactic has barely changed since then. What's changed is the scale, thanks to data breaches and the sheer volume of fraud already happening in the US.

Recovery scams sit in a strange corner of the fraud world because they prey on people who are already educated about scams in one specific way. A victim who just lost money to a fake investment platform knows what a scam call sounds like in theory. But a recovery scam doesn't sound like the original con. It sounds like justice. It sounds like someone finally on their side. That's what makes it dangerous even for people who consider themselves careful.

If you want to see how common straightforward government impersonation calls have become on their own, our breakdown of the fake FTC call that ends in a Zoom police interview covers a closely related version of this same con.

How Scammers Know You Were Scammed

The most unsettling part of a recovery scam is that the caller often already knows details about your original loss. They might know the amount you lost, the type of scam it was, or even the platform you used to send the money. That's not a coincidence and it's not magic. It's a data trail, and understanding where that trail comes from is the first step toward protecting yourself from the second hit.

Sucker Lists Are Bought and Sold

Once someone falls for a scam, their information often doesn't disappear. Recovery scammers buy contact lists known as "sucker lists" from other scammers, and AARP's reporting on recovery scams explains these lists typically include a victim's name, contact information, the type of scam they fell for, and how much money they lost. Fraud criminals build and trade these databases the same way a real estate agent might build a list of potential homebuyers. An FTC attorney working this area, Elsie Kappler, told AARP that scammers know these people have already been scammed, which is exactly why they make such good targets.

These lists aren't small side businesses either. They function as a commodity inside organized fraud networks, often changing hands multiple times before a specific victim gets a follow-up call. A list built from one romance scam operation might get sold to a completely separate group running fake law firm recovery calls, months or even years later. That gap in time is part of what makes the second scam feel disconnected from the first, even though the two are directly linked.

Original Scammers Sometimes Come Back Themselves

Sometimes there's no list changing hands at all. The same criminals who stole from a victim the first time may simply re-target that person directly, this time claiming they can help recover the loss. If a scammer already has your phone number, your email, and a working script that got money out of you once, calling back under a new identity is easy money. Some operations run this as a two-part scheme from the start, planning the recovery pitch before the original scam is even finished.

Data Breaches Feed the Pipeline

Beyond scam-specific lists, general identity theft data adds fuel to the fire. The Identity Theft Resource Center's 2026 Trends in Identity Report found that a quarter of identity crime victims were dealing with two or more incidents at the same time, and that most attempted identity misuse involved new account applications. Once your personal details are floating around after one incident, they tend to get reused for the next one.

This overlap between identity theft and fraud victimization means the two problems compound each other. A person whose Social Security number was exposed in a breach and who also lost money to a scam becomes a target for multiple categories of follow-up crime at once, not just a recovery pitch but also new account fraud, tax fraud, and medical identity theft. If you're unsure whether your own information has already been compromised somewhere, our guide on the AI voice cloning trend and where scammers get your voice data explains how even a few seconds of audio can end up in a criminal's toolkit.

How the Recovery Scam Pitch Actually Works

Recovery scams tend to follow a fairly predictable script. The FTC has documented this pattern across hundreds of complaints, and the structure rarely changes even as the specific details get customized to each victim.

Step 1: The Contact Feels Personal

You get a call, text, or email. The person on the other end already seems to know your situation. They might say something like, "We've identified you as a victim of the tech support scam that happened in March, and we're reaching out because you may be eligible for reimbursement." That specificity is designed to lower your guard immediately. Most people assume a scammer wouldn't know these details, so hearing them creates instant credibility, even though it should do the opposite.

Step 2: They Borrow Authority From a Real Institution

Yahoo's coverage of the FTC's recent warning describes how scammers pose as law firms, advocacy groups, or even the FTC itself when reaching out to past victims. Some go further. The FTC has documented cases where scammers text a photo of a fake government badge to make the call seem legitimate, a tactic we detailed in our piece on the fake FTC badge photo trick. Others set up fake websites with official-looking seals, case numbers, and staff directories to make the operation look like a real firm handling class action claims.

