how to report a crypto scam to the FBI in 2026?

Why Reporting a Crypto Scam to the FBI Matters in 2026

The FBI's Internet Crime Complaint Center (IC3) reported that Americans lost approximately $11.4 billion to cryptocurrency-linked fraud in 2025, with overall cybercrime losses reaching nearly $21 billion for the year. Crypto-specific complaints have consistently represented roughly half of all U.S. fraud losses tracked by IC3, and 2026 projections suggest a continued upward trajectory as pig-butchering operations, romance-investment hybrids, and AI-assisted impersonation schemes expand across Southeast Asia, West Africa, and Latin America. Florida, Georgia, and Texas have been singled out in academic and federal analyses as the states with the highest per-capita exposure to crypto investment fraud, partly because of retiree demographics and high digital-asset adoption rates.

Also worth reading: Are crypto fraud recovery agencies legitimate, or are they just a second scam? · What are the best practices for building and managing a reconciliation exception aging report? · How do blockchain forensic accounting tools detect financial discrepancies and trace crypto assets in audits?

A single IC3 complaint rarely produces an immediate arrest, but it is the foundational evidence unit for federal task forces, including the FBI's Virtual Assets Unit, the Department of Justice's Crypto Unit, and the SEC's Crypto Assets and Cyber Unit. Complaints are also aggregated into annual reports that drive congressional hearings, Financial Crimes Enforcement Network (FinCEN) advisories, and interstate cooperation agreements. For a victim, filing an IC3 report also creates the official record that banks, exchanges, tax authorities, and insurance carriers typically require before honoring fraud claims, reversing wire transfers, or issuing 1099-B corrections.

Reporting through the correct channel is therefore not symbolic. The IC3 database is searchable in real time by FBI field offices, the U.S. Secret Service, the Commodity Futures Trading Commission, and partnering state attorneys general. A well-documented report can connect a victim to a broader seizure action, increase the odds of partial restitution, and contribute to the disruption of the wallet clusters used by organized scam networks.

The Direct Answer: Where and How to File

The primary federal intake portal for crypto-related fraud is the Internet Crime Complaint Center at ic3.gov, jointly operated by the FBI and the National White Collar Crime Center. Victims, third parties, and even financial institutions can submit complaints online; the form is free, does not require legal representation, and accepts attachments up to 10 MB per file. For losses exceeding $50,000, or any case involving a child, a senior, or a transnational organized-crime element, the FBI also encourages direct contact with the local field office through tips.fbi.gov or the toll-free tipline at 1-800-CALL-FBI.

Beyond IC3, the report should be mirrored to several other agencies to create a redundant evidentiary footprint. The Federal Trade Commission accepts fraud reports at ReportFraud.ftc.gov and uses them for its Consumer Sentinel database, which is shared with more than 2,800 U.S. and international law-enforcement partners. The Securities and Exchange Commission operates a separate online tip form (sec.gov/tcr) for investment-style crypto fraud, while the Commodity Futures Trading Commission handles complaints involving derivatives or foreign-exchange-style crypto products through cftc.gov/complaint. State regulators matter too: each U.S. state has a securities or financial-crimes division that can issue cease-and-desist orders against in-state promoters.

For tax-loss documentation, victims should also file Form 4684 (Casualties and Thefts) with their federal return, attaching a copy of the IC3 confirmation. The IRS treats properly documented crypto theft as a casualty loss, though the Tax Cuts and Jobs Act of 2017 limits the deduction for personal-use property through 2025 unless extended. Investors who realized a gain on a legitimate position before being defrauded face different rules, and this is where a forensic accountant typically earns the audit-grade reconciliation fee.

The Step-by-Step Reporting Workflow

Before opening the IC3 form, a victim should assemble a case file. Recommended documents include the complete transaction history exported from the exchange or wallet, blockchain explorer URLs (Etherscan, Tronscan, Blockchain.com, Solscan) showing each fraudulent transfer, screenshots of conversations with the scammer, copies of the original solicitation (email headers, SMS, social-media DMs), and any wallet addresses attributed to the counterparty. The blockchain explorer URLs are especially important because they allow IC3 analysts to cluster related addresses and trace funds through mixers, bridges, and centralized off-ramps.

