Report Cryptocurrency Theft and File a Recovery Claim

Updated 5 November 2026 · Standard formula, shown below

If cryptocurrency has been stolen, prompt reporting can create a record for investigators, alert the exchange or service involved, and help preserve evidence. There is no guaranteed way to recover stolen funds, but you can report the incident and submit claims to relevant platforms, insurers, or other organizations using accurate, organized documentation.

What You’ll Need

Your wallet addresses and transaction IDs (also called transaction hashes), plus the blockchain network involved.
A timeline of events, including when you noticed the theft and any suspicious messages, links, calls, or account changes.
Relevant screenshots, emails, chat logs, exchange statements, and records of deposits or withdrawals. Keep original files where possible.
The contact details for any exchange, wallet provider, bank, or payment service connected to the incident.
Identification and account details required by an official reporting portal or a legitimate insurer or service provider.

Step-by-Step

Secure accounts and devices. From a device you believe is safe, change passwords for your email, exchange, and other affected accounts. Use unique passwords and enable multifactor authentication where available. Sign out of other sessions, revoke unfamiliar connected apps or API keys, and contact your mobile provider if your phone number may have been taken over. Scan or restore a compromised device before using it for sensitive accounts. Do not share seed phrases or private keys with anyone claiming to help.
Stop further losses. If an exchange account is involved, contact its support through the official website or app and ask whether it can freeze withdrawals or secure the account. If a bank card or bank account was used to buy or transfer funds, notify the bank or payment provider promptly and ask about securing the account and disputing any eligible unauthorized transactions. A blockchain transfer generally cannot be reversed by a bank, but related payment activity may have separate options.
Record the facts before they disappear. Write a clear timeline and preserve transaction IDs, sending and receiving addresses, asset type, amount, network, and timestamps with time zone if known. Save URLs, usernames, phone numbers, emails, and messages related to the incident. Do not edit screenshots in a way that removes context; make copies for sharing and retain originals. Avoid posting personal details or unredacted evidence publicly.
Check the transaction on the relevant blockchain. Use a reputable public block explorer for that network to confirm the transaction details and status. Copy the transaction ID and destination address exactly. A visible transaction confirms activity on-chain; it does not by itself identify the person who received funds or prove that recovery is possible. Do not connect your wallet to unfamiliar “tracking” or recovery sites.
Report to the appropriate authorities. File a report with your national or regional law-enforcement agency, using its official website, phone number, or in-person process. In the United States, cryptocurrency theft can be reported to the FBI’s Internet Crime Complaint Center (IC3); other countries have their own cybercrime or fraud reporting channels. Include the timeline, transaction details, and supporting records, and save the report or reference number. If you are unsure which agency handles it, ask local police or a government fraud-reporting service to direct you.
Submit reports to affected services. Report the incident to the exchange, wallet provider, or other platform involved using contact information found independently on its official site. Provide the case number from law enforcement if available. Ask whether they can secure your account, flag a receiving address, preserve relevant account records, or provide instructions for a formal claim. They may be limited in what they can disclose or do.
Check whether you have a legitimate recovery claim. Review any insurance policy, exchange protection terms, workplace benefit, or applicable consumer-protection process. Follow its deadline and evidence requirements, and distinguish a claim for a related card or bank payment from a request to reverse an on-chain transfer. Describe what happened accurately; do not label an authorized transfer as unauthorized simply because you were deceived into making it.
Submit complete, consistent information. Use the official claim form and attach requested records in the accepted format. Keep a copy of the submission and note the date, case number, and contact channel. If a form asks for information you do not have, explain that rather than guessing. Respond to follow-up requests through verified channels.
Track the case and protect yourself from follow-up scams. Record each agency and service contacted, reference numbers, dates, and responses. Verify any incoming request by contacting the organization through its published official channel. Never pay an upfront “release,” “tax,” or “recovery” fee to a stranger, and never provide a seed phrase, private key, one-time code, or remote access to your device.

Common Mistakes

Waiting to report while trying to investigate alone. Delays can make account protection and evidence preservation harder.
Deleting chats, emails, or account alerts, or recording only the amount without the network and transaction ID.
Sending more cryptocurrency to a supposed investigator or recovery specialist. A promise to retrieve funds for a fee is a major warning sign.
Using contact links from unsolicited messages or search advertisements without checking that they lead to the official service.
Assuming a report, exchange alert, or claim guarantees reimbursement. Reporting is not the same as a successful recovery or an approved claim.

Tips

Keep one private incident folder with an evidence list and a separate, redacted set of copies for submitting.
Record amounts in the asset and network used, and note any fiat value only with its date and source. Avoid estimates presented as exact facts.
Ask each organization what it can do, what documentation it needs, and whether there is a submission deadline. Save the answers.
For a shared or business wallet, notify the responsible security and finance contacts promptly and follow internal incident procedures.

Troubleshooting

The exchange has not replied: Use its official support portal to follow up with your existing ticket number. Do not open duplicate cases unless instructed, and do not send passwords or recovery phrases.

You do not know the receiving address or network: Check the wallet or exchange transaction history and the transaction details for the exact network. If the platform account is inaccessible, ask its support team how to request records. Mark unknown details as unknown in your report.

The reporting form will not accept your evidence: Follow its file-size and file-type instructions, redact unrelated sensitive information where appropriate, and keep the originals. If upload still fails, use the agency’s official alternative submission process and note the issue.

You already gave someone a seed phrase or remote access: Treat the wallet and device as compromised. From a clean device, create a new wallet with a new recovery phrase and move any remaining assets only if you can do so safely; do not reuse the exposed phrase. Secure related accounts and report the additional exposure.

A claim is denied or funds cannot be traced: Ask for the reason and any review or appeal process, then provide missing evidence if available. Some transfers cannot be recovered, and a tracing report does not guarantee that funds can be frozen or returned.

Frequently Asked Questions

Can a cryptocurrency transaction be reversed?
Most confirmed blockchain transfers cannot be reversed by the sender. A service that controls a custodial account may have limited security actions, but it cannot promise recovery.

Where should I report cryptocurrency theft?
Report it to local or national law enforcement and to any affected exchange, wallet provider, bank, or payment service. Use official contact channels for your location.

What information is most useful in a report?
Provide a timeline, transaction IDs, addresses, network, asset and amount, account identifiers, relevant communications, and any platform or police case numbers.

Can I claim a loss on insurance or through an exchange?
Possibly, depending on the policy, service terms, how the theft happened, and claim deadlines. Check the applicable terms and ask the provider what evidence is required; approval is not guaranteed.

Should I hire a crypto recovery service?
Be extremely cautious. Many recovery offers are follow-up scams, especially those demanding upfront payment, a seed phrase, or remote access. Seek help through law enforcement and verified service providers instead.

What if I sent the funds myself after being tricked?
Report the deception accurately and include the messages and circumstances. The transfer may still be irreversible, and a claim may be treated differently from an account takeover or unauthorized transaction.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.