Crypto stolen: what can you do?
By PlatformCrypto.eu editorial team · Last checked on
Short answer
Act quickly: secure whatever is left, alert your exchange and report the theft to the police in your country. Nobody can reverse a blockchain transaction, but an exchange that receives stolen funds can sometimes freeze them. Be very wary of anyone offering to recover your crypto for a fee.
Crypto usually goes missing in one of two ways: someone gets into your exchange account, or someone obtains the keys to your own wallet. Either way, time matters, because whatever remains can follow. Often the first sign is a balance that is suddenly lower or an email about a withdrawal you did not make. Take it seriously, but do not click the link in it; open the app or website yourself.
Step 1: secure what is left
- Exchange account. Change your password, switch two-factor authentication back on with a new device if needed, and check for withdrawal addresses you did not add. Contact the exchange's support and ask them to freeze the account.
- Own wallet. On a clean device, create a new wallet with a new seed phrase and move any remaining funds there. Treat the old phrase as compromised.
- Token approvals. On Ethereum-style wallets, an app you approved earlier may still be able to move tokens. Revoke approvals you do not recognise.
Step 2: record the evidence
Look up the transactions in a blockchain explorer and save the transaction IDs, addresses, amounts and times. Take screenshots of messages, websites and apps you dealt with. Police and exchanges will need them.
Step 3: report it
- To the exchange the funds came from and, if you can see it, the exchange they went to. Licensed platforms must investigate suspicious funds and can sometimes block them.
- To the police in your country. Europol's website links to the national online reporting services.
- To your bank or card issuer, if you paid someone by card or transfer as part of the scam.
Can you get it back?
Sometimes, but do not count on it. A blockchain transfer cannot be undone. Recovery is only possible if the funds reach a business that cooperates with law enforcement. Investigators across the EU work together on such cases, partly through Europol.
Beware of recovery scams
Victims are often contacted soon afterwards by "recovery experts", fake lawyers or even fake police officers who promise to retrieve the stolen crypto for an upfront fee. This is almost always a second scam. Genuine help never asks for payment in advance or for your seed phrase.
Reducing the risk next time
- Buy only from exchanges on our MiCA overview.
- Hold larger amounts in a hardware wallet such as Ledger or Trezor, and never share your seed phrase.
- Never send your ID or passwords to anyone who contacts you first; see why exchanges ask for ID.
Our wallet guide compares the main self-custody options, and the comparer shows the licensed exchanges we include.
More questions about crypto
- Why do crypto exchanges ask for your ID?
- What is the travel rule for crypto?
- What is a crypto white paper?
- What is a seed phrase?