Home › Knowledge Hub › Fake tracing services
Fake blockchain-tracing services, and how to tell them from the real thing
If someone contacted you claiming they traced your stolen cryptocurrency, located it, even froze it, and now need a fee to release it, that is a scam. Real blockchain tracing produces a report of where funds moved. It cannot seize, unfreeze, or return them, and no honest tracer asks you to pay to unlock your own money. This guide explains what genuine tracing is, what it cannot do, and the exact tells that separate a real investigator from the second scam.
Blockchain tracing is real work that real firms do. That is exactly why the scam version is convincing: it borrows the language of a genuine service and bolts it onto an advance-fee fraud. The difference is not the vocabulary. It is what the service can actually deliver.
What real blockchain tracing actually is
Tracing follows the public record. Every transaction on a public blockchain is visible, so an analyst can take the addresses and transaction hashes from your case and map where the funds moved, hop by hop, and often identify the type of service they landed in: another personal wallet, a bridge, a mixer, or an exchange. The output is a report: a documented account of the money trail, with the addresses and hashes that support it.
That report has real value. It is the evidence a law-enforcement investigator or a lawyer needs to ask an exchange to freeze an account or to support a court order. Our guide on how blockchain tracing works walks through the mechanics.
What tracing cannot do
This is the line the scam depends on you not knowing.
- Tracing cannot move, freeze, or return funds. Only the service that holds the funds, typically an exchange, can freeze an account, and only when compelled by law enforcement or a court.
- Tracing cannot reverse a blockchain transaction. Nothing can.
- A tracer has no special access to your coins or anyone's wallet. Reading the public ledger is not the same as controlling it.
So any "tracer" who says they have already located and frozen your funds and only need a fee to release them is describing something that does not exist. There is nothing to release, and they could not release it if there were.
How the fake service works
The pitch usually arrives unsolicited, often days or weeks after a loss, sometimes after you posted about it publicly. The script is consistent:
- Contact and credibility. They reach out by DM, email, or phone, name-drop real tools and agencies, and may show a slick "dashboard" that appears to track your coins in real time. The dashboard is a prop.
- The hook. They report success: your funds have been "located," "flagged," or "frozen" on some exchange. This is the moment hope returns, which is the moment the script is built for.
- The fee. To "release," "withdraw," "unlock," or "clear tax on" the recovered funds, you must pay, usually in crypto, usually upfront. As with the fee-to-withdraw trap, one fee is followed by another.
- Escalation or disappearance. You either keep paying against a balance that was never real, or they vanish once the payments stop.
Some versions add a request for your seed phrase, private keys, or remote access to "verify" or "move" the funds. That is a direct theft attempt. No tracing step ever needs your keys.
The tells, in order of reliability
- They contacted you. Genuine investigators are hired by you, your lawyer, or law enforcement. They do not cold-message victims offering to recover money.
- An upfront fee to release recovered funds. Real tracing is paid for the analysis, as a report. It is never priced as a cut of money you have to pay to "unlock." In the US, charging an advance fee for recovery services is prohibited under the FTC's Telemarketing Sales Rule.
- A guarantee. No honest analyst guarantees recovery. Tracing shows where funds went; whether anything can be done with that is a separate, uncertain question.
- A live "we froze it" claim. Tracers cannot freeze anything. Only an exchange can, and only under legal process.
- A request for your seed phrase, keys, passwords, or remote access. Always a theft attempt, with no exceptions.
- Pressure and secrecy. A deadline to pay, or a request to keep it quiet, is the scam protecting itself.
What a real tracer looks like
- You or your lawyer approach them, or law enforcement engages them, not the other way around.
- They explain their methodology and the limits of it, and they put the scope and fee in writing before starting.
- They charge for the investigation and report, not as a condition of releasing funds.
- They never ask for your seed phrase or private keys, and never claim to control or freeze wallets themselves.
