- Thread starter
- #1
You may not have realized you were being manipulated while it was happening.
The person may have presented themselves as someone you trusted, someone with authority, a financial professional, a customer-support representative, a romantic partner, a business contact, or simply someone who appeared to know exactly what they were talking about.
They may have created urgency.
They may have frightened you.
They may have promised something in return.
They may have told you that your money was in danger unless you acted immediately.
Eventually, you sent a large cryptocurrency payment.
Now you’re looking back at the conversation and realizing that something wasn’t right.
If you believe you were manipulated into sending the payment, stop communicating with the person and don’t send another payment.
The FTC warns that cryptocurrency payments are generally difficult to reverse and recommends contacting the cryptocurrency company or service used to send the funds as soon as possible if you paid a scammer.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct what happened to the cryptocurrency.
If you’re ready, contact [email protected] or +1 (929) 399-9264 on WhatsApp.
If you need time first, preserve the evidence before doing anything else.
STOP SENDING MONEY
Don’t let the person convince you that another payment will fix the first one.
You may hear:
“You need to complete the payment.”
“Send more so I can return everything.”
“The first transaction is stuck.”
“You need to pay the release fee.”
“The blockchain requires another payment.”
“Send the balance and I’ll refund you.”
“You have to pay a verification fee.”
If the original payment resulted from manipulation, another payment can increase the loss.
The FBI advises cryptocurrency-fraud victims to stop sending money and warns against paying additional fees to recover funds.
Your first priority is preserving what happened, not fixing it through another transfer.
WRITE DOWN WHAT MADE YOU SEND THE PAYMENT
Before deleting messages or blocking anyone, document the sequence.
Ask:
Who contacted me?
How did they identify themselves?
What did they tell me?
What did they want me to believe?
Why did I believe the payment was necessary?
What did they say would happen afterward?
What made me feel I had to act immediately?
Don’t judge yourself while doing this.
The purpose is to reconstruct the manipulation accurately.
For example:
10:00, person claims to be an exchange employee
10:15, says account is under attack
10:20, instructs me to move funds to a “safe” wallet
10:30, provides wallet address
10:35, 15,000 USDT sent
10:40, demands another payment
That sequence can be far more useful than simply recording that you “lost crypto.”
Once you’ve written the sequence down, preserve the original conversation.
SAVE THE ENTIRE CONVERSATION
Take screenshots or preserve copies of:
Messages
Emails
Phone numbers
Usernames
Profile pages
Voice messages
Call records
Payment instructions
Wallet addresses
QR codes
Links
Attachments
Screenshots they sent you
Don’t keep only the messages immediately surrounding the payment.
The earlier conversation may show how trust was established and how the person gradually moved you toward sending the cryptocurrency.
The FBI recommends documenting how a scammer initially contacted a victim, how the scammer identified themselves, and the financial transaction information connected to the fraud.
Once you’ve preserved the conversation, identify the exact payment you made.
FIND THE TRANSACTION HASH
Open the wallet or cryptocurrency service you used.
Locate the large payment.
Record:
Asset
Amount
Network
Sending wallet
Receiving wallet
Transaction hash
Date
Time
For example:
20,000 USDT
Tron network
Your wallet → Receiving address
Transaction hash
Don’t rely on the amount shown in the conversation.
The blockchain record is what establishes what was actually transferred.
The FTC explains that cryptocurrency transactions are generally recorded on a public blockchain and may include the transaction amount and wallet addresses.
Once you’ve found the transaction, compare it with the instructions you were given.
COMPARE THE PAYMENT WITH THE PERSON’S INSTRUCTIONS
Save:
The wallet address they provided
The address you actually sent to
The amount they requested
The amount you sent
The network they specified
The network actually used
The stated reason for payment
For example:
They requested, 10,000 USDT
You sent, 10,000 USDT
Address provided, Address A
Transaction destination, Address A
Or:
Address provided, Address A
Transaction destination, Address B
That difference should be documented rather than explained away.
Once you’ve compared the instructions with the transaction, check whether you made any additional payments.
FIND EVERY PAYMENT CONNECTED TO THE MANIPULATION
Don’t investigate only the largest transaction.
