A client lost $87,000 in a pig butchering scam. She went to her local police station and filed a report. The officer took down the details, gave her a case number, and told her someone would be in touch. Nobody called. She followed up after a week — the officer said the case had been referred to a specialist unit but he did not know which one. After three weeks of silence, she contacted us. We helped her refile the report with the correct agency, include the right evidence, and follow up with the appropriate specialist unit. Within a week of the refiled report, an investigator was assigned to her case. The difference was not the amount or the severity of the crime — it was how the report was filed.
Reporting crypto crime to police is the first and most important step in recovery. A police report is required for almost every recovery action: exchange freeze requests, Norwich Pharmacal orders, stablecoin issuer appeals, and international legal assistance. But filing a police report that actually gets investigated requires knowing which agency to contact, what evidence to include, and how to follow up. In this article, I provide a practical guide for reporting crypto crime in the major jurisdictions where our clients are based.
Why a police report matters
Before we get into the specifics, let me explain why a police report is so important. Even if you do not expect the police to investigate your case (and many crypto fraud cases do go uninvestigated), the police report itself is a critical legal document. It serves as:
- Proof of the crime: Exchange freeze requests, stablecoin issuer appeals, and court orders all require evidence that a crime has been committed. A police report is the strongest form of this evidence.
- A timestamp: The police report establishes when you discovered the fraud and when you reported it. This is important for statutes of limitations and for establishing that you acted promptly.
- A reference for follow-up: Every legal action you take will reference the police report number. Without it, your freeze requests and court filings lack a critical anchor.
- A trigger for law enforcement coordination: If the police do investigate, they can coordinate with international law enforcement through MLAT and other channels. This can lead to asset seizure that you could not achieve through civil action alone.
Which agency to contact
The most common mistake victims make is reporting to the wrong agency. Most local police departments do not have the expertise or jurisdiction to investigate cryptocurrency fraud. Crypto crime is typically handled by specialized units at the national or federal level. Here is where to report in each major jurisdiction:
United States: FBI IC3
In the United States, the primary agency for crypto crime is the FBI's Internet Crime Complaint Center (IC3). The IC3 is an online portal where victims can file complaints about internet-enabled crime, including cryptocurrency fraud. The IC3 reviews complaints and refers them to the appropriate FBI field office for investigation.
- Website: ic3.gov
- What to include: The scammer's wallet address(es), transaction hashes, the exchange where funds were sent (if known), the scammer's contact information (email, phone, social media), the amount lost, the timeline, and any correspondence.
- What happens next: The IC3 reviews the complaint and assigns it a complaint ID. If the complaint meets certain criteria (amount, jurisdiction, solvability), it is referred to an FBI field office. The field office may contact the victim for additional information.
- Follow-up: The IC3 does not provide status updates on individual complaints. If you want to follow up, contact your local FBI field office and reference your IC3 complaint ID.
For large losses (over $100,000), also consider contacting the US Secret Service, which has a cyber fraud unit. For losses involving securities or derivatives (including some crypto tokens), the SEC's enforcement division may be appropriate.
United Kingdom: Action Fraud
In the United Kingdom, the primary reporting point for crypto crime is Action Fraud, the national fraud and cyber crime reporting center. Action Fraud is operated by the City of London Police and is the central repository for fraud reports.
- Website: actionfraud.police.uk
- What to include: Same as above — wallet addresses, transaction hashes, exchange information, scammer's contact details, amount, timeline, correspondence.
- What happens next: Action Fraud reviews the report and assigns a crime reference number. Reports that meet certain criteria are referred to the National Fraud Intelligence Bureau (NFIB), which assesses them for investigation. The NFIB may refer the case to a local police force or to the National Crime Agency (NCA) for investigation.
- Follow-up: Action Fraud provides updates on the report's status. If the report is referred for investigation, the investigating force will contact the victim.
For large losses, also consider reporting to the NCA directly (through their cryptoassets team) and to the FCA (if the scam involved a regulated investment product).
Germany: Bundeskriminalamt (BKA) and local police
In Germany, crypto crime can be reported to the Bundeskriminalamt (BKA, the federal criminal police) or to the local police (Kriminalpolizei). For online fraud, the BKA operates the Zentral- und Ansprechpunkt Cybercrime (ZAC), which is the central contact point for cybercrime.
- Website: bka.de/zac
- What to include: Same evidence as above. German reports should be in German or accompanied by a certified German translation.
- What happens next: The BKA reviews the report and determines whether to investigate or refer to the local police. For international crypto fraud, the BKA typically handles the case directly through its cybercrime division.
- Follow-up: The BKA provides a case number (Aktenzeichen). You can follow up by referencing this number.
Also consider reporting to the BaFin (Federal Financial Supervisory Authority) if the scam involved an unlicensed financial service. BaFin does not investigate criminal fraud, but it can take regulatory action against the scammers if they operated in Germany.
Switzerland: FedPol and cantonal police
In Switzerland, crypto crime is reported to the cantonal police (where the victim resides) or to the Federal Office of Police (FedPol). FedPol has a cybercrime unit (the Cybercrime Competence Center, CC CSC) that coordinates international cybercrime investigations.
