Separate asset identity from proof of receipt
Native BTC and contract tokens
Check BTC on the Bitcoin network using its transaction ID (TXID), receiving address and amount. An ERC-20 contract address is not evidence of receiving native BTC. The Bitcoin developer transaction guide explains inputs, outputs and TXIDs.
For contract tokens such as ERC-20 tokens, names, symbols and icons can be copied. Check the issuer's published contract address on the correct network. A wrapped or bridged representation is not Bitcoin-network BTC merely because its name looks similar, and acceptance by a store or receiving platform must be confirmed. Read Ethereum's scam-token guide.
Screenshots and small payments do not prove full receipt
A scammer may send a tiny amount and supply a screenshot claiming full payment. Open your own wallet or the relevant network's block explorer and check the full receiving address, actual amount, status and confirmations. A TXID alone does not mean settlement is complete. Unconfirmed transactions carry risk and confirmation time is not guaranteed; see Bitcoin's usage guidance.
Fake bank transfers and receipts
Do not rely on the sender's screenshot, text message or imitation banking page. Open your bank's official app and check actual receipt. Ask the bank about any unclear status.
Stop risky actions when theft is suspected
- Stop paying suspicious addresses, signing unexplained transactions or granting remote access. Do not follow instructions from unsolicited private-message support.
- If keys or a recovery phrase may be exposed, stop using that wallet. Follow the wallet provider's instructions to create an independent wallet with a new recovery phrase on a trusted device. Adding an account under the old phrase does not fix exposure. If incoming assets are immediately swept away, do not add gas funds to race the attacker. See MetaMask's compromised-wallet guidance.
- For suspicious token allowances, verify the network and contract, then follow official instructions to review and revoke access. Disconnecting a website does not revoke an allowance. Revocation cannot recover transferred assets or repair an exposed private key. See Ethereum's revocation guide and wallet-security guidance.
- Preserve TXIDs, networks, addresses, times, actual amounts, conversations, URLs and screenshots. Build a timeline and keep identity documents and wallet backups out of public posts.
Notify relevant services and report the incident
If a bank or exchange is involved, reach support through its official website, provide transaction records and ask for a case number and available next steps. Account restrictions, tracing and recovery depend on the case and institution; none is guaranteed.
Report to your local police with the evidence and timeline. Hong Kong Police reporting channels are available through the e-Report Centre. Seek help promptly rather than waiting for a fixed time window. This guide does not promise recovery or a processing time.
Avoid a second scam
Be wary of unsolicited messages promising guaranteed recovery, demanding an unlocking fee or asking for a recovery phrase. Assess any professional assistance for your circumstances; a claimed analyst, lawyer or official-support title does not justify sharing sensitive information.
Read the safer-trading guide and wallet explainer to review download sources, backups and signing habits.
