Lost my crypto after a 'customer support' remote access scam, can it be recovered?
I'm feeling so stupid right now. I got an email, looked super legitimate, saying there was a 'security issue' with my ZG.com account and I needed to verify my identity. I clicked the link, logged in, and then a live chat popped up. The person on the chat said they needed to remote into my computer to fix something — a 'network syncing issue' or something. Genuinely, I thought it was real. They told me to install TeamViewer. I did. They then spent about 20 minutes clicking around, opened my Kraken tab, and asked me to log in there too, saying it was part of the 'verification'. Next thing I know, my BTC and ETH from both ZG.com and Kraken are GONE. Just vanished. This happened yesterday evening. I immediately changed passwords, disconnected TeamViewer, and reported it to Kraken, but they just said 'we'll investigate' which sounds like nothing will happen. Is there any hope at all, or am i just out of luck forever?
26 Answers
Okay, so this is a double whammy: ZG.com is well-known as a scam site, particularly in romance scam circles. Any crypto you 'had' there was never truly yours, or was already lost. The Kraken part is the real damage. Unfortunately, by granting remote access and then logging into Kraken, you essentially gave them direct access to your funds. Kraken's security measures are good, but they can't protect you if you willingly (even if unknowingly) hand over control. The chances of recovery are slim to none once the crypto leaves the exchange. They move it fast, through mixers, or to other untraceable wallets. Be very wary of anyone contacting you now claiming they can recover it for a fee; those are recovery scammers trying to hit you again.
Oh là là, this is a classic social engineering attack, and it's devastating because it preys on trust and urgency. First, it sounds like ZG.com isn't a legitimate exchange, so anything you had there was likely already compromised or non-existent in a real sense. The real blow here is Kraken. Once you grant remote access and log into your legitimate exchange, it's like handing the keys to your front door to a thief. They could bypass 2FA if you entered a code while they were watching, or even change recovery options directly. On-chain analysis by firms like Chainalysis or TRM Labs can often trace where the funds went from Kraken. If they landed on another centralized exchange, law enforcement could potentially issue a subpoena and try to freeze accounts. However, this is a long shot and requires official police reports in both your jurisdiction (The Hague) and potentially the jurisdiction of the exchange where funds landed. It's not a quick fix, and often these scammers move funds very fast. Make sure you reported it to the Dutch police too, not just Kraken.
Ugh, feel for you, mate. The same thing almost happened to me, but it was with a fake *bank* email. They wanted me to download 'security software' (obvs a remote access tool). My missus walked in and asked what I was doing and I just got a weird feeling and closed it immediately. So glad I did. Once they're in, and you log in to actual legit stuff like Kraken, it's like game over. They've watched you type your password, they've got your 2FA, everything. Definitely report it to the Gardai (Irish police) and any other financial fraud units in NL. Kraken might have some internal policies but honestly, getting crypto back once it's off the exchange and into a scammer's own wallet is incredibly difficult. Most likely scenario is the crypto is gone. I'm so sorry.
This remote access thing is so insidious. It really preys on people's trust and the anxiety about losing money. The moment you install TeamViewer and they start clicking around... that's the red flag. Any legitimate financial institution, or even crypto exchange like Kraken, will *never* ask you to install remote access software or share your screen for 'security reasons'. Never. Their support will guide you, but they'll never take over your computer. It's a hard lesson, but this is why you always, always question these requests. For ZG.com, yeah, that was likely gone already. For Kraken, it's very difficult now. Report to police, but manage expectations.
I seriously hope you didn't have any banking apps or other financial info saved/logged in on that same computer from where you gave them remote access. They would have had free rein to install keyloggers or grab any saved credentials. IMMEDIATELY check all your other financial accounts – banks, credit cards, PayPal, other exchanges – for any suspicious activity. Change ALL your passwords, especially for your email (which they might have gained access to via your browser if you were logged in). Enable 2FA on *everything*. And yes, as others said, customer support doesn't do remote access like that. It's a huge warning sign. I know it sucks, but the money is likely gone. Focus on securing *everything else* you have.
I'm so sorry this happened to you, Tess. It takes a lot of courage to share your story, especially when feeling vulnerable. It's crucial to understand that these scammers are incredibly sophisticated in their methods, using fear and urgency to manipulate people. Don't blame yourself. The information shared by Lina and Amelia about ZG.com is important; that exchange itself is often used in scams. For Kraken, while it's a legitimate platform, once you've granted remote access like that, the chances of recovering the funds are unfortunately very low. The most important step now, as others have said, is to secure all your other digital assets and report the crime to your local law enforcement. Document everything – screenshots, emails, transaction IDs. Sometimes, if the funds land on another regulated exchange, law enforcement working with blockchain analytics firms can pursue it, but it requires official action.
