Secondary Scams Targeting Fraud Victims on the Rise: Fraudsters Use Fake Recovery Services to Steal More

Scammers in Vietnam are increasingly targeting fraud victims with secondary scams. They monitor social media groups where victims seek recovery assistance, then pose as cybersecurity experts or lawyers promising 100% fund recovery. After gaining trust, they request sensitive information like OTP codes and private keys to hijack accounts and steal remaining assets.

How This Scam Works

Recently, Vietnamese authorities have identified a growing secondary scam targeting those who have already fallen victim to fraud. Scammers exploit victims' anxiety and desperate desire to recover lost funds to perpetrate additional attacks.

The Scam Process

1. Identifying Victims Scammers monitor social media groups on Facebook and Telegram containing posts related to fraud warnings and recovery assistance. They use these posts to identify fraud victims.

2. Building Trust Scammers initiate private messages with victims, claiming to be "cybersecurity experts," "international lawyers," or "exchange platform technicians." They promise they can track funds and guarantee 100% recovery. Some even provide fake documents and images to increase credibility.

3. Requesting Sensitive Information Once trust is established, scammers request victims provide:

OTP codes (one-time passwords)
Digital wallet passwords
Private keys
Seed phrases
Installation of remote access software like AnyDesk or TeamViewer

They justify these requests as "technical support."

4. Account Takeover and Asset Theft With access gained, scammers quickly steal all remaining assets. Alternatively, they may request additional transfers using excuses like "processing fees," "recovery fees," or "tax refunds." Once their goal is achieved, they immediately cut contact.

Warning Signs to Recognize

Unknown accounts suddenly offer assistance in recovering funds
Requests for upfront fees before recovery begins
Demands for sensitive information like OTP codes or wallet secrets
Pressure to install remote access software
Promises of "quick recovery" or "100% refund guarantee"

How to Protect Yourself

Never Share Sensitive Information Never provide OTP codes, bank account details, private keys, or seed phrases to any individual or unverified organization.
Do Not Install Unknown Applications Do not install remote access software or other applications at the instruction of people with unknown identities.
Contact Official Channels Only When seeking assistance with fund recovery or technical issues, contact your bank, financial institution, or official government agencies directly.
Be Wary of Quick Recovery Promises "Quick recovery" or "100% refund guarantees" are classic scam indicators. Legitimate recovery processes take considerably longer.
Avoid Transfers to Unverified Accounts Transfers to anonymous or unverified accounts are almost impossible to recover.

Where to Report

If you become a victim or receive suspicious contact, report it to:

Local police
Your financial institution
National cybersecurity authorities

Key Takeaway

Those who have already experienced fraud are at higher risk of becoming victims again. Stay calm, remain vigilant, and share warning information with your community. These measures are essential to minimizing harm.