Look for:
Initial payment
Follow-up payment
“Correction” payment
Fee
Tax
Verification payment
Refund-related payment
Gas payment
Emergency payment
Additional wallet transfer
Create a separate record for each.
For example:
Payment 1, 2,000 USDT
Payment 2, 5,000 USDT
Payment 3, 15,000 USDT
Payment 4, 3,000 USDT
Total sent, 25,000 USDT
This can reveal how the loss developed.
Once you’ve identified every payment, determine which ones were actually authorized by you and why.
SEPARATE INTENTIONAL PAYMENTS FROM UNAUTHORIZED ACTIVITY
Being manipulated into making a payment is different from someone directly accessing your wallet and transferring funds without your involvement.
You may have:
Personally approved every transfer
Approved a malicious smart contract
Shared wallet credentials
Connected your wallet to a suspicious website
Given someone remote access
Had additional unauthorized transfers afterward
These possibilities should not be treated as the same event.
Document what you know.
Don’t assume more than the transaction history establishes.
Once you’ve separated the events, check what happened to your wallet afterward.
CHECK FOR OTHER TRANSACTIONS
Review the wallet after the large payment.
Look for:
Unknown transfers
Unexpected token movements
NFT transfers
Token approvals
Smart-contract interactions
Unexpected swaps
Transfers to unfamiliar addresses
If you find another suspicious transaction, record it separately.
The goal is to determine whether the large payment was the only loss or whether additional activity occurred afterward.
Once you’ve reviewed the wallet, trace the payment itself.
TRACE WHERE THE CRYPTO WENT
The receiving wallet may have transferred the cryptocurrency elsewhere.
A simplified trail might look like:
Your wallet
↓
Receiving address
↓
Wallet B
↓
Wallet C
You may instead see:
Your wallet
↓
Receiving address
↓
Token swap
↓
Another wallet
Record each movement you can verify.
For every transaction, preserve:
Amount
Asset
From
To
Transaction hash
Timestamp
Don’t claim that an address belongs to a particular person simply because the address received your funds.
The useful evidence is the verifiable movement of the cryptocurrency.
Once you’ve traced the initial movement, preserve the person’s identity information.
SAVE EVERYTHING YOU KNOW ABOUT THE PERSON
Record:
Name used
Username
Phone number
Email
Profile URL
Company claimed
Job title claimed
Location claimed
Wallet addresses
Social-media accounts
Telegram handle
WhatsApp number
Discord username
Website
Payment instructions
Even apparently minor details can help connect separate pieces of evidence.
Once you’ve documented the person, determine what identity they claimed to have.
DOCUMENT THE IDENTITY THEY CLAIMED
The person may have said they were:
An exchange employee
A financial adviser
A government official
A bank representative
A customer-support employee
A business owner
An investment manager
A romantic partner
A friend
A colleague
A potential employer
A recovery specialist
Write down exactly what they claimed.
Don’t replace their claimed identity with your conclusion.
For example:
“They said they worked for an exchange.”
is more precise than:
“The exchange stole my crypto.”
That distinction matters when organizing evidence.
Once you’ve recorded the claimed identity, preserve anything they used to support it.
SAVE THE “PROOF” THEY SHOWED YOU
They may have sent:
Employee ID
Company logo
Screenshots
Fake invoices
Investment statements
Fake account balances
Identification documents
Links to company websites
Fake customer-service tickets
Screenshots of supposed transactions
Videos
Voice messages
Preserve these materials.
Don’t assume they’re authentic simply because they look professional.
The FTC warns that scammers impersonate businesses, government agencies, investment professionals, romantic interests, and other trusted parties to persuade people to send cryptocurrency.
Once you’ve preserved the supposed proof, document the pressure that preceded the payment.
RECORD THE PRESSURE TACTICS
Look for statements such as:
“You have five minutes.”
“Don’t tell anyone.”
“Your account is being hacked.”
“Your money isn’t safe.”
“You will lose everything if you don’t act.”
“The police are involved.”
“Your account will be frozen.”
“You must send it now.”
“This is your only chance.”
The FBI has identified urgency and isolation as common manipulation tactics in cryptocurrency fraud.
Preserve the exact messages rather than summarizing them.
