- Thread starter
- #1
LYou may have been offered what looked like a legitimate online job.
Maybe the position involved product reviews, optimization, data entry, online tasks, ratings, or completing simple assignments through an app.
At first, everything may have looked normal.
You completed tasks.
Your account showed earnings.
You may even have been allowed to withdraw a small amount.
Then the requirements changed.
You were told to deposit cryptocurrency to unlock another task.
Then another payment was required.
Then another.
Eventually, you may have sent far more cryptocurrency than you ever expected to spend on a job, while the supposed earnings remained trapped inside the platform.
That pattern matches what the FBI describes as cryptocurrency job scams, where victims are recruited for online work and required to deposit their own cryptocurrency to complete tasks. The supposed earnings can appear to grow while increasingly large deposits are demanded.
If this happened to you, stop making additional payments.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct what happened to the cryptocurrency.
If you’re ready, contact [email protected] or +1 (929) 399-9264 on WhatsApp.
If you need time first, preserve the evidence before doing anything else.
STOP PAYING FOR THE NEXT TASK
The platform may now be telling you:
“You need to complete one final task.”
“Your balance is negative.”
“Deposit more to unlock your earnings.”
“You need to finish the current order.”
“Your commission will be released after payment.”
“Your account will remain frozen until you pay.”
“You only need one more deposit.”
Don’t assume the next payment will release the money already deposited.
The FBI specifically warns that cryptocurrency job scams can require increasingly large deposits and eventually leave victims unable to withdraw their supposed earnings.
The fact that you’ve already paid several times does not mean you should continue.
SAVE THE JOB PLATFORM BEFORE IT DISAPPEARS
Take screenshots of:
Your account dashboard
Displayed balance
Task history
Commission history
Completed tasks
Pending tasks
Negative balances
Withdrawal page
Deposit instructions
Payment requests
Customer-service conversations
Your account ID
Platform name
Website address
If the platform later disappears or your login stops working, those screenshots may preserve what you were shown.
The FBI recommends preserving website addresses, communications, identifying information, transaction details, and a timeline when documenting cryptocurrency job scams.
Once you’ve preserved the dashboard, separate the supposed earnings from the cryptocurrency you actually sent.
SEPARATE YOUR REAL MONEY FROM THE FAKE EARNINGS
Suppose the platform showed:
Deposits, 8,000 USDT
Commissions, 5,000 USDT
Total balance, 13,000 USDT
Don’t automatically treat the 13,000 USDT displayed by the platform as cryptocurrency you actually possess.
Start with what you can verify:
Crypto actually sent, 8,000 USDT
Displayed earnings, 5,000 USDT
Crypto actually withdrawn, 0 USDT
The supposed 5,000 USDT may simply be a number displayed inside the platform.
The FTC describes task scams in which fake platforms show supposed earnings and then require victims to deposit their own money, often cryptocurrency, to continue tasks or withdraw those fake earnings.
The blockchain transactions are more important than the balance displayed on the website.
FIND EVERY CRYPTO PAYMENT YOU MADE
Open the wallet or exchange you used to fund the job.
Find every payment connected to the platform.
Record:
Asset
Amount
Network
Sending address
Receiving address
Transaction hash
Date
Time
For example:
2,000 USDT → Address A
3,500 USDT → Address B
1,000 USDT → Address C
Don’t combine everything into one number.
Each payment should have its own record.
Once you’ve identified the payments, compare them with the deposit addresses provided by the job platform.
VERIFY EVERY RECEIVING ADDRESS
For each payment, check:
Address provided by the platform
against
Address actually used in your transaction
If they match, preserve both.
If they don’t match, document what happened.
You may have:
Copied a different address
Scanned a QR code
Used a different network
Sent through an exchange
Been redirected to another wallet
Don’t guess.
Record what the transaction actually shows.
Once you’ve verified the addresses, follow the cryptocurrency after each deposit.
TRACE EACH PAYMENT SEPARATELY
The first receiving address may not be the final destination.
A payment could move:
Your wallet
↓
Address A
↓
Address B
↓
Address C
Another could move:
Your wallet
↓
Address D
↓
Token swap
↓
Address E
Don’t assume all your payments followed the same route.
Keep each transaction separate.
For every movement you can verify, record:
Amount
From
To
Transaction hash
Date
Time
Once you’ve mapped the payments, reconstruct exactly why each payment was demanded.
