Important NOTE: Beware of the fake website finanzforensik.com — officially only under finanz-forensik.de. Registered at Hanau District Court, HRB 100521.

„Blockchain employee“ on the phone: Why this call is technically impossible

Victims of fraud repeatedly report receiving unexpected calls from alleged "blockchain employees." The callers claim that a balance, an old crypto account, or lost money has been found on a blockchain. They say the assets can now be paid out or recovered, but a fee, tax, or commission must be paid first.

Such statements sound technical and official. In reality, they are a significant warning sign. Because "the blockchain" is neither a company nor a government agency. Therefore, it doesn't employ anyone who could call investors. Anyone who hears this sentence has already grasped the most important finding of the conversation.

What is a blockchain and why there are no blockchain employees

Put simply, a blockchain is a digital ledger. This ledger stores information such as transactions in chronological order. Multiple interconnected computers have copies of this ledger and compare new entries according to predefined rules.

The term literally means "blockchain": New data records are grouped into blocks and linked to the existing blocks. This makes it difficult to subsequently change confirmed entries.

A good analogy is a shared digital cash book:

  • Many participants have a copy of the cash book.
  • New entries are reviewed and added according to specific rules.
  • Previous entries cannot be changed without the user noticing.
  • It is not absolutely necessary to have a single central authority to manage the register.


This means that a blockchain is a technical system, just like the internet or email. No one is an "internet employee." Likewise, there is no central blockchain company that manages all crypto assets, monitors transactions, or proactively contacts aggrieved investors.

Blockchains can be used, among other things, to document cryptocurrency transactions. However, blockchain and cryptocurrency are not the same thing. A blockchain is the underlying technology; Bitcoin and other cryptocurrencies are possible applications of this technology. We have outlined the methodological foundations for this in our whitepaper on blockchain. Blockchain forensics summarized.

Which companies actually exist and how to verify providers

Of course, there are real companies that offer services related to blockchains and cryptocurrencies: cryptocurrency exchanges, wallet providers, and analytics and forensics firms. However, their employees are employees of the respective company, not "the blockchain." A reputable provider will clearly identify itself and verify its identity through independently verifiable contact information and, if necessary, official authorization.

To make matters worse, some companies include the term in their company name, such as the wallet and exchange provider Blockchain.com. Criminals deliberately exploit this similarity, claiming to be calling "from Blockchain." However, legitimate providers never call customers unsolicited to withdraw funds and never ask for their blockchain. Seed phrase.

That company names are misused for such purposes is not just a theory. Our own name is also being used; see our Warning about finanzforensik.com. The mere claim of calling from „the blockchain“, a „blockchain headquarters“ or a „blockchain department“ therefore does not lend any credibility to a conversation.

Three technical facts that instantly expose a blockchain call

1. Credit balances belong to addresses, not names. On a public blockchain, crypto assets are assigned to an address. Only those who possess the corresponding private key can access them. There is no central register where a balance is "registered in your name" and from which someone could discover a forgotten account.

2. Confirmed transactions cannot be technically reversed. A chargeback like with a direct debit is not possible on the blockchain. Only with certain tokens, such as the stablecoins USDT and USDC, can the issuer block individual addresses. This occurs at the issuer's instigation or at the request of law enforcement agencies, never against a prepayment demanded over the phone. We will demonstrate how such blocks actually work using an example. frozen cryptocurrencies by Tether and Circle as well as in the whitepaper Freeze USDT.

3. No upfront payments are required to receive crypto assets. The network fee is paid by the sending party. Anyone who actually wants to transfer money to you does not need any money from you. Therefore, any demand for taxes, fees, insurance, or commissions before an alleged payout is grounds for exclusion.

How the blockchain call scam works

The perpetrators often already possess personal information. This can originate from a previous investment fraud, a data breach, or shared contact lists. Such lists of previous victims are traded within the scene. This makes the calls initially appear credible. We describe the role of professional structures in this in our white paper on... Anatomy of professional crypto scammers.

Callers often claim:

  • A crypto balance is registered in the name of the person concerned;
  • an old investment has now reached a high value;
  • Frozen Bitcoin or other crypto assets could be released;
  • Lost money was „found“ on a blockchain;
  • An authority, law firm or investigative body has approved the repayment;
  • Taxes, fees, insurance or commissions must be paid before the payout.