Once you’ve documented the pressure, identify what you were promised in return.
DOCUMENT WHAT YOU EXPECTED TO HAPPEN
Maybe you believed the payment would:
Protect your funds
Unlock an account
Complete an investment
Purchase something
Resolve an alleged security problem
Help someone you trusted
Release a withdrawal
Pay a legitimate invoice
Secure a job
Return another payment
Prevent an alleged legal problem
Write down the promised outcome.
Then compare it with what actually happened.
Once you’ve documented the promise, record what happened immediately after you paid.
DOCUMENT WHAT HAPPENED AFTER THE PAYMENT
Did the person:
Stop responding?
Demand more money?
Change the story?
Claim the transaction failed?
Provide another wallet address?
Ask for a fee?
Say your payment was incomplete?
Promise a refund?
Introduce another “agent”?
Tell you to wait?
Record the sequence.
For example:
Payment sent
↓
“Transaction is pending”
↓
Another payment requested
↓
“Refund will arrive tomorrow”
↓
No refund
That sequence can reveal whether the manipulation continued after the original payment.
Once you’ve documented what happened afterward, don’t pay a supposed recovery fee.
DON’T PAY TO RECOVER THE FIRST PAYMENT
Someone may now claim:
“I can trace your crypto.”
“I found the wallet.”
“Pay me to recover it.”
“Send cryptocurrency so I can activate the recovery.”
“You need to pay a blockchain fee.”
“The funds are frozen until you pay.”
The FBI specifically warns that cryptocurrency victims can be targeted by recovery scams in which criminals falsely claim they can recover lost funds and then demand payment.
Don’t send another large payment based solely on an unsolicited recovery promise.
Your original transaction evidence should come first.
CONTACT THE CRYPTOCURRENCY SERVICE YOU USED
If you purchased or sent the cryptocurrency through an exchange, ATM operator, or other cryptocurrency service, contact that provider immediately through its legitimate support channel.
Tell them:
The payment was fraudulent
You were manipulated into sending it
Transaction hash
Asset
Amount
Receiving address
Date and time
The FTC recommends contacting the cryptocurrency exchange or ATM operator immediately after paying a scammer, reporting the transaction as fraudulent, and asking whether it can be reversed or refunded.
Don’t assume the transaction can be reversed.
Ask what options are available and preserve the provider’s response.
Once you’ve contacted the provider, save the case number and all correspondence.
PRESERVE THE SERVICE PROVIDER’S RESPONSE
Keep:
Support ticket
Case number
Emails
Chat transcripts
Fraud report
Transaction review
Instructions
Date contacted
If they tell you that the transaction cannot be reversed, keep that response too.
It becomes part of the chronology.
Once you’ve preserved the provider’s response, organize everything into one evidence file.
BUILD ONE COMPLETE EVIDENCE FILE
Include:
Original contact
Full conversation
Person’s claimed identity
Profile information
Payment request
Wallet address
Transaction hash
Additional payments
Blockchain records
Screenshots
Voice messages
Emails
Websites
Timeline
Service-provider correspondence
A useful timeline might look like:
June 3 → first contact
June 4 → identity established
June 5 → emergency or opportunity presented
June 5 → payment requested
June 5 → 20,000 USDT sent
June 5 → additional payment requested
June 6 → second payment sent
June 7 → person stopped responding
The dates and amounts will depend on your situation.
Once you’ve assembled the evidence, stop trying to negotiate with the person.
DON’T TRY TO CONVINCE THEM TO RETURN THE FUNDS
You may feel tempted to:
Threaten them
Argue
Offer another payment
Pretend you will send more
Ask them to prove their identity
Demand an immediate refund
Continue the conversation to gather information
That can create additional risk and may cause evidence to disappear.
Preserve what you already have.
If you’ve decided to report the fraud, provide the evidence through the appropriate reporting or investigative channel rather than continuing the confrontation.
The FBI specifically advises victims not to notify suspected criminals of an FBI investigation because it may compromise investigative efforts.
Once you’ve stopped communicating, protect your remaining accounts and wallet.
CHECK WHETHER ANYTHING ELSE WAS EXPOSED
Ask:
Did I share a password?
Did I share a seed phrase?
Did I share a private key?
