How to Report a Crypto Scam: A Step-by-Step Guide for Victims

Table of Contents

• Before you report: gather your evidence
• Where to report
• Report to the exchange — fast
• Report to a financial regulator
• If a bank account or card funded it
• The first 24 hours
• What a strong report includes
• What a good report reads like
• Check your urgency
• What happens after you file
• Keep records for your taxes
• Protect yourself from the second wave
• Frequently asked questions
• Is it worth reporting a small amount?
• What if the scammer is overseas?
• I feel embarrassed — should I still report?
• Can I report anonymously?
• How long does an investigation take?
• Do I need a lawyer to report?
• I already deleted the chats — is it too late?
• How Scambulance helps

If you have just realized you were scammed, the most useful thing you can do right now is file a report that law enforcement can act on. Getting it right the first time matters far more than doing it in five minutes — amendments later can weaken how seriously a case is treated.

Before you report: gather your evidence

A strong report is built on organized evidence. Spend an hour on this before filing anything.

• Transaction records — the wallet addresses you sent to, the transaction hashes for every transfer, and screenshots from your exchange or wallet. These are what let investigators trace the stolen funds.
• Communications — chat logs (WhatsApp, Telegram, the platform), emails with full headers where possible, and the website URLs or app names involved.
• A timeline — a short, factual sequence: first contact, how trust was built, when money moved, when you realized something was wrong.

Where to report

Report to your national cybercrime channel first — these official bodies are built to receive fraud complaints and route them to investigators. File with every one that applies; each sees a different slice of the picture, and a filed report is what unlocks help from banks and exchanges.

Wherever you live, also file with your local police and keep the crime reference number. Banks, exchanges, and regulators routinely ask for it before they will act.

Report to the exchange — fast

If your funds passed through or landed on a centralized exchange, that exchange is often the only party that can physically freeze them — and only while they remain on its platform. This is the one place where speed changes the outcome.

• Use the exchange's official support or compliance / fraud channel — never a "support agent" who messaged you.
• State that you are a fraud victim, provide the transaction hashes and destination addresses, and ask them to flag the receiving account.
• Major exchanges such as Coinbase, Binance, and Kraken maintain law-enforcement request processes and act on valid requests from agencies like the FBI — another reason your IC3 or police reference number matters.

An exchange will rarely act on your word alone, but a fast, specific alert paired with a filed report is what makes a freeze possible. From there the funds can be followed; see how to trace stolen crypto.

Report to a financial regulator

If a fake investment, "trading platform", or broker was involved, add a report to the relevant securities or commodities regulator. Regulators seldom recover individual funds, but they aggregate complaints to identify operations, publish warnings, and bring enforcement actions.

• United States — the SEC for securities and the CFTC for commodities, which covers much of crypto.
• United Kingdom — the FCA, which keeps a public Warning List of unauthorized firms.
• Elsewhere — your national securities regulator; most belong to IOSCO, which lists its members.

The same bodies let you vet a firm before investing: in the US, investor.gov and FINRA BrokerCheck; in the UK, the FCA Register.

If a bank account or card funded it

Money that reached the scammer through your bank or card may have its own recovery path, separate from the crypto.

• Call your bank's fraud department immediately. A recent wire or transfer can sometimes be recalled, and card payments may qualify for a chargeback — but dispute windows are short.
• In the US, the CFPB explains your dispute rights and accepts complaints against financial institutions.
• Keep your account of events factual and brief; that is what speeds a dispute.

Your refund rights at the bank stage depend heavily on where you live. See our jurisdiction guides on getting a bank refund in the UK, Australia's Scams Prevention Framework, Singapore's anti-scam laws, and where the US stands on crypto scams.

The first 24 hours

The hours right after a scam decide how much can be done. Work through the ordered steps below, and see our fuller first-24-hours checklist for securing your remaining accounts.

1. 1

   Contact the platform

   If funds touched a regulated exchange, alert its fraud or compliance team with your transaction hashes. Freezes are only possible while funds remain on-platform.

