Crypto Recovery Scam: The Refund Pitch That Pushes Victims to Borrow Money

A stranger messages you about money you lost months ago. They seem to know exactly which investment went wrong.

Then the conversation turns to what you can afford today.

Overview

A second pitch arrived after the investment disappeared

An Australian family described a familiar start to an investment scam. A small early payment made the offer feel real.

The investment contact later stopped responding after the father had lost money.

Someone on WhatsApp then claimed they could help recover the funds. The family said the new conversation led to talk of borrowing against the home and sending money in Bitcoin.

When the father tried to buy Bitcoin, the exchange declined the transaction, according to the family.

The account does not establish that a loan was approved or that a second payment went through.

Australia’s Scamwatch warns that people who’ve already lost money are targeted with offers to get it back for a fee.

The new offer can come by WhatsApp or another private channel.

The recovery offer puts your remaining money at risk

The first investment may have drained the balance you could reach in a few taps. A recovery contact can still ask what you could borrow or sell to pay them.

Before doing anything else, find out which of these things has happened:

• Someone suggested borrowing against an asset or started asking for documents.
• A lender received an application in the victim’s name.
• A lender approved the application or released funds.
• Cash left a bank account or an exchange tried to process a crypto purchase.
• Cryptocurrency was bought, sent out, or left in an exchange account.

These are separate events. The person handling one of them may have no visibility into the others.

A declined purchase at an exchange cannot tell you whether a lender released money.

A real financial institution can appear in the middle

A lender, bank, or exchange can be legitimate even when the person directing the payments is a scammer. The recovery contact may just tell the victim which institution to use.

Speak to each institution about its part. Tell the lender about the application. Give your bank the cash or transfer details. Tell the exchange how the Bitcoin request came about.

You may need to make those calls together as a family. Ask the account holder to lead the conversation, or ask the institution how to obtain consent to help.

How the Scam Works

Step 1: An investment loss creates an opening

People often keep old investment messages because they still hope a withdrawal might clear. When a new contact says a refund is possible, it gives them something immediate to do.

The caller may mention the platform or a figure the victim recognizes. Those details can make the story persuasive.

They do not establish that the caller works for a bank or investigator.

Keep those messages if you have them. A bank or fraud investigator can use the dates and payment records.

A stranger needs none of your passwords or verification codes to describe an alleged refund.

The Australian Competition and Consumer Commission has documented follow-up recovery pitches targeting victims of earlier scams. It warns that some callers impersonate authorities or other trusted organizations.

Step 2: The conversation moves to payment

An initial chat may be about finding your missing balance.

The important change comes when the caller says you have to put in more money before any of it can come back.

They may present the payment as a fee or an administrative expense.

Ask yourself where that requirement exists outside the chat. A pasted invoice or balance on a screen proves little.

Someone claiming to be from your own bank should be reachable through the bank app or the number already on your card.

Give the real bank the details and ask it to check.

If you have a genuine case from the first loss, continue on that case yourself.

A new contact who names your loss does not need to become the intermediary between you and the bank.

Step 3: The amount gets tied to a source of borrowing

In the Australian report, the family said the contact was encouraging their father to borrow against his home.

That made the second pitch potentially more costly than the cash immediately available.

A real loan can carry repayment obligations whatever happens to the recovery promise.

If paperwork is already under way, ask the lender about the application and explain why you are concerned.

If a relative tells you the loan is “almost through,” ask what that means.

They may have sent identity documents, obtained a quote, or received an actual approval. Each needs different follow-up.

A broker may have forwarded an application to a lender. Get the lender name from genuine paperwork or a verified message.

Ask the lender whether it has the application, using its own contact information.

Step 4: The victim tries to turn available money into Bitcoin

Cash in a bank account, a completed crypto purchase, and a transfer to somebody else’s wallet are three different stages. Find out where the money is now before taking action.

The family reported getting a refusal at the exchange in this case. If that happens to you, keep the error or refusal and speak to the company that issued it.

A caller may describe that refusal as a minor inconvenience and suggest another way to pay. Stop the conversation while you speak to your own bank and the exchange.

If you have exchange receipts, save the status shown inside your account. A balance might still be there even though the caller insists it has to be moved right away.

Step 5: The victim is asked to keep going

Even when a payment is blocked, the person in the chat can keep calling.

If earlier funds are already gone, it may feel as if stopping means giving up on the first loss.

You can end the chat and still pursue the original report. Keep the evidence, then ask your bank or exchange about that payment through its fraud team.

Some scammers ask for screenshots as proof that the victim tried to pay. Those screenshots can show account details, balances, names, or identity information. Save them for your own records.

If an earlier payment has already gone through, give the provider the transaction reference and time. Ask what it can still do. Nobody contacting you privately can guarantee the result.

How to Help a Relative Who Still Believes the Refund Is Coming

Start with a specific question about today. “Has any money left your bank?” can lead to a useful answer even if you disagree about how the original investment worked.

