A stranger offers to recover romance-scam losses

Why an unexpected recovery offer deserves caution

A message that arrives after a loss, promising to retrieve your money, can feel like relief. The safer reading is that it is an unsolicited sales pitch arriving when you are vulnerable. The Federal Trade Commission warns that unexpected recovery offers which demand an upfront fee or financial information can lead to further loss. Notice what the message asks of you: money before any result, or financial details. Those requests are the core warning, whether or not the sender is eventually shown to be fraudulent. They tell you to slow down and verify before responding. [FTC: Refund and Recovery Scams]

• Save the message and note the exact fee and information requested
• Ask yourself whether you approached this person or they approached you

The independent-verification rule

The decisive move is to ignore the contact details inside the unsolicited offer. The FTC advises independently verifying an organization rather than using the phone number, email address or link it supplies. In practice, that means finding the organization through a route you choose rather than one the message provides, and checking what you find against the offer. If your independent check does not match the offer, stop. Verification is not a guarantee; it simply removes the offer's own framing from the decision. [FTC: Refund and Recovery Scams]

• Find the organization through a route you choose, not one supplied by the message
• Compare what the offer claims with what your independent check shows

Contact the original provider, not the newcomer

Your strongest practical step is to go back to the route your money actually travelled. The FTC advises contacting the payment provider, issuer or bank promptly after suspected fraud and asking what reversal options are available. Use contact details you already hold, such as the number on your card or the app you already use, not a number supplied by the new contact. Recovery is not guaranteed, so keep relevant receipts and a simple timeline of payments. If a stranger offers to handle that provider for you, decline; you want the provider's own answer. [FTC: What To Do if You Were Scammed]

What not to hand over

A recovery offer that needs your banking password, one-time codes, card details or remote access to your device is asking for the means to repeat the harm. If you have already disclosed account credentials, the FTC advises changing the compromised password and enabling two-factor authentication through the real service, not through a link in the message. Change the password from the service's own app or website, and turn on two-factor authentication inside the real account settings. [FTC: What To Do if You Were Scammed] [FTC: How To Recognize and Avoid Phishing Scams]

• Change the password from the service's own app or website
• Turn on two-factor authentication inside the real account settings

A hypothetical worked example

Suppose a person lost money in a romance scam and receives a message saying a recovery agent can retrieve it for an upfront fee and asks for their bank login. This example is editorial, not a real case. The reader does not pay and does not share the login. They open their banking app directly, ask the bank what reversal options exist, save the receipts, and change any password they had disclosed. They keep the stranger's message but do not act on the contact details it supplies until they have independently checked the organization. [FTC: What To Do if You Were Scammed]

Decision table: fee, information and pressure

Use this editorial table to sort a new message into a clear next action. It is a thinking aid, not a diagnosis of the sender. The pattern matters more than any single line: an upfront fee request plus a credential request is the combination that should end the conversation. Where the signals are mixed, ask the original provider first and let their answer guide you.

Stopping rule and next action

Adopt one firm stopping rule: end the exchange the moment an upfront fee or financial information is demanded, or the moment credentials or remote access are requested. Do not negotiate, and do not explain your reasons in detail. Your next action is the same in either case: contact your bank, card issuer or payment provider through details you already hold and ask about reversal options, then keep every receipt. If credentials were shared, change the password and enable two-factor authentication through the real service before anything else. [FTC: What To Do if You Were Scammed] [FTC: How To Recognize and Avoid Phishing Scams]

A couple more questions