How recovery scams target people who already lost money to investment fraud, promising to get the funds back while extracting retainers and fees, and how to spot them and respond through legitimate channels.
You lost a large sum to an investment scam. While you are still reeling from it, a message arrives:
"We can recover your lost funds." "Our lawyers and investigators will get your money back." "Just pay the upfront retainer to begin."
To someone desperate for any way out, it looks like a rescue. But most of the time, it is the second trap.
Far from getting back what you lost in the first scam, you are robbed again in the name of recovery. This is the recovery scam, also called secondary victimization.
One thing first. Falling for a second scam does not mean you failed to learn. People who have already been hurt are precisely the ones most easily exploited through their hope of recovery: a natural human response, turned against them.
This article breaks the structure down, shows how it differs from a legitimate lawyer or public agency, how to spot it, and what to do if you have already signed up.
How to Read
A recovery scam is not improvised. It is a two-stage design that assumes a first victimization already happened.
You may have wondered: why does this convenient offer arrive only to me, right after I was defrauded?
The answer is simple: they already know you are a victim.
The data collected in the first scam (name, contact details, amount lost, which tactic you fell for) is sold and leaked as a so-called sucker list. Someone who fell for one scam is high-value as a target who may fall again.
So the call from a recovery agent is not a coincidence. It is offered to you with precise knowledge of your wound, tailored to that wound.
Stage one: the first scam leaks your personal data along with your money. Stage two: that data is used to contact you again under the guise of recovery and to take a retainer or fee.
Sometimes the same group runs both stages. Sometimes the first scammer sells the list to another operator who runs the second stage.
Either way, you are targeted because you are a victim.
How to Read
The entry points come in a few shapes. The skeleton is the same; only the title claimed and the fee label differ.
Claims to "specialize in recovering scam losses" or to "identify the criminals through a proprietary network". Demands a retainer, an investigation fee, and an advance success fee in stages.
Recovering someone else's legal dispute for a fee, when done by a non-lawyer, is the unauthorized practice of law and is illegal in Japan. Private "recovery agents" or "settlement brokers" who intervene for profit are, as a rule, not legitimate actors.
Uses the name and registration number of a real lawyer or firm without permission, or invents a plausible-sounding firm name.
Sets up a fake site that looks official, opens with a "free consultation" over social media or LINE, then rushes you to wire a retainer. The key point: even a real firm name does not prove the person contacting you is who they claim to be.
Claims to be a "body commissioned by the Consumer Affairs Agency", a "victim relief foundation", or a "financial regulator's help desk". Uses an official veneer to win trust, then asks for a fee or registration charge.
Some cases spoof the names of real agencies, so when an agency is named, look up its official number yourself and call it back.
"A deposit is required to unfreeze the recovered funds." "Pay the tax first so the recovered money can be transferred to you."
This repeats the same rhetoric as the first scam's withdrawal block, now in the recovery context. You pay, the money never comes back, and the next pretext arrives.
How to Read
The strongest defense is knowing how a legitimate lawyer or legal consultation differs from a recovery scam. The two differ clearly in fee structure and in how they proceed.
A legitimate lawyer shows the breakdown of retainer, success fee, and expenses in writing (an engagement contract) before you sign. They explain the basis for the amounts and provide a quote on request.
The scam version keeps the breakdown vague and rushes you to wire "just the retainer first". They give you no document, or one issued under a firm name with no real substance.
A legitimate lawyer does not say "we will definitely get it back". Recovery involves much uncertainty (identifying the perpetrator, whether assets remain, statutes of limitation), so they describe the outlook cautiously.
The scam version asserts "100% recovery" and "extensive track record". A flat guarantee may feel reassuring, but it is the biggest red flag.
A legitimate consultation can be started from a publicly verifiable channel: a bar association legal consultation, the Japan Legal Support Center (Houterasu), a consumer affairs center.
The scam version contacts you first and one-sidedly, through social media, LINE, phone, or email. They can reach out preemptively precisely because they hold the victim list.
How to Read
Secondary victimization works because it strikes precisely at the psychology right after a loss.
First, the strong drive to recover the loss. People tend to feel the urge to recoup a loss more strongly than the pleasure of a gain. Judgment gets pulled toward the single thought: "if my lost money could come back."
Second, the shame and urgency of having already been deceived. The more someone is carrying it alone, unable to tell family or friends, the more likely they are to skip the proper channels and grab the recovery offer that came to them.
Third, the false comfort that the caller knows the details of the loss. "They know the amount and the tactic, so they must be a real specialist." In reality, that is only proof they hold the sucker list.
The collapse always happens at the point of "executing the recovery".
After you pay the retainer or fee, the recovery never advances. When you ask about progress, new cost pretexts appear one after another.