DOCUMENT EVERY TASK THAT REQUIRED A PAYMENT
Maybe the platform said:
“Deposit 500 USDT to unlock Task 12.”
“Add 1,000 USDT to complete the order.”
“Your balance is negative.”
“Deposit 2,500 USDT to receive your commission.”
“Complete this final package before withdrawal.”
Save the exact messages.
Don’t rewrite them from memory.
The FBI identifies requiring victims to deposit their own cryptocurrency to perform work as a defining feature of cryptocurrency job scams.
Once you’ve documented each demand, connect it to the transaction you made.
CONNECT EACH PAYMENT TO THE TASK
Create a record such as:
Task 8
→ platform requested 500 USDT
→ 500 USDT sent
→ task completed
→ another payment requested
Then:
Task 11
→ platform requested 1,500 USDT
→ 1,500 USDT sent
→ account balance increased
→ withdrawal remained unavailable
Then:
Task 15
→ platform requested 4,000 USDT
→ payment not made
→ account frozen
This creates a factual sequence showing how the required deposits escalated.
Once you’ve connected each payment to its task, preserve the platform’s messages about your supposed earnings.
SAVE THE EARNINGS CLAIMS
The platform may have shown:
Daily commission
Task bonus
VIP earnings
Completion bonus
Profit
Commission multiplier
Referral bonus
Special reward
Negative balance
Withdrawal amount
Take screenshots of these figures.
The FTC says task scams commonly create the appearance of growing earnings even though the supposed commissions are fake.
Don’t delete the earnings history simply because you now believe it was fake.
It may help establish how the platform presented the scheme.
DOCUMENT ANY SMALL WITHDRAWAL YOU RECEIVED
Some task scams allow victims to withdraw a small amount at the beginning.
If you received anything, record:
Amount
Asset
Date
Transaction hash
Destination
For example:
100 USDT received
followed later by:
2,000 USDT requested
That early withdrawal does not establish that the later balance is genuine.
The FBI describes cryptocurrency job scams in which victims may initially be allowed to withdraw money, encouraging them to continue depositing larger amounts.
Once you’ve documented any early withdrawal, calculate your total deposits.
CALCULATE EVERYTHING YOU ACTUALLY SENT
Create a simple list:
Payment 1, 500 USDT
Payment 2, 1,000 USDT
Payment 3, 2,500 USDT
Payment 4, 4,000 USDT
Total sent, 8,000 USDT
Then separately record:
Displayed earnings, 5,000 USDT
Actual withdrawals, 100 USDT
Remaining displayed balance, 12,900 USDT
This prevents the platform’s displayed numbers from being confused with your actual cryptocurrency transactions.
Once you’ve calculated the deposits, document how the required payments escalated.
SHOW HOW THE PAYMENT REQUIREMENTS GREW
For example:
First task, 200 USDT
Second task, 500 USDT
Third task, 1,000 USDT
Fourth task, 2,500 USDT
Final task, 5,000 USDT
The amounts may differ in your case.
The important point is to preserve the progression.
The FBI notes that victims of cryptocurrency job scams may initially make smaller deposits before being required to deposit increasingly larger amounts.
Once you’ve documented the escalation, record every explanation the platform gave you.
SAVE THE REASONS THEY GAVE FOR EACH PAYMENT
Maybe they told you:
“The order is larger than expected.”
“Your account has entered a higher tier.”
“You received a combination task.”
“Your balance went negative.”
“You must finish the task before withdrawal.”
“The system assigned this task randomly.”
“Customer service cannot remove the requirement.”
“Your commission will be released afterward.”
Preserve these explanations.
The FBI specifically describes fake job platforms using negative balances and supposedly random large tasks to pressure victims into depositing more cryptocurrency.
Once you’ve saved the explanations, document the moment you first tried to withdraw.
RECORD YOUR FIRST FAILED WITHDRAWAL
Write down:
Date
Time
Amount requested
Withdrawal method
Error message
Account status
Customer-service response
For example:
Withdrawal requested, 5,000 USDT
→ withdrawal rejected
→ platform says another task must be completed
→ 3,000 USDT deposit requested
→ payment made
→ withdrawal still unavailable
This is much more useful than simply writing:
“They wouldn’t let me withdraw.”
Once you’ve recorded the failed withdrawal, document every new requirement that appeared afterward.
