Trust & Safety

Poker Disputes & Scam Recovery — The Tactical Playbook

You're past the point of recognizing a scam pattern. You're in one. What follows is the procedural deep-dive on what actually works for recovery — ordered by how time-critical each step is, and honest about the realistic success rates at each stage.

Chargeback windows, crypto-tracing services, law-enforcement reporting by jurisdiction, community pressure channels, documentation requirements, and the warnings about secondary “recovery” scams that follow every poker-fraud event. Not pattern recognition — tactical resolution. If you haven't been scammed, the scam patterns page is the prevention-side companion.

Jump to the 10-step rescue playbook ↓Or read the scam-pattern library →

Tactical dispute-resolution timeline from early action to law-enforcement escalation

Last reviewed: 22 April 2026. Educational reference; not legal advice — consult a lawyer in your jurisdiction for binding answers.

The urgency timeline — what to do when

Recovery rates drop sharply with time. Acting inside the first 24 hours has materially different outcomes than acting after a week. Here's the realistic calendar.

Timeframe	Action	Why it matters
First hour	Stop transactions. Screenshot everything. Note the exact timeline.	Further transfers turn one loss into multiple. Documentation captured early is evidence; documentation reconstructed later is hearsay.
First 24 hours	Report to crypto-tracing services. File with your bank/card if fiat was involved. Post to community scam-alert forums.	Wallet flagging at major exchanges depends on reports arriving before scammers move funds. Community posts can trigger voluntary refunds in reputation-sensitive cases.
First week	File with law enforcement. Contact the platform (if one was involved). Formal disputes on payment processors.	Chargeback windows are open. Operators still have the scammer's account details. Criminal reports are taken more seriously when filed within a week.
First month	Follow up on every open report. Consult a lawyer if the amount justifies it. Compile full evidence package.	Most open reports close or escalate during this window. After 30 days, follow-through rates drop significantly and cases get deprioritized.
After 30 days	Focus on pattern-sharing (community warnings) and future prevention. Accept most active recovery paths have closed.	Realistic framing — most direct recovery happens in the first week or not at all. Statistical outcome for crypto-poker scams is a small success rate overall, heavily weighted to fast responders.

Platform-specific dispute paths

What dispute process exists varies dramatically by the platform layer where the scam happened. Here's what to expect at each level.

Where the scam happened	Formal dispute process?	Typical outcome	Best contact path
Licensed operators (GGPoker .com/.eu/.ca, WSOP.com, WPT Global)	Yes — formal dispute resolution under licensing authority	Real adjudication; player-protection rules apply; regulator is appealable	Platform's support + regulator (Isle of Man GSC, Malta MGA, UKGC, iGO Ontario) if platform response is inadequate
ClubGG (the platform)	No — explicit non-intervention policy for real-money disputes	Platform cannot recover funds lost to agent-layer scams; help articles state this explicitly	None through ClubGG directly. Go to the union or agent level, then to community and law enforcement
PPPoker / PokerBros / other club apps	No formal platform-level process for agent-layer disputes	Similar to ClubGG — platforms disclaim responsibility for the real-money layer	Union security teams (if a union operates the club), community forums, law enforcement
ClubGG Union security (Massiv, TMT, TiNY)	Yes — internal security teams handle union-level disputes	Strong at addressing within-union issues (cheating, collusion, bans); limited outside the union	Union's security contact (usually via club manager on Telegram) with full evidence package
Deep Poker	Yes — operator-mediated dispute for in-scope transactions	Deep controls the deposit/withdrawal rails for its three unions; disputes within those paths are handled directly	Deep Poker support through your account (for transactions involving Deep). For Telegram-agent disputes outside Deep, standard community/law-enforcement routes apply
Telegram agent (generic)	No — individual operator with no binding process	Any 'resolution' happens informally; recourse is limited to reputation pressure	The agent themselves (limited success), the introducer who vouched (if applicable), community blacklists

Chargeback and recovery paths by payment method

Each payment method has its own dispute window, success rate, and process. Match your path to how you actually sent the funds.

