--- question: "Can stolen crypto actually be recovered?" description: "Rarely, and never by paying a recovery service up front. On-chain transfers are irrevocable, and the mechanism that works best runs on bank rails." topic: "Security & recovery" jurisdiction: "US" published: 2026-08-18 author: "Zion Labs" canonical: https://zionlabs.io/answers/can-stolen-crypto-be-recovered answer: "Rarely. The FBI states that cryptocurrency transactions are irrevocable, meaning they cannot be reversed, so there is no chargeback and no operator who can undo a transfer. Recovery happens in two narrow situations: the funds land at a centralised exchange that freezes them on a law enforcement request, or a government seizes the private keys, usually years later. In 2025 the FBI Internet Crime Complaint Center logged 181,565 complaints involving cryptocurrency and $11.366 billion in reported losses. Its Financial Fraud Kill Chain, the process that freezes fraudulent transfers, ran 3,900 incidents that year and froze $679 million of $1.164 billion, a 58% success rate, but that process operates on bank transfers rather than on-chain." --- # Can stolen crypto actually be recovered? ## Answer Rarely. The FBI states that cryptocurrency transactions are irrevocable, meaning they cannot be reversed, so there is no chargeback and no operator who can undo a transfer. Recovery happens in two narrow situations: the funds land at a centralised exchange that freezes them on a law enforcement request, or a government seizes the private keys, usually years later. In 2025 the FBI Internet Crime Complaint Center logged 181,565 complaints involving cryptocurrency and $11.366 billion in reported losses. Its Financial Fraud Kill Chain, the process that freezes fraudulent transfers, ran 3,900 incidents that year and froze $679 million of $1.164 billion, a 58% success rate, but that process operates on bank transfers rather than on-chain. ## Nuances and considerations - **The largest recovery on record took six years and a police search, not a blockchain tool.** Roughly 119,754 bitcoin left a global exchange in a 2016 hack. The government recovered about 95,000 of them in February 2022, worth some $3.6 billion at the time, by seizing wallets the defendants controlled. Tracing identified where the coins were. Taking them back required keys and an arrest. - **The freeze mechanism that works is not on-chain.** The Financial Fraud Kill Chain froze 58% of the value in the incidents it ran in 2025, but it works by asking receiving banks to hold wire and ACH transfers. No equivalent lever exists for a transaction already settled on a public chain, which is why the useful question is whether the funds have reached a custodial exchange that can act on a request. - **Timing dominates every other variable.** A freeze request has to reach the receiving institution before the funds move again. Hours matter; the tooling used afterwards mostly does not. - **Recovery services are a documented fraud category in their own right.** The IC3 reported that between February 2023 and February 2024 victims approached by fictitious law firms offering to recover crypto lost a further $9.9 million. The pattern is an up-front fee, often with a claimed affiliation to a government agency. The IC3 states that it does not work with any non-law-enforcement entity, including law firms or crypto services, to recover funds. - **Seized is not the same as returned.** Funds a government seizes enter a forfeiture process, and any return to identified victims runs through remission or restitution on that process's timetable. - **A loss at a custodial platform is a different question entirely.** If the assets never left the platform, this is a claim under its terms of service, and if the platform fails it becomes an insolvency question rather than a tracing one. - **This describes US reporting and US enforcement,** and it is general information rather than legal advice. ## What determines whether recovery is even possible 1. Did the funds move **on-chain**, or is this a dispute with a custodian that still holds them? 2. Do the funds now sit at an **identifiable centralised exchange**, or in a self-custodied wallet with no operator to ask? 3. Are the **transaction hashes, addresses, amounts and timestamps** recorded? Without them there is no trail to follow. 4. How many **hours** passed before law enforcement and the receiving platform were notified? 5. Is anyone requesting an **up-front fee** to promise recovery? Two IC3 alerts describe that as the fraud pattern rather than the service. ## Sources - [Cryptocurrency](https://www.ic3.gov/CrimeInfo/Cryptocurrency) · FBI Internet Crime Complaint Center. Supports: That cryptocurrency transactions are irrevocable and cannot be reversed, that victims should report even where no financial loss occurred, that reports should include cryptocurrency addresses, amounts and types, transaction hashes and the dates and times of transactions, and that victims should be wary of recovery services charging an up-front fee. - [2025 IC3 Annual Report](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf) · FBI Internet Crime Complaint Center. Supports: That 2025 saw 181,565 complaints involving cryptocurrency with $11.366 billion in losses and an average loss of $62,604, and that the Recovery Asset Team initiated 3,900 Financial Fraud Kill Chain incidents covering $1,163,919,846 of attempted theft, freezing $679,013,183 for a 58% success rate. - [Fictitious Law Firms Targeting Cryptocurrency Scam Victims Offering to Recover Funds (Alert I-062424-PSA)](https://www.ic3.gov/PSA/2024/PSA240624) · FBI Internet Crime Complaint Center. Supports: That between February 2023 and February 2024, cryptocurrency scam victims further exploited by fictitious law firms reported losses totalling over $9.9 million, that such fraudsters charge an up-front fee, and that the IC3 does not work with any non-law-enforcement entity such as law firms or crypto services to recover lost funds. - [Bitfinex Hacker Sentenced in Money Laundering Conspiracy Involving Billions in Stolen Cryptocurrency](https://www.justice.gov/archives/opa/pr/bitfinex-hacker-sentenced-money-laundering-conspiracy-involving-billions-stolen) · United States Department of Justice. Supports: That 119,754 bitcoin were transferred out of a global cryptocurrency exchange in the 2016 hack, that the government seized approximately 95,000 of them in February 2022 from wallets in the defendants' control, that those funds were valued at approximately $3.6 billion at the time and described as the department's largest financial seizure, and that the hacker was sentenced to five years in prison. ## Related questions - https://zionlabs.io/answers/what-is-address-poisoning - https://zionlabs.io/answers/who-owns-crypto-in-a-custodial-account - https://zionlabs.io/answers/what-happens-to-my-crypto-if-the-exchange-goes-bankrupt