Fake Law Firms Are Targeting Crypto Scam Victims With a Second Fraud

For most victims, losing crypto to a scam isn't a single blow. The FBI's Internet Crime Complaint Center (IC3) has issued a dedicated warning about a scheme that specifically targets people who have already lost money: scammers posing as attorneys at well-known law firms, offering to recover the stolen funds for a fee. It's a second fraud layered on top of the first, and it works precisely because the victim is emotionally vulnerable and desperate to get something back.

How Scammers Find Their Targets

According to the IC3 alert, scammers often reach out unsolicited, demonstrating accurate knowledge of the victim's earlier theft: the amount lost, the date of the transaction, the name of the company or platform the funds went to. That level of detail can come from other scammers' victim databases, from data breaches, or even from public forum posts where victims describe their own situation while looking for help. That accuracy is exactly what makes the first contact so convincing: the victim reasons that anyone who knows this much detail must genuinely be involved in the case.

The Mechanics: From First Message to Lost Money

Once contact is made, the scammer typically claims the victim is on a "government-affiliated list of scam victims" and that the case is being handled through official legal channels. The victim is then added to a group chat, usually on WhatsApp, alongside supposed fellow attorneys and "foreign bank processors" responsible for handling the technical transfer of the recovered funds. That chat is where the first payment request appears: a fee for the transfer, a tax, or a "verification" charge required before the already "located" money can be released.

The key detail the FBI flags: the payments never stop at one. Case reporting involving the Latham & Watkins name describes a classic escalation pattern: first a legal fee, then a tax, then another verification charge, then a processing fee. Every payment produces a new reason for the next one, and the cycle continues until the victim refuses to pay again or simply runs out of money.

Why Scammers Reach for Big-Name Law Firms

Scammers systematically borrow the names of real, established law firms to make their correspondence and documents look authentic. One of the most documented cases involves the international firm Latham & Watkins: fraudsters used the real names, photographs, and signatures of actual attorneys at the firm, along with genuine office addresses, so the fake correspondence would hold up to a quick check. The firm itself has published a public advisory on its own website explaining that it never contacts crypto scam victims on its own initiative and never offers to recover funds in exchange for an upfront payment under any circumstances.

Borrowing a trusted, existing brand instead of inventing a fake company name sharply increases the scheme's success rate. A victim who searches the name usually confirms that the firm is real and reputable, but has no way of seeing that the specific people they're talking to have nothing to do with it.

Red Flags the FBI Points To

The IC3 alert lists specific indicators of this scam. They include forged documents and credentials impersonating real attorneys, false claims of partnership with U.S. or foreign government agencies, references to fictitious entities such as an "International Financial Trading Commission," requests for payment in cryptocurrency or gift cards, a refusal to provide credentials or complete video verification, and being directed to fraudulent bank websites to supposedly receive the transfer.

Any single one of these on its own is reason enough to stop and verify the situation independently rather than continuing the conversation.

The Scale of the Problem

A separate IC3 alert issued in 2024 gives a concrete figure: between February 2023 and February 2024, victims further exploited by fictitious law firms reported combined losses of more than $9.9 million. That number reflects only cases formally reported in the United States, which means the true global scale is almost certainly higher, given that many victims never report a second fraud after already being victimized once.

The FBI's "Zero Trust" Recommendation

The FBI frames its defense advice around a "Zero Trust" principle: verify any offer to recover already-stolen funds independently, rather than relying on the contacts and documents the person reaching out provides. In practice that means finding the firm yourself through its official website instead of clicking links you were sent, requesting video identity verification and notarized documentation, demanding the attorney's bar license number and checking it against the relevant jurisdiction's official bar registry, and keeping full records of every communication in case they're needed for a later investigation.

Why Crypto Scam Victims Make Such an Easy Target

Ordinary fraud relies on greed or urgency. The fake law firm scheme leans on something different: shame and desperation. Someone who has already lost money once often blames themselves, avoids telling family or friends about it, and tries to fix the situation quietly on their own, which makes them easier to target a second time. Scammers understand that dynamic well and frame the offer as a chance to undo a past mistake without having to admit it to anyone.

There's a second factor at play too. After a first theft, a victim has already gotten used to the idea that crypto transactions happen outside the familiar banking system, through unfamiliar channels, often involving people abroad. That lowers the natural suspicion toward odd requests, like being asked to send money through a WhatsApp group with people the victim has never met in person.

What to Do If Someone Has Already Contacted You

If someone messages you claiming to have located your stolen crypto, follow a simple process. Don't click links or call numbers included in the message; find the firm's official website yourself through a search and contact it directly. Ask for the attorney's bar license number and check it against the official bar registry. Refuse any request for payment before work has even started, especially in crypto or gift cards; no legitimate legal service accepts payment that way. And don't agree to communicate exclusively through messaging apps with no way to confirm the other person's identity through a video call from a verifiable corporate account.

How to Tell Real Help From Another Scam

Legitimate crypto theft investigation firms never operate the way this scheme does. Real legal engagements start with a non-disclosure agreement signed before case details are discussed, not after a series of payments inside a group chat. Fees are discussed transparently and up front, and for larger cases a success fee model is common: payment only when a result is actually delivered, not an advance fee for a "guaranteed" recovery of funds that supposedly have already been located. Most importantly, no legitimate firm will claim it has already found your money before any real transaction analysis has actually been done.

If someone contacts you offering to recover crypto you've already lost, the safest move is to pay nothing until you've verified the offer independently. The damage from a second scam is often harder to absorb than the original theft, because it costs the victim not just money but the last bit of hope they had left of getting anything back.