Method	Dispute window	Success rate	Mechanics
Credit card (Visa, Mastercard, Amex)	60–120 days from transaction (varies by issuer)	Moderate — better for direct merchant disputes than intermediary-routed	File via your card's dispute mechanism. Provide merchant name, amount, transaction date, description of service not rendered or product not delivered. Card network reviews, may reverse. Merchants sometimes counter-dispute.
Debit card	60–120 days (slightly shorter than credit card)	Lower than credit cards	Same mechanics as credit card disputes but debit protections are weaker in most jurisdictions. Money already left your account, and recovery depends on the bank's discretion. Ask your bank if a credit-card dispute is an option for your specific account.
Bank wire transfer	Hours to days (wires are largely irreversible once sent)	Very low	Recall attempts are possible within hours. After settlement, recovery is rare. If the wire went to a fraudulent account and the destination bank can identify and freeze, a recovery is possible — but this requires law-enforcement cooperation.
Cryptocurrency (direct)	Irreversible at chain level; recovery depends on destination	Low, but not zero — higher if funds haven't moved to private wallets	Chain-level transactions cannot be reversed. Recovery depends on: (1) whether the funds traveled through a regulated exchange that can freeze them; (2) whether you file fast enough for that exchange to act. File with Chainabuse and ScamSniffer immediately.
E-wallet (Skrill, Neteller, LuxonPay, PayPal)	180 days typical; varies by provider	Higher than wires, lower than card chargebacks	File a dispute through the e-wallet's resolution system. Some e-wallets offer buyer protection; most provide limited intermediation. The e-wallet can freeze or reverse if the counterparty hasn't withdrawn.
Cryptocurrency-via-exchange	Depends on the receiving exchange's compliance team	Moderate if filed fast and the funds land at a major exchange	If the scammer's destination wallet is identified as belonging to a regulated exchange (Binance, Coinbase, Kraken), file an abuse report with that exchange plus a law-enforcement subpoena if possible. Major exchanges respond to coordinated requests from multiple affected parties faster than single individuals.

Law enforcement by jurisdiction — where to file

Pattern across jurisdictions: most individual reports don't trigger individual investigations, but they enter pattern databases that aggregate into enforcement. Filing takes 10–30 minutes; skipping it has no upside. This table is reference only — specific contact details change and local practice varies.

Jurisdiction	Reporting body	When to use	Realistic expectation
United States	IC3 (FBI Internet Crime Complaint Center), state AG, local FBI field office	Any loss over $1,000 or involving US-based counterparties	Complaint becomes part of an aggregated dataset; individual investigation unlikely for sub-$50K losses; useful for future pattern-building and tax documentation
United Kingdom	Action Fraud (national cybercrime reporting body)	Any fraud loss regardless of amount	Investigation happens at police discretion based on severity; pattern-aggregation is the main function; occasionally triggers broader enforcement
European Union (member states)	National cybercrime unit; Europol for cross-border cases	Crypto-specific losses or cross-border elements	Varies by country; Europol coordinates but doesn't investigate individual small cases; useful for formal record
Canada	Canadian Anti-Fraud Centre (CAFC)	Any fraud involving Canadian counterparty or victim	Pattern-building primary function; individual investigations rare unless part of larger pattern
Australia	ScamWatch (ACCC), Australian Federal Police cybercrime	Any scam event	Similar to other jurisdictions — pattern databases are the main utility
Brazil / LATAM	Local federal police cybercrime unit; Ministério Público (state prosecutor) in Brazil	Losses involving local counterparties; required for any chance of civil recovery	Enforcement varies dramatically by country and region; some jurisdictions have active crypto-fraud units, others have none
Asia-Pacific (varies)	Country-specific — Philippine NBI, Indian CBI, Japanese National Police Agency, etc.	Local counterparty; victim is in-jurisdiction	Resource availability varies enormously. Japan and South Korea have well-resourced cyber units; many smaller Asian jurisdictions have limited crypto-fraud capacity

Community pressure channels — where to post

Community reporting won't directly recover your funds — but it protects the next player, builds pattern evidence that can support enforcement, and occasionally triggers reputational pressure that leads to partial refunds from operators worried about losing active players.

