Active Incident? 24/7 Response →
Witness

For Individuals & Families

Romance Scam Recovery: What Forensics Can and Cannot Recover

If someone promised they could recover the money, walk away. Here is what a real forensic investigation looks like — and what it can actually deliver.

All articles·8 min read·April 27, 2026

The hard truth first

If money was sent via wire, crypto, or gift card more than 72 hours ago and the receiving institution has not yet frozen the account, the funds are usually unrecoverable. Anyone promising to recover crypto sent to a scammer for a fee is running a second scam on you. Block them.

What forensic investigation can actually do

The narrow window where money can be recovered

Recovery is genuinely possible only when:

We will tell you honestly which of these apply to your case — and if recovery is impossible, we will tell you that too instead of charging for a doomed effort.

What to file in the first 24 hours

  1. FBI IC3 complaint at ic3.gov — federal jurisdiction, fast
  2. FTC complaint at reportfraud.ftc.gov — pattern data, civil enforcement
  3. Local police report — required for many bank fraud claim processes
  4. Your bank's fraud department — written notice the same day; many banks have a 60-day claim window
  5. Platform abuse report on the dating site, Telegram, WhatsApp, or wherever the contact occurred — establishes a complaint timeline

Why people get re-targeted

After a successful scam, your contact information ends up on a "suckers list" sold among scam networks. Within weeks, you will be contacted by a "recovery agent" or "FBI investigator"who claims they can get the money back for an upfront fee. This is the second scam. It is run by the same network. They know which buttons to push because they wrote your file.

If anyone calling themselves an investigator asks for an upfront fee paid by gift card, crypto, or wire transfer, hang up.

What we do

Romance scam and catfish investigation — identity verification, attribution where possible, evidence preservation that holds up in court, and honest scoping. If your case has a recovery path, we will help you pursue it. If it does not, we will say so.


Related services

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded Witness in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Romance scam recovery: frequent questions

Certified Expertise

GIAC · AWS · Splunk · CompTIA

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management