Did I give remote access to my device?
Did I connect my wallet to a website?
Did I approve a smart contract?
Did I install software they sent me?
If yes, the incident may involve more than the single payment.
Secure affected accounts and wallets using trusted channels and preserve evidence before making changes where possible.
Never give your recovery phrase or private key to someone claiming they need it to recover your cryptocurrency.
DON’T LET SHAME INTERRUPT THE EVIDENCE
Manipulation is designed to influence the victim’s decision-making.
You don’t need to prove that you “should have known.”
You need to establish:
Who contacted you
What they claimed
What they told you to do
Why you sent the payment
Where the payment went
What happened afterward
That is the useful information.
Once you’ve documented those facts, you have a much clearer starting point for understanding the loss.
YOU DON’T NEED TO HAVE EVERYTHING FIGURED OUT
You may only have:
A phone number
A username
A conversation
One wallet address
One large transaction
A few screenshots
That can still be enough to begin reconstructing what happened.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct the movement of the cryptocurrency.
If you’re ready for professional assistance, contact [email protected] or +1 (929) 399-9264 on WhatsApp with whatever information you currently have.
If you’re not ready, preserve the evidence first.
WHAT YOUR EVIDENCE SHOULD SHOW
Ideally, your records should establish:
How the person contacted you
↓
Who they claimed to be
↓
How trust was established
↓
What pressure or story was used
↓
Why you believed the payment was necessary
↓
Which cryptocurrency you sent
↓
How much you sent
↓
Which wallet received it
↓
What happened afterward
↓
Whether additional payments were requested
↓
Where the cryptocurrency moved
You don’t need to reconstruct the person’s entire identity yourself.
You need a factual record of the interaction and the blockchain activity.
The most useful question isn’t simply “How do I get my crypto back?”
It’s:
“Who persuaded me to send the payment, what did they tell me would happen, exactly what did I send, where did it go, and what happened after the transfer?”
Start there, preserve the evidence, contact the cryptocurrency service you used as soon as possible, and don’t let the same person—or someone claiming to recover the funds—persuade you into sending another payment.
The person may have presented themselves as someone you trusted, someone with authority, a financial professional, a customer-support representative, a romantic partner, a business contact, or simply someone who appeared to know exactly what they were talking about.
They may have created urgency.
They may have frightened you.
They may have promised something in return.
They may have told you that your money was in danger unless you acted immediately.
Eventually, you sent a large cryptocurrency payment.
Now you’re looking back at the conversation and realizing that something wasn’t right.
If you believe you were manipulated into sending the payment, stop communicating with the person and don’t send another payment.
The FTC warns that cryptocurrency payments are generally difficult to reverse and recommends contacting the cryptocurrency company or service used to send the funds as soon as possible if you paid a scammer.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct what happened to the cryptocurrency.
If you’re ready, contact [email protected] or +1 (929) 399-9264 on WhatsApp.
If you need time first, preserve the evidence before doing anything else.
STOP SENDING MONEY
Don’t let the person convince you that another payment will fix the first one.
You may hear:
“You need to complete the payment.”
“Send more so I can return everything.”
“The first transaction is stuck.”
“You need to pay the release fee.”
“The blockchain requires another payment.”
“Send the balance and I’ll refund you.”
“You have to pay a verification fee.”
If the original payment resulted from manipulation, another payment can increase the loss.
The FBI advises cryptocurrency-fraud victims to stop sending money and warns against paying additional fees to recover funds.
Your first priority is preserving what happened, not fixing it through another transfer.
WRITE DOWN WHAT MADE YOU SEND THE PAYMENT
Before deleting messages or blocking anyone, document the sequence.
Ask:
Who contacted me?
How did they identify themselves?
What did they tell me?
What did they want me to believe?
Why did I believe the payment was necessary?
What did they say would happen afterward?
What made me feel I had to act immediately?
Don’t judge yourself while doing this.
The purpose is to reconstruct the manipulation accurately.
For example:
10:00, person claims to be an exchange employee
10:15, says account is under attack
10:20, instructs me to move funds to a “safe” wallet
10:30, provides wallet address
10:35, 15,000 USDT sent
10:40, demands another payment
That sequence can be far more useful than simply recording that you “lost crypto.”
