How to respond after a Bitcoin doubling scam

What to do first

• Do not send another payment under any circumstances, even if the scammer promises to release the first amount.
• Capture the original message, social post, livestream, website, or wallet address that promoted the scam.
• Record the exact TXID and timestamp of the Bitcoin you sent.
• If the scam involved impersonation, preserve the profile, handle, and platform used.

Evidence to collect

• The transaction hash, source wallet, destination wallet, amount, and approximate date and time.
• Messages, screenshots, profile names, fake endorsements, and any URL used in the scam.
• Notes on whether you found the scam through YouTube, X, Telegram, Discord, or another channel.
• A short explanation of any follow-up communications after the payment.

Why tracing matters

Even when recovery is uncertain, tracing can show whether the funds moved through services, clustered wallets, or repeated scam infrastructure associated with other incidents.

• Follow the initial movement away from the scam address.
• Look for splits, consolidations, or service deposits.
• Preserve the sequence in a report that supports later escalation.

Frequently asked questions

Can an exchange help?

If traced funds reach an identifiable exchange, a structured evidence package may help support a formal request. That depends on timing and policy.

Why is BTC tracing difficult?

Bitcoin is pseudonymous. The challenge is linking observed movements to identifiable services or entities.

What does a forensic report do?

It turns wallet activity, timelines, and patterns into a format that can be reviewed and acted on.