2+2 Scam Alerts sub-forum

Best for: Large-community visibility, long-established scam database, operator-level reports

Oldest and broadest poker scam-reporting forum. Posts get indexed and referenced for years. Include full evidence package and counterparty identifiers.

CardsChat rogue-operator reports

Best for: Licensed-operator disputes and online-site rogue behavior

Stronger focus on licensed-operator issues. Moderation process is thorough — posts with insufficient evidence may not be published.

Platform-specific subreddits (r/ClubGG, r/PPPoker, r/poker)

Best for: Current-incident visibility and fast-moving community awareness

Less formal than 2+2 but more real-time. Mods may remove posts that lack evidence or that name individuals without documentation. Use throwaway accounts cautiously — deleted accounts reduce credibility.

Telegram watchdog groups (agent-specific and platform-specific)

Best for: Immediate warning to players in the same agent network or club

Fragmented across many groups; no central directory. Access often requires introduction through existing members. Posting in the right group can trigger within-community pressure that sometimes leads to partial refunds.

Discord servers for specific poker communities

Best for: Communities tied to specific coaches, pros, or content creators

Varies widely in reach and moderation. Often the fastest path to a specific player community's attention — especially for training-site or coaching-related disputes.

Chainabuse (crypto-specific reporting)

Best for: Flagging the scammer's destination wallet for exchange awareness

Not a forum per se, but an abuse-reporting database used by major exchanges. A filed Chainabuse report can trigger wallet-level freezes if the funds land at a participating exchange and the report arrives fast enough.

Documentation checklist — the evidence package

Every subsequent step — chargebacks, law-enforcement filings, community posts, legal consultations — requires the same underlying evidence. Assemble all six categories once, before starting any outbound filings. Quality of evidence predicts outcome quality at every level.

Chat / communication logs

Full Telegram, Discord, or chat-platform export if possible. Screenshots as fallback — include timestamps, sender usernames, profile IDs. Preserve the sequence showing what was promised, what was sent, what happened after.

Transaction records

TXIDs for every crypto transaction. Full wallet transaction history for the relevant period. Exchange withdrawal confirmations if applicable. Bank/card statements showing debit. Screenshots of any platform balance page.

Counterparty identifiers

Agent's Telegram username, Telegram user ID (distinct from username), phone number if exchanged, any wallet addresses they used, any claimed real name or business identity, website URLs.

Platform context

The poker platform, club, union, or context in which the scam happened. Screenshots of any club description, agent's profile on the platform, union affiliation. Gives context to investigators unfamiliar with the poker ecosystem.

Promise trail

Anything the scammer wrote or said in advance about rates, withdrawal times, or terms. Rakeback promises, payout schedules, 'guaranteed' returns. The gap between promised and actual is the core of most fraud claims.

Your own identity verification

Your ID, proof of address, proof that you're the actual victim (your bank statement showing the debit; your wallet proving ownership of the source address). Law enforcement and exchanges require this before investigating.

Secondary scams — the “recovery” warning

Every public scam complaint attracts a second wave of scammers pretending to offer recovery services. These are the four patterns to refuse on sight. None of them are real.

Recovery agent / fund retrieval service

A service appears in your DMs or replies to your public scam post. They claim to recover stolen crypto for a fee (often 20–30% of recovered funds) or an upfront payment (smaller, 'just to cover investigator costs'). They're the next scam. Recovery doesn't happen this way.

The tell: Real recovery channels (law enforcement, regulated exchange abuse departments, chargeback processes) do not cold-contact victims or require upfront payments.