- They can name a verifiable credential or registration you can check yourself. Our guide on how to verify a licence or credential shows how.
For most individual victims, the honest sequence is cheaper than any tracing firm: preserve your evidence, report to law enforcement and the exchange involved, and let the investigators with legal powers use the public record. A paid trace makes sense mainly for larger losses with a clear trail and a lawyer already involved.
If you have already engaged one
If you paid a "tracer" who is now asking for more, stop paying. Preserve everything: the messages, the dashboard screenshots, the addresses you sent fees to, and the amounts. Report it as fraud through your national fraud service and the exchange you paid through. You are not foolish for believing it; the script is engineered to arrive exactly when you most want it to be true.
Red flags
- A tracing offer that arrived in your inbox or DMs instead of one you sought out
- "We found and froze your funds, pay to release"
- Any upfront fee framed as the price of getting your money back
- A request for your seed phrase, private keys, codes, or remote device access
- A real-time "tracking dashboard" shown as proof of control
What this guide cannot do
It cannot tell you whether your specific funds are recoverable; that depends on where they went and whether law enforcement or an exchange acts. What it can do is keep you from paying a second time for a recovery that was never on offer, and point you to the free steps that actually preserve the chance.
This is general information, not legal or financial advice.
Use Chain Pursuit's free tools to understand your options, preserve evidence, and identify recovery scams. Never share your seed phrase, private keys, passwords, or one-time codes with anyone.
Sources
Federal Trade Commission, Telemarketing Sales Rule. https://www.ftc.gov/legal-library/browse/rules/telemarketing-sales-rule, which prohibits requesting or receiving an advance fee for recovery services in the United States.
Federal Bureau of Investigation, Internet Crime Complaint Center, Cryptocurrency Recovery Scams public service announcements. https://www.ic3.gov, warning that fraudsters pose as investigators or recovery companies and target people who have already been defrauded.
Internet Crime Complaint Center, 2025 Internet Crime Report. https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf, which records recovery-fraud complaints among the most reported crypto-related schemes.
The technical limits stated here, that tracing cannot move, freeze, or reverse funds, follow directly from how public blockchains work and are consistent across the sources above. Reviewed quarterly.
Frequently asked questions
Can a blockchain tracer actually recover my stolen crypto?
No. Tracing produces a report of where funds moved. It cannot move, freeze, or return them. Only the service holding the funds, usually an exchange, can freeze an account, and only under law enforcement or a court order.
Someone showed me a live dashboard tracking my coins. Isn't that proof they can get them back?
No. A dashboard reads the public ledger, which anyone can do. It is often a prop. Seeing where coins are is not the same as controlling them, and it is not the ability to return them.
Is it ever worth paying for blockchain tracing?
Sometimes, for larger losses with a clear trail and a lawyer involved, a documented trace can support a freeze or a court order. But you pay for the report, never a fee to "release" funds, and you approach the firm, not the reverse.
They asked for my seed phrase to verify the funds. Is that normal?
Never. No tracing or recovery step requires your seed phrase, private keys, or remote access. That request is a direct attempt to steal what you still hold. Share none of it.
How do I tell a real investigator from a fake one?
The real one is hired by you, your lawyer, or law enforcement, explains its method and limits in writing, charges for the analysis rather than a release fee, guarantees nothing, and can name a credential you can check yourself.
A tracer messaged me first, saying they already found my money. Real or scam?
Treat it as a scam. Genuine investigators do not cold-contact victims offering recovery. Unsolicited contact, a "we found it" claim, and an upfront fee together are the signature of the second scam.
I already paid one and they want more. What now?
Stop paying. Save the messages, screenshots, the addresses you paid, and the amounts, then report it as fraud to your national fraud service and any exchange you paid through. Paying more will not change the outcome.
Not sure if a tracing offer is real?
Eleven questions that show which documentation and reporting steps actually apply to your case, with no email required.
Check my case