This is often a so-called recovery scam, a follow-up fraud. People who have already lost money are contacted again. The perpetrators promise to recover the lost assets but demand further payments. Police and consumer protection agencies explicitly warn against such alleged helpers, investigators, or lawyers. We have analyzed the network of providers behind these scams separately: Crypto Fraud Recovery Scam. Our white paper discusses the role that advertising platforms play in the reach of these offers. Liability of advertising platforms in recovery scams.

Warning signs in alleged blockchain employees

Special caution is advised if a caller:

  • makes contact unsolicited and introduces himself only as an employee of "the blockchain";
  • an unexpected credit or promises the recovery of previous losses;
  • Time pressure creates or calls for secrecy;
  • an advance payment demands for taxes, fees or commissions, requires payments in cryptocurrency, to unknown or foreign accounts, via voucher code or via a cash deposit at a crypto ATM;
  • a test or verification payment required to access a foreign wallet address;
  • Access data, TANs, passwords, copies of identification documents or requests wallet information, especially the seed or recovery phrase;
  • to connect your own wallet requests confirmation of a release via a website using a link sent to the user;
  • Remote maintenance software such as wanting to install AnyDesk or TeamViewer, or requiring the user to open online banking or a crypto wallet during the phone call.

The seed phrase is the master key to a crypto wallet. Whoever knows it can regularly access the crypto assets stored within. It must never be shared with third parties, not even for alleged "verification" or "recovery".

Even a displayed German phone number, a professional-looking website, official-looking documents, or knowledge of previous investments do not prove that the contact is legitimate. Phone numbers and identities can be faked, websites can be deceptively realistic, and personal data from previous fraud cases can be copied. Furthermore, authorities, courts, and banks never request payments in cryptocurrency or via voucher codes. Our structured initial assessment allows for this. Crypto Recovery Scam Check.

How you should react to such a call

End the conversation. Don't let yourself be pressured and don't discuss alleged credit balances.

Do not disclose any data. Do not disclose any bank, credit card, wallet or access details, and do not submit any identification documents.

Do not install anything. Never grant remote access to your computer, tablet, or smartphone.

Do not pay any money. Do not pay any alleged taxes, unlock fees, commissions, or security payments.

Verify identity independently. Do not use the caller's phone numbers, links, or contact details, and do not call back. Find the official information of the alleged company yourself, and for financial service providers, check the company database. BaFin.

Document contact. Note the phone number, name, time, content of the conversation, payment details, and internet addresses used. Save emails, chats, screenshots, and transaction receipts.

Report call. You can report misused telephone numbers to the Federal Network Agency; the Federal Financial Supervisory Authority (BaFin) accepts reports of unauthorized financial offers.

What to do if data has already been transmitted or payments have already been made

Act as quickly as possible:

  • Break off contact and do not make any further payments, even if a final fee is promised.
  • Immediately inform your bank, credit card company, or payment service provider. Ask if payments can be stopped, reversed, or accounts secured.
  • If you have sent crypto assets, save the transaction ID (TXID), recipient address, amount, and time. If the payment was made via a cryptocurrency exchange, inform their customer service or compliance department.
  • If remote maintenance software has been installed, disconnect the affected device from the internet and have it checked by a professional. Then change the login credentials from a secure device and, where possible, enable two-factor authentication.
  • If your wallet credentials or seed phrase have been compromised, seek professional help immediately to secure any remaining cryptocurrency. Typically, you will need to transfer your assets to a newly created wallet.
  • File a criminal complaint with the police or via the online police station of your state.
  • Secure all evidence. Do not delete any messages, phone numbers, emails, wallet addresses, or transaction data.
  • Be especially vigilant after the incident: Victims are often contacted again by alleged investigators, consumer protection agencies, law firms or recovery companies.


We have compiled information on which evidence is crucial for filing a criminal complaint and claiming reimbursement, which you can find at [link to list]. Prove crypto fraud. One risk is regularly underestimated in this situation: Anyone who subsequently forwards payments or provides accounts can themselves become involved in money laundering proceedings. We describe this scenario below. Fraud victims as unwitting money launderers.

Is it possible to recover lost crypto assets?

