My XRP was stolen. Can I recover it?

The full answer

Why is stolen crypto so hard to get back?

A Florida lawyer who handles crypto-fraud cases describes how investment-scam money moves once a victim notices the fraud: it has already passed through unhosted wallets, mixers, cross-chain bridges and stablecoin off-ramps in jurisdictions with no extradition treaty with the United States [1]. The same lawyer states that without a clear evidentiary trail and a U.S. nexus, recovery after a loss is exceptionally difficult [1].

Exchange thefts follow a similar pattern. 24/7 Wall St. reported on September 27, 2026 that Bitget reported the loss of 103 million XRP on September 24, 2026, in a breach linked to North Korea [3]. The same publication wrote that hackers took $351.6 million from Bitget and that a large share of it sits beyond the reach of any organization that might try to stop them [3]. Whether exchanges or token issuers can freeze funds once they arrive is covered on can my XRP be frozen or taken back, and the details of that incident are on what happened in the Bitget theft. Whether a transfer itself can be undone is covered on can a crypto transfer be reversed.

XRPL.org says: “No one can freeze XRP in the XRP Ledger.”[5] Issuers can freeze the tokens they issue, and claw them back if clawback was enabled in advance, but XRPL.org says freezes do not apply to XRP.

The FBI’s IC3 says transactions “are irrevocable… meaning they cannot be reversed.”[6] The FTC says “you can usually only get your money back if the person you paid sends it back.”[7] The Canadian Anti-Fraud Centre (CAFC) says that once money is sent, “it’s often transferred overseas and is very difficult to recover.”[8]

XRPL.org notes that “custodial exchanges can always freeze the funds they custody at their own discretion.”[5] That covers stolen XRP only if it lands in an account at a custodial exchange.

It says the initiative has "reduced potential losses by more than $500 million since 2024.

In 2025 it notified 3,780 people, and 78% did not know they were being scammed.[10] ## How do official remission and seizure programs work, and how do I claim? In the US, victims petition for funds through the Justice Department’s remission process.

In the United States, the route back runs through the courts. According to the Florida lawyer, federal civil forfeiture law (18 U.S.C. § 981 and 28 C.F.R. Part 9) gives identifiable victims of the underlying offense a path to recover a portion of forfeited assets through a remission or restoration petition [1].

The largest example so far is the Prince Group case. A Florida blockchain lawyer’s article states that on October 14, 2025, federal prosecutors in the U.S. District Court for the Eastern District of New York unsealed an indictment charging Chen Zhi, the 38-year-old founder and chairman of the Cambodia-based Prince Holding Group, and that the government filed a civil forfeiture complaint seeking approximately 127,271 Bitcoin; the article calls it the largest forfeiture action in the history of the U.S. Department of Justice [1]. The indictment contains allegations only [1]. The lawyer states that the DOJ’s Money Laundering and Asset Recovery Section, with the U.S. Attorney’s Office for the Eastern District of New York, will publish notice procedures and a claims window once the court enters preliminary orders of forfeiture [1].

That sequence matters for a claim. A victim cannot petition until there is a forfeiture order, and there is no forfeiture order until investigators have traced and seized the funds. The lawyer also notes that, under the Crime Victims’ Rights Act, victims have rights to notification, participation in sentencing, and restitution where the perpetrator is brought within U.S. jurisdiction [1]. The sources cited here do not describe a Canadian equivalent.

The IC3 says law enforcement “can trace cryptocurrency transactions to follow money in ways not possible with other financial systems,” but “may encounter significant challenges” when the funds reach exchanges in other countries.[6] The Justice Department calls the Prince Group case the largest forfeiture action in its history: on October 14, 2025, US prosecutors filed to forfeit about 127,271 bitcoin, then worth about $15 billion, tied to alleged forced-labour scam compounds.

The Justice Department notes that “an indictment is merely an allegation.”[9]

The Justice Department retained Kroll Settlement Administration as administrator for both.

In Canada, the CAFC tells victims to “contact your local police as soon as possible” and to report to the CAFC as well.[11] No Canadian equivalent of the US remission list was found in the CAFC pages read on September 29, 2026. ## How often do seizures return funds to victims, by year?

No public source gives year-by-year figures on how much seized crypto has been returned to victims. What evidence exists points to friction. Bankless Times reported on March 19, 2026 that investigators tracking the Prince Group funds described the process as “tough and often futile”, citing the number of money-transfer intermediaries the assets passed through [2]. The same report said Operation Shamrock founder Erin West signalled her group will press lawmakers to redirect forfeited crypto directly to victims rather than to government reserves [2]. That push shows victim advocates do not consider the current path certain to reach them.

In 2025 the FBI’s Recovery Asset Team handled 3,900 incidents with $1,163,919,846 in attempted theft and froze $679,013,183, a 58% success rate.[10] The FBI says most of these cases were business email compromise in the past, with a rise in tech support and account takeover cases in 2025.[10] Among the 642 cases involving victims aged 60 or over, 64 were investment or crypto fraud.[10]

The IC3 asks crypto victims for “cryptocurrency addresses; the amounts and types of cryptocurrencies; transaction hashes; and the dates and times of the transactions.”[6] Whether the loss can be claimed for tax is covered on deducting crypto lost to a scam.

In 2025 its Recovery Asset Team froze $679,013,183 of $1,163,919,846 in attempted theft, a 58% success rate, and it credits Level Up with $500 million in savings to notified victims since 2024.[10] The IC3 also says law enforcement can trace crypto transactions “in ways not possible with other financial systems.”[6]

It says to “Be wary of cryptocurrency recovery services, especially those charging an up-front fee.”[6] How those offers work, and how to check whether a contact is real, is on crypto recovery scams.

What should someone do first after a theft?

The Florida lawyer’s guidance for Florida crypto victims is to report immediately to ic3.gov and preserve every transaction record [1]. The step-by-step reporting process, including Canadian channels, is on how to spot and report an XRP scam. Tax treatment of the loss is a separate question, covered on can I deduct crypto I lost to a scam.

Anyone who contacts a victim offering to get the money back needs checking before any reply. How fake recovery services work, and how to tell them from real law-enforcement contact, is set out on someone says they can recover my lost crypto for a fee.

XRPL.org says “there is no privileged administrator who can undo or reverse any transactions after they have applied.”[4] Anyone who knows an account’s seed or private key can authorize any transaction the same as the owner could.[4]

Is there any other route besides government forfeiture?

The lawyer states that if a U.S.-based facilitator, money mule or domestic financial institution touched the funds, a parallel civil action in Florida state or federal court may proceed independently of the federal forfeiture track [1]. This depends on finding such a party within reach of a U.S. court.

Where are the limits of this evidence?

The main source on remission is a law firm that offers crypto-fraud recovery services, so its description of the process comes from a party with a commercial interest in these cases [1]. The one large forfeiture discussed here concerns bitcoin in an organized scam operation, not XRP taken from an individual [1][2]. The investigators quoted by Bankless Times describe the process as often futile even in that case [2]. The strongest counterweight on the reader’s side is the risk of a second loss: the companion page on crypto recovery scams covers people who charge fees and promise returns that the official process does not offer.