A common recovery pitch starts politely: you complained about a broker; “CySEC” investigated; a bitcoin wallet in your name is waiting; write to a senior specialist to withdraw.
Look at the domain. The Cyprus Securities and Exchange Commission publishes at cysec.gov.cy. A mailbox on cysec.finance (or any improvised twin) is not that office, however many Cyprus phone numbers sit in the signature block. Linking you to the real CySEC homepage while writing from a fake domain is a classic split: borrowed legitimacy, private payment channel.
Government supervisors also do not operate by discovering surprise crypto balances and coaching you through wallet gas fees. If the “regulator” needs you to send coins to unlock coins, you are not in a regulatory process.
Type cysec.gov.cy yourself if you need investor information. Ignore unsolicited specialists who already know your loss and have a wallet address ready.
If this pattern matches something you’ve been offered, start at Get help. If someone is already pitching “recovery”, read Fake recovery before you pay another fee.
This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.