2. 2

   File the official report

   Submit to your national cybercrime channel and local police. Keep every reference number.

3. 3

   Notify your bank

   If you funded the purchase from a bank account or card, tell your bank — they may have their own dispute process.

4. 4

   Preserve everything

   Do not delete chats or apps. Export and back up all evidence before the scammer disappears.

What a strong report includes

A report that gets attention is specific and technical: exact amounts and dates, every wallet address and transaction hash, the platform's full URL, and your factual timeline. Vague reports stall; precise ones move.

What a good report reads like

A useful report reads like a clean incident log — facts in order, no emotion:

On 3 March I was contacted on Telegram by "@AlphaFXmentor," who introduced an investment platform at apex-trade[.]io. Between 5 and 19 March I sent 4,200 USDT in six transfers from my Coinbase account (hashes attached) to the wallet 0x9f3c…a71b. On 22 March the platform demanded a 15% "withdrawal tax"; that is when I realized it was a scam.

Notice what it carries: exact dates, the platform name and URL, the amounts, the destination wallet, the transaction hashes, and the moment of realization. That is the format that moves a case forward.

Check your urgency

What happens after you file

Reporting starts a process; it is not a refund button. Knowing what to expect protects you from the despair scammers rely on.

• You receive a reference number. Keep it — banks, exchanges, and regulators ask for it before they will act.
• Most cases move slowly. Crypto crime is cross-border and under-resourced. Silence does not mean your report was wasted; it is feeding the pattern data investigators work from.
• Patterns beat individual cases. Your report may connect to dozens of others against the same wallet or platform — which is how networks get dismantled even when one victim cannot be made whole.
• Follow up in writing. A short, periodic email quoting your case number keeps it visible without antagonizing an overworked unit.

Be honest with yourself: most victims do not get their money back. Reporting still matters — it is how the next person is protected, and how the rare recovery becomes possible at all.

Keep records for your taxes

Stolen or defrauded crypto can carry tax consequences, and the rules differ sharply by country and have changed over time. Keep a clean record of what you lost, when, and your original cost, and speak to a qualified tax professional rather than assuming a deduction applies. In the US, rely on current IRS guidance — the treatment of theft and investment losses narrowed after 2017, and it is easy to get wrong without advice.

Protect yourself from the second wave

Frequently asked questions

Is it worth reporting a small amount?

Yes. Investigators work from patterns, and a "small" loss is usually one of many against the same operation. Your report can be the data point that tips a case into action.

What if the scammer is overseas?

Report anyway. Most crypto fraud is cross-border, and national cybercrime units share intelligence internationally. Channels like the FBI IC3 exist precisely for this — and the FBI's 2025 IC3 report shows what fast reports achieve: $679 million in stolen funds frozen in one year.

I feel embarrassed — should I still report?

Yes. These operations are run by professionals engineered to defeat ordinary judgment; being targeted is not a personal failing. Reporting is a practical step, not a confession.

Can I report anonymously?

Some channels accept anonymous tips, but a report tied to your identity and evidence carries far more weight — and is usually required if you hope to recover anything or involve your bank.

How long does an investigation take?

Often months, sometimes longer. Crypto cases are cross-border and resource-intensive, and the FBI IC3 routes complaints to field offices that prioritize by scale and pattern. A long silence is normal and does not mean your report was ignored.

Do I need a lawyer to report?

No. The official channels are free and built for the public. A lawyer can help with large losses, civil action, or professional asset-tracing — but be wary of anyone who contacts you first promising recovery for a fee, which is the hallmark of a recovery scam.

I already deleted the chats — is it too late?

No. Report what you have. Banks, exchanges, and platforms keep their own records, and a partial report is far better than none. From here on, preserve everything.

How Scambulance helps

You do not have to do this alone. Scambulance is a nonprofit built by a fraud victim, for fraud victims. We help you assemble a substantial, technically correct report and can assist at any stage. Start with the guided report your case flow, which structures your information the way law enforcement expects to receive it.