This whole 'customer support' remote access thing is a massive red flag. Always, ALWAYS manually navigate to the official website of any exchange or service you're dealing with. Never click links from emails, even if they look legitimate. I know it's hard when you're caught off guard, but that's how these people get you. They create fake sites that look identical. And the moment they ask you to install ANY software or give them control of your computer... just disconnect. No reputable company operates like that. Your funds on ZG.com were probably gone from the start, and the Kraken funds are likely unrecoverable. It's a harsh truth but important to face. Use this as a very expensive lesson to be hyper-vigilant online.
Ach, this is terrible. I really feel for you. The emotional toll of these scams can be immense. For anyone reading this: this is a classic technique. The email looks real, the chat feels urgent, and they push for remote access. This gives them full control. They might be setting up fake screens, recording your inputs, or just directly moving funds. For the Kraken part, there's a slim chance if Kraken itself can freeze the recipient account (if it's still on their platform), but typically funds are moved off very quickly. Contact the Dutch Autoriteit Financiële Markten (AFM) or their police fraud unit; they might have units specialised in cybercrime. Don't expect miracles, but you must report it.
Ugh, this happened to me earlier this year, not crypto though, it was my bank account. They called me, sounded so convincing, said there was suspicious activity. Convinced me to install AnyDesk. While they were 'fixing' it, they moved money out of my account. I was just frozen, I just watched it happen. It's such a violating feeling. I reported it to my bank and the police, but they said because I gave access, it was effectively like me authorising the transaction. Got nothing back. For crypto, it's even harder because it's so decentralized. I'm afraid your Kraken funds are probably gone, same as my bank money.
Tess, I am truly sorry this has happened to you. This kind of attack is psychologically sophisticated and it's easy to fall victim when you're under pressure. It preys on basic human trust. Beyond securing your other accounts, consider reaching out to victim support groups. Often, sharing your experience and hearing from others can be surprisingly therapeutic. While the financial recovery odds are low for the Kraken funds and non-existent for ZG.com, healing from the emotional impact is just as important. Learn from this, fortify your digital security, and try not to dwell on the 'stupid' feeling – these scammers are professionals. You were victimized, not stupid.
Ah mate, this is a textbook remote access scam designed for crypto. The ZG.com email was fake – likely a phishing page that mimicked the real site to steal your login. Once they had that, and your trust via the TeamViewer session, they just moved your funds. Kraken's response is standard, unfortunately. Recovery is damn near impossible once funds are moved off-exchange and mixed. Keep reporting it to the FBI IC3, though. Every report helps build data, even if it doesn't get your money back directly.
I feel this so hard. Lost a chunk of ETH and some altcoins last year to a similar 'tech support' nonsense. They got me with a fake Ledger update prompt. Ended up giving them temporary access. My spouse was so mad, said I should have known better. I pretty much accepted it as gone. Just… do yourself a favour and *never* grant remote access to anyone, no matter how official they seem. Seriously. It’s the biggest red flag. My bank, my exchange, my crypto people – nobody ever needs remote access. Nobody.
Wait, you 'thought it was real'? Seriously? A 'security issue' email leading to remote access for a crypto account? Come on. Exchanges don't operate like that. If there was a real issue, they'd lock your account or ask you to log in through their official app, not demand remote desktop access. Sounds like you got played, and the money's gone. Best you can do is change all your passwords and enable 2FA everywhere like you already did. And maybe… learn from this.
This is so common now. Those emails are crafted to look perfectly legit. The chat support acting like they're helping? Standard social engineering. They prey on urgency and fear. Once they have your exchange logins and screen control, your crypto is as good as cash in their wallet. Please, everyone reading this: legitimate customer support *never* asks for remote access. If anyone ever suggests it, hang up, close the chat, block them. Report it to the FTC as well. They collect scam reports and can identify patterns.
Oh no! This exact scenario has been going around for months. It's a trap to get your exchange login credentials. They pose as support, then use remote access to move your funds. The problem is, once the crypto is sent from Kraken to another wallet, it's extremely difficult to trace and recover, especially if they use mixers. You did the right thing by reporting it, but don't expect much. Lesson learned: never trust unsolicited contact regarding your crypto. Always go directly to the official website or app yourself.
I'm so sorry this happened. It's a horrible feeling. My uncle nearly fell for something similar last month, but I managed to catch him. He got a call about 'unusual activity' on his Binance account. They wanted him to log in and confirm something. Thankfully, I was visiting and heard them ask him to verify his password out loud. Big red flag. I told him they should never ask for that. He hung up immediately. It's terrifying how sophisticated these scams are getting. The easiest way to check if a support request is real is to ask them to send you an official email, never interact directly after a cold contact.
