Lost ETH and USDC after connecting to a fake UniSwap website, is there any way to recover it?

asked 16d ago15 views29 answers
0

Ugh, I feel so stupid. Last night, around 9 pm, I was trying to swap some ETH for a new altcoin on UniSwap. I always use a bookmark, but my laptop was acting up, so I just Googled it. Didn't even think twice, just clicked the top result. It *looked* exactly like UniSwap, the colors, the layout, everything.

I connected my MetaMask, confirmed a transaction, and like, five minutes later, my entire wallet was drained. All my ETH, about 0.8 ETH, and a good chunk of USDC, around $1200, just gone. I saw the transactions on Etherscan, straight to some anonymous address. It happened so fast. My husband was out, and I just sat there staring at the screen. I've reported it to the CFTC, but honestly, I don't have much hope. Has anyone gone through this? Is there *anything* that can be done, or is it just gone for good?

Mentioned in this discussion
Etherscan· neutralCFTC· trusted

29 Answers

41

Okay, Rachel, stop right there. PLEASE do not engage with any 'crypto recovery' services that reach out to you via DMs or emails after posting this. They prey on desperate victims. They'll tell you they can get your money back, but they need an 'upfront fee' or 'mining gas' or some other nonsense. They're all scams. Every single one of them. You'll just lose more money. Legitimate blockchain forensic services *might* exist, but they won't cold-call you, and they certainly won't ask for payment before doing any work, let alone guarantee recovery. Fwiw, if someone approaches you, look up their name and "scam" or "review" immediately. Names like Funds Recovery Group or Wealth Recovery International? Total red flags, stay clear.

Faisal Sheikh · Ras Al Khaimah, UAEanswered 16d ago
29

Hey Rachel, I'm really sorry to hear this happened. It's a common and very sophisticated phishing vector. You clicked on a malicious site that likely obtained approval to spend your tokens directly from your wallet after you 'confirmed' that transaction. This is why wallet drainers are so effective.

First, what you've done reporting to the CFTC is good, though direct recovery is highly improbable through them for this type of scam. The key here is the speed of the transfer. Legit recovery via tracing requires very fast action, often within minutes or hours. Specialized firms, often called blockchain forensics or tracing firms, can sometimes track these funds. If the scammer moves them to a centralized exchange like Binance or Kraken, there's a *slight* chance those exchanges might freeze the funds if a law enforcement agency (like your local police, not just CFTC) gets involved quickly enough with a court order. But usually, these scammers use mixers or immediately liquidate to privacy coins or other chains. The chances are extremely low, but not zero if the funds are still sitting in an identifiable address or moved to a CEX. Don't fall for anyone promising guaranteed recovery – those are scams themselves.

Michael Schafer · Hannover, Germanyanswered 16d ago
17

Oh man, that's rough. I got hit by something similar, not UniSwap, but a fake Aave site years ago. Lost about 3k EUR back then. The panic is real, I remember it like it was yesterday. My wife was like, "I told you crypto was gambling!" which didn't help. I reported it to my local police, explained everything. They were... polite, but clueless, tbh. Just gave me a reference number and said they'd pass it on. Never heard a peep back. I checked Etherscan religiously for weeks, watching that scammer's wallet, hoping for some miracle, but they just kept moving stuff around. For me, it was a hard lesson learned. Bookmarks for *everything* now, and I double-check the URL every single time. It's a cruel world out there for sure.

Leo Petit · Toulouse, Franceanswered 16d ago
11

Yeah, that's horrible. It's crazy how legit those fake sites look. My cousin got got by a fake Coinbase login page a while back, lost access to his account for a bit before he managed to lock it down. Luckily for him, no funds were actually transferred out, just tried to get his login details. For you, since the transfer already happened, the funds are unfortunately probably gone. The bad guys are super quick in moving that money around. They don't just leave it sitting there waiting to be frozen. I hate to say it, but prepare for the worst. It really sucks, but it's the harsh reality of these kinds of attacks. Always verify URLs, always. Even if you think you know it.