Step 3: The Upfront Fee Request

This is the tell that separates every recovery scam from a legitimate refund process. AOL's summary of the FTC's advisory lays out the usual pattern: an upfront payment demand made by gift card, cryptocurrency, wire transfer, or payment app, before any recovery work happens. Some frame the fee as a tax, a processing cost, or an insurance deposit needed to "release" the funds.

Real regulatory agencies never work this way. In fact, charging a fee before delivering promised results violates federal telemarketing law outright, under the FTC's Telemarketing Sales Rule, which specifically bars recovery services from collecting payment before results are delivered. This is the same legal principle behind other advance-fee schemes we've covered, including the credit card rate reduction calls that demand payment before lowering your rate.

Step 4: The Overpayment Twist

A newer variation adds an extra layer. Victims receive a check for more money than they lost, along with instructions to send back the extra amount. The check bounces days later, after the victim has already wired back the "overpayment" in real funds. This mirrors classic overpayment and fake check scams seen in other fraud categories, including the courier-based schemes described in our report on bank scam couriers collecting cash from front doors.

Step 5: Small Details That Don't Add Up

Look closely and the cracks usually show. The messages often contain spelling errors, or come from a personal email address or phone number that doesn't match the legitimate agency's real contact information. Fake case numbers, mismatched agency logos, and generic greetings like "Dear Valued Client" instead of an actual name are also common giveaways once you know to look for them.

Why This Con Works So Well

There's a psychological reason recovery scams succeed even against people who consider themselves careful. Someone who just lost their savings, retirement fund, or a chunk of a paycheck is not thinking with a clear head. They're desperate, embarrassed, and hopeful that there's a way to undo the damage.

FTC attorney Elsie Kappler described this dynamic directly to AARP, noting that this pattern is especially cruel because criminals know these victims are already emotionally invested in getting their money back, which makes them easier targets a second time. That desperation is the entire business model. A person who just wired $5,000 to a fake tech support agent is far more likely to send another $500 for a "recovery fee" than a stranger would be, because the emotional stakes are already sky high.

There's also a shame factor that keeps victims from talking to family or friends before acting. Many people who lose money to fraud feel embarrassed and avoid mentioning it to anyone close to them, which means the recovery scammer's call often becomes the only conversation happening about the loss at all. Without a second opinion in the room, the victim is left evaluating the offer entirely on their own, at the exact moment they're least equipped to think it through clearly.

This same emotional pressure shows up across nearly every scam category we track. Our breakdown of the pattern behind every scam walks through why urgency and emotional manipulation are the common thread, whether it's a romance scam, a tech support call, or a fake government notice.

Who Recovery Scammers Target Most

Recovery scams don't hit everyone equally. Certain groups get targeted more aggressively because of how the original fraud unfolded or because of demographic patterns criminals have learned to exploit.

Older Adults

Older Americans already absorb a disproportionate share of fraud losses, with people aged 70 and up losing far more money on average than any other age group, even though younger adults report losses more frequently. That combination, larger dollar amounts and less familiarity with digital verification tools, makes seniors especially attractive for a follow-up con. Our guide covering the five costliest scams hitting older adults shows just how large those totals have become, and how often the same households get hit more than once.

Investment Fraud Victims

People who lost money in fake crypto or investment schemes are frequent recovery scam targets because the original loss amounts tend to be large, sometimes tens of thousands of dollars, which makes victims more willing to pay a fee that feels small by comparison. This pattern connects closely to what we've documented in our coverage of deepfake investment scams built around fake celebrity endorsements.

Tech Support and Refund Scam Victims

Anyone who paid a "tech support" company or fell for a fake refund request has effectively confirmed to criminals that they'll pay over the phone or online for a promised fix. That makes them a soft target for a second approach. If you want to see how the original version of this scam operates, our article on tech support scams and the ten-minute habit that stops them lays out the initial playbook that often leads to a follow-up recovery pitch.