The IC3 submission form itself asks for victim identifying information, financial institution details, transaction data (date, amount, asset type, wallet hashes, exchange names), and a narrative description. The narrative should be chronological, factual, and free of speculation about the perpetrator's identity unless strong evidence exists. A useful structure is: (1) how contact was initiated, (2) the platform or app used, (3) the conversion path from fiat to crypto, (4) the on-chain transfer sequence, (5) the loss amount in both crypto units and U.S. dollars at the time of transfer, and (6) the moment the victim recognized the fraud. The IC3 system generates a complaint ID immediately; this number is the reference key for every future interaction with law enforcement, victim-assistance specialists, and restitution proceedings.

After submission, IC3 triage analysts review the complaint within 72 hours and forward actionable cases to the appropriate FBI field office, the Secret Service, or a fusion center. Victims should not expect a phone call unless the loss exceeds $100,000 or involves exigent circumstances, but they will receive email updates if additional information is requested. A second wave of reporting is recommended 30 to 60 days after the initial filing if new evidence emerges, such as a follow-up contact from the scammer, a similar scam being reported by a neighbor, or fresh blockchain-tracing output from a private investigator.

Comparing the Federal Reporting Channels

Not every agency is built for the same case, and choosing the wrong one can delay action. The table below summarizes the principal U.S. options a victim should consider in 2026.

For most victims, the first submission should go to IC3, with simultaneous mirroring to the FTC and the relevant state regulator. If the loss was a security-style token sale, the SEC filing should follow within the same week. For pig-butchering or romance-investment scams that involve cross-border money movement, FinCEN's contact for the relevant money-services business and the Department of Justice's victim-assistance line (1-800-363-0442) become important.

Common Mistakes That Undermine a Crypto-Scam Report

Many complaints are rejected or deprioritized because of avoidable errors. The most frequent is supplying a personal wallet address without the corresponding transaction hash (TXID). Without the hash, FBI analysts cannot link the on-chain transfer to a specific block height or exchange deposit address, and the case is effectively orphaned. A second common error is reporting the dollar value at today's price rather than the dollar value at the time of transfer; the IC3 database uses the historical value to compute loss statistics, and a mismatch can trigger a manual review that delays processing.

Victims also frequently omit the exchange or virtual-asset service provider (VASP) used for the on-ramp. If the funds were purchased on Coinbase, Kraken, Binance.US, or a similar platform, the VASP's compliance team can freeze the receiving address only if it is still custodial. Once funds move to a self-custodied wallet, the window for a freeze closes within hours. A fourth mistake is failing to preserve original communications; many victims delete scammer messages after a refund request is denied, only to learn months later that the FBI needed the raw chat logs to build a wire-fraud indictment.

Finally, victims should avoid paying any so-called recovery agent who promises to retrieve the funds for an upfront fee. The FBI and the FTC have both issued repeated warnings about recovery-room scams that target previous fraud victims, and the IC3 database shows that secondary losses from these schemes are now exceeding $300 million annually. A legitimate investigator works on a contingency basis, supplies a written engagement letter, and never demands payment in crypto or via gift cards.

When to Escalate Beyond the Standard IC3 Filing

A standard IC3 report is sufficient for most individual losses under $25,000, but certain situations warrant faster, more direct escalation. If the scam involved a U.S.-based financial institution, a registered investment adviser, a FINRA member, or a CFTC-regulated entity, the victim should simultaneously file a complaint with the institution's primary regulator. If a senior over 60 was defrauded, the Elder Justice Initiative at the U.S. Department of Justice operates a hotline (1-833-FRAUD-11) and coordinates with Adult Protective Services in every state. If the loss is tied to a data breach (for example, a SIM-swap that drained a hot wallet), the victim should also file with the Identity Theft Resource Center and request an IRS Identity Protection PIN to prevent fraudulent tax filings.

A second escalation pathway is the FBI's victim-assistance program, which assigns a specialist to any case involving federal prosecution, asset seizure, or restitution. Victims who receive a victim-assistance letter should respond within 30 days, even if they have already moved or changed email addresses, because undeliverable mail can result in forfeiture of certain rights, including the right to be heard at sentencing and the right to receive restitution. The Crime Victims' Rights Act (18 U.S.C. § 3771) provides enforceable rights to crime victims in federal proceedings, and invoking it in writing creates a paper trail that has, in several high-profile crypto cases, materially affected the final restitution order.

