Crypto recovery specialists often face cases where clients believe they possess large fortunes, only to find the wallets empty or non-existent. Chris Brooks, CEO of CryptoAssetRecovery.com, recalls a 2021 case where a client claimed to hold 5,000 Bitcoin, yet the investigation revealed no such assets existed, suggesting the client had been targeted by scammers.
Recovery firms focus on reconstructing access to existing wallets rather than extracting funds directly from the blockchain. Techniques include brute-forcing passwords using the BIP39 standard, reverse-engineering flawed password generators, and analyzing personal user data. ReWallet once recovered a 20-character password protecting $3 million by reverse-engineering a faulty generator.
Technical challenges often arise from user errors, such as confusing passphrases or sending assets to incorrect blockchains. While some hardware vulnerabilities, like the Coldcard firmware bug, allow for brute-forcing, experts warn that if a truly random seed phrase is destroyed, recovery is impossible. Trezor analyst Lucien Bourdon emphasizes that no firm can restore access if the backup is lost.
CryptoAssetRecovery.com has handled over 3,000 wallets for approximately 1,500 clients, successfully cracking passwords for about 63% of them. Currently, the firm operates remotely using air-gapped systems. Brooks notes that 71% of the wallets they crack contain less than $100, and the company does not charge fees for recovering such small amounts.
Experts advise caution when selecting recovery services. Red flags include unsolicited offers, demands for upfront payments, and communication via personal email or messaging apps. Legitimate firms typically charge a percentage of recovered funds. Users are warned that providing a recovery specialist with seed phrases grants them full control over the underlying assets.