Transactions on public blockchains are traceable. Payment flows can be analyzed and often traced back to entry and withdrawal points such as cryptocurrency exchanges. This is the basis of any serious investigation, but it is not a technical chargeback.

What a Crypto forensics The service provides a reliable report on the flow of funds, which law firms and investigative authorities can use for further work, for example, when submitting a request for information or asset seizure to a stock exchange. Whether assets are ultimately secured is decided in criminal or civil proceedings and depends on the cooperation of the service providers and authorities involved. We describe the overall strategy below. Recover stolen cryptocurrencies, a practical example is shown in our Case report of a successfully thwarted recovery scam.

A reputable provider will fully name the company and its representatives, operate on the basis of a written contract, transparently disclose the chances of success and the associated costs, and will not offer any guarantees. Anyone who calls unsolicited, promises a secure recovery, and demands an advance payment, possibly in cryptocurrency to a private wallet address, is highly likely to be involved in fraud themselves. We also do not contact victims proactively.

What the call means for law firms, companies and those affected

For lawyers, the phone call is more than just a footnote. It often marks a second phase of the claim process with its own payment procedures, which must be documented separately and sometimes opens up new avenues for information and security requests. We describe how we support law firms in this process under [link/section name]. Financial Forensics for Lawyers; We provide support for investigative procedures under for prosecutors dar.

This scam is relevant for companies because it increasingly targets employees in finance and accounting functions. An overview of our analyses can be found in our [link to analysis]. Services. Private individuals who initially require a preliminary assessment can find what they need under our brand. Crypto Investigation the right entry point.

Conclusion: Technical jargon does not create credibility.

Blockchain is a technology, not an organization with employees or a central customer service department. Anyone calling unsolicited claiming to be a "blockchain employee" and promising a credit balance, a payout, or the recovery of lost funds should therefore be treated as highly suspicious.

Trustworthiness is not established through technical jargon, professional-looking documents, or knowledge of a previous fraud case. What matters is whether a specifically named company can be independently verified and whether it possesses the necessary permits. Never pay in advance, never disclose login credentials, and never allow remote access to your devices. If you would like to have a specific case assessed, Contact us.

FAQs about recovery scams after investment fraud

No. A blockchain is a technical system without a central organization, staff, or customer service. Employees only exist at specific companies such as stock exchanges, wallet providers, or research firms.

 

No. Crypto assets are assigned to addresses, not names. There is no central directory of names from which a forgotten account could be discovered.

The information often originates from previous investment fraud, data leaks, or traded contact lists of past victims. This explains the knowledge, but it does not prove the trustworthiness of the source.

No. The network fee is paid by the sending party. Any demand for tax, fee, insurance, or commission before payment is grounds for exclusion.

For certain tokens, such as USDT and USDC, the issuer can block addresses. This is done at the issuer's instigation or at the request of authorities, never in exchange for payment demanded over the phone.

It is the master key to the wallet. Whoever knows it can regularly access the crypto assets it contains. Even alleged verification or recovery does not justify sharing it.

No. Phone numbers and identities can be faked, and websites can be made deceptively realistic. What matters is the independent verification of the specifically named company.

Do not make any further payments, immediately inform your bank or payment service provider, secure the TXID, recipient address, amount and time, file a criminal complaint and keep all evidence unchanged.

No. Anyone contacted unsolicited under our name should verify this exclusively via the official contact details on finanz-forensik.de.

Further official information

Note: This article is for general information purposes only and does not constitute legal advice in individual cases. Finanz Forensik GmbH is a forensic service provider and not a law firm.

Picture of David Lüdtke
David Lüdtke
David Lüdtke is the managing director of Finanz Forensik GmbH and Krypto Investigation and a certified Crystal Expert (CECF, CEEI, CEUI) specializing in blockchain and financial forensics.

Table of contents

Questions on this topic?

Contact us for a personal consultation.

Official notice from Finanz Forensik GmbH

We expressly point out that the website finanzforensik.com [This company] has no business or legal connection to our company. You can officially reach us exclusively at [phone number/email address]. finanz-forensik.de.

We have already filed a criminal complaint and submitted the case to the relevant authorities. You can independently verify who we are at any time: Finanz Forensik GmbH is registered with the Hanau District Court under [number of names missing in original text]. HRB 100521 registered.

We provide you with the complete commercial register extract and our detailed documentation of the process here.