SAVE EVERY NEW REQUIREMENT
The platform may have demanded:
Tax
Withdrawal fee
Verification payment
Security deposit
Account upgrade
Liquidity deposit
Negative-balance payment
Final task deposit
Release fee
If you paid any of these, preserve the payment record separately.
If you didn’t pay, screenshot the demand.
The FBI warns that cryptocurrency job scams can eventually produce large deposit requirements and frozen accounts, while its investment-fraud guidance warns against paying supposed taxes or fees to unlock cryptocurrency.
Once you’ve recorded the extra requirements, document the people who communicated them to you.
SAVE THE PEOPLE BEHIND THE JOB
Record:
Recruiter’s name
Username
Phone number
Email
Profile
Company name
Customer-service account
Telegram username
WhatsApp number
Website
Referral code
Payment instructions
Scammers may present themselves as employees of legitimate companies, according to the FBI’s description of cryptocurrency job scams.
Once you’ve preserved their identities, document how the job originally reached you.
RECORD HOW YOU FOUND THE JOB
Maybe you received:
A WhatsApp message
A Telegram message
A text message
A social-media message
An online advertisement
A job-board listing
A referral
A direct message
Save the original message or advertisement.
The FTC says task scams commonly begin with unexpected messages offering online work and may move the victim onto a platform where fake earnings are displayed.
Once you’ve identified the original source, preserve the job description.
SAVE WHAT THE JOB PROMISED
Look for claims about:
Daily income
Guaranteed commissions
Flexible work
Large bonuses
Easy tasks
Fast payments
VIP levels
Performance rewards
High commissions
Guaranteed withdrawals
Save the original wording.
Don’t rely on memory.
The FTC warns that fake job and task offers can promise easy online earnings before requiring victims to put their own money into the scheme.
Once you’ve preserved the promises, compare them with what actually happened.
COMPARE THE JOB PROMISE WITH THE ACTUAL EXPERIENCE
For example:
Promised, complete simple online tasks for commissions.
Actual, required repeated cryptocurrency deposits.
Promised, earnings available after completing tasks.
Actual, additional deposits required before withdrawal.
Promised, final task would release funds.
Actual, another payment demanded.
This comparison can reveal how the supposed employment arrangement changed into repeated requests for your own money.
Once you’ve made the comparison, document the full timeline.
BUILD THE COMPLETE TIMELINE
A useful timeline might look like:
June 3 → received online job offer
June 4 → created account
June 5 → completed first tasks
June 5 → account displayed 150 USDT commission
June 6 → withdrew 50 USDT
June 8 → larger task appeared
June 8 → deposited 500 USDT
June 10 → deposited another 1,500 USDT
June 12 → account showed 7,000 USDT
June 12 → withdrawal requested
June 12 → withdrawal blocked
June 13 → 3,000 USDT required to complete task
June 13 → payment made
June 14 → account remained frozen
The exact details will depend on your case.
The purpose is to connect:
job offer → tasks → supposed earnings → deposits → larger tasks → withdrawal attempt → additional demands → frozen account
Once the timeline is complete, preserve all transaction hashes together.
CREATE A COMPLETE TRANSACTION RECORD
For every cryptocurrency payment, record:
Date
Asset
Amount
Network
Sending address
Receiving address
Transaction hash
Task or reason
For example:
June 8
USDT
500
Tron
Your wallet
Address A
Transaction hash
Task 7 deposit
Do this for every payment.
The FBI specifically identifies cryptocurrency addresses, amounts, asset types, dates, times, and transaction hashes as important transaction information when documenting cryptocurrency job scams.
Once you’ve organized the transactions, place the related messages beside them.
PAIR THE COMMUNICATION WITH THE BLOCKCHAIN
For each payment, keep:
Payment request
+
Screenshot
+
Wallet address
+
Transaction hash
+
Amount
For example:
“Deposit 2,000 USDT to complete the next task.”
→ screenshot
→ receiving address
→ 2,000 USDT transaction
→ transaction hash
This creates a direct connection between what you were instructed to do and what actually happened on-chain.
Once you’ve built that connection, check whether your own wallet was compromised beyond the payments you intentionally made.
CHECK FOR OTHER UNAUTHORIZED ACTIVITY
Ask yourself:
Did I only send cryptocurrency normally?
Did I connect my wallet to the task platform?
Did I approve a token?
Did I sign a smart-contract transaction?
Did I share my recovery phrase?
Did I share a private key?
Did I install an unfamiliar application?
These situations are different.
