A crypto investment scam in the UK can involve a fake trading platform, a social media advert, an impersonated firm or a message promising guaranteed returns. If you think you have been targeted, stop sending money and contact your bank or payment provider immediately. If crypto was transferred through an exchange, contact the exchange using its official app or website. Digital-asset transactions can be hard to reverse, so do not assume the funds can be recovered. The next reporting step depends on where you live and whether you lost money or only received a suspicious message.
Act quickly and protect accounts
Do not pay another deposit, tax, release fee or verification charge to withdraw a balance on a suspicious platform. Stop contact with the person who recruited you and avoid any links or telephone numbers they send. Call your bank using the number on your card or statement and explain that you may have sent money to a fraudster. Ask whether a pending payment can be stopped and what additional security steps the bank recommends. If you used a crypto exchange, report the transaction through its verified support channel.
Change passwords if a scammer saw your login details, and start with your email account because it may control password resets elsewhere. Turn on multi-factor authentication and review recent sessions, withdrawal addresses and API permissions. If you installed remote-access software or shared your screen, disconnect it and seek trusted technical assistance. Never share a seed phrase, private key or one-time security code with a person who says they can recover crypto or investigate a wallet.
Report the crime in the right place
For people in England, Wales and Northern Ireland, Report Fraud is the national centre for reporting fraud and cyber crime. Its online service accepts reports at any time and can also direct people who only received a suspicious email, call, message or website to the appropriate reporting route. If you have lost money, submit a crime report and keep the reference number. If a crime is happening now or someone is in immediate danger, use the relevant emergency service rather than waiting for an online form.
If you live in Scotland or the fraud happened there, Report Fraud directs people to Police Scotland on 101. Do not assume the England, Wales and Northern Ireland form is the right route for every UK resident. If you are unsure, check the current official reporting page for your location. FCA guidance says to report a lost-money scam to Report Fraud and then report it to the FCA where it relates to a financial service or promotion the FCA can consider.
When to tell the FCA
The FCA can look into certain financial-service scams and suspicious investment promotions. Its crypto guidance says firms offering crypto products in the UK must be registered with the FCA or have permission to promote them. That does not mean all crypto activity is regulated or that a registered firm protects every crypto purchase. Most crypto-related activities are not covered by the same protections as mainstream regulated investments. Check the FCA Firm Checker or Financial Services Register for the exact legal firm, permitted activities and contact details.
If the firm is not on the register, or the contact details differ from what the salesperson provided, stop and verify independently before sending anything. A registration entry is not FCA approval of an investment and does not guarantee that you will get money back. The FCA says it cannot recover lost money, but reporting can help it identify patterns and protect other consumers. Never use an FCA logo or reference number sent in a direct message as proof; locate the official register yourself.
Preserve evidence without re-engaging
Keep wallet addresses, transaction hashes, network names, dates, amounts, exchange account details and bank references. Save emails, chat messages, social-media handles, web addresses and any promised returns or withdrawal terms. Write a timeline that explains when the contact began and when each payment was made. Preserve the original messages where possible. A screenshot is useful, but the exact URL and transaction identifier can help the bank, exchange or police identify what happened.
Do not log back into a suspicious website simply to collect a screenshot. Use browser history or a note of the address instead. Avoid asking the scammer for more information if that could lead to another payment request. A blockchain explorer can show where a transaction moved, but it does not by itself identify who controls the destination. Do not send additional funds to a wallet or service that claims to trace, freeze or unlock the transfer.
Watch for recovery-room fraud
After a loss, criminals may contact you again as a supposed recovery company, solicitor, police officer or FCA investigator. They may know the amount you lost and promise to retrieve the crypto for a fee. The FCA warns that victims can be targeted again with offers to recover money or buy back an investment after an upfront payment. Verify the organisation independently, and do not rely on the phone number, email or website supplied in the approach.
Neither the FCA nor a legitimate police reporting service needs your seed phrase or wallet password. Be suspicious of anyone asking you to install remote-access software, sign an unreadable wallet transaction or pay a “blockchain gas charge” to release recovered money. If a person claims your assets are frozen by an authority, contact that authority through details on its official website. A report reference does not mean that funds have been found.
Make the report clear
Describe what happened in a factual order: the first message, the offer, the website or app, each payment and any attempted withdrawal. Include exact dates, amounts, currencies, wallet addresses and transaction references. Distinguish what you personally saw from what the promoter claimed. Keep a copy of the information you submit and add later updates through the official case channel. Notify your bank and exchange of any new contact from the suspected fraudster.
Reporting can help build a picture of a wider scam and may support an investigation, but it does not guarantee compensation. If your account was compromised, keep monitoring bank and email activity after the report. Tell trusted family members if the scammer used a shared contact list or impersonated someone close to you. A crypto investment scam in the UK can create both financial and identity risks; use verified official advice, protect accounts and decline any offer that promises a guaranteed recovery.