"A deposit is needed to freeze the perpetrator's account." "Advance the court costs first." "We are almost there, just one final fee."
You keep paying, the recovery is never executed, and at some point contact goes silent. Structurally, this is identical to the first scam's withdrawal block.
How to Read
How to Read
Recovery-themed contact shares several common traits. Use the checklist below as your standard.
The simplest, most powerful test is one thing. Hang up, look up the official number of the bar association, law firm, or public agency the caller named, and call it back yourself.
A real one can be verified through the official channel. The scam version dislikes a callback and will try to keep you from using any contact route other than the one it specified.
How to Read
Put every recovery offer that arrives after a loss on hold. Then verify it through a public channel you looked up yourself, not the contact the caller specified.
The consumer affairs hotline (188), bar association legal consultations, and Houterasu are all legitimate entry points you can reach on your own. Become the one who verifies an inbound offer from your side. That is the strongest defense against a second loss.
The moment you notice is always the best moment. It is never too late. Move step by step.
"Just a little more and we will recover it" is almost certainly a lie. Deposit, court costs, or a final fee: no matter the label or the amount, the recovery will not be executed. Stopping here is the first step to minimizing the loss.
For certain transactions, such as door-to-door or telephone solicitation, a cooling-off right may let you cancel unconditionally within a set period. Whether it applies, the start date, and the document requirements vary by the form of the contract, so do not judge alone: confirm with a consumer affairs center.
Also, if you were made to contract through a false assertion such as "we will definitely get it back", you may be able to rescind the contract under the Consumer Contract Act. This too has requirements, so confirm with a specialist channel.
It will be needed for consultations and any investigation. Keep what you have without deleting it.
: Save the exchanges with the other party (LINE, email, SMS, call logs or recordings) as screenshots or transcripts : The party's claimed identity (firm name, contact person, lawyer registration number, phone number, social media or site URL) : The contract, quote, brochure, and any messages prompting the wire : Records of the transfer (transfer slip, payee account name and number, and for crypto the destination address and transaction ID) : A list of the dates, times, and amounts paid
: Bank transfer: contact the recipient's financial institution and your own bank as soon as possible. This may lead to an account freeze and victim relief distribution under the Act on Damage Recovery from Wire Fraud : Crypto: report to the exchange you used. If the funds have not moved yet, they may be frozen : Credit card: discuss a chargeback with your card issuer
Speed decides whether recovery is possible. Act the moment you notice.
Do not carry it alone. Always reach out externally.
: Consumer hotline 188. Connects you to the nearest consumer affairs center: the place for contract and cooling-off questions : Police consultation line #9110 (110 in an emergency). You can discuss filing a report : Bar association legal consultations and Houterasu: connect you to a legitimate lawyer through a legitimate route : Financial Services Agency (FSA). You can check whether a firm is unregistered via the public list of unregistered operators (the warning list) : National Consumer Affairs Center: the place for contract and money troubles in general
If you genuinely want to pursue recovery, engage a lawyer verified through a bar association or Houterasu, not the party that came to you. That is also how you prevent a third loss.
How to Read
Recovery scams target people who have already been victimized once. The moment you learn that a family member or someone close fell for a first scam is exactly when vigilance about a second loss is needed.
Recovery offers can cluster right after the first loss becomes known. Driven to recoup, the person tends to act without consulting family.
The point is to stand alongside them as an ally, not to blame. If you create a "you only have yourself to blame" atmosphere, the person becomes even less able to mention a second incident and deepens the second loss in isolation.
Once a first loss is known, agreeing in advance that any recovery offer will be checked together with a public channel is highly effective.
How to Read
A recovery scam is a two-stage attack that turns a hurt person's hope of recovery against them. Using victim data leaked from the first scam, it contacts you again under the guise of recovery and takes only the upfront payment.
Here are the essentials in a table.
| How they present it | The actual structure |
|---|---|
| A specialist who will rescue your loss | A second scam that merely holds the sucker list |
| Definite recovery, extensive record | A red flag: asserting a result that cannot be guaranteed |
| Just the retainer first | An entry point that takes the upfront payment and never recovers |
| A deposit is needed to unfreeze | The same pretext as the withdrawal block, reused |
| Let us handle this just between us | Fencing-in to keep you from verifying with a public channel |
The core of the defense comes down to three things.
Put any inbound recovery offer on hold. If an upfront payment is requested, stop. Verify through a public channel you looked up yourself, not the contact the caller specified.
And if you are caught twice, you do not need to blame yourself. What deserves blame is the tactic that preys on a hurt person's hope.
If you seriously want to pursue recovery, there is one entry point. Start from a public, legitimate route: the consumer affairs center (188), a bar association, or Houterasu. That is how you cut off the second loss and protect yourself.
How to Read