← All examples Full example — Forensic Report + Formal Statement

Fake Recovery Service

Fictitious case. After losing money to an initial crypto scam, victim was contacted by “recovery experts” promising to retrieve stolen funds. Charged £2,000 upfront fee. Second layer of fraud documented — a common pattern targeting previous scam victims.

1
Forensic Investigation Report
5 pages • Recovery scam analysis + Connection to original fraud
2
Formal Statement
4 pages • Ready for Action Fraud
Document 1 — Forensic Investigation Report
🔎
Forensic Report — Fake Recovery Service
TraceProof_Forensic_Report.pdf • 5 pages • Classification TLP:AMBER
Risk 90/100
TP-2026-1195 Method: Recovery fraud (double-dip) Amount: £2,000 Vector: Google ads + Cold call Linked to original scam group

“CryptoReclaim UK” — fake recovery firm targeting previous scam victims

Background
Victim previously lost £15,000 to a crypto investment scam (reported to Action Fraud, ref: NFRC-XXXX). Posted about experience on a scam victims’ forum.
20 April 2026
Victim receives email from “CryptoReclaim UK” claiming they “specialise in recovering stolen cryptocurrency” and have “already identified your funds on the blockchain”. Professional website with fake FCA registration number.
22 April 2026
Phone consultation with “Senior Recovery Specialist”. Claims 92% success rate. Requires £2,000 “legal and technical processing fee” upfront. Promises full refund if unsuccessful.
22 April 2026
Victim pays £2,000 via bank transfer. Receives “case file” PDF with fabricated blockchain analysis (actually just publicly available block explorer screenshots).
May 2026
Weekly “progress updates” become less frequent. After 3 weeks, told “additional fee of £3,500 needed for exchange compliance”. Victim refuses. All contact ceases. Website taken offline.
⚠ KEY FINDING: Connection to original scam
OSINT analysis reveals the “CryptoReclaim UK” website shares hosting infrastructure and payment processing with the original fraudulent investment platform. The same criminal group is operating both the initial scam and the fake recovery service — a technique known as “double-dipping” or “reload scam”. Victim data from the first fraud is being used to target victims for the second.
ElementFindingRisk
Website cryptoreclaim-uk.comRegistered 1 month prior. Same registrar and hosting as original scam platformHIGH
FCA number claimedFake — number belongs to a legitimate, unrelated firm. FCA ScamSmart confirms no authorisationHIGH
Payment accountWise business account — “CR Legal Services Ltd” (shell company, no SRA registration)HIGH
Phone number+44 20 XXXX XXXX — VoIP (Vonage). Same provider as original scam’s “support line”HIGH
Document 2 — Formal Statement (extract)
⚖
Formal Statement — Recovery Fraud
TraceProof_Statement.pdf • 4 pages

Statement of facts

I, REDACTED, report that in April 2026, following my previous loss of £15,000 to cryptocurrency fraud (Action Fraud ref: NFRC-XXXX), I was targeted by a fraudulent “recovery service” operating as “CryptoReclaim UK”. I paid £2,000 for services that were never provided. The forensic investigation confirms this entity is operated by the same criminal network responsible for my original loss.

Have you been a victim of a similar scam?

Start your free report: within minutes you will receive a forensic investigation report and a formal statement ready to submit to the authorities.

Start your report →

No obligation. You only pay if you decide to download the documents.