Secondary Exploitation & Recovery Scams
You just lost money to a scam. Within days, someone contacts you offering to get it back. They are the same operation.
The Recovery That Wasn't
Vijay lost Rs. 3.2 lakh to a fake investment platform in March. He posted about it on a consumer forum, warning others.
Two weeks later, he received a WhatsApp message from a man named "Mr. Arun Kapoor - Senior Fraud Recovery Specialist." Mr. Kapoor had seen Vijay's post. He said he had successfully recovered funds from the same platform for four other victims. He had screenshots.
He explained the process: his firm would trace the crypto wallet, submit documentation to the RBI, and pursue a legal recovery claim. His fee was Rs. 25,000, payable upfront to initiate the case.
Vijay paid. Mr. Kapoor provided regular updates for three weeks - references to "case numbers," "RBI escalations," and "blockchain forensics." Then the updates stopped. The number was disconnected.
Vijay had now lost Rs. 3.45 lakh - and had given a second scammer a complete picture of his finances.
What Is Actually Happening
Scam victims are high-value targets for a second round of fraud. They have demonstrated a willingness to transfer money under pressure. They are emotionally distressed. They are highly motivated by the prospect of recovering what they lost. And they are often findable - they post on forums, file complaints on public portals, and speak to consumer groups.
Secondary scammers monitor these channels continuously. Their operation requires no technical sophistication: find a victim's complaint, personalise the approach, offer hope, collect the fee.
1 in 4 Fraud Victims Is Targeted Again
Studies by the FTC and the UK's National Trading Standards show approximately 1 in 4 fraud victims is contacted by a secondary scammer within weeks of the original loss.
Secondary Losses Average 30% of Original
The average secondary scam extracts approximately 30% of the victim's original loss as "recovery fees" - on top of the money already stolen.
How Secondary Scams Operate
The immediate secondary threat
The window between the original loss and reporting is when victims are most vulnerable. Scammers scrape consumer complaint forums, social media posts, and public cybercrime complaint portals for recent victim disclosures. Within days, personalised outreach arrives.
Fake ethical hackers
"Ethical hackers" offer to trace cryptocurrency transactions, recover funds from scam platforms, or infiltrate the original scammer's systems. This framing sounds technical and credible. In practice, crypto transactions are irreversible and no third party can recover funds once transferred to an external wallet.
Requests for access to your devices or accounts under the guise of "forensic investigation" are attempts to install malware or harvest additional credentials.
Fake lawyers and recovery firms
Fake legal professionals claim to have ongoing cases against the original scam operation. They offer to add the victim to a class action or pursue a formal RBI recovery claim. Their fee is "administrative" and "refundable upon recovery."
Neither the RBI nor any Indian law enforcement agency uses intermediary law firms for recovery. Any firm claiming official government affiliation in a recovery context is fraudulent.
The upfront fee as the tell
Every legitimate recovery path - chargebacks, bank reversals, cybercrime complaints - is free. The universal marker of a recovery scam is the upfront fee, regardless of what it is called: administrative charge, legal deposit, government processing fee, blockchain trace cost.
If recovery requires you to pay first, it is a second scam.
What Are the Legitimate Options?
| Recovery path | Cost | Realistic for |
|---|---|---|
| Bank chargeback (credit card) | Free | Card payments, within 60-120 days |
| Bank transfer recall | Free | Within 24 hours of transfer |
| UPI dispute via NPCI | Free | UPI transactions |
| cybercrime.gov.in complaint | Free | All digital fraud |
| Banking Ombudsman (RBI) | Free | Bank-related disputes |
| Consumer Disputes Commission | Court fees only | Goods/services fraud |
None of these require paying a third party.
Identify the Real Path
Protecting Yourself After a Loss
Limit public disclosure of the details
Posting on public forums helps warn others - but it also creates a findable target profile. Where possible, report to official channels rather than public ones, or limit public posts to general warnings without specific financial figures.
Apply extra scepticism to unsolicited contact
Any contact arriving shortly after a loss and offering help is suspicious by default. Legitimate recovery paths do not find you - you find them.
Do not share additional financial information
Recovery scammers use the intake process to harvest additional data: current account balances, other assets, access to additional accounts. Engaging with them even without paying risks further exposure.
Three Things Worth Doing
1. Report to official channels, not public forums.
File at cybercrime.gov.in and call 1930. This creates an official record and does not publish your victim status to scammer monitoring systems.
2. Know that legitimate recovery is free.
Save this: No legitimate recovery path requires an upfront fee. If any contact asks for payment before recovering your money, end the engagement.
3. Tell a trusted person before engaging with any recovery service.
One sceptical outside perspective breaks the secondary scam immediately. Before paying any recovery fee, describe the arrangement to a trusted friend or family member.
Knowledge Check
You lost Rs. 2 lakh to a fake investment app last week. Someone contacts you via WhatsApp saying they are a fraud recovery specialist who can trace the crypto and recover your funds for a Rs. 18,000 processing fee. What is the correct response?