If you only transferred cryptocurrency to the platform’s address, the primary evidence may be the transfer trail.
If you approved malicious contracts or exposed wallet credentials, additional security steps may be necessary.
Never give your recovery phrase or private key to someone claiming they need it to release your job earnings.
CHECK YOUR REMAINING WALLET BALANCE
Review the wallet you used.
Look for:
Unknown transfers
Unexpected token approvals
Unfamiliar contract interactions
Unexpected swaps
Other assets leaving
If you see something you didn’t authorize, preserve that transaction separately.
Don’t automatically assume every transaction came from the job scam.
Document what you can verify.
Once you’ve checked your wallet, preserve your remaining funds carefully.
DON’T SEND YOUR REMAINING CRYPTO TO “UNLOCK” THE ACCOUNT
The platform may know you’ve already deposited substantial amounts.
That can make another demand feel reasonable:
“You’re already so close.”
“You’ve invested too much to stop now.”
“One final payment will release everything.”
“You only need to cover the negative balance.”
But the amount you’ve already lost should not determine whether you send another payment.
The FBI specifically advises victims of cryptocurrency job scams to stop sending money and warns against paying additional fees or taxes to withdraw funds.
Once you’ve stopped additional payments, preserve the platform exactly as it currently appears.
DON’T DELETE THE ACCOUNT YET
If you can still access the platform, don’t rush to delete:
Task history
Deposit records
Messages
Account information
Transaction history
Withdrawal requests
Balance history
Take screenshots first.
If you have downloadable records, preserve copies.
Once you’ve preserved the account, document whether the platform is still accessible.
RECORD WHAT HAPPENS TO THE PLATFORM
Check whether:
Website still loads
Login still works
Customer service responds
Withdrawal page remains available
Task system still operates
Domain has changed
App remains installed
If something disappears, record the date and time you noticed it.
Don’t repeatedly interact with the platform simply to see whether it comes back.
Once you’ve documented the platform’s current condition, keep the evidence organized in one place.
CREATE ONE EVIDENCE FOLDER
Keep:
Job offer
Recruiter messages
Platform screenshots
Task history
Balance screenshots
Withdrawal attempts
Payment requests
Wallet addresses
Transaction hashes
Exchange records
Customer-service conversations
Emails
Phone numbers
Website URLs
Timeline
This prevents important information from being scattered across different devices and applications.
Once your evidence is organized, be careful about anyone promising to recover the money.
WATCH FOR A SECOND RECOVERY SCAM
After a fake job scam, you may receive messages from someone claiming:
“We found your cryptocurrency.”
“We traced the wallet.”
“Your funds are ready to be recovered.”
“Pay a tracing fee.”
“Send crypto to activate recovery.”
“Pay a blockchain release charge.”
“We guarantee your money back.”
Be cautious.
The FBI warns that victims of cryptocurrency scams can be targeted by additional recovery scams in which criminals promise to recover lost funds and demand payment.
Don’t turn one cryptocurrency loss into another by sending money to an unexpected recovery offer.
Your original transaction evidence should remain the foundation of any legitimate review.
YOU DON’T NEED TO HAVE EVERYTHING FIGURED OUT
You may only have:
A fake job website
A WhatsApp conversation
Several payment requests
A few wallet addresses
Transaction hashes
Screenshots of your account
A frozen balance
That’s enough to begin reconstructing what happened.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct the movement of the cryptocurrency.
If you’re ready for professional assistance, contact [email protected] or +1 (929) 399-9264 on WhatsApp with whatever information you currently have.
If you’re not ready, preserve the evidence first.
WHAT YOUR EVIDENCE SHOULD SHOW
Ideally, your records should establish:
How the job reached you
↓
What the job promised
↓
What tasks you were asked to complete
↓
When the first cryptocurrency deposit was required
↓
Every additional payment that followed
↓
Which wallet addresses received the payments
↓
What the platform displayed as earnings
↓
When you first attempted withdrawal
↓
Why the withdrawal was blocked
↓
What additional payments were demanded
↓
Where the cryptocurrency moved afterward
You don’t need a perfect evidence file.
You need a clear sequence connecting the supposed employment opportunity to the cryptocurrency payments.
The most useful question isn’t simply “How do I get my crypto back?”
It’s:
“How did the job start, what tasks did they require, why was I repeatedly asked to deposit cryptocurrency, what did I actually send, and where did those funds move afterward?”
Start there, preserve everything, and don’t let the promise of one more task or one more payment turn an existing loss into a larger one.
