A client claiming to hold 5,000 Bitcoin and $1 billion in Ethereum hired crypto wallet recovery specialists in 2021, only for investigators to uncover $10 in total across multiple wallets.
The client, identified as Rusty, told Chris Brooks, founder of Crypto Asset Recovery, and his son that the Bitcoin—worth about $53 million at the time—could be withdrawn in weekly increments of up to $300,000. Brooks and his son traveled to Georgia the following day to assist with accessing the wallet. During a meeting in a strip mall office, Rusty revealed the wallet also purportedly contained $1 billion in Ethereum, prompting Brooks to question the legitimacy of the claims.
The specialists spent hours reviewing dozens of recovery seed notebooks provided by Rusty and associates, but found only $10 in Bitcoin across the wallets. Brooks said it was unclear whether the wallets had ever held the claimed funds. The firm was not reimbursed for travel expenses.
The incident underscored the risks in crypto recovery services, where clients often rely on specialists to restore access to lost or inaccessible wallets. Recovery firms typically do not retrieve funds from the blockchain but instead assist in regaining access to existing wallets by reconstructing lost passwords, seed phrases or hardware wallet backups.
Technical methods such as brute-forcing partial seed phrases or reverse-engineering flawed password generators have helped recover funds in some cases. ReWallet co-founder Bruno Krauss cited an instance where a 20-character password protecting roughly $3 million was recovered after identifying flaws in the password generation process. Other cases hinge on personal details like favorite places, children’s names or memorable dates to reconstruct forgotten credentials.
However, not all losses are recoverable. Bitcoin educator Tom Bennet noted that passphrases—additional layers of security layered on top of seed phrases—can create confusion, as incorrect entries may still yield a valid but empty wallet. Hardware wallet failures or corrupted files sometimes allow for recovery if the backup seed phrase remains intact, but truly random and lost seeds or private keys are effectively unrecoverable due to the astronomical number of possible combinations.
Security risks also plague the recovery industry. Experts warn that clients must thoroughly vet recovery firms, as the very information needed to regain access could be exploited by unscrupulous operators. Industry figures advise users to select firms with verifiable track records, transparent fee structures tied to successful recovery, and to immediately move recovered funds to a new wallet with a fresh backup. Unsolicited offers to recover funds should be treated with caution, as they often signal potential scams.