Law-firm impersonation

An account claiming to be a law firm specializing in 'crypto fraud recovery' offers a consultation that pivots to an upfront retainer. Actual law firms in this space are expensive, require due diligence both ways, and operate through formal engagement processes — not Telegram DMs.

The tell: No legitimate lawyer sends cold DMs to scam-alert forum posters. Engagement letters and formal intake are required; they're a sign the firm is real.

Fake government agent

A supposed IC3, FBI, Interpol, or local police officer contacts you with news about 'your case.' They need a fee, document, or crypto payment to 'process the recovery.' Government agencies don't work this way.

The tell: Real law enforcement interactions happen through official case numbers, formal letters, or verified agency contact paths. Anyone asking for money or crypto payments to 'process a case' is a scammer piggybacking on the original.

Hacker-for-hire / blockchain forensics offer

Someone offers to 'hack back' the scammer's wallet or 'trace and extract' funds for a fee. Hacking is illegal; most of these offers are scams; a few are real hackers who will take your money and commit additional crimes you could end up liable for.

The tell: Legitimate blockchain forensics is done by firms like Chainalysis or TRM Labs on behalf of law enforcement — not through direct-hire offers to victims.

The 10-step rescue playbook

The full procedural sequence. Steps are ordered by time-criticality — step 1 happens before step 2, which happens before step 3. Skipping ahead costs you evidence and time that can't be recovered.

Document before anything else.
In the first hour, capture the full picture. Export chat logs. Screenshot every message. Note every TXID. Record the timeline with timestamps. You cannot reconstruct this later — evidence quality decays fast and scammers often delete accounts within 24–72 hours.
Stop any further transactions.
No 'unlock' payments, no 'verification' transfers, no 'tax' fees. The scammer may push harder once you suspect them — this is the most dangerous window. Hold firm. A single calm hour decides whether the loss stays contained.
File with Chainabuse and ScamSniffer (if crypto).
Submit the scammer's destination wallet address to Chainabuse.com and ScamSniffer. These feeds are consumed by major exchanges. If the stolen funds are sitting at or about to land at a regulated exchange, the flag can trigger a freeze before the scammer withdraws.
Contact any involved payment processor.
Card issuer for credit/debit losses — file a dispute within their window (60–120 days typical). Bank for wire transfers — request immediate recall if within hours. E-wallet provider for Skrill/Neteller/LuxonPay disputes. Speed matters; formal dispute filing within 48 hours maximizes chances.
File with law enforcement in your jurisdiction.
IC3 (US), Action Fraud (UK), CAFC (Canada), or equivalent national body. File even if the individual case is unlikely to get worked — the report enters a pattern database that helps aggregate enforcement. Specify 'crypto fraud' or 'online gambling fraud' in the categorization.
Report to the platform (if any platform was involved).
On licensed operators, file a formal dispute through the platform's support process. On club-based apps, report to the union security team if a union is involved. ClubGG itself won't intervene in agent-layer disputes — that's policy, not an avoidable support gap.
Post to community scam alerts.
2+2 Scam Alerts, CardsChat rogue-operator reports, relevant subreddits, any Telegram watchdog groups you can access. Full evidence package. Won't recover funds directly but protects the next player and sometimes triggers reputational pressure that leads to partial recovery.
Ignore unsolicited 'recovery' offers.
Every scam of size attracts secondary scams offering to recover the funds for a fee. All of them are fake. Real recovery channels don't cold-contact victims, don't charge upfront fees, and don't require crypto payments to process. Block every such contact on sight.
Consult a lawyer if the amount justifies it.
For losses over $10,000–$25,000 depending on jurisdiction, a consultation with a lawyer experienced in cryptocurrency fraud or gambling disputes is worth considering. They can advise on civil recovery options, specific regulatory bodies to involve, and whether criminal referrals have merit in your case.
Adjust your future exposure.
Honest review of what happened and why. Which red flags did you miss? What verification did you skip? For most poker players, the highest-leverage behavioral change is moving real-money flows off Telegram-agent arrangements onto published platforms — structurally most of the scam categories disappear when the counterparty is a documented operator rather than an individual.

