The first sign that something is wrong, almost always, is the phone.

Someone calls our intake line — sometimes weeks, sometimes months after they first lost money to a fake crypto trading platform — and the call begins not with the original loss, but with a second loss. They paid an "advance fee" to a recovery agency that promised to release frozen funds within thirty days. The agency stopped responding after the wire cleared. Could we, perhaps, look into both the original platform and the recovery firm?

The trap is so common that we now recognise the pattern within the first ninety seconds of a call. There is a name for the phenomenon — "advance-fee recovery fraud" in the academic literature, "second-stage" or "double-dipping" in the trade — and the people who run it are very often the same people who ran the original investment scam, working from the same lead lists, sometimes from the same call centres. By the time a victim hears about us, they have usually been targeted twice and paid out at least once more than they meant to.

Why the trap works

Recovery scams target a precise demographic: someone who has already proven, by virtue of being on a lead list, that they were willing to send money to strangers on the promise of a return. They are also, by definition, motivated. Anyone who has lost forty thousand dollars to a fake forex platform in the morning is in a different psychological state by the afternoon. The original scammers know this — and so do their downstream colleagues, who buy the lead lists openly on dark-web marketplaces in batches of several thousand contacts at a time, sorted by approximate loss amount.

The pitch is consistently structured. A caller identifies themselves as a "recovery specialist" with a Canadian, British, or Australian accent. They claim to be working with an unnamed regulator, an unnamed law-enforcement agency, or — increasingly — an unnamed law firm. They have your case file. They know the platform that took your money. They know the rough loss amount. (They know these things because they bought the data from the same operators who took your money.) They explain that a portion of your funds has been "frozen" or "located," and that for an upfront fee — usually fifteen to twenty percent of your original loss — they can have it released to your account within a defined window. Sometimes they describe it as a "tax clearance," sometimes as a "legal release," sometimes as a "blockchain unlock." The specifics vary; the structure does not.

What unites every variation is a window of artificial urgency. The funds will only be available for the next forty-eight hours. The release fee can only be paid by wire transfer or stablecoin, never by credit card or anything that allows reversal. The agency itself does not have a publicly traceable address, or has one that, on closer examination, belongs to a virtual mailbox in a serviced-office building.

What real intake looks like

There is no legitimate civil-fraud firm in Canada, the UK, the US, or Australia that operates this way, and we would like that fact to be more widely known.

When someone retains a real practice on a fraud-loss matter, the engagement begins with a written letter, signed before any payment is collected. The letter sets out scope, fee structure, and — importantly — the limits of what the firm can promise. Civil-fraud recovery depends on jurisdiction, asset traceability, the platform's corporate structure, the time elapsed since the loss, and the cooperation of the receiving banks. None of those variables can be flattened into "we'll have it back in thirty days." A firm that flattens them is, by definition, not engaging in legal practice.

Real fee structures also do not work the way recovery agencies advertise. A hybrid retainer-and-contingency arrangement is common in this space, but the contingency portion is paid out of recovered funds, not in advance of them. Where retainers exist, they are documented, modest, and never described as "release fees" or "unlock fees" — those phrases do not exist in the working vocabulary of any practising solicitor we know.

The harder conversation

The reason recovery scams thrive is not because the people who fall for them are gullible. It is because the alternative — the conversation a real firm has with a fraud-loss client at intake — is harder to hear.

That conversation usually goes something like this. Yes, what happened to you was civil fraud, and possibly criminal fraud. Yes, there are tools available for tracing crypto wallets, freezing accounts, pursuing platform operators, filing chargebacks, and engaging counterpart counsel in the jurisdiction where the funds landed. Yes, some of those tools have produced full or partial recoveries. And no, none of them work in thirty days, none of them are guaranteed, and a meaningful number of files — particularly those involving losses to platforms registered in jurisdictions with weak enforcement cooperation — close without recovery.

That last sentence is the one we say most often at intake, and the one that has cost us the most prospective clients. It is also, in our reading, the single most reliable test for whether you are speaking to a recovery agency or to a law firm. If the person on the other end of the line cannot finish that sentence with you — if they tell you, instead, that everything will be fine and the funds will arrive next month — the call should end.

We open files at three thousand Canadian dollars in losses and above, and we work case by case rather than at volume. We say in writing what we can and cannot do on a given file before we accept payment, and we say it again on the engagement letter. None of those practices are unusual for a small civil-fraud practice. What is unusual, increasingly, is hearing them at all in this corner of the legal market. The space between a real intake call and a recovery-agency pitch is where most of the second-stage damage happens. It does not have to be that way — but it requires victims to know what the difference sounds like before the call comes in, and that, in 2026, is a public-education problem the practising bar has been slow to address.