Once you’ve written the sequence down, preserve the original conversation.
SAVE THE ENTIRE CONVERSATION
Take screenshots or preserve copies of:
Messages
Emails
Phone numbers
Usernames
Profile pages
Voice messages
Call records
Payment instructions
Wallet addresses
QR codes
Links
Attachments
Screenshots they sent you
Don’t keep only the messages immediately surrounding the payment.
The earlier conversation may show how trust was established and how the person gradually moved you toward sending the cryptocurrency.
The FBI recommends documenting how a scammer initially contacted a victim, how the scammer identified themselves, and the financial transaction information connected to the fraud.
Once you’ve preserved the conversation, identify the exact payment you made.
FIND THE TRANSACTION HASH
Open the wallet or cryptocurrency service you used.
Locate the large payment.
Record:
Asset
Amount
Network
Sending wallet
Receiving wallet
Transaction hash
Date
Time
For example:
20,000 USDT
Tron network
Your wallet → Receiving address
Transaction hash
Don’t rely on the amount shown in the conversation.
The blockchain record is what establishes what was actually transferred.
The FTC explains that cryptocurrency transactions are generally recorded on a public blockchain and may include the transaction amount and wallet addresses.
Once you’ve found the transaction, compare it with the instructions you were given.
COMPARE THE PAYMENT WITH THE PERSON’S INSTRUCTIONS
Save:
The wallet address they provided
The address you actually sent to
The amount they requested
The amount you sent
The network they specified
The network actually used
The stated reason for payment
For example:
They requested, 10,000 USDT
You sent, 10,000 USDT
Address provided, Address A
Transaction destination, Address A
Or:
Address provided, Address A
Transaction destination, Address B
That difference should be documented rather than explained away.
Once you’ve compared the instructions with the transaction, check whether you made any additional payments.
FIND EVERY PAYMENT CONNECTED TO THE MANIPULATION
Don’t investigate only the largest transaction.
Look for:
Initial payment
Follow-up payment
“Correction” payment
Fee
Tax
Verification payment
Refund-related payment
Gas payment
Emergency payment
Additional wallet transfer
Create a separate record for each.
For example:
Payment 1, 2,000 USDT
Payment 2, 5,000 USDT
Payment 3, 15,000 USDT
Payment 4, 3,000 USDT
Total sent, 25,000 USDT
This can reveal how the loss developed.
Once you’ve identified every payment, determine which ones were actually authorized by you and why.
SEPARATE INTENTIONAL PAYMENTS FROM UNAUTHORIZED ACTIVITY
Being manipulated into making a payment is different from someone directly accessing your wallet and transferring funds without your involvement.
You may have:
Personally approved every transfer
Approved a malicious smart contract
Shared wallet credentials
Connected your wallet to a suspicious website
Given someone remote access
Had additional unauthorized transfers afterward
These possibilities should not be treated as the same event.
Document what you know.
Don’t assume more than the transaction history establishes.
Once you’ve separated the events, check what happened to your wallet afterward.
CHECK FOR OTHER TRANSACTIONS
Review the wallet after the large payment.
Look for:
Unknown transfers
Unexpected token movements
NFT transfers
Token approvals
Smart-contract interactions
Unexpected swaps
Transfers to unfamiliar addresses
If you find another suspicious transaction, record it separately.
The goal is to determine whether the large payment was the only loss or whether additional activity occurred afterward.
Once you’ve reviewed the wallet, trace the payment itself.
TRACE WHERE THE CRYPTO WENT
The receiving wallet may have transferred the cryptocurrency elsewhere.
A simplified trail might look like:
Your wallet
↓
Receiving address
↓
Wallet B
↓
Wallet C
You may instead see:
Your wallet
↓
Receiving address
↓
Token swap
↓
Another wallet
Record each movement you can verify.
For every transaction, preserve:
Amount
Asset
From
To
Transaction hash
Timestamp
Don’t claim that an address belongs to a particular person simply because the address received your funds.
The useful evidence is the verifiable movement of the cryptocurrency.
Once you’ve traced the initial movement, preserve the person’s identity information.
