Recovery Agent Scams in India: Don't Pay to Get Your Money Back

Recovery agent scams target people who have already lost money to a trading or investment fraud. A stranger calls offering to get the money back for an upfront "release fee" or "court tax". Every legitimate Indian recovery channel — 1930, cybercrime.gov.in, SCORES, your bank's fraud cell — is free and government-operated. If they're asking for money up front, it's a second scam.

If you're reading this, there's a real chance you've already lost money to a trading or investment scam, and someone is now calling, texting on WhatsApp, or DM’ing you on Telegram with an offer to get it back. Stop responding. That offer is the second scam.

I've been trading for over two decades. I have taken losses worth several lakhs over those years, including a five-lakh hit on a metal stock that took me months to climb out of.

In all those years, not once has anyone legitimately recovered my money for an upfront fee. Because that isn't how recovery works in India. That is how scams work.

This is the cruellest scam in the country's financial ecosystem right now. It targets people who have already been broken once, and breaks them a second time.

Why scammers target scam victims

Criminals among themselves call this a "sucker list". I hate the phrase, but you should know it, because it's the thing that explains why the second scam exists at all.

After you lose money to the original scam, your phone number, your bank, the amount you lost, and often the date all get bundled into a spreadsheet and sold to other criminal networks. The recovery scammer who calls you next isn't lucky. They bought your data.

The numbers explain why this works as a business.

Indians lost almost twenty-three thousand crore rupees to cyber fraud in a single year. That's more than triple what the country lost the year before.

The fraud money doesn't just sit waiting to be recovered. It moves through five to twelve mule bank accounts, often gets converted to USDT, and is frequently sent across borders within minutes.

When a stranger phones and tells you they can get your money back for a "small fee", the desperation does the maths for you. You don't even check.

That desperation is the entire engine. The original loss is bad enough on its own.

The shame of explaining it to family, the hours of self-blame, the maths of what that money would have meant for a child's education or a parent's surgery — it all builds up. By the time the recovery agent calls, you don't want a probability. You want hope.

They are selling exactly that. And they know who to sell it to.

Cybercrime incidents reported on the National Cyber Crime Reporting Portal (NCRP) more than doubled in two years, from 15.96 lakh in 2023 to 22.68 lakh in 2024. Every one of those complaints is a name on a list somewhere.

How the recovery scam plays out

Once you've seen the script laid out in five acts, you'll spot it instantly the next time it lands in your inbox. The persona changes. The script almost never does.

The pattern works because it borrows the structure of a real legal recovery, complete with case numbers and fee schedules. It skips the parts you can't fake, like a proper court hearing, a registered law firm, or a verifiable advocate.

The four disguises every recovery scammer wears

The five-act script stays the same. What changes is the costume the scammer puts on when they call.

The newer variants are getting harder to dismiss at a glance. The "blockchain recovery specialist" is now the fastest-growing category, riding the wave of crypto-converted scam money. Real on-chain forensic firms exist. They work with law enforcement, charge institutions, and never approach individual victims through cold messages.

The pattern is what you watch for, not the costume. Three signals together are enough to walk away every single time: they reached you first, they want money up front, they're pushing you to decide today.

What actually works (and what doesn't)

Here's the painful part. Even the legitimate path doesn't guarantee recovery.

National recovery rates climbed from roughly 10–11% in 2024 to about 24% in 2025, but that still means three out of four cases end with the money gone. Speed of reporting is the single biggest factor. Most of the recovered amounts get frozen within the first six hours.

That's why the only correct first move is also the simplest one. Dial 1930.

The line operates round the clock under the Indian Cybercrime Coordination Centre (I4C). The operator opens a complaint and sends an alert to your bank and the recipient's bank simultaneously.

If the money is still parked in the receiving account, this is when it gets frozen. If it has already been layered through three or four mule accounts, recovery becomes a long, often unsuccessful chase.

Within 24 hours, file the same complaint at cybercrime.gov.in. For securities-market grievances against SEBI-registered intermediaries, also file on SCORES.

But be clear about what SCORES is and isn't: it's SEBI's grievance portal for complaints against registered brokers, mutual funds, and listed companies. It is not a general scam-recovery portal, and SEBI itself does not refund money. For refunds, your route runs through your bank's chargeback process, the freezing of recipient accounts via 1930, or a civil suit.

For cyber financial losses above ₹10 lakh, the e-Zero FIR system (launched as a Delhi pilot in May 2025) can automatically convert complaints made on NCRP or 1930 into a Zero FIR at the e-Crime Police Station in Delhi. The case is then routed to the relevant cybercrime police station. Outside Delhi, you usually need to file at the local cyber cell directly.

Important detail most readers miss: the e-Zero FIR is a starting point. The complainant still needs to visit the cybercrime police station within 3 days to convert the Zero FIR into a regular FIR.

Inform your bank's fraud helpline the same day. RBI's "zero liability" rule applies in specific cases — third-party breach where neither bank nor customer is at fault, reported within three working days — not as a blanket refund for every scam transfer.

Your first 60 minutes: a quick checklist

If you've just realised you've been scammed, do these in order. Skip nothing.

Everything above is what you do once the money has already moved. The cheaper defense is the one most retail investors skip: verifying what you're putting money into before you transfer. Most recovery-scam victims started by trusting a "trading app", a "guaranteed-return scheme", or a "pre-IPO allotment" pushed in a Telegram group — none of which would have survived ten minutes on a real fundamental check.