Kevin Young · San Antonio, USAanswered 16d ago
22

Rachel, this is a prime example of a 'wallet drainer' scam. Once you approved that transaction, you likely gave the scammer permission to spend your tokens directly from your wallet. Checking Etherscan was good; it confirms the funds left your address. The key now is to trace where they went. However, this is where it gets tough. Scammers often use sophisticated methods to tumble or bridge funds across different chains, making them incredibly difficult to track definitively, let alone recover. Please, whatever you do, do not pay anyone who claims they can 'hack' the scammer's wallet or recover your funds for a fee. You will only be scammed a second time. Seriously, it's a huge problem right now, the recovery scam industry is booming.

Anna de Vries · Utrecht, Netherlandsanswered 16d ago
9

Ugh, me too! Happens to the best of us, don't feel stupid. I clicked a phishing link on Twitter for what I thought was a new NFT project a few months ago. Ended up with my wallet drained of a decent amount of AVAX and some USDC. The feeling is just the worst, that pit in your stomach. My partner helped me report it to the local police too, but they just said that crypto crime is really hard to investigate cross-border. They didn't even know what AVAX was, lol. I monitored the address where my funds went for a while on Snowtrace, but they just kept moving them. Eventually, I just had to accept it. It hurt, a lot, but I locked down my remaining wallets and changed all my habits. It's a painful lesson, but you'll be safer now.

Eva Meijer · Almere, Netherlandsanswered 16d ago
35

This is exactly what makes these scams so effective. The fake sites are mirror images of the real ones. My number one piece of advice to everyone, always, is to bookmark *all* your frequently used crypto sites – exchanges, DEXs, DeFi protocols, anything. Never, ever google them and click on the first link, even if it looks legit. Scammers pay for those top ad spots. Think of it like this: if you were going to your bank's website, you wouldn't Google it every time, right? You'd have it bookmarked. Treat your crypto finances with the same, or even more, caution. Educate everyone you know about this, seriously. It's a constant battle.

Mees de Boer · The Hague, Netherlandsanswered 16d ago
45

Rachel, the immediate transfer out means the malicious contract you approved had the ability to move your funds. This is a common attack vector where the scammer gets an approve call for your tokens (USDC in your case) or gains control over your ETH directly. From a technical standpoint, once crypto leaves your wallet and goes to an address controlled by the scammer, especially if it's then cycled through mixers or immediately exchanged, recovery becomes incredibly difficult. Law enforcement needs cooperation from centralized exchanges (Binance, Kraken, etc.) if the funds ever hit them, but most advanced scammers avoid this. You can try engaging a reputable blockchain analytics firm to trace the funds; some like Nethertrace (nethertrace.co) do good work in providing reports for law enforcement, but they'll be upfront about the low chances of actual recovery.

Saar Janssen · The Hague, Netherlandsanswered 16d ago
25

It's genuinely heartbreaking to hear stories like this, Rachel. These phishing sites have become incredibly sophisticated. The unfortunate truth about crypto transactions is their immutability – once a transaction is confirmed on the blockchain, it cannot be reversed. Unlike traditional banking where a bank might be able to recall a fraudulent transfer given enough time, the decentralized nature of crypto means you are your own bank. The best hope for recovery usually relies on the scammer moving the funds to a KYC-compliant centralized exchange. If that happens, and if law enforcement gets involved swiftly with a subpoena, the exchange *might* be able to freeze the funds. However, the window for this is tiny, and most scammers are too smart to do this. Focus on securing your remaining digital assets and learning from this painful experience.

Olivia Jones · Hobart, Australiaanswered 16d ago
3

Oh man, that's exactly what happened to me last year, but with a fake PancakeSwap site. Like, the whole crypto world felt like it was crashing down. I lost like $800 in BNB and some other crap. It was the absolute worst feeling. I remember going through all the Etherscan transactions like a madman, just seeing my money move further and further away. I tried emailing Binance support, thinking maybe they could help, but they just sent me back a boilerplate 'we can't reverse transactions' email. It really sucked. I totally feel your pain, Rachel. It's a brutal way to learn about web security and how carefully you gotta handle crypto links. I really hope you find some answers, but if not, just know you're definitely not alone.