SAVE EVERYTHING YOU KNOW ABOUT THE PERSON
Record:
Name used
Username
Phone number
Profile URL
Company claimed
Job title claimed
Location claimed
Wallet addresses
Social-media accounts
Telegram handle
WhatsApp number
Discord username
Website
Payment instructions
Even apparently minor details can help connect separate pieces of evidence.
Once you’ve documented the person, determine what identity they claimed to have.
DOCUMENT THE IDENTITY THEY CLAIMED
The person may have said they were:
An exchange employee
A financial adviser
A government official
A bank representative
A customer-support employee
A business owner
An investment manager
A romantic partner
A friend
A colleague
A potential employer
A recovery specialist
Write down exactly what they claimed.
Don’t replace their claimed identity with your conclusion.
For example:
“They said they worked for an exchange.”
is more precise than:
“The exchange stole my crypto.”
That distinction matters when organizing evidence.
Once you’ve recorded the claimed identity, preserve anything they used to support it.
SAVE THE “PROOF” THEY SHOWED YOU
They may have sent:
Employee ID
Company logo
Screenshots
Fake invoices
Investment statements
Fake account balances
Identification documents
Links to company websites
Fake customer-service tickets
Screenshots of supposed transactions
Videos
Voice messages
Preserve these materials.
Don’t assume they’re authentic simply because they look professional.
The FTC warns that scammers impersonate businesses, government agencies, investment professionals, romantic interests, and other trusted parties to persuade people to send cryptocurrency.
Once you’ve preserved the supposed proof, document the pressure that preceded the payment.
RECORD THE PRESSURE TACTICS
Look for statements such as:
“You have five minutes.”
“Don’t tell anyone.”
“Your account is being hacked.”
“Your money isn’t safe.”
“You will lose everything if you don’t act.”
“The police are involved.”
“Your account will be frozen.”
“You must send it now.”
“This is your only chance.”
The FBI has identified urgency and isolation as common manipulation tactics in cryptocurrency fraud.
Preserve the exact messages rather than summarizing them.
Once you’ve documented the pressure, identify what you were promised in return.
DOCUMENT WHAT YOU EXPECTED TO HAPPEN
Maybe you believed the payment would:
Protect your funds
Unlock an account
Complete an investment
Purchase something
Resolve an alleged security problem
Help someone you trusted
Release a withdrawal
Pay a legitimate invoice
Secure a job
Return another payment
Prevent an alleged legal problem
Write down the promised outcome.
Then compare it with what actually happened.
Once you’ve documented the promise, record what happened immediately after you paid.
DOCUMENT WHAT HAPPENED AFTER THE PAYMENT
Did the person:
Stop responding?
Demand more money?
Change the story?
Claim the transaction failed?
Provide another wallet address?
Ask for a fee?
Say your payment was incomplete?
Promise a refund?
Introduce another “agent”?
Tell you to wait?
Record the sequence.
For example:
Payment sent
↓
“Transaction is pending”
↓
Another payment requested
↓
“Refund will arrive tomorrow”
↓
No refund
That sequence can reveal whether the manipulation continued after the original payment.
Once you’ve documented what happened afterward, don’t pay a supposed recovery fee.
DON’T PAY TO RECOVER THE FIRST PAYMENT
Someone may now claim:
“I can trace your crypto.”
“I found the wallet.”
“Pay me to recover it.”
“Send cryptocurrency so I can activate the recovery.”
“You need to pay a blockchain fee.”
“The funds are frozen until you pay.”
The FBI specifically warns that cryptocurrency victims can be targeted by recovery scams in which criminals falsely claim they can recover lost funds and then demand payment.
Don’t send another large payment based solely on an unsolicited recovery promise.
Your original transaction evidence should come first.
CONTACT THE CRYPTOCURRENCY SERVICE YOU USED
If you purchased or sent the cryptocurrency through an exchange, ATM operator, or other cryptocurrency service, contact that provider immediately through its legitimate support channel.
Tell them:
The payment was fraudulent
You were manipulated into sending it
Transaction hash
Asset
Amount
Receiving address
Date and time
The FTC recommends contacting the cryptocurrency exchange or ATM operator immediately after paying a scammer, reporting the transaction as fraudulent, and asking whether it can be reversed or refunded.
