Act immediately — time is critical

Unlike a fraudulent bank transfer, cryptocurrency transactions are irreversible. Once funds leave your wallet, they cannot be frozen or recalled. However, the trail they leave is permanent and public, and that trail can be followed, documented, and used to pursue recovery through legal channels.

The most important window is the first 72 hours. Fraudsters move funds quickly — often through mixers, multiple hops, and exchange deposits — so the sooner a trace is conducted and exchanges are notified, the higher the chance of an intervention.

Key point: Even if the funds have moved, the blockchain record is permanent. It cannot be deleted, altered, or hidden. A professional trace conducted weeks or months later can still produce a complete picture of where your funds went.

Step 1 — Do not send any more money

This sounds obvious, but fraudsters frequently contact victims after an initial payment with offers to "recover" the lost funds, or with urgent requests for additional payments to "release" the original amount. These are further stages of the same fraud. Under no circumstances send additional funds to anyone associated with the original scam.

Step 2 — Preserve every piece of evidence

Before doing anything else, document everything you have:

  • Take screenshots of all conversations — WhatsApp, Telegram, email, dating apps, social media messages
  • Screenshot the website, platform, or app you used (if it is still accessible)
  • Note the wallet address or addresses you sent funds to
  • Note the transaction ID (also called a transaction hash or TXID) — this is visible in your wallet app or exchange withdrawal history
  • Note the dates, times, and amounts of every transaction
  • Save any phone numbers, email addresses, or usernames associated with the fraudster

Do not delete any messages or accounts, even if you feel embarrassed. This evidence may be critical later.

Step 3 — Report to Action Fraud

In the UK, cryptocurrency fraud should be reported to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. You will receive a crime reference number. This is important — you will need it for insurance claims, legal proceedings, and when approaching exchanges.

Action Fraud passes cases to the National Fraud Intelligence Bureau (NFIB), which can trigger police investigation in appropriate cases. While many individual cases do not result in prosecution, reporting ensures the fraud is recorded and contributes to intelligence that can be used against larger operations.

Step 4 — Contact your bank or payment provider

If you purchased cryptocurrency using a bank transfer, debit card, or credit card in order to send it to the fraudster, contact your bank immediately. UK banks have obligations under the Contingent Reimbursement Model (CRM) code to consider reimbursement in authorised push payment fraud cases. The rules are not straightforward, but it is worth raising.

Step 5 — Obtain a professional blockchain trace

This is where the permanent nature of the blockchain works in your favour. A professional trace follows your funds from the address you sent to, hop by hop, identifying:

  • Whether funds reached a regulated exchange (which can be served with a production order)
  • Whether any addresses are on the OFAC sanctions list
  • Whether a mixing service was used (which is itself evidentially significant)
  • The complete chain of custody of the funds from your wallet to their current location

A professional investigation report gives you something concrete to submit to police, your solicitor, or your insurer — rather than simply saying "I was scammed".

Step 6 — Consider legal action

If the blockchain trace identifies funds reaching a regulated exchange, a solicitor can apply for a production order compelling the exchange to disclose the KYC (Know Your Customer) identity information of the account holder. This can reveal the identity of the fraudster.

Civil asset recovery proceedings are also possible in some cases, particularly where the amounts involved justify the legal costs. A solicitor specialising in fraud or asset recovery is the right professional to advise on this.

What to gather before contacting a forensics service

  • The wallet address you sent funds to (starts with 1, 3, bc1, or 0x)
  • The transaction ID from your wallet or exchange
  • The date and amount of each transaction
  • Your Action Fraud crime reference number
  • A brief description of how the fraud occurred

Common types of crypto fraud in the UK

Romance fraud / pig butchering: A relationship is cultivated online over weeks or months, then the victim is encouraged to invest in a fraudulent crypto platform. When they try to withdraw, they are asked for further fees or taxes. The platform disappears.

Investment fraud: Promises of high returns from cryptocurrency trading, mining, or staking. Victims deposit funds that appear to grow on a fraudulent dashboard before disappearing.

Impersonation fraud: Fraudsters impersonate banks, HMRC, or investment firms and instruct victims to purchase cryptocurrency and send it to a "safe wallet".

Ransomware: Malware encrypts business or personal files and demands payment in Bitcoin or Monero for the decryption key.

Important: No legitimate company, government agency, or bank will ever ask you to pay them in cryptocurrency. If you are told to buy Bitcoin, Ethereum, or any other cryptocurrency to resolve a problem with your bank account, pay a fine, or secure an investment, you are being defrauded.