Maybe the position involved product reviews, optimization, data entry, online tasks, ratings, or completing simple assignments through an app.
At first, everything may have looked normal.
You completed tasks.
Your account showed earnings.
You may even have been allowed to withdraw a small amount.
Then the requirements changed.
You were told to deposit cryptocurrency to unlock another task.
Then another payment was required.
Then another.
Eventually, you may have sent far more cryptocurrency than you ever expected to spend on a job, while the supposed earnings remained trapped inside the platform.
That pattern matches what the FBI describes as cryptocurrency job scams, where victims are recruited for online work and required to deposit their own cryptocurrency to complete tasks. The supposed earnings can appear to grow while increasingly large deposits are demanded.
If this happened to you, stop making additional payments.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct what happened to the cryptocurrency.
If you’re ready, contact [email protected] or +1 (929) 399-9264 on WhatsApp.
If you need time first, preserve the evidence before doing anything else.
STOP PAYING FOR THE NEXT TASK
The platform may now be telling you:
“You need to complete one final task.”
“Your balance is negative.”
“Deposit more to unlock your earnings.”
“You need to finish the current order.”
“Your commission will be released after payment.”
“Your account will remain frozen until you pay.”
“You only need one more deposit.”
Don’t assume the next payment will release the money already deposited.
The FBI specifically warns that cryptocurrency job scams can require increasingly large deposits and eventually leave victims unable to withdraw their supposed earnings.
The fact that you’ve already paid several times does not mean you should continue.
SAVE THE JOB PLATFORM BEFORE IT DISAPPEARS
Take screenshots of:
Your account dashboard
Displayed balance
Task history
Commission history
Completed tasks
Pending tasks
Negative balances
Withdrawal page
Deposit instructions
Payment requests
Customer-service conversations
Your account ID
Platform name
Website address
If the platform later disappears or your login stops working, those screenshots may preserve what you were shown.
The FBI recommends preserving website addresses, communications, identifying information, transaction details, and a timeline when documenting cryptocurrency job scams.
Once you’ve preserved the dashboard, separate the supposed earnings from the cryptocurrency you actually sent.
SEPARATE YOUR REAL MONEY FROM THE FAKE EARNINGS
Suppose the platform showed:
Deposits, 8,000 USDT
Commissions, 5,000 USDT
Total balance, 13,000 USDT
Don’t automatically treat the 13,000 USDT displayed by the platform as cryptocurrency you actually possess.
Start with what you can verify:
Crypto actually sent, 8,000 USDT
Displayed earnings, 5,000 USDT
Crypto actually withdrawn, 0 USDT
The supposed 5,000 USDT may simply be a number displayed inside the platform.
The FTC describes task scams in which fake platforms show supposed earnings and then require victims to deposit their own money, often cryptocurrency, to continue tasks or withdraw those fake earnings.
The blockchain transactions are more important than the balance displayed on the website.
FIND EVERY CRYPTO PAYMENT YOU MADE
Open the wallet or exchange you used to fund the job.
Find every payment connected to the platform.
Record:
Asset
Amount
Network
Sending address
Receiving address
Transaction hash
Date
Time
For example:
2,000 USDT → Address A
3,500 USDT → Address B
1,000 USDT → Address C
Don’t combine everything into one number.
Each payment should have its own record.
Once you’ve identified the payments, compare them with the deposit addresses provided by the job platform.
VERIFY EVERY RECEIVING ADDRESS
For each payment, check:
Address provided by the platform
against
Address actually used in your transaction
If they match, preserve both.
If they don’t match, document what happened.
You may have:
Copied a different address
Scanned a QR code
Used a different network
Sent through an exchange
Been redirected to another wallet
Don’t guess.
Record what the transaction actually shows.
Once you’ve verified the addresses, follow the cryptocurrency after each deposit.
TRACE EACH PAYMENT SEPARATELY
The first receiving address may not be the final destination.
A payment could move:
Your wallet
↓
Address A
↓
Address B
↓
Address C
Another could move:
Your wallet
↓
Address D
↓
Token swap
↓
Address E
Don’t assume all your payments followed the same route.
Keep each transaction separate.
For every movement you can verify, record:
Amount
From
To
Transaction hash
Date
Time
Once you’ve mapped the payments, reconstruct exactly why each payment was demanded.