Anyone Who Posted About Their Loss Online

There's a newer channel worth knowing about. Victims who post about their financial loss on social platforms like Reddit or Facebook groups sometimes get direct messages within hours, often from accounts claiming to know an "ethical hacker" or "recovery expert" reachable on Telegram or Instagram. These messages are always fraudulent, and the speed at which they arrive after a public post shows just how actively these networks monitor for fresh victims. Some operations even run automated bots that scan public posts for keywords like "scammed" or "lost my savings" and send a templated pitch within minutes.

Real Warning Signs of a Fraud Recovery Scam

Here's a practical checklist you can use if you get a call, text, or email offering to recover money you've lost.

They contacted you first. Legitimate agencies and law firms handling class actions or restitution generally don't cold call individual victims to offer personalized recovery services.

They ask for money before doing anything. This is the single biggest red flag. Any request for payment before services are rendered, regardless of what it's labeled, should end the conversation immediately.

They want unusual payment methods. Gift cards, wire transfers, cryptocurrency, and payment apps like Zelle or Cash App are favorites because they're difficult to reverse and hard to trace.

They claim to represent a government agency. No federal agency, including the FTC, the FBI, the IRS, or the Social Security Administration, calls or texts individuals demanding payment or guaranteeing money recovery. We've documented this exact impersonation pattern in our reporting on fake Social Security and Medicare audit calls.

They pressure you to act fast. Urgency is a manufactured emotion designed to stop you from thinking things through or calling someone you trust first.

The math is unusual. If you're asked to send back part of a check they mailed you, or to pay "taxes" on money that hasn't even arrived yet, that's a scam every single time.

They found you through your loss. If a stranger already knows exactly how much money you lost and to what kind of scam, that alone should raise suspicion, since legitimate recovery through law enforcement doesn't work by cold outreach.

They discourage you from talking to anyone else. Any pitch that includes language like "keep this confidential" or "don't discuss this with your bank yet" is trying to isolate you before you can get a second opinion.

What to Do If You've Already Lost Money to One Scam

If you've recently been scammed and you're worried about becoming a repeat target, there are concrete steps you can take right away.

Report the Original Scam Immediately

Filing a report with the FTC at ReportFraud.ftc.gov creates an official record and can sometimes trigger faster action against the scheme, especially if enough people report the same operation. If your loss involved a card or bank transfer, timing matters a great deal for how much of your money you can legally get back. Our guide on the first 48 hours after being scammed covers the exact deadlines that determine your liability.

Freeze Your Credit

Since scam victim data often gets folded into broader identity theft, placing a freeze with all three credit bureaus (Equifax, Experian, and TransUnion) blocks new accounts from being opened in your name. This is free and can be lifted temporarily whenever you need it.

Assume Any Follow-Up Contact Is Suspicious

If someone reaches out claiming they can recover your money, treat every detail they offer with skepticism, even if they sound professional or reference accurate information about your case. Verify independently by calling the agency directly using a number from its official website, never a number the caller provides.

Don't Pay Anyone Upfront, Ever

The FTC's core advice is simple: don't trust unsolicited offers for recovery services and never pay anything upfront for that assistance. No legitimate recovery process, whether through a class action settlement, a bank dispute, or a law enforcement asset seizure, requires the victim to pay a fee before receiving funds.

Talk to Someone Before Sending Any Money

If you're on the fence about whether an offer is real, pause and call a family member, a bank representative, or a nonprofit consumer protection group before doing anything. Scammers rely on isolation and speed. Breaking that isolation, even for ten minutes, is often enough to stop the second scam cold.

Report the Recovery Scam Too

Every recovery scam attempt should be reported separately, even if you didn't lose money to it. These reports help regulators build cases and warn other potential victims. You can file with the FTC, your state Attorney General's consumer protection office, and, if a check or wire transfer was involved, your bank's fraud department.

