All news

News

The Crypto Recovery Call That Was Also a Scam

Operation Shamrock describes how a man who lost $500,000 to crypto fraud was targeted again by a supposed recovery expert named Richard, using the same trick.

27 October 2026

Reported by

Operation Shamrock

According to Operation Shamrock, a man named George lost $500,000 to a cryptocurrency scam, then nearly lost more trying to get it back. The person who offered to recover his money, a man calling himself Richard, turned out to be running another version of the same scam.

George joined a call with Operation Shamrock with what he thought was good news. A fellow scam victim had introduced him to Richard, who claimed he could recover stolen cryptocurrency. Richard said he had located millions of George's lost money. George even saw a deposit of nearly $700,000 land in his crypto wallet. Then it disappeared.

The second scam used the first one as proof

George still thought he might be getting somewhere. A woman from an online investment class had recommended Richard to him; she said Richard had recovered $2 million for her after she had been scammed. Operation Shamrock's Erin West told him directly: she thought Richard was a scammer. George pushed back. He had seen the money in his wallet.

That is the step the scam depends on. George had already been shown a balance that looked real once before, and it had vanished once before. The recovery scam reused that exact trick, a number on a screen standing in for money that was never actually his to move.

How the first scam built George's trust

George had traded cryptocurrency for years and had made real money doing it; he remembered buying Bitcoin at about $3,200. That history made the next offer feel ordinary rather than suspicious. He joined a mining pool other people in an online crypto community were discussing. His balance grew, then showed $15 million. The next day it was gone.

He did not stop there. A cryptocurrency course reached him through a WhatsApp group of roughly 50 people, with others presenting as professors and daily lessons on market news. George had been to college. He recognized the shape of a structured class, and the lessons looked prepared and professional. The course let him trade without risking his own money at first, offering $500 he could keep the profits from as long as he returned the original amount. Later it offered a $300,000 "loan" to trade with. On screen, the trades generated millions. Then came the demand for repayment.

What repeats across both scams

Both the original loss and the recovery attempt ran on the same mechanism: a balance appears, it grows, and it disappears right before George could use it. Neither loss happened because he clicked something careless. He had experience trading, had made real profits before, and still followed a number on a screen twice.

The tell was not in the technology. It was in the structure: money that only exists on someone else's platform, shown but never withdrawable, followed by a reason it cannot be released yet. Anyone offering to recover stolen crypto who asks for a deposit, a fee, or access first is running that same structure.