DOCUMENT EVERY TASK THAT REQUIRED A PAYMENT
Maybe the platform said:
“Deposit 500 USDT to unlock Task 12.”
“Add 1,000 USDT to complete the order.”
“Your balance is negative.”
“Deposit 2,500 USDT to receive your commission.”
“Complete this final package before withdrawal.”
Save the exact messages.
Don’t rewrite them from memory.
The FBI identifies requiring victims to deposit their own cryptocurrency to perform work as a defining feature of cryptocurrency job scams.
Once you’ve documented each demand, connect it to the transaction you made.
CONNECT EACH PAYMENT TO THE TASK
Create a record such as:
Task 8
→ platform requested 500 USDT
→ 500 USDT sent
→ task completed
→ another payment requested
Then:
Task 11
→ platform requested 1,500 USDT
→ 1,500 USDT sent
→ account balance increased
→ withdrawal remained unavailable
Then:
Task 15
→ platform requested 4,000 USDT
→ payment not made
→ account frozen
This creates a factual sequence showing how the required deposits escalated.
Once you’ve connected each payment to its task, preserve the platform’s messages about your supposed earnings.
SAVE THE EARNINGS CLAIMS
The platform may have shown:
Daily commission
Task bonus
VIP earnings
Completion bonus
Profit
Commission multiplier
Referral bonus
Special reward
Negative balance
Withdrawal amount
Take screenshots of these figures.
The FTC says task scams commonly create the appearance of growing earnings even though the supposed commissions are fake.
Don’t delete the earnings history simply because you now believe it was fake.
It may help establish how the platform presented the scheme.
DOCUMENT ANY SMALL WITHDRAWAL YOU RECEIVED
Some task scams allow victims to withdraw a small amount at the beginning.
If you received anything, record:
Amount
Asset
Date
Transaction hash
Destination
For example:
100 USDT received
followed later by:
2,000 USDT requested
That early withdrawal does not establish that the later balance is genuine.
The FBI describes cryptocurrency job scams in which victims may initially be allowed to withdraw money, encouraging them to continue depositing larger amounts.
Once you’ve documented any early withdrawal, calculate your total deposits.
CALCULATE EVERYTHING YOU ACTUALLY SENT
Create a simple list:
Payment 1, 500 USDT
Payment 2, 1,000 USDT
Payment 3, 2,500 USDT
Payment 4, 4,000 USDT
Total sent, 8,000 USDT
Then separately record:
Displayed earnings, 5,000 USDT
Actual withdrawals, 100 USDT
Remaining displayed balance, 12,900 USDT
This prevents the platform’s displayed numbers from being confused with your actual cryptocurrency transactions.
Once you’ve calculated the deposits, document how the required payments escalated.
SHOW HOW THE PAYMENT REQUIREMENTS GREW
For example:
First task, 200 USDT
Second task, 500 USDT
Third task, 1,000 USDT
Fourth task, 2,500 USDT
Final task, 5,000 USDT
The amounts may differ in your case.
The important point is to preserve the progression.
The FBI notes that victims of cryptocurrency job scams may initially make smaller deposits before being required to deposit increasingly larger amounts.
Once you’ve documented the escalation, record every explanation the platform gave you.
SAVE THE REASONS THEY GAVE FOR EACH PAYMENT
Maybe they told you:
“The order is larger than expected.”
“Your account has entered a higher tier.”
“You received a combination task.”
“Your balance went negative.”
“You must finish the task before withdrawal.”
“The system assigned this task randomly.”
“Customer service cannot remove the requirement.”
“Your commission will be released afterward.”
Preserve these explanations.
The FBI specifically describes fake job platforms using negative balances and supposedly random large tasks to pressure victims into depositing more cryptocurrency.
Once you’ve saved the explanations, document the moment you first tried to withdraw.
RECORD YOUR FIRST FAILED WITHDRAWAL
Write down:
Date
Time
Amount requested
Withdrawal method
Error message
Account status
Customer-service response
For example:
Withdrawal requested, 5,000 USDT
→ withdrawal rejected
→ platform says another task must be completed
→ 3,000 USDT deposit requested
→ payment made
→ withdrawal still unavailable
This is much more useful than simply writing:
“They wouldn’t let me withdraw.”
Once you’ve recorded the failed withdrawal, document every new requirement that appeared afterward.
SAVE EVERY NEW REQUIREMENT
The platform may have demanded:
Tax
Withdrawal fee
Verification payment
Security deposit
Account upgrade
Liquidity deposit
Negative-balance payment
Final task deposit
Release fee
If you paid any of these, preserve the payment record separately.