Keep a Written Record

Write down the date, phone number, name used, and exact wording of any recovery pitch you receive. If the same operation contacts you again, or contacts a family member, this record makes it easier for investigators to connect the dots and for you to prove a pattern of harassment if it escalates.

How to Spot a Fake "Government Agency" on the Phone

Because so many recovery scams lean on impersonating federal agencies, it helps to know exactly how real government contact works.

The FTC does not call individual consumers to offer money recovery services. It also never demands payment over the phone, by gift card, or through a payment app. Real government refunds, when they happen, typically arrive through mailed checks or PayPal deposits tied to a public enforcement action you can verify independently. As The Register reported, the FTC issued over 736,000 PayPal payments totaling more than $25.5 million to consumers through one such settlement. Actions like that are published on FTC.gov well before payments go out, meaning you can check whether a supposed refund program is real before trusting anyone claiming to represent it.

If a caller claims to be from the Social Security Administration and offers to transfer your call or handle a "case" personally, that's also a fabricated setup. Our reporting on fake Social Security audit calls breaks down the exact phrase the SSA says should immediately end the call.

The Bigger Picture: Scam Losses Keep Climbing

Recovery scams don't exist in a vacuum. They're a byproduct of just how much fraud is already happening across the country. The Register's coverage of the FTC's annual fraud data shows total reported scam losses in the US reached over $12.5 billion in a single recent year, up $2.5 billion from the year before. That growing pool of victims is exactly what feeds the recovery scam pipeline. Every new fraud case adds another name to a list that criminals can circle back to later.

Imposter scams, where fraudsters pretend to be individuals or legitimate organizations, remain the most commonly reported type of fraud, with roughly one in five targeted people losing money at a median loss of $800. Since recovery scams are themselves a form of imposter fraud, layered on top of an earlier loss, the two categories often blend together in official complaint data, making the true scale of repeat victimization hard to fully measure. Some fraud researchers believe the real number of recovery scam attempts is significantly higher than reported figures suggest, simply because many victims of a second scam feel too embarrassed to file a report at all.

Frequently Asked Questions

Is it ever legitimate for someone to charge a fee to recover scammed money?
Legitimate attorneys handling fraud recovery cases typically work on contingency or bill after services are rendered, not before. A demand for payment before any recovery work has been done or verified is the clearest sign of a scam.

Can the FTC actually get my stolen money back?
Sometimes, through enforcement actions against the original fraud operation, the FTC can distribute settlement funds to verified victims. This happens through official, publicly announced programs, never through a personal phone call asking for a fee first.

What if the recovery scammer already had accurate details about my original loss?
Accurate details don't make the offer legitimate. It means your information was part of a sold or shared victim list, which is common. Treat the accuracy of their details as more reason for caution, not less.

Should I change my phone number after getting one of these calls?
It's not usually necessary after a single call, but if you're getting repeated contact from multiple numbers referencing your fraud history, it may be worth considering, alongside reporting each number and blocking them individually.

Can a recovery scammer actually sue me or send debt collectors if I don't pay?
No. Since the entire premise is fabricated, there's no real debt, no real case, and no legal standing behind any threat they make. Any follow-up threat after you refuse to pay is just another pressure tactic, not a real legal risk.

Final Thoughts

The cruelest part of a recovery scam is the timing. It arrives right when someone is at their most vulnerable, still reeling from an earlier loss and desperate for any sign that the money isn't gone for good. Criminals understand that desperation better than most victims realize, and they've built an entire secondary industry around exploiting it.

The good news is that the warning signs are consistent and easy to remember once you know them. No real agency asks for a fee before recovering your money. No legitimate recovery process depends on gift cards or crypto. And nobody who genuinely wants to help will pressure you to decide in the next ten minutes.

If you or someone you know has already been scammed once, treat every unsolicited follow-up call with the same skepticism you wish you'd had the first time. That single habit is often the only thing standing between one loss and two.