This is a classic scenario. The attackers use a phishing email to harvest your ZG.com credentials. The live chat and TeamViewer were designed to escalate trust and get you to reveal your Kraken login. Once they have access to both your exchange accounts and your browser session, they can initiate withdrawals. The funds are likely already converted to Monero or other privacy coins and laundered through mixers. While TRM Labs or Chainalysis can track on-chain movements, recovery is dependent on exchanges cooperating and funds not being laundered beyond recognition, which is highly unlikely here. Filing with the FBI IC3 is your best bet for official reporting, but don't hold your breath for recovery.
Ugh, I had something eerily similar happen last year. Not with crypto, thank goodness, but with my online banking. Got a call, supposedly from my bank's fraud department, saying my card was compromised. They walked me through 'securing my account' which involved installing some app and giving them codes. Lost about $500 AUD and nearly my sanity. My husband literally dragged me to the police station afterwards. They took a report, but yeah, the money was effectively gone. I learned that the hard way: if they ask you to install *anything* or give them codes/passwords over the phone/chat, it's a scam. Full stop.
This is brutal. People fall for this because the scammers are good at creating urgency and a sense of legitimacy. The fake ZG.com email and the 'live chat' pretending to fix things are classic tactics. They're not going to recover your funds. The crypto is probably already moved through several wallets and laundered. Your only real option now is to report it to the FBI IC3. They sometimes work with exchanges, but honestly, the chances of getting it back are slim to none once it's off those platforms. Focus on securing your other accounts and learning from this painful experience.
Honestly, I'm not surprised. These 'customer support' scams are rampant lately. They create fake emails, fake websites, and then use social engineering to get you to install remote access software. It's the oldest trick in the book, just updated for crypto. You logged into your Kraken *while they were connected*? That's like letting a fox into the henhouse. Look, recovery is going to be incredibly difficult, if not impossible. Your best bet is to report it to the FBI IC3, but don't get your hopes up.
I'm so sorry you went through this. It's a soul-crushing experience. I lost South African Rand, not crypto, to a similar scam a few years back. They posed as SARS (our tax authority) demanding 'outstanding payments'. I was so stressed and scared I paid them. Later realised it was fake. They got me because I didn't verify the payment reference number independently. Learned to always double-check official sources directly. For crypto, it's even harder because it moves so fast. Reporting to the FBI IC3 is the right step, but unfortunately, once it hits mixers, it's gone.
Oh man, that sucks. I had a very similar close call last year. Got an email saying my Binance account was compromised. It looked legit, even had my name. Clicked the link, went to a fake login page. My partner walked in at that exact moment and saw my screen. He immediately yelled, 'That's not Binance's URL!' Turns out the website address was slightly different. We slammed the laptop shut. They almost got me. It’s scary how real these look. Always, always check the URL in the address bar *very* carefully before logging in anywhere.
This is so painful to read. That scam is unfortunately super common. They fish for your exchange logins, then use remote desktop tools to drain your account. Because crypto is decentralized and moves fast, recovery is really tough once it leaves Kraken. The scammers likely send it to a mixing service to obscure the trail. You absolutely should report this to the FBI IC3. They collect these reports and sometimes, with cooperation from exchanges, can track funds. But honestly, prepare yourself for the worst. Don't share personal info or grant remote access to ANYONE, no matter what.
Oh no, that's awful! I'm so sorry. It's infuriating how these scammers operate. The fact that they used a known platform like ZG.com and then directed you to Kraken makes it seem so plausible. Please know you're not stupid; they are highly skilled criminals. You did the right things by reporting it and changing passwords immediately. Keep all that info, and definitely report it to the FBI IC3. It really is the central place for cybercrime reports in the US, and they can sometimes track the flow, though it's difficult with crypto. Sending you good thoughts.
This makes me sick. This type of scam is designed to prey on people's trust and fear. That email from ZG.com was fake. The live chat person? Also fake. TeamViewer? Exactly what they needed. Once they have remote access and your login details, your crypto is gone in seconds. They then send it through mixers and P2P trades to make it untraceable. The FBI IC3 is the correct place to report this, but realistically, the chances of recovering funds are very, very slim. What you *can* do is take this as a harsh lesson: legitimate companies will NEVER ask for remote access or demand you install software to 'fix' an issue. Never.
I've seen this happen to friends. It’s devastating. The fake email, the urgent tone, the 'live support' directing you to install software like TeamViewer... it’s all designed to trick you into giving them the keys to your kingdom. Once they have access to your Kraken account through your browser, they can initiate transfers. The crypto is likely already converted and sent through multiple wallets, possibly using mixers to launder it. Your best bet is to file a report with the FBI IC3. They are the primary agency for this kind of thing. Keep copies of all emails and chat logs. It's a long shot, but it's your only shot.

