Real Account Recovery vs Recovery-Help Scam
How to tell a platform's genuine account-recovery process from a scammer posing as a recovery service to steal access to your account.
Last reviewed: 1 June 2026
Losing access to an account is common and usually fixable. Platforms build recovery flows for exactly this, using the email address, phone number or trusted device you registered earlier, and the process is free. Recovery-help scams live in the space where that flow fails you. You search for help, you post in a forum, or someone replies to your public complaint within minutes offering a specialist who can restore access quickly for a fee. It is convincing because you are already frustrated, sometimes distressed, and the offer sounds like the human help the platform did not give you. The distinction that matters is capability: nobody outside the platform can restore your account, so anyone asking for a password, a code or a payment is taking something, not returning it.
Side-by-side comparison
| Platform account recovery | Recovery-help scam | |
|---|---|---|
| Who you contact | The platform itself via its official help centre URL | A third-party 'hacker recovery' or 'account unlock' service found via search or social media |
| Credentials requested | Platform never asks for your current password to recover your account | Asks for your username, password, or 2FA codes to 'restore' access |
| Fee | Account recovery is free via the platform's own process | Charges an upfront or success fee before or after recovery |
| Process | Uses email, phone, or trusted device verification you set up previously | Requests remote access to your device or asks you to share a verification code |
| Outcome | Access restored through the platform's own system; you set a new password | Account remains locked; fee is lost; or account is taken over by the scammer |
Common red flags
- Third-party service advertising account recovery for a fee
- Request for your password or 2FA code to 'restore' access
- Request to install remote-access software to assist with recovery
- Payment required before any recovery attempt is made
- Contact via social media DM claiming to be platform support
Verification steps
- Use only the official 'forgot password' or 'help' link on the platform's login page
- Check the platform's help centre for the authorised recovery process
- If recovery fails, use the platform's identity verification or appeal form
- Enable a recovery email and phone number before you need them
What not to do
- Don't pay any third party to recover a social media or email account
- Don't share your password, 2FA codes, or verification SMS with anyone
- Don't install remote-access software at a stranger's request
A safe response
Go to the platform's own login page, use its forgot password or account help link, and work through the identity checks even if it takes several attempts across a few days. Never share a verification code or password with anyone offering help, including someone claiming to be support, and never install remote-access software at a stranger's request. A short reply of no thank you, I will use the official process, is enough. If you already paid a recovery service, stop sending money, keep the messages and receipts, ask your bank or payment provider what can be disputed, and report it to the platform and your national fraud reporting body.
Frequently asked questions
I no longer have access to the old email address or phone number on the account. Can I still recover it?
Often yes, but by a slower route. Most platforms offer an identity verification or appeal form for exactly this situation, which may ask for details only the real owner would know, such as previous passwords, the account creation date, devices used or purchase receipts. Submit it from a device and network you have used with that account before, and be prepared to try more than once. Free self-service recovery is the same route any paid service would use.
Someone messaged offering to get back the account that was just stolen from me. Should I reply?
No. Approaches that appear immediately after a loss are usually connected to it or are watching for people posting publicly about being hacked, and paying often leads to further demands rather than recovery. Do not send money, credentials or codes. Instead report the compromise through the platform's official form, tell your contacts the account is not in your hands, and secure any accounts sharing that email address or password.
Can anyone outside the platform actually recover my account?
No. Only the platform can restore access to your account. Third parties who claim otherwise are either scammers or, at best, using the same self-service recovery tools you can access yourself for free.