Independent review publisher. We do not recover funds or guarantee outcomes.Editorial questions: [email protected]

How to vet an asset-recovery company

Eight checks to complete before you sign an engagement, pay a retainer or share sensitive transaction records.

Consumer guide Updated August 7, 2026

First rule: Never give a recovery provider your seed phrase, private key, exchange password or remote access to a device containing financial credentials.

1. Identify the legal entity

Ask for the exact legal name that will appear on the engagement agreement and invoice. Compare that with the website, payment recipient and any claimed registration. A brand name alone is not enough.

2. Map exactly what service is being sold

“Asset recovery” can mean very different things: blockchain tracing, investigative reporting, contacting exchanges, civil legal work, chargeback assistance or referral to counsel. Ask what work the provider itself performs and what it outsources.

3. Put recovery claims under pressure

Question guaranteed percentages, fixed recovery timelines, claims of special access to exchanges or law enforcement, and statements that funds are already “located” unless the provider can show a credible basis for that conclusion.

4. Understand every fee

Get the retainer, contingency fee, investigation fee, third-party cost, tax, withdrawal fee and refund terms in writing. Be especially cautious when new fees appear after you have already paid.

5. Verify credentials independently

If a company says it works with attorneys, investigators, exchanges or government agencies, verify those relationships through independent channels rather than phone numbers or links supplied only by the salesperson.

6. Review data and custody boundaries

A legitimate engagement should explain what information is collected, who can access it and whether the provider ever takes custody of your funds. Private keys and seed phrases should never be necessary for ordinary investigation work.

7. Search beyond testimonials

Marketing testimonials can be selective or fabricated. Search for the company name and domain alongside terms such as “complaint,” “review,” “lawsuit,” “regulator” and relevant executive names. Evaluate the evidence behind both positive and negative claims.

8. Keep your own evidence package

Preserve transaction IDs, wallet addresses, exchange receipts, emails, chats, invoices and screenshots. Do not send the only copy to a third party. These records may be useful for banks, exchanges, law enforcement or counsel.

Editorial note: AssetRecoveryHub does not recommend hiring a private recovery company as the default next step. In many cases, contacting your bank/payment provider, exchange, local law enforcement or appropriate government reporting channels should happen first.

Questions worth asking in writing

  • What exact legal entity am I contracting with?
  • What services will you perform yourself?
  • What outcome can you realistically promise — and what can you not promise?
  • What is the maximum amount I could be asked to pay?
  • Will I ever be asked to send cryptocurrency to you?
  • Who will have access to my identity and transaction records?
  • How can I terminate the engagement?

Want us to examine a provider? Submit the company and domain to the research desk.