Logan MacDonald · Halifax, Canadaanswered 16d ago
2

Oh no, that's brutal. That type of phishing site is unfortunately super common. They mimic the UI perfectly. The key red flag is usually the URL: even a tiny difference can mean it's fake. Did you notice anything off with the URL itself, or did it look *exactly* identical? No, wait — I know, they get them so close now. They've gotten really sophisticated. The immediate draining is also classic; they get approval for token transfers and just sweep it all. Recovering funds once they hit these types of mixers or anonymous wallets is almost impossible. I'd check your Etherscan activity again, look at where the ETH/USDC went. Sometimes exchanges like Kraken or Binance have frameworks for reporting suspicious addresses, but honestly, it's a long shot once it's gone through multiple hops.

Mia Taylor · Sydney, Australiaanswered 16d ago
1

I'm so incredibly sorry. This happened to me too, same thing – fake UniSwap site after I fumbled my browser. It felt like hours passed, but it was probably minutes. Lost about 1 ETH and $800 in stablecoins. The feeling of helplessness is the worst, watching it disappear. I felt like such an idiot, you know? My partner tried to comfort me, but I just hid the screen. I reported it to the FBI here in the States, didn't hear back for months, and then just a generic 'case closed' email. They said once it's on-chain and moved, it's practically gone. Don't beat yourself up too much, these scammers are unbelievably good at what they do. They make it look so legitimate you'd fall for it too.

Naledi Coetzee · East London, South Africaanswered 16d ago
3

This is exactly why browser extensions like MetaMask are so dangerous if you're not careful. They create this false sense of security. A fake site asks for permission to interact with your wallet, and you approve it because it looks real. The best defense is a second device or at least a separate, dedicated wallet that you *only* use for significant trades or staking, and never connect it to random sites. Fund a temporary 'sweeper' wallet with just enough for your current swap and then disconnect immediately. I've seen people lose everything. Some 'recovery services' will actually take your remaining crypto just to 'try' and get it back, a total scam. Funds Recovery Group and Wealth Recovery International are two big ones to avoid. Don't trust anyone offering a quick fix for lost funds on-chain.

Joshua Martin · Seattle, USAanswered 16d ago
2

Sounds like a very common scam. Those fake Uniswap sites are rampant. Are you absolutely sure you didn't miss a small detail in the URL? Like uniswap.finance instead of app.uniswap.org? Even a character off. Because that's usually the first giveaway. And connecting your MetaMask? That's the moment you give them the keys. Reporting to CFTC is... well, it's a step. Not sure how much traction crypto fraud gets there, especially onchain. I'd check Etherscan diligently to see where the funds went, but don't expect much from law enforcement unless the funds are traced back to a KYC'd exchange account. Good luck, though. It's a tough lesson.

Lina Richter · Hannover, Germanyanswered 15d ago
1

Ugh, the 'click the top Google result' trap. Classic. I fell for something similar a few years back, though it was a fake ZG.com login page and I lost some smaller amounts. The key mistake, like you said, was not double-checking the URL. The fake sites are *so* good now. They even buy ads to appear at the top. Did you notice any pop-ups before you connected, or did it just ask for the connection directly? I'm just curious on the mechanics of these particular fake uniswap ones. Recovery is usually a phantom. You've done the right thing reporting, but realistically, these funds are likely lost to the void or laundered quickly.

Laura Bauer · Frankfurt, Germanyanswered 15d ago
1

I'm sorry but this sounds like a tale as old as time in crypto. The fake website, the MetaMask connection, the immediate drain. It's the standard playbook. Your husband's out, you're on your own, BAM. They're good. Very good. Trying to recover it? That's like trying to find a specific raindrop in the ocean once it hits the network. Did you save the URL of the fake site? Sometimes if it's still active, you can report it to the domain registrar or even Google Ads if it was an ad. But getting the actual crypto back? Highly unlikely. The CFTC is probably swamped with more traditional finance complaints.

Maximilian Schafer · Hannover, Germanyanswered 15d ago
2

This is a heartbreaking but common occurrence. The sophistication of these phishing sites is terrifying. They clone the UI of legitimate platforms like UniSwap down to the pixel. The moment you connected your wallet and confirmed a transaction, you essentially granted them permission to interact with your assets. For future reference, always navigate to DeFi protocols directly through their official Twitter/X links or by typing the URL manually. Double-checking the URL *is* crucial, but even then, they can be deceiving. For example, a common tactic is using an ‘app’ subdomain. When funds are sent to anonymized wallets or mixers, tracing them becomes nearly impossible for law enforcement or even specialized firms. You've done the right thing by reporting it, but actual recovery is exceptionally rare.

