The Federal Trade Commission (FTC) is alerting consumers to a resurgence of scams targeting individuals who have previously fallen victim to fraud. Scammers are contacting recent victims, posing as FTC agents, and claiming they can recover stolen money. To appear legitimate, these fraudsters have even sent photos of fake agency badges.

These schemes prey on the vulnerability of those who have already experienced financial loss. According to the Identity Theft Resource Center's 2026 Trends in Identity Report, 25.6% of identity crime victims were dealing with two or more incidents concurrently. The report also noted that 62.1% of attempted identity misuse cases involved new account applications.

Scammers often maintain records of individuals who have previously paid, noting what methods were successful and the amounts lost. This information can facilitate a continuous cycle of identity theft. The FTC states that such repeat targeting frequently manifests as fraudulent recovery offers. The scammer, possessing knowledge of the victim's prior loss, will claim an ability to help recoup the funds. The catch is that they then demand an upfront retainer, processing fee, bank details, or other personal information.

Similarly, the FBI's Internet Crime Complaint Center (IC3) has issued warnings about fictitious law firms targeting cryptocurrency scam victims with false promises of fund recovery. These operations capitalize on the emotional and financial distress experienced by victims after a scam.

The Risk of 'Sucker Lists'

Scam operations maintain what the FTC terms "sucker lists." These lists can contain a victim's name, address, phone number, the type of scam they fell for, and the amount they paid. Criminals buy and sell these lists, believing that individuals who have paid once are more likely to do so again. The same group might re-engage the victim with a new scheme, or sell the information to another scammer who employs a different approach.

This is why recovery scams can be so convincing. A caller who knows the precise details of a victim's loss may sound credible. However, this information may have been acquired from a purchased list and is being repeated to build trust.

Persistent Risk of Social Security Numbers

Unlike credit card numbers, Social Security numbers (SSNs) cannot be easily replaced. When a thief uses an SSN, birth date, and address to open an account, closing that account only partially resolves the issue. The compromised information remains usable for further fraudulent activities.

While banks can issue new credit card numbers relatively quickly, the Social Security Administration rarely issues new SSNs, and typically requires in-person appointments. This means the data used in an initial fraudulent application can still be exploited for subsequent ones. The next instance of misuse might not be apparent on a credit statement. A stolen SSN could be used to claim wages, file a tax return prematurely, or open a loan at an unfamiliar financial institution.

Protecting Against Recovery Scams

Consumers are advised to be cautious of individuals promising to recover lost funds. Warning signs and protective steps include:

  • Avoid upfront fees: Legitimate government agencies and organizations do not charge fees for money recovery and will not request bank account or Social Security numbers for this purpose.
  • Be wary of payment methods: Scammers often request payment via gift cards, cryptocurrency, wire transfers, or payment apps, methods not used in legitimate refund processes.
  • Question detailed knowledge of losses: A caller who knows the exact amount lost may have obtained this information from a purchased list, using it to appear official.
  • Avoid specific communication platforms and remote access: Fake recovery firms may direct victims to platforms like Telegram or WhatsApp, ask for personal contact details before explaining services, or request the installation of remote access software or the sharing of verification codes.
  • Verify claims through official channels: Bogus recovery firms may create fake websites and testimonials. Victims should independently verify any company or agency through official government websites or published phone numbers, never using contact information provided by the suspicious caller.
  • Report suspicious offers: The FTC encourages reporting recovery scams at ReportFraud.ftc.gov. For scams involving cryptocurrency, fake law firms, or online fraud, reporting to the FBI's Internet Crime Complaint Center at IC3.gov is recommended.

Ongoing credit monitoring can help detect new accounts opened fraudulently, providing alerts sooner than traditional credit checks. Identity theft protection services can also assist victims in navigating the complex process of reporting fraud and repairing damaged credit.

Being scammed once can place individuals on lists that are exploited long after the initial fraud. The subsequent scams may include personal details that make them sound convincing, but they are not legitimate. Consumers are advised to proceed with caution, never pay upfront for recovery services, and to verify any unsolicited contact through official channels. Continuous monitoring of credit reports and personal information is crucial, as stolen data can resurface years later.