Crypto Scam Warning: “We’ve found your Bitcoin” / “Recovery Agent” Emails
What this looks like
Some clients receive convincing emails claiming the sender has found a cryptocurrency account or wallet in the client’s name and offering to “help recover” funds. These messages often include official-looking details (company numbers, FCA links, addresses) to build trust.
Why it’s dangerous
Fraudsters commonly use “clone firm” tactics — copying details of genuine firms or FCA-registered individuals to appear legitimate. The presence of an FCA link does not prove the message is genuine. More HERE.
Typical warning signs
- You are contacted out of the blue about crypto you didn’t ask them to trace.
- They quote an exact balance (e.g., “2.9 BTC”) to hook your attention.
- They ask you to move quickly, keep it confidential, or use WhatsApp/Telegram.
- The contact email is from an unusual domain (not the genuine firm’s domain).
- They ask you to:
- share seed phrases/private keys
- “connect” your wallet
- pay a “verification” / “release” / “gas” / “tax” fee
- install software or allow screen sharing
What to do immediately
* Do not reply.
* Do not click links or open attachments.
* Do not share passwords, seed phrases, private keys, or ID documents.
* Take screenshots and keep the email for reporting.
How to report a suspicious email
- Forward the email to the UK government’s Suspicious Email Reporting Service: report@phishing.gov.uk.
- If you’ve lost money or shared information, report it to Action Fraud.
- You can also report suspected clone-firm approaches to the FCA
Golden rule: No legitimate organisation will ever need your seed phrase or private keys — EVER!