- Website: fedpol.admin.ch
- What to include: Same evidence. Swiss reports should be in German, French, or Italian.
- What happens next: FedPol reviews the report and either investigates directly (for international cases) or refers to the cantonal police. For international crypto fraud, FedPol is typically the lead agency.
- Follow-up: FedPol provides a case number (Geschäftsnummer).
For Swiss victims, also consider reporting to FINMA if the scam involved a FINMA-licensed entity or an unlicensed entity operating in Switzerland. FINMA does not investigate criminal fraud, but it can take regulatory action.
Other jurisdictions
For other jurisdictions, the general rule is to contact the national cybercrime unit or the federal police. Most countries now have a dedicated cybercrime reporting portal:
- France: Signal plateforme (signal.conso.gouv.fr) for consumer fraud; the Central Office for the Fight against Crime Related to Information and Communication Technologies (OCLCTIC) for criminal complaints.
- Italy: Guardia di Finanza (gdf.gov.it) — the financial police, which handles crypto crime in Italy.
- Spain: Guardia Civil's cybercrime unit or the Policia Nacional's cybercrime division.
- Australia: Australian Cyber Security Centre (cyber.gov.au) and ReportCyber (reportcyber.gov.au).
- Canada: Canadian Anti-Fraud Centre (antifraudcentre.ca) and the RCMP's cybercrime division.
- UAE: The UAE's Virtual Assets Crime Unit, accessible through the federal police or through VARA (the Virtual Assets Regulatory Authority) for regulatory complaints.
What evidence to include
The quality of your police report determines whether it gets investigated. A vague report ("I was scammed out of Bitcoin") will be filed and forgotten. A detailed report with specific evidence will be taken seriously. Here is what to include:
- Wallet addresses: Your wallet address, the scammer's wallet address(es), and any intermediate addresses you have identified. Include the blockchain (Bitcoin, Ethereum, Tron, etc.) for each address.
- Transaction hashes: The transaction hash (TXID) for every transaction you made to the scammer. This is the unique identifier that allows law enforcement to verify the transaction on the blockchain.
- Exchange information: If you have identified the exchange where the scammer holds an account (through blockchain forensics), include the exchange name and the deposit address.
- Correspondence: Screenshots or exports of all communication with the scammer — emails, chat messages (WhatsApp, Telegram, Signal), dating app messages, social media DMs. Include the scammer's usernames, phone numbers, and email addresses.
- Timeline: A chronological timeline of events — when you first contacted the scammer, when you sent the funds, when you discovered the fraud, and what actions you have taken since.
- Amount: The exact amount lost, in both cryptocurrency and fiat equivalent (at the time of the transaction). If you made multiple payments, list each one separately.
- Blockchain forensics report: If you have engaged a forensic firm (or if we have done the tracing for you), include the forensic report. This is the single most valuable piece of evidence — it shows law enforcement exactly where the funds went and who controls the destination addresses.
- Proof of identity: Your ID, proof of address, and proof of ownership of the wallet that sent the funds (e.g., a signed message from the wallet).
See our crypto evidence checklist for a more detailed guide on what to preserve.
How to follow up
Filing the report is only the first step. To keep your case active, you need to follow up:
- Reference your case number: Every communication with law enforcement should reference your case number. This ensures that your communications are added to the case file.
- Provide updates: If you discover new information (e.g., you identify a new wallet address, or you receive a new communication from the scammer), report it immediately. New information can reinvigorate a stalled investigation.
- Request a case status: Periodically (every 2-4 weeks), contact the investigating officer and request a status update. Be polite but persistent. If the officer is unresponsive, ask to speak to their supervisor.
- Engage legal counsel: If law enforcement is not responsive, engage legal counsel. A lawyer can communicate with law enforcement more effectively than a victim can, and can escalate the case through official channels.
- Coordinate with private recovery efforts: Even if law enforcement is investigating, pursue private recovery in parallel. File freeze requests with exchanges, file stablecoin freeze appeals, and consider civil legal action. The police investigation and private recovery are complementary, not exclusive.
What to do if the police do not investigate
In many cases, the police will not investigate — particularly for smaller losses (under $50,000). Law enforcement agencies are overwhelmed with crypto fraud reports and prioritize cases based on the amount, the complexity, and the likelihood of recovery. If your case is not investigated, do not give up — you can still pursue recovery through private channels:
- File freeze requests with exchanges: Even without a police investigation, you can file freeze requests with exchanges. Include your police report (even if it was not investigated) as evidence that a crime was reported.
- Pursue civil legal action: Norwich Pharmacal orders, freeze injunctions, and civil claims for conversion do not require a police investigation. You can pursue these through legal counsel.
- File with regulators: If the scammer used a regulated entity (an exchange, a stablecoin issuer), file a complaint with the regulator. The regulator can take action even if the police do not.
- Engage a forensic firm: Private forensic firms can trace stolen cryptocurrency and identify the cash-out point. Once the funds are traced to an exchange, you can pursue freeze requests and civil legal action.