If you're being accused — the other side of a dispute

Rare but real. Sometimes honest parties end up in disputes because of different understandings, technical errors, or misidentification. The response is structurally identical to being the victim: documentation, calm engagement, formal process, and cooperation with any mediating operator or union.

Collect your own evidence package — same six categories as the victim side.
Respond factually, not emotionally— personal attacks in response to an accusation reduce your credibility even if you're right.
Cooperate with platform or union mediation — operators who mediate disputes are usually trying to resolve the situation, not find a guilty party.
Consult a lawyer if the accusation becomes public — defamation standards vary by jurisdiction, and responding to a false public accusation requires a different approach than a private one.

The structural fix — platform-based real money

All the above is what to do when a dispute has already happened. The most effective future prevention is changing the structure of your real-money flow so that most dispute categories don't apply.

On licensed operators (GGPoker in Ontario/UK/Malta, WSOP.com in licensed US states), disputes are handled by a platform-level support process backed by a regulator. You have a regulator to appeal to. The cashier is operated by the licensee under binding terms. Most of the deposit and withdrawal scam categories disappear structurally.

On published-platform agents for club apps (Deep Poker for three ClubGG unions), the agent-layer individual doesn't exist. Deposits sit in your own Deep balance. Rakeback is a published ladder. Withdrawal SLA is documented. Transaction history lives in your account. The exit-scam, variable-rate bait, and withdrawal-stall patterns from the scam patterns page become structurally impossible.

Neither removes every category. Phishing still works against platform users. Table-level cheating still exists in clubs. Community Ponzi schemes still recruit. But the category mix shifts from “agent took my money and disappeared” (the most common and most damaging category on unregulated club poker) to residual categories where dispute resolution is rarer because the attacks are rarer.

Skip the dispute surface on ClubGG.

Deep Poker's published-platform path for Massiv, TMT, and TiNY removes the most common scam categories structurally. No Telegram agent to dispute with. No disappearing balance. No withdrawal stall — the SLA is 1 hour typical, 24 hours maximum.

Frequently Asked Questions

How quickly do I need to act after realizing I've been scammed?

First 24 hours matter most. Wallet flagging at major exchanges depends on reports arriving before scammers move funds — usually a matter of hours. Chargeback windows on cards are 60–120 days but earlier filings succeed more often. After the first week, recovery chances drop meaningfully. After 30 days, most active recovery paths have closed and the focus shifts to pattern-sharing for future prevention.

What's the realistic recovery rate for a poker-platform scam?

Low but not zero. Direct recovery of stolen crypto is rare — maybe 5–10% of cases where the victim acts fast and funds haven't moved to private wallets. Higher for events that traveled through regulated exchanges (Binance, Coinbase, Kraken) and were reported within 24 hours. Chargebacks on cards or e-wallets succeed more often — roughly 30–50% depending on jurisdiction and evidence quality. Licensed-operator disputes have the highest success rate because there's a regulator backing the process.

Can I do a chargeback on a crypto poker deposit?

Not on the crypto transaction itself — chain-level transactions are irreversible. But if you funded the crypto through a card purchase at an exchange, the card-side leg can be chargeback-disputed. Success depends on the exchange's handling: some exchanges fight chargebacks aggressively (you'll lose the account), some accept them. The dispute is against the exchange, not the poker platform.

Will ClubGG help me if I've been scammed by an agent?

No. ClubGG's own help articles state explicitly that it does not organize or endorse real-money games and cannot recover funds lost to agent-layer disputes. This is policy, not a support gap. The trust layer on ClubGG lives at the agent or union level — which is why published platforms like Deep Poker, or the union security teams at Massiv, TMT, and TiNY, are the actual dispute venues for ClubGG issues.

What's the difference between filing with IC3 and a local police report?

