If you suspect a cryptocurrency payment scam in the United States, preserve the messages, payment requests, receipts, timeline, and available transaction references, then use current official government guidance to identify reporting routes relevant to your situation. Federal, state, and local processes may differ, and a report does not guarantee an investigation, enforcement action, or recovery. Do not send additional funds or share wallet credentials with someone offering to help.

First steps after a suspected crypto scam

Stop communicating with the person or service you suspect, especially if they are asking for more money. One reported U.S. scam pattern involving convertible virtual currency kiosks is that victims are directed under false pretenses to insert cash and send virtual currency to a destination controlled by a scammer. This describes a pattern, not proof that any particular kiosk transaction is fraudulent. (source )

Do not share passwords, private keys, recovery phrases, or one-time authentication codes. If you think an account or device may be compromised, reach the relevant provider through a contact route you independently verify and follow its current security instructions. The evidence available for this guide does not establish what action a particular provider can take in an individual case, so do not assume a transfer can be reversed or funds frozen.

Keep the immediate response focused on safety and records. Be cautious about unsolicited messages from people claiming to be investigators, support staff, or recovery specialists. Verify who is contacting you through an official channel before providing information or taking action.

What records to preserve before reporting

Write a dated timeline while events are fresh. Include when contact began, what the other party said or promised, what they asked you to do, what you sent, and what happened afterward. Label estimates and uncertain details clearly, and distinguish what you directly observed from what you infer.

Save relevant messages, emails, call logs, payment requests, receipts, and account or platform identifiers. Keep original files where possible and retain a separate copy of your notes. Record transaction references or public blockchain information if you have it. Do not attempt to identify a person solely from an address or other technical reference: the evidence here does not establish that such a reference identifies the person behind it.

Avoid exposing sensitive information while organizing evidence. Never include private keys, recovery phrases, passwords, or one-time codes in an incident record or provide them to someone offering assistance. Share personal or financial information only through a reporting process you have independently verified, and follow that process’s instructions about what to submit. Keeping a record does not require sharing every detail with every recipient.

A useful record is specific without overstating what it proves. For example, note that a message requested a transfer to a particular destination if that is what the message shows. Do not turn that fact into a claim about who controlled the destination unless you have separate evidence supporting the identification. The same distinction applies to a payment request, a receipt, or a conversation: preserve what the item contains and leave conclusions clearly marked as conclusions.

How to report a crypto scammer through U.S. channels

There is no single reporting route established here for every suspected cryptocurrency scam. Begin with current official federal guidance for the type of conduct involved. Check the agency’s own site to confirm its stated role, whether its intake route applies to your situation, and what submission process and information it currently requests. Do not rely on an old contact list or an unsolicited link as proof that a form or phone number is official.

You can also check whether local law enforcement or a relevant state authority offers a reporting process for the circumstances and location involved. Do not assume state and local procedures are uniform nationwide. Confirm instructions directly with the authority concerned, including any eligibility or jurisdiction limits it publishes.

If an account or service was involved, contact the platform or financial institution through a verified official channel and ask what process it uses for suspected fraud or account-security issues. A provider’s internal process is distinct from a government report. Third-party crypto custodians can manage access to private keys for customers, but custody arrangements and customer rights vary by provider and jurisdiction; that fact does not establish what a particular organization can do in your case. (source )

Choose reporting routes based on the facts you can document, not on a promise that a particular agency or organization will produce a specific result. An authority’s intake process, a provider’s account-security process, and your own records serve different purposes. Check each recipient’s current instructions rather than assuming one submission automatically reaches every relevant organization.

How to prepare a clear report

Start with a concise sequence of events: when the contact occurred, what was requested or promised, what you did, what payment or transfer you report making, and what happened next. Use dates, amounts, and identifiers only when supported by your records. If a detail is approximate, say so.

Separate direct evidence from interpretation. A message can support the statement that a request was made; it does not necessarily establish the requester’s identity or the truth of a promise. Describe what the records show and identify any uncertainty. Attach or provide supporting material only as the verified reporting process requests.

Before sending, check that you are using the authority’s or provider’s current official submission route. Review the report for unnecessary personal information and secret credentials. Keep a copy of the report and any confirmation or reference number the recipient provides. A confirmation that a submission was received is not a guarantee of investigation, enforcement action, or recovery.

Avoid follow-up scams and check current guidance

Treat unsolicited recovery offers as unverified, especially when someone demands an upfront payment, requests wallet access, or asks for recovery material. Do not send additional crypto or disclose credentials as a condition of receiving help. Verify any claimed affiliation or process by navigating independently to the relevant official website and checking its published contact instructions.

Recheck official guidance when you are ready to report. This guide does not establish current agency names, intake procedures, state-specific requirements, eligibility rules, or available remedies. Those details must be confirmed with the relevant authority or provider. Keep legal, tax, and regulatory questions separate from the task of documenting and submitting an incident report; this guide does not draw jurisdiction-specific conclusions about them.

The practical aim is to preserve a clear, privacy-conscious account and submit it through a channel you have verified. Record what happened, avoid presenting assumptions as facts, and do not rely on anyone’s promise of a particular outcome.

Sources and references