The police report is still valuable even if it is not investigated. It establishes the crime, the timeline, and the amount — all of which are needed for private recovery efforts. And if the case is later reopened (e.g., because the same scammer defrauds other victims and a pattern emerges), your report is on file.
Case study: the difference a well-filed report makes
Two clients were defrauded by the same scammer within the same week. Client A filed a report with her local police, who took down the details but did not refer it to a specialist unit. Client B contacted us first, and we helped her file a report with the FBI IC3 that included: (1) a TRM Labs forensic report tracing the funds to a Binance deposit address, (2) the scammer's wallet addresses and transaction hashes, (3) screenshots of all correspondence, and (4) a timeline of events.
Client B's report was referred to an FBI field office within 3 days. An investigator was assigned within 2 weeks. The investigator contacted Binance with a formal legal request, obtained the account holder's identity, and coordinated with the Department of Justice to seize the funds. Client B recovered approximately 70% of her loss within 4 months.
Client A's report was never investigated. By the time Client A contacted us (3 months after the fraud), the funds had been cashed out and were unrecoverable. The difference was not the amount (both clients lost similar amounts) or the severity of the crime — it was the quality of the police report and the speed of the follow-up.
This case illustrates a critical point: the police report is not just a formality. It is the foundation of your recovery effort. A well-prepared report, filed with the right agency, can make the difference between recovery and total loss.
Common mistakes in reporting crypto crime
In my practice, I see the same mistakes repeated by victims when they file police reports. Here are the most common ones and how to avoid them:
- Reporting to local police instead of the national cybercrime unit: Local police officers rarely have the training or jurisdiction to investigate crypto crime. They will take the report, but it will likely sit in a filing cabinet. Always report to the national cybercrime unit (IC3, Action Fraud, BKA, FedPol) — even if you also file with local police for documentation purposes.
- Vague descriptions: "I was scammed on the internet" is not a useful description. Describe exactly what happened: "I met a person on Tinder who claimed to be a cryptocurrency trader. Over 3 weeks, they convinced me to transfer 5 BTC to the address 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa. The BTC was then moved to a Binance deposit address." Specificity matters.
- Not including transaction hashes: The transaction hash (TXID) is the single most important piece of evidence. It allows law enforcement to verify the transaction on the blockchain instantly. Without it, the report is incomplete. Always include the TXID for every transaction you made to the scammer.
- Not preserving correspondence: Screenshots of emails, chat messages, and social media DMs are critical evidence. Do not delete your correspondence with the scammer, even after you realize it was a scam. Export all messages and include them with your police report.
- Waiting too long: The longer you wait, the harder recovery becomes. Scammers move funds within hours. File the report within 24 hours of discovering the fraud — ideally within hours. If you are not sure whether you have been scammed, file anyway — you can always update the report later.
- Not following up: Filing the report is the beginning, not the end. Follow up every 2-4 weeks. Provide updates when you discover new information. Keep the case active in the investigator's mind.
- Not engaging legal counsel: A lawyer can communicate with law enforcement more effectively than a victim can. Lawyers understand the legal process, can escalate through proper channels, and can coordinate parallel civil recovery efforts. If your loss is significant (over $25,000), engage legal counsel as early as possible.
The relationship between police reports and private recovery
Many victims assume that they must choose between reporting to the police and pursuing private recovery. This is a misconception — the two are complementary. A police report strengthens your private recovery efforts (exchanges take freeze requests more seriously when they are backed by a police report), and private recovery efforts can provide information that strengthens the police investigation (e.g., a forensic report that traces the funds to an exchange).
The optimal strategy is to do both simultaneously: file the police report immediately, and at the same time, engage a forensic firm to trace the funds and a lawyer to file freeze requests and civil legal actions. The police investigation may take months or may not happen at all, but the private recovery efforts can produce results within days or weeks. And if the police do investigate, your private efforts have already done much of the groundwork — the tracing, the identification of the exchange, and the initial freeze request — which the police can build on.
The bottom line
Reporting crypto crime to police is essential — not just for criminal investigation, but for all recovery efforts. The police report serves as the legal foundation for freeze requests, court orders, and regulatory complaints. Without it, your recovery options are significantly limited. With it, you have a credible, documented basis for every legal action you pursue. File with the correct agency (FBI IC3 in the US, Action Fraud in the UK, BKA in Germany, FedPol in Switzerland), include detailed evidence (wallet addresses, transaction hashes, correspondence, forensic report), and follow up regularly. The quality of your report and the speed of your follow-up can make the difference between recovery and total loss. If the police do not investigate, pursue private recovery through freeze requests, civil legal action, and regulatory complaints. The combination of a well-filed police report and parallel private recovery efforts gives you the best chance of getting your funds back.
If you have been a victim of crypto fraud and need help filing a police report or pursuing recovery, contact us. We can prepare the evidence, identify the correct agency, and coordinate with law enforcement on your behalf. We can also pursue parallel private recovery through freeze requests, Norwich Pharmacal orders, and coordination with blockchain forensic firms — maximizing your chances of recovery regardless of whether the police investigate. Do not wait — every hour you delay is an hour the scammer has to move your funds further out of reach.