If you didn’t pay, screenshot the demand.
The FBI warns that cryptocurrency job scams can eventually produce large deposit requirements and frozen accounts, while its investment-fraud guidance warns against paying supposed taxes or fees to unlock cryptocurrency.
Once you’ve recorded the extra requirements, document the people who communicated them to you.
SAVE THE PEOPLE BEHIND THE JOB
Record:
Recruiter’s name
Username
Phone number
Profile
Company name
Customer-service account
Telegram username
WhatsApp number
Website
Referral code
Payment instructions
Scammers may present themselves as employees of legitimate companies, according to the FBI’s description of cryptocurrency job scams.
Once you’ve preserved their identities, document how the job originally reached you.
RECORD HOW YOU FOUND THE JOB
Maybe you received:
A WhatsApp message
A Telegram message
A text message
A social-media message
An online advertisement
A job-board listing
A referral
A direct message
Save the original message or advertisement.
The FTC says task scams commonly begin with unexpected messages offering online work and may move the victim onto a platform where fake earnings are displayed.
Once you’ve identified the original source, preserve the job description.
SAVE WHAT THE JOB PROMISED
Look for claims about:
Daily income
Guaranteed commissions
Flexible work
Large bonuses
Easy tasks
Fast payments
VIP levels
Performance rewards
High commissions
Guaranteed withdrawals
Save the original wording.
Don’t rely on memory.
The FTC warns that fake job and task offers can promise easy online earnings before requiring victims to put their own money into the scheme.
Once you’ve preserved the promises, compare them with what actually happened.
COMPARE THE JOB PROMISE WITH THE ACTUAL EXPERIENCE
For example:
Promised, complete simple online tasks for commissions.
Actual, required repeated cryptocurrency deposits.
Promised, earnings available after completing tasks.
Actual, additional deposits required before withdrawal.
Promised, final task would release funds.
Actual, another payment demanded.
This comparison can reveal how the supposed employment arrangement changed into repeated requests for your own money.
Once you’ve made the comparison, document the full timeline.
BUILD THE COMPLETE TIMELINE
A useful timeline might look like:
June 3 → received online job offer
June 4 → created account
June 5 → completed first tasks
June 5 → account displayed 150 USDT commission
June 6 → withdrew 50 USDT
June 8 → larger task appeared
June 8 → deposited 500 USDT
June 10 → deposited another 1,500 USDT
June 12 → account showed 7,000 USDT
June 12 → withdrawal requested
June 12 → withdrawal blocked
June 13 → 3,000 USDT required to complete task
June 13 → payment made
June 14 → account remained frozen
The exact details will depend on your case.
The purpose is to connect:
job offer → tasks → supposed earnings → deposits → larger tasks → withdrawal attempt → additional demands → frozen account
Once the timeline is complete, preserve all transaction hashes together.
CREATE A COMPLETE TRANSACTION RECORD
For every cryptocurrency payment, record:
Date
Asset
Amount
Network
Sending address
Receiving address
Transaction hash
Task or reason
For example:
June 8
USDT
500
Tron
Your wallet
Address A
Transaction hash
Task 7 deposit
Do this for every payment.
The FBI specifically identifies cryptocurrency addresses, amounts, asset types, dates, times, and transaction hashes as important transaction information when documenting cryptocurrency job scams.
Once you’ve organized the transactions, place the related messages beside them.
PAIR THE COMMUNICATION WITH THE BLOCKCHAIN
For each payment, keep:
Payment request
+
Screenshot
+
Wallet address
+
Transaction hash
+
Amount
For example:
“Deposit 2,000 USDT to complete the next task.”
→ screenshot
→ receiving address
→ 2,000 USDT transaction
→ transaction hash
This creates a direct connection between what you were instructed to do and what actually happened on-chain.
Once you’ve built that connection, check whether your own wallet was compromised beyond the payments you intentionally made.
CHECK FOR OTHER UNAUTHORIZED ACTIVITY
Ask yourself:
Did I only send cryptocurrency normally?
Did I connect my wallet to the task platform?
Did I approve a token?
Did I sign a smart-contract transaction?
Did I share my recovery phrase?
Did I share a private key?
Did I install an unfamiliar application?
These situations are different.
If you only transferred cryptocurrency to the platform’s address, the primary evidence may be the transfer trail.
