A "money recovery" or ASIC officer calls after you've been scammed — with an upfront fee
After you have lost money to a previous scam, a caller says they can recover it — as an "asset recovery agent", "ASIC officer", "AUSTRAC investigator", or blockchain forensics expert. They demand an upfront fee, tax, or bond. It is a second scam, run by criminals using victim lists sold on the dark web. Real recovery goes through your bank and the AFCA — never through a cold caller.
Also known as: fund recovery scam, advance fee recovery fraud Australia, crypto recovery scam AU, ASIC impersonation recovery, "money back" recovery scam
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
- ! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
What to do right now
- 1 Any unsolicited call offering to recover money you have lost is almost certainly a scam — hang up and block the number
- 2 Real recovery via AFCA (the Australian Financial Complaints Authority) is free — visit https://www.afca.org.au or call 1800 931 678
- 3 If you were originally scammed via bank transfer, contact your bank first — under the Australian Banking Association's Scam-Safe Accord many banks now reimburse eligible losses
- 4 Verify anyone claiming to be from ASIC or AUSTRAC by calling the main ASIC line (1300 300 630) or AUSTRAC (1300 021 037) — never a number provided by the caller
- 5 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
- 6 Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam or ReportCyber at https://www.cyber.gov.au/report.
Was remote-access software installed?
If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.
Run SeraphSecure to detect and remove it →Red flags
- ⚠ The caller knows exactly which previous scam you lost money to and mentions specific amounts — victim lists are sold between fraud groups
- ⚠ They claim to be from ASIC, AUSTRAC, AFP, or the AFCA — check whether the person or firm is real at https://asic.gov.au and https://www.afca.org.au
- ⚠ They guarantee recovery — no legitimate service can promise this, and no Australian government agency charges a fee to help scam victims
- ⚠ You are asked to pay an upfront 'retainer', 'legal fee', 'international transfer tax', or 'unlock fee' before any money is recovered
- ⚠ Payment is demanded by bank transfer, cryptocurrency, gift card, or via a 'safe account'
- ⚠ They ask you to install AnyDesk, TeamViewer, or Quick Support so they can 'view your case' or 'trace the funds'
Known variants
-
Fake ASIC officer variant: caller identifies as an ASIC case investigator, provides a badge number, and offers to release compensation from a 'consumer recovery fund' after a small processing fee. The real ASIC never charges consumers or contacts victims to release money.
Last seen: 5/1/2026
-
Crypto recovery specialist variant: on Telegram or Instagram, an account claiming to be a 'blockchain forensics expert' offers to trace and recover lost crypto for a fee. Victims pay in the same crypto they lost, then lose that too. Common target: previous pig-butchering and Ponzi victims.
Last seen: 6/15/2026