For losses exceeding $1 million or those tied to a known exchange collapse, a civil action may also be appropriate. Class-action filings against FTX, Celsius, Voyager, and BlockFi demonstrate that civil discovery can sometimes recover assets faster than the criminal process, and the bankruptcy-court-appointed privacy monitors have already produced millions of pages of internal documents that private plaintiffs are now using. The audit angle here is straightforward: a forensic accountant can compare the bankruptcy schedules, the on-chain treasury movements, and the customer's individual transaction history to identify discrepancies that strengthen the civil claim.

The Audit Angle: Reconciling Your Records After a Crypto Scam

Financial-audit professionals treat a crypto-scam loss the way they treat any material misstatement: the books must be reconstructed, the on-chain ledger must be reconciled to the bank and exchange statements, and the difference between the two must be classified correctly. The first step is to export the full transaction history from every wallet and exchange involved, including timestamps, counterparty addresses, gas fees, and FX rates at the time of each transaction. Tools such as Etherscan's CSV export, Bitquery's GraphQL API, and Chainalysis's free Address Screening allow a victim or their accountant to assemble a clean ledger without surrendering custody of private keys.

The second step is to value the loss correctly. The IRS allows the cost basis of stolen property to be computed using either the specific-identification method or the first-in, first-out (FIFO) method, and the fair market value at the time of discovery (not at the time of purchase) determines the deductible amount for personal-use property. For investment property, the loss is measured against the cost basis and is generally not deductible as a theft loss after 2017 unless attributable to a federally declared disaster, though the rules around personal casualty losses are scheduled for review in late 2026. A forensic accountant will model both interpretations and recommend the one that survives IRS scrutiny while maximizing the after-tax recovery.

The third step is to cross-reference the reconstructed ledger against the IC3 complaint to ensure the two narratives are consistent. Discrepancies between the complaint and the audited ledger are the single most common reason a restitution claim is reduced, because prosecutors rely on the IC3 narrative to set the loss figure in any plea agreement or restitution order. A clean, audit-grade reconciliation therefore functions as both a tax document and a legal instrument, and for losses of $250,000 or more, the cost of a forensic accountant (typically $350 to $600 per hour) is recovered many times over through better tax treatment and stronger restitution claims.

The Limits of Federal Reporting and What to Do About Them

Federal reporting is not a guarantee of recovery. IC3's own published statistics show that 2025 restitution rates for crypto fraud hovered near 6.2% of reported losses, a slight improvement over 2024 but still well below the rates for credit-card or ACH fraud. Many of the largest cases (OneCoin, the various MyCoin networks, and the Cambodian pig-butchering compounds) involve perpetrators based in jurisdictions that have no extradition treaty with the United States, which means the practical effect of a federal report is often to add a victim to a class-action docket or a deferred-prosecution settlement rather than to produce an individual recovery.

Mitigation therefore begins before the scam, not after. Cold-storage custody for any long-term position, a dedicated device for signing transactions, multi-signature wallets for amounts exceeding $5,000, and a written pre-commitment to verify any wire or wallet change with a phone call to a known number are all controls that reduce the probability of loss to single-digit percentages. A financial audit of a crypto portfolio should, at a minimum, include a review of the custody architecture, the recovery-seed storage procedure, the exchange counterparty risk, and the documentation chain for every on-chain movement. When a discrepancy is found, the audit report should specify the date, the amount, the wallet, and the corrective action, in language the victim can paste directly into the IC3 narrative field.

In short, reporting a crypto scam to the FBI in 2026 is a multi-channel, document-heavy process whose value depends as much on the quality of the underlying records as on the filing itself. The IC3 complaint is the entry point, but the audit-grade reconciliation is what turns a complaint into a restitution-eligible claim. Victims who treat the event the way a corporation treats a material misstatement, with a written incident timeline, a reconstructed ledger, and a forensic valuation, materially improve their odds of partial recovery and help the FBI disrupt the next wave of fraud before it reaches the next victim.