If you approved malicious contracts or exposed wallet credentials, additional security steps may be necessary.
Never give your recovery phrase or private key to someone claiming they need it to release your job earnings.
CHECK YOUR REMAINING WALLET BALANCE
Review the wallet you used.
Look for:
Unknown transfers
Unexpected token approvals
Unfamiliar contract interactions
Unexpected swaps
Other assets leaving
If you see something you didn’t authorize, preserve that transaction separately.
Don’t automatically assume every transaction came from the job scam.
Document what you can verify.
Once you’ve checked your wallet, preserve your remaining funds carefully.
DON’T SEND YOUR REMAINING CRYPTO TO “UNLOCK” THE ACCOUNT
The platform may know you’ve already deposited substantial amounts.
That can make another demand feel reasonable:
“You’re already so close.”
“You’ve invested too much to stop now.”
“One final payment will release everything.”
“You only need to cover the negative balance.”
But the amount you’ve already lost should not determine whether you send another payment.
The FBI specifically advises victims of cryptocurrency job scams to stop sending money and warns against paying additional fees or taxes to withdraw funds.
Once you’ve stopped additional payments, preserve the platform exactly as it currently appears.
DON’T DELETE THE ACCOUNT YET
If you can still access the platform, don’t rush to delete:
Task history
Deposit records
Messages
Account information
Transaction history
Withdrawal requests
Balance history
Take screenshots first.
If you have downloadable records, preserve copies.
Once you’ve preserved the account, document whether the platform is still accessible.
RECORD WHAT HAPPENS TO THE PLATFORM
Check whether:
Website still loads
Login still works
Customer service responds
Withdrawal page remains available
Task system still operates
Domain has changed
App remains installed
If something disappears, record the date and time you noticed it.
Don’t repeatedly interact with the platform simply to see whether it comes back.
Once you’ve documented the platform’s current condition, keep the evidence organized in one place.
CREATE ONE EVIDENCE FOLDER
Keep:
Job offer
Recruiter messages
Platform screenshots
Task history
Balance screenshots
Withdrawal attempts
Payment requests
Wallet addresses
Transaction hashes
Exchange records
Customer-service conversations
Emails
Phone numbers
Website URLs
Timeline
This prevents important information from being scattered across different devices and applications.
Once your evidence is organized, be careful about anyone promising to recover the money.
WATCH FOR A SECOND RECOVERY SCAM
After a fake job scam, you may receive messages from someone claiming:
“We found your cryptocurrency.”
“We traced the wallet.”
“Your funds are ready to be recovered.”
“Pay a tracing fee.”
“Send crypto to activate recovery.”
“Pay a blockchain release charge.”
“We guarantee your money back.”
Be cautious.
The FBI warns that victims of cryptocurrency scams can be targeted by additional recovery scams in which criminals promise to recover lost funds and demand payment.
Don’t turn one cryptocurrency loss into another by sending money to an unexpected recovery offer.
Your original transaction evidence should remain the foundation of any legitimate review.
YOU DON’T NEED TO HAVE EVERYTHING FIGURED OUT
You may only have:
A fake job website
A WhatsApp conversation
Several payment requests
A few wallet addresses
Transaction hashes
Screenshots of your account
A frozen balance
That’s enough to begin reconstructing what happened.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct the movement of the cryptocurrency.
If you’re ready for professional assistance, contact [email protected] or +1 (929) 399-9264 on WhatsApp with whatever information you currently have.
If you’re not ready, preserve the evidence first.
WHAT YOUR EVIDENCE SHOULD SHOW
Ideally, your records should establish:
How the job reached you
↓
What the job promised
↓
What tasks you were asked to complete
↓
When the first cryptocurrency deposit was required
↓
Every additional payment that followed
↓
Which wallet addresses received the payments
↓
What the platform displayed as earnings
↓
When you first attempted withdrawal
↓
Why the withdrawal was blocked
↓
What additional payments were demanded
↓
Where the cryptocurrency moved afterward
You don’t need a perfect evidence file.
You need a clear sequence connecting the supposed employment opportunity to the cryptocurrency payments.
The most useful question isn’t simply “How do I get my crypto back?”
It’s:
“How did the job start, what tasks did they require, why was I repeatedly asked to deposit cryptocurrency, what did I actually send, and where did those funds move afterward?”
Start there, preserve everything, and don’t let the promise of one more task or one more payment turn an existing loss into a larger one.