You have lost access to a wallet and are now searching for professional help. The results mix genuine engineering firms with fraud operations, and both describe themselves in the same terms. Before you contact anyone, it is worth understanding what separates legitimate crypto recovery companies from the operations imitating them.
Two different services operate under one name
“Crypto recovery” covers two activities with nothing in common. The first is technical access recovery: reconstructing a forgotten wallet password, repairing a damaged wallet file, or completing a seed phrase, the list of 12 or 24 words that can regenerate every key in your wallet. This work is real. It happens off-chain, on material you still own, and it succeeds or fails on mathematics.
The second is “fund recovery” for stolen or scammed crypto, and it is almost always fraud. The reason is one you can check yourself: blockchain transactions are irreversible by design. No company, tool, or investigator can reverse, cancel, or redirect a confirmed transaction. Anyone claiming otherwise is describing something that cannot be done, and every check in this guide builds on that fact.
Before you contact anyone
A wrong move at this stage costs options, so five rules come first.
Do not enter your seed phrase into any website, form, or chat. No assessment requires it, and whoever holds the complete phrase controls the wallet.
Do not pay anything up front. Not a “processing fee”, not a “legal fee”, not a deposit.
Do not grant remote access to your computer.
Write down everything you still have: devices, wallet files, backups, partial phrases, password patterns you remember.
If wallet files are involved, copy them first and work only with the copy. The original is your last fallback.
These rules hold for every provider, including the one you eventually trust. If you are still working out what kind of access problem you have, start with our overview of lost wallet access.
The warning signs that end the conversation
Any single item below is sufficient reason to stop.
Guarantees come first. Whether a recovery is feasible depends entirely on what material still exists, and no company can know that before an assessment. “Guaranteed” and “100% success” are the clearest fraud markers in this industry. Legitimate companies do not charge upfront and do not guarantee results.
Upfront fees follow the same pattern. Fraudulent operations run on advance payments: after the first fee comes a “transfer tax”, then a “compliance release”, then a final “unlocking charge”, and the promised result stays permanently one payment away. Some operations show a dashboard where your “recovered balance” grows; the balance is an image, and every withdrawal attempt triggers a new fee. Serious work in this field is success-based. If nothing is recovered, nothing is owed.
Promises about stolen assets close the case on their own. A confirmed transaction cannot be reversed, so a company selling that outcome is selling the impossible.
Unsolicited offers deserve the same response. Reputable firms do not recruit clients through direct messages, comment sections, or replies to victims describing their loss. The glowing testimonial planted under a scam-warning thread, praising a “specialist” who “restored everything”, is written by the operation it recommends. A recovery service that finds you has found a target, not a client. Legitimate firms wait to be contacted through their official website.
A request for your full seed phrase ends the conversation as well. An assessment needs a description of your situation and an inventory of the material you still hold, never the phrase itself.
Anonymity is the final filter. No registration number, no physical address, no named people, a domain registered weeks ago: none of that survives a five-minute check, which is exactly why the check works.
What a legitimate recovery company looks like
A legitimate recovery company shows a business registration you can verify, charges only when the recovery succeeds, signs a contract before starting work, explains its method in plain terms, never asks for your full seed phrase, and never takes possession of your assets. You make every transfer yourself. Each of these points can be tested before you share anything.
Identity comes first. A real firm publishes a company registration you can look up in the public register, an address that exists, and the names of the people doing the work.
Every serious jurisdiction runs such a register: the KvK in the Netherlands, Companies House in the United Kingdom, the state registries in the United States. Find the company’s stated country, open that country’s official register, and match the name and address. A company that names no jurisdiction cannot be checked, and that is your answer. Verifiability is the point: a fraudulent site can copy the wording of a legitimate one, but not the paper trail behind it.
Payment follows results, in writing. The established model in serious recovery work is a success fee: a percentage of the recovered amount, paid only if the recovery works, with the initial assessment free. Ask for the fee terms early and expect them in a contract, not a chat message.
Work starts after the contract, not before. A written agreement, with a nondisclosure agreement available on request, protects both sides and is standard among firms that expect to exist next year.
Real companies decline cases. This is the least intuitive marker and the most reliable one: a firm that tells you your situation is unrecoverable, and turns down the fee along with it, has just demonstrated the one quality a fraudulent operation cannot fake.
Method can be explained without mystery. Genuine technical recovery means systematic testing of password or phrase candidates within known constraints, performed on copies of your files, on machines that never connect to the internet (air-gapped, in industry terms). A provider who can only describe the process in vague vocabulary, “proprietary blockchain tools” or “private nodes”, has no process to describe.
Timelines are ranges, not promises. Simple cases can resolve in days, complex ones take weeks or longer, and a serious firm gives a realistic estimate only after the assessment. How long professional recovery typically takes is covered here.