Ask to see the account, loan letter, or receipt with their permission. Give them time to explain what they did. Someone who feels cornered may stop showing you the messages.

If a withdrawal is still pending, sit together and make the call to the real bank.

Let your relative explain the facts in their own words. Write down the case number.

Suggest waiting until the lender, bank, or exchange can confirm its part of the story.

An honest conversation with those institutions can settle questions that arguing about the WhatsApp contact won’t.

If documents went into the chat, list exactly which ones. A driver’s license and a bank statement create different exposure from a copied email address.

A debt counselor can help sort real repayments from the demands in the chat.

Do not promise a family member that a loan will disappear just because the request started with a scam.

What to Check If Someone Asked You to Borrow

If somebody said they were helping you fill in an application, gather the emails or documents from that process. Look for a genuine lender name and an application reference.

Ask the lender whether the application is still open and whether it can pause disbursement while it reviews your report. Give it a safe number where it can reach you.

If money was deposited into your own account, ask your bank about holding it while the lender responds.

A stranger in a chat should never tell you where to return it.

If the lender says it sent money to a different account, ask it to record that discrepancy. Keep the funding notice and any instructions you received from the recovery contact.

Check whether someone asked you to sign a form or make a payment to a third party. Write down who asked, what you actually sent, and the date.

When a broker and a lender both appear in your paperwork, report the concern to both. One may have the application correspondence while the other has the funding record.

Save any new credit or loan letters even after the chats stop. Ask the lender to confirm the application’s final status in writing if it remains unclear.

What to Do if You Have Fallen Victim to This Scam

Stop before the next payment or withdrawal. If a lender or bank could move the money today, call that institution now and explain that you suspect fraud.

1. Stop sending money. Leave existing funds where they are. Ignore any request to finish the transfer with a different exchange or payment service.

2. Speak to the lender. Ask whether it received, approved, or funded an application. Report the scam contact and ask which steps can still be taken.

3. Call your bank or exchange. Give the time, amount, and reference of anything you tried to send. Ask whether any transaction can still be stopped.

4. Save the evidence. Keep the chat, payment records, account statements, and any loan documents with the dates visible. Keep private information out of public posts.

5. Report the approach. Use Scamwatch’s report form. Report the WhatsApp contact through the app after saving the messages you need.

6. Get identity or debt support. Tell the provider what you shared and which stage the borrowing reached. Keep a record of any commitments the provider confirms.

An Australian victim can ask IDCARE for help managing identity exposure. If you handed over access to an account, use the provider’s official recovery or fraud channel.

Moneysmart’s investment scam guidance explains where to report the original loss. Save those records separately so new payments or loan documents do not get buried.

If a loan was approved and you applied for it yourself under pressure, say so. If you never applied and found a loan in your name, explain that separately.

If you only considered a loan and never submitted anything, verify that before spending time disputing an account. Focus first on any documents or payment information you handed over.

Frequently Asked Questions

Can a stranger really get stolen Bitcoin back for an upfront fee?

Do not pay a private contact who guarantees that outcome. Report the original transfer directly to the bank or exchange you used and ask what options are actually available.

An exchange or fraud team may ask for a transaction reference. Give it through the genuine support channel. A request to send more crypto is a separate payment.

Why does the caller know what I lost?

The details could come from the original scam, information shared with another party, or a public post.

In this case, the material available does not show how the caller learned them.

Knowing the platform name or approximate amount should prompt you to secure your records. It is no reason to give the caller control of your response.

The exchange declined my purchase. Is my money safe?

Check the exchange and bank separately. An exchange can refuse a purchase even when a withdrawal, card authorization, or loan had already taken place somewhere else.

Ask the exchange whether funds left the account and ask the bank whether any authorization is pending. Write down which event each company actually confirmed.

What if the lender already sent me the money?

Call the lender before spending or transferring it. Explain that a recovery contact pushed you into borrowing and ask how the lender wants you to handle the proceeds.

Keep the application, funding notice, and loan terms. You may need qualified debt advice to understand your options if the application went through.

Should I delete the WhatsApp conversation?

Save the messages and dates first, then block and report the account. Keep the original thread if your bank, exchange, or authorities want to see it.

You can mute the conversation while you save records. Resist the urge to reply with payment screenshots or an explanation of the fraud report.

Is it too late to tell my bank about the first scam?

Tell the bank what happened, even if time has passed. Give the date, payment method, and amount. Ask what records it needs and what options are still open.

Treat any new contact about that report as a separate request. Use the genuine case number to call the bank back yourself.

The Bottom Line

The old loss gives a recovery caller something to talk about. The money they ask you to borrow or send today is where you can still intervene.

Find out whether funds were borrowed, withdrawn, bought as Bitcoin, or sent. Get the answer from the institution handling each step before you move anything else.