Don’t assume the transaction can be reversed.
Ask what options are available and preserve the provider’s response.
Once you’ve contacted the provider, save the case number and all correspondence.
PRESERVE THE SERVICE PROVIDER’S RESPONSE
Keep:
Support ticket
Case number
Emails
Chat transcripts
Fraud report
Transaction review
Instructions
Date contacted
If they tell you that the transaction cannot be reversed, keep that response too.
It becomes part of the chronology.
Once you’ve preserved the provider’s response, organize everything into one evidence file.
BUILD ONE COMPLETE EVIDENCE FILE
Include:
Original contact
Full conversation
Person’s claimed identity
Profile information
Payment request
Wallet address
Transaction hash
Additional payments
Blockchain records
Screenshots
Voice messages
Emails
Websites
Timeline
Service-provider correspondence
A useful timeline might look like:
June 3 → first contact
June 4 → identity established
June 5 → emergency or opportunity presented
June 5 → payment requested
June 5 → 20,000 USDT sent
June 5 → additional payment requested
June 6 → second payment sent
June 7 → person stopped responding
The dates and amounts will depend on your situation.
Once you’ve assembled the evidence, stop trying to negotiate with the person.
DON’T TRY TO CONVINCE THEM TO RETURN THE FUNDS
You may feel tempted to:
Threaten them
Argue
Offer another payment
Pretend you will send more
Ask them to prove their identity
Demand an immediate refund
Continue the conversation to gather information
That can create additional risk and may cause evidence to disappear.
Preserve what you already have.
If you’ve decided to report the fraud, provide the evidence through the appropriate reporting or investigative channel rather than continuing the confrontation.
The FBI specifically advises victims not to notify suspected criminals of an FBI investigation because it may compromise investigative efforts.
Once you’ve stopped communicating, protect your remaining accounts and wallet.
CHECK WHETHER ANYTHING ELSE WAS EXPOSED
Ask:
Did I share a password?
Did I share a seed phrase?
Did I share a private key?
Did I give remote access to my device?
Did I connect my wallet to a website?
Did I approve a smart contract?
Did I install software they sent me?
If yes, the incident may involve more than the single payment.
Secure affected accounts and wallets using trusted channels and preserve evidence before making changes where possible.
Never give your recovery phrase or private key to someone claiming they need it to recover your cryptocurrency.
DON’T LET SHAME INTERRUPT THE EVIDENCE
Manipulation is designed to influence the victim’s decision-making.
You don’t need to prove that you “should have known.”
You need to establish:
Who contacted you
What they claimed
What they told you to do
Why you sent the payment
Where the payment went
What happened afterward
That is the useful information.
Once you’ve documented those facts, you have a much clearer starting point for understanding the loss.
YOU DON’T NEED TO HAVE EVERYTHING FIGURED OUT
You may only have:
A phone number
A username
A conversation
One wallet address
One large transaction
A few screenshots
That can still be enough to begin reconstructing what happened.
Jim Recovery Team can review the information you have, identify relevant blockchain transactions, trace known fund movements, and help reconstruct the movement of the cryptocurrency.
If you’re ready for professional assistance, contact [email protected] or +1 (929) 399-9264 on WhatsApp with whatever information you currently have.
If you’re not ready, preserve the evidence first.
WHAT YOUR EVIDENCE SHOULD SHOW
Ideally, your records should establish:
How the person contacted you
↓
Who they claimed to be
↓
How trust was established
↓
What pressure or story was used
↓
Why you believed the payment was necessary
↓
Which cryptocurrency you sent
↓
How much you sent
↓
Which wallet received it
↓
What happened afterward
↓
Whether additional payments were requested
↓
Where the cryptocurrency moved
You don’t need to reconstruct the person’s entire identity yourself.
You need a factual record of the interaction and the blockchain activity.
The most useful question isn’t simply “How do I get my crypto back?”
It’s:
“Who persuaded me to send the payment, what did they tell me would happen, exactly what did I send, where did it go, and what happened after the transfer?”
Start there, preserve the evidence, contact the cryptocurrency service you used as soon as possible, and don’t let the same person—or someone claiming to recover the funds—persuade you into sending another payment.