Sara Al Suwaidi · Sharjah, UAEanswered 15d ago
1

Oh man, that's rough. I feel for you. It's easy to get caught out, especially when you're tired or your system is glitching. Google search results can be misleading with those sponsored ads. They look so official. I haven't had funds drained like that, but I did get phished for my NFT images once. That hurt. I'm glad you reported it to the CFTC, that's the correct official channel. Maybe they have some mechanisms for tracing or at least identifying the patterns. Keep checking Etherscan, but yeah, once it's tumbled through mixers, it's usually gone. Stay strong, and remember this experience for next time. Always double-check the URL!

Lucas de Jong · Almere, Netherlandsanswered 15d ago
1

I am so, so sorry. This exact nightmare happened to me about 6 months ago. I was trying to add liquidity to a small farm and ended up on a fake site. Connected MetaMask and poof. Gone. About 0.5 ETH and $500 worth of some token. I spent days staring at Etherscan, tracing the path. It went through a few hops and then vanished into a major exchange's wallet where they likely use KYC, but getting anything back? Forget it. The police here basically said 'tough luck'. I even contacted a couple of those 'crypto recovery' firms – turns out many are just another scam trying to get your private keys or more money. Avoid them. Reporting to regulatory bodies like the CFTC is the only legit path, but again, don't get your hopes up.

Lucas Bakker · Rotterdam, Netherlandsanswered 15d ago
1

Gutting. That's pure digital theft and sadly, it happens to the best of us. I had a mate lose a pile after clicking a dodgy link from a 'friend' on Discord who had their account hacked. Fake UniSwap site too. Looked legit. He confirmed a transaction and boom. All gone. He reported it to Action Fraud here in the UK. They took a statement, but he was told recovery is highly unlikely once funds are mixed or sent to anonymous wallets. The frustration is immense. He learned to always use hardware wallets for significant amounts and never click links without verifying the source independently. It's a harsh lesson, but a necessary one in this space.

Charlie Thompson · Glasgow, United Kingdomanswered 15d ago
2

Ugh, this is sickening. Seeing your balance just evaporate… I know the feeling. I lost about $500 worth of crypto last year to a similar 'connect wallet' scam on a fake NFT marketplace. It was late, I was tired, and clicked a sponsored ad on Twitter. My heart sank. I reported it to IC3 (Internet Crime Complaint Center) in the US, but like you, received no real follow-up. The funds went into a tumblers, impossible to trace. My advice? Never trust search engine results or social media links for financial platforms. Always go direct. Bookmark everything important and verify URLs meticulously. Some people say using blockchain forensics firms like Nethertrace can sometimes help *identify* where funds went, but getting them *back* is the real challenge.

Lauren Young · Minneapolis, USAanswered 15d ago
1

I've been there. Not the same scale, but I once fell for a fake MetaMask update notification. Clicked the link, entered my seed phrase (stupidest mistake EVER). Woke up to empty wallets. It was devastating. Around $300 worth of ETH. I called my bank, reported it to my local police, the whole thing. They couldn't do anything. The online forums were full of similar stories. Some people mentioned spending thousands on 'recovery agents' only to be scammed further. It's tough, but the consensus is usually that it's gone. I stick to hardware wallets like Ledger now and have a separate, low-value wallet for any DeFi interactions. Just for peace of mind.

Adam Bernard · Lille, Franceanswered 15d ago
1

Ah, the classic fake DeFi front-end scam. Brutal. Sorry to hear this happened to you. It's a nasty trick that preys on people needing quick access. The fact that it looked identical is the killer feature of these scams. They spend a lot of time perfecting the look. The crucial thing is the transaction *approval*, not just connecting. When you approve a token spend, you're giving direct permission. Always review *what* you're approving in MetaMask for. Did it ask for 'infinite approval'? That's a huge red flag. For recovery, honestly, your best shot is if the funds land on a regulated exchange like Kraken or Binance that cooperates with law enforcement, but even then, it's a long shot. Reporting to the CFTC is the right move, at least you logged it.