You keep control of the assets throughout. A legitimate company works on access: the password, the file, the phrase. It never receives your funds, and once access is restored, you carry out every transfer yourself. Any arrangement in which the company receives the assets and forwards your share is the company taking possession of your money.
Five questions that expose a fraudulent service
Ask these before sharing anything, and compare each answer to the standard below.
“Can you recover a completely lost seed phrase?” The only true answer is no. A 12-word phrase is drawn from the BIP39 word list, the standard list of exactly 2,048 words nearly every wallet uses, which puts the possible combinations at about 5 x 10^39, a 40-digit number. No hardware searches a space that size. A “yes” identifies fraud in one word.
“What do you need for an assessment?” A description of the situation and what remains. Not the phrase, not remote access, not money.
“What happens if you fail?” Nothing should be owed. Anything else is an advance-fee arrangement.
“Who moves the funds if you succeed?” You do, to a wallet you created and control. Any other answer means the service intends to hold your money.
“Where are you registered?” A registration number and an address you can confirm independently. Hesitation here outweighs every promise made before it.
Answers can be rehearsed. The register entry, the contract, and the order of payment cannot, and they outweigh anything said in a first conversation.
Recovery fraud targets people who have already been scammed
Losing crypto once places you on a list. Victim details circulate between fraud operations, and the follow-up scheme (a “recovery agent”, a fake investigator, or an “exchange security officer” offering to retrieve what was taken) is now a standard second act. The FBI has published a warning about fraudulent operations, including fake law firms, that approach earlier scam victims. The approach arrives by email, by direct message, or as a testimonial planted under the forum post where you asked for help.
If you have already paid such a service, stop paying now. Each new fee buys a new obstacle, not progress, and the money already sent is part of the same theft. Report the full sequence to law enforcement, in the United States via ic3.gov and reportfraud.ftc.gov, and expect further contact attempts referencing your case in convincing detail. All transactions are publicly visible on the blockchain, which is why these operations sound informed. Visibility is not possession, and following stolen assets on-chain is not the same as getting them back.
What the crypto forums say about recovery companies
The standing advice on Reddit and Bitcointalk is blunt: assume every recovery offer is a scam. Several scam-help communities remove any recommendation of a recovery company on sight, because moderators learned that nearly all such recommendations come from the operations themselves, usually pointing to a Telegram or Instagram handle. That moderation policy is a measurement. It tells you how badly fraud outnumbers genuine firms in this market.
The consensus is closer to right than wrong, and arguing with it is pointless. Read it instead as a burden of proof: a company that wants your case must prove it is the exception, in writing and in the public record, and you owe it nothing until it has.
Two norms from the technical forums are worth adopting as additional tests. A genuine firm does not mind if you first try an established open-source tool such as BTCRecover yourself, because fraud depends on urgency and dependence while real engineering does not; if you try, download only from its official GitHub repository, since fake recovery tools that drain wallets circulate under familiar names. And where the wallet format allows it, a serious provider can work from the password hash extracted from the encrypted file, which means it never needs to see your actual password. A provider that insists on more access than the work requires is a warning sign in itself.
When no company can help
Two situations sit beyond every legitimate provider, and knowing them protects you from anyone who claims otherwise.
A completely lost seed phrase, with no wallet file, no device, and no partial information, is unrecoverable by anyone, at any price: without surviving material there are no constraints to narrow the search. If fragments survive (words missing, words in the wrong order, or a phrase the wallet rejects), that is a different and far better position, covered in our guide to recovering a missing seed phrase word.
Stolen or scammed assets are the second closed door. The commercial route does not exist; the real route is documentation and a police report. A provider that states these limits before taking your money is showing you the standard to hold everyone else to.
Keep yourself out of this market
The cheapest recovery is the one you never need. Store your seed phrase offline on a durable medium: stamped metal outlasts paper, which fades, tears, and burns. Keep the phrase out of photos, cloud storage, and password managers, and never type it into a website for any reason.
If your situation involves lost access rather than theft (a forgotten password, a damaged wallet file, or an invalid or incomplete seed phrase), Crypto Recovers offers a free assessment: describe what you still have and you will get a straight answer on what is technically possible, with no commitment, on a strict no recovery, no fee basis. We would rather rule your case out clearly than let you spend money on an impossible search.
We hold the same line this guide describes. Crypto Recovers never handles client funds and has no access to them at any stage; when a recovery succeeds, you move the assets to a new wallet you created yourself and transfer the agreed percentage yourself, at a handover session with both parties present. You can apply the checks in this guide to us as well: our registration is listed in the Dutch business register under KvK number 75927276. If your assets were stolen, no commercial service can help, and you should distrust every one that says it can.
