I paid a party that promised to recover my crypto, can that second payment still be traced?

Date: 28 September 2026 | Week: 40 | Reading time: 7 minutesAuthor: Tyler Dijst, blockchain investigation specialist

Paucitas is an independent expert firm in the Netherlands that investigates investment fraud and crypto fraud, establishes the origin and legitimacy of crypto assets and prepares expert reports for legal proceedings and compliance.

In short

Scammed twice with crypto? It happens to a lot of people: first money is lost, then someone promises to get it back and asks for a payment up front. That can be a second scam, but it does not have to be. What is certain: that second payment is also on the blockchain and can often be traced well.

Paucitas is an independent expert firm that investigates hundreds of cases a year, including cases where someone paid again after a first loss. Paucitas maps out both payments in a report that anyone can follow step by step.

Get in touch with Paucitas and you will hear straight away whether we can help.

In a nutshell

Our advice: it is best not to pay anything more to a party that promises results. Let Paucitas first look at where your earlier payments went.

You had already lost money. Then someone came along who said they could recover it. You paid, perhaps more than once, and then everything went quiet. Finding it hard to talk about, or feeling embarrassed? You are not the only one. Anyone who has just lost something is open to whoever offers a way out. That says nothing about how careful you are.

Can a second payment after a scam still be traced?

Yes, usually. Every crypto payment is recorded on the blockchain, with a date, an amount and a receiving address. A payment to a recovery firm is also often recent. It went to an address that had only just come into use, so it has fewer steps behind it than your first deposit. The shorter the route, the clearer it becomes where the money ended up.

Being contacted again is no coincidence. Europol warns that people who have already invested in a scam are often approached again, sometimes because their details have been sold on. You can also read where to turn on our page crypto fraud investigation.

Scammed twice with crypto: which warning signs come up often?

Not every firm offering help is a fraudster. Even so, four signs keep coming back in practice. None of them proves anything on its own, but each is a reason to have someone look first:

you have to pay first, for example for a solicitor, “release fees” or tax;
the firm promises your money will come back, sometimes with a percentage or a guarantee;
you are asked for your recovery phrase or access to your wallet;
after every payment there is a new request, each time presented as the “final step”.

The FCA warns about recovery room scams that target people who have already lost money, ask for an upfront fee and then do nothing. This kind of scheme has its own name: a recovery scam. Whether that is what happened to you only becomes clear once someone actually looks at the payments.

What can Paucitas do if the money seems to be gone?

That depends on your situation, and that is good news: it is not always as bleak as it feels. Sometimes the firm turns out to be a genuine provider that is simply slow. Sometimes there is still a balance somewhere you can reach yourself, for example because you still have technical access to your own wallet. Paucitas can then help you get back into it. And if the money has been moved on, Paucitas maps out where it ended up. Nobody can promise the outcome. But getting clarity does help.

Let Paucitas take a look and you will have clarity quickly instead of being left wondering.

An example from practice

A man had invested with a trading platform that turned out not to exist. Months later a firm rang him, claiming it could recover crypto. Within two weeks he paid three times: for a solicitor, for release fees and for tax. Paucitas followed both routes. The first deposit had disappeared into large flows. The three later payments came together on one new address and reached a service provider within a few days. That second trail produced the most concrete result in the report.

Paucitas values privacy highly and never shares clients’ personal details. This is a composite example: names, amounts and details differ. The situation, however, is one we see in practice.

What can you do with the Paucitas report?

The report shows whether there is still money available, or where it has gone, and what the next steps are. If it turns out to be a scam, that might be a report to Report Fraud, or to Police Scotland on 101 if you live in Scotland. The Paucitas report is a strong attachment to that, because it sets out both payments fully and clearly. It is also a solid basis for your bank or a solicitor. How to recognise a trustworthy firm is explained on reliable crypto recovery: which party can you trust.

What Paucitas does for you

Paucitas looks into the whole story, not just one transaction. Where did your first deposit go, where did the payment to the recovery firm end up, do the two meet somewhere, and which parties, websites and messages are involved? Paucitas does all tracing itself, without tracing tools. On top of that, Paucitas reads through all the conversations, messages, documents, emails and other communication, so you get a complete picture, with a timeline and where all the money went, step by step. You receive a report that anyone can follow and understand step by step.

You provide what you have: payments, wallet addresses, emails, chats and screenshots. You do not need everything complete; Paucitas helps you gather it. Every investigation is tailored, and you receive a custom quote in advance that we go through together, with no surprises. Turnaround is from the same day to about two weeks. Read more about our blockchain investigation and the page for private individuals. Which factors determine the chances is covered in getting stolen crypto back.

You can call at any time, 24/7, on +31 20 244 5774. Through the contact form you will hear from us within 1 to 3 hours, and we answer emails within 24 hours, usually the same day.

Sources: Europol, investment scams; FCA, recovery room scams; Report Fraud; Police Scotland, scams and frauds.

Questions about your own situation?

Call us directly, 24/7, or fill in the form below. You will hear from us within 1 to 3 hours. A free intake is without obligation.

+31 20 244 5774 Go to the contact form ↓

Paucitas B.V.

Weesperstraat 107
1018 VN Amsterda

E: paucitas@paucitas.com
T: 020 244 5774

Available 24/7

CoC: 83489649
VAT: NL862894062B01

Want to know more about this subject? Contact us

"*" indicates required fields

Frequently asked questions about being scammed twice with crypto

Short answers to the questions we are asked most often.

Can the second amount be investigated separately?

Paucitas can investigate the second amount separately. Paucitas investigates every payment as its own trail, including what you paid to a recovery firm. That trail is often shorter and therefore clearer.

What does it mean if a recovery firm asks for money first?

Paucitas explains: it can point to a recovery scam, but it does not have to. It is best not to pay anything more until you know where you stand, and let Paucitas look at the firm and the payments first.

Should I share my recovery phrase with a firm that wants to help?

Paucitas advises against it, that is not wise. Your recovery phrase or private key is best kept to yourself. Paucitas never asks for it, and guides you if you want to regain access to your own wallet.

What can Paucitas do if my money seems to be gone?

Paucitas maps out where both payments ended up and sets it out in a report. Sometimes a balance turns out to be reachable; sometimes the report is the basis for your next step.

What can I do with the Paucitas report?

Paucitas shows in the report whether there is still money available, or where it has gone, and what the next steps are. If it was a scam, it is a strong attachment to a report to Report Fraud or Police Scotland, because it sets everything out fully and clearly.

Short answers

Is your question not covered here? See short answers to common questions about crypto investigation or the explanations of blockchain and cryptocurrency terms.