The list, which is the actual machinery. The FTC's description of where the contact comes from is worth quoting in full because it explains the part victims find most disorienting: "Scammers buy lists of people who've paid scammers. They call it a 'sucker list,'" carrying "your name, address, and phone number, the kind of scam that tricked you, and how much money you paid." Those last two fields are the ones that do the work. A caller who opens by naming the company that took the money and the amount is not demonstrating access to an investigation; they are reading a record they bought. The FTC adds that the list works even on someone who did not realize they had been scammed: using the information they bought, the caller "can make up a story that sounds believable to 'helpfully' tell you about the earlier fraud."
The four covers. The FTC lists what the caller claims to be: "a government agency, a consumer advocacy group, a law firm, or some other organization. Or they pretend to be with the scammy company that took your money in the first place and say they're offering refunds to dissatisfied customers." Each of the four supplies a different reason for having the file. The agency has it because it investigated; the advocacy group because it campaigns; the law firm because it is suing; the original company because it is settling. All four also supply a reason the payment is normal: a filing fee, a retainer, a tax on the recovered amount.
The fee names. The FTC enumerates the labels used for the up-front money: "'retainer fee,' 'processing fee,' 'administrative charge,' 'tax,' 'shipment and handling charge'." It also notes the variant where no money is asked for at all, only "your social security number, checking, debit, or other financial account number so they can deposit a refund directly into your account," which converts the same contact into an identity-theft problem.
The law that names this specific practice, and its limits. The Federal Trade Commission's Telemarketing Sales Rule contains a paragraph written for exactly this scheme. 16 CFR 310.4(a)(3) makes it an abusive telemarketing act and a violation of the rule to engage in "requesting or receiving payment of any fee or consideration from a person for goods or services represented to recover or otherwise assist in the return of money or any other item of value paid for by, or promised to, that person in a previous transaction, until seven (7) business days after such money or other item is delivered to that person. This provision shall not apply to goods or services provided to a person by a licensed attorney."
Read the sequence that sets up. The rule does not ban charging for recovery work. It requires the money to be recovered and delivered first, and then requires a further seven business days to pass, before any fee may be requested or received. A demand for payment before anything has been returned is not a judgment call about whether the offer is credible; within the rule's scope it is the prohibited act itself.
Two boundaries on that rule matter, and stating them is more useful than overstating the rule. First, it binds a "seller or telemarketer," and the rule defines telemarketing at 16 CFR 310.2 as "a plan, program, or campaign which is conducted to induce the purchase of goods or services or a charitable contribution, by use of one or more telephones and which involves more than one interstate telephone call." An approach that never touches a telephone is outside this particular paragraph, whatever else may reach it. Second, the licensed-attorney carve-out is real: a lawyer providing services to a client is outside the paragraph, which is one reason "law firm" is among the covers the FTC lists.
Scale, dated and attributed, with the caveat the source attaches. The FBI's Internet Crime Complaint Center reported 10,516 recovery scam complaints in 2025 with $1.4 billion in losses. That figure carries a footnote in the report itself, and it changes what the number means: "Losses may also include losses experienced from previous scams which prompted the contact with the recovery company." So the total is not a clean measure of what recovery operators extracted. Within the age bands the report publishes, complainants aged 60 and over reported more than any other group, 2,529 complaints and $540,505,980. Those bands exclude complaints where no age was given, so they do not sum to the headline count.