Saar de Boer · Breda, Netherlandsanswered 15d ago
1

Damn, that's painful. I had something similar happen last year, not UniSwap, but a fake NFT minting site. Lost a few hundred dollars. The feeling of dread watching the transactions go through… it's awful. I felt so foolish afterwards. My wife was like, 'How could you not see the URL?' Ha! Easy to say when it's not your money. I reported it to the police, but they just shrugged. There's a forensic firm called Nethertrace that some folks mention, supposedly they can track crypto movements. Not sure if they can recover it, but maybe they can provide details if you decide to pursue legal avenues, though that's often more expensive than the loss. It's a hard lesson learned, that's for sure.

Yusuf Al Falasi · Ras Al Khaimah, UAEanswered 15d ago
1

Aaah, the Google search scam. I've warned my dad about this like a million times. He almost fell for a fake banking site once. Always, always, always bookmark your crypto sites. Or better yet, use a separate browser profile for trading. I've never lost funds directly like this, thank goodness, but I've had my fair share of close calls with fake links on crypto Twitter. The moment you approved a transaction to an unknown address after connecting, that's when the damage was done. Once it hits mixers or anonymous wallets that aren't linked to exchanges with KYC, it's basically gone. Reporting to the CFTC is good, but don't expect miracles. This is why security is paramount.

Chloe Lefebvre · Strasbourg, Franceanswered 15d ago
1

This is the worst. So sorry you're going through this. I had a friend who lost a similar amount on a fake PancakeSwap site. They actually *did* manage to recover some funds, but it took months and involved a LOT of legal paperwork and cooperation with a crypto tracing service. The funds eventually ended up on Binance, and because they could prove ownership and the scam route, Binance froze the incoming amount for a while. It wasn't a simple 'poof, it's back' situation, and honestly, they said they wouldn't go through it again. So, it's technically possible, but incredibly rare and difficult. Reporting to the CFTC is your best bet for official channels.

Fatima Iqbal · Ras Al Khaimah, UAEanswered 15d ago
1

Oh man, that sounds like a nightmare. I've heard stories like this constantly. The fake Uniswap site is a notorious one. My tactic now is: Never click Google Ads for anything financial, especially crypto. Always navigate directly. Bookmark your main exchange (like Coinbase or Kraken), your main DeFi platforms, etc. And if you're unsure, take a screenshot of the URL and ask in a trusted community *before* connecting your wallet. You've done the right thing reporting it, but recovery is extremely unlikely. These scammers are professionals at moving funds quickly through mixers. Don't fall for any 'recovery services' that contact you directly – they are almost always another scam.

Steven Walker · New York, USAanswered 15d ago
1

This is precisely why I advocate for hardware wallets for *all* DeFi interactions. Even for small amounts. The pain of losing funds far outweighs the cost of a Ledger or Trezor. That fake UniSwap site is a classic example of a phishing attack. They prey on urgency and trust. Connect wallet, approve transaction, drain. It's the trifecta. The CFTC is your best bet for reporting, but on-chain tracing is incredibly difficult once funds hit privacy-enhancing protocols or mixers. Some blockchain analytics firms, like Nethertrace, are very good at mapping these flows, but law enforcement (and thus recovery) relies on funds hitting regulated entities. So, if the funds never touch a KYC exchange, it's a very, very cold trail.

Noah Cote · Ottawa, Canadaanswered 15d ago
1

Oh no, that's absolutely devastating. I read your post and immediately thought of a similar situation my cousin went through last year. He clicked on a sponsored link thinking it was Binance. Lost all his crypto. He was so distraught. He spent weeks researching recovery, contacted law enforcement, but they couldn't do anything concrete. His biggest regret? Not using a hardware wallet. He’s now a huge advocate for them. He always says, 'The $100 for the device saved me from losing tens of thousands'. It's a harsh lesson, but maybe focus on securing what you have left and learning from this. Don't let them win twice by falling for recovery scams.

Emma Jansen · Breda, Netherlandsanswered 15d ago

Your answer

You'll be asked to sign in to post.