IC3 aggregates data nationally; the FBI uses the dataset to identify scam patterns, coordinate enforcement, and support future prosecutions. A local police report is required for certain civil recovery actions and for your own tax or insurance documentation. File both if the amount justifies it — IC3 first (takes 10 minutes online) and local within the first week.

How does crypto-tracing actually help?

When you file a scammer's wallet address with Chainabuse or ScamSniffer, the report enters databases that major exchanges consume as part of their compliance processes. If the scammer tries to withdraw through a regulated exchange that watches these feeds, the funds can be frozen pending investigation. The freeze is the useful outcome — recovery then depends on a formal law-enforcement or civil-court process on top of that.

When is it worth hiring a lawyer?

Usually when the loss is large enough to justify the legal fees, or when the case has features that might support civil recovery — an identifiable domestic counterparty, funds that can be traced to a regulated venue, specific contractual violations, or the scammer having other recoverable assets. Under $10,000 in most jurisdictions, the legal cost typically exceeds the expected recovery. Over $25,000, a consultation is almost always worth it.

Are 'recovery services' ever legitimate?

Almost never in the way they advertise. Real recovery of stolen crypto happens through law enforcement, regulated-exchange compliance teams, or formal civil litigation — not through a Telegram-messaged service that offers to 'recover your funds for a percentage.' Every one of those secondary services is either a scam or a so-called 'recovery hacker' who will take your money and commit additional crimes. Real blockchain forensics firms (Chainalysis, TRM Labs) work with law enforcement, not direct-to-victim.

Should I publicly name the scammer?

Careful judgment. Naming in community scam-alert forums (2+2, CardsChat) with full evidence documentation is standard practice and protected in most jurisdictions. Naming in public social media with limited evidence can expose you to defamation claims, especially in litigious jurisdictions. The rule of thumb: post factually, include documentation, use community forums designed for scam-reporting, avoid personal attacks. 'The agent with Telegram handle @X took my deposit on date Y with TXID Z' is defensible; 'Agent X is a criminal fraudster' without documentation is not.

What if I'm the one being accused — someone claims I scammed them?

Rare but real. If an accusation is made against you (in a forum, a Telegram group, or to a platform operator): collect your own documentation (same process as being the victim — chat logs, TXIDs, any platform records). Respond factually and calmly with evidence. Do not ignore accusations or escalate into personal attacks — both reduce your credibility. If an operator or union is mediating, cooperate fully. Legitimate disputes sometimes happen between honest parties with different understandings of an arrangement, and those resolve faster when both sides are transparent.

What's the best single thing I can do to reduce future scam exposure?

Move to platform-based real money where possible. Licensed operators (GGPoker in Ontario, UK, Malta, licensed EU) handle deposits/withdrawals directly with regulator-backed dispute processes. Published platforms on club apps (Deep Poker for three ClubGG unions) remove the individual-agent trust layer. Neither is a perfect scam shield — you still need to avoid phishing, recognize table-level cheating, and stay away from Ponzi schemes — but both eliminate the highest-frequency categories structurally.

How long do I have to file a card chargeback?

Typically 60–120 days from the transaction date, varying by card network (Visa, Mastercard, Amex, Discover) and issuer. File as early as possible — later filings have lower success rates even within the window. Provide full documentation with the initial filing; missing evidence at intake often means the dispute is closed before a second submission can happen. Check your card's specific dispute policy at filing time.

Can I get my money back if the scammer is in a different country?

Makes recovery harder but not impossible. Cross-border scams involve two or more law-enforcement jurisdictions, which slows things meaningfully. Recovery works best when the funds moved through a regulated exchange that operates in your jurisdiction (where the compliance-team freeze is enforceable) or when the scammer has domestic assets (where civil recovery has jurisdiction). Fully foreign scammers with foreign-held funds are the hardest to recover from.

Does reporting to law enforcement actually matter if my individual case won't get investigated?

Yes, for two reasons. First, it creates the formal record you need for insurance claims, tax documentation of losses, and any future civil action. Second, aggregate pattern data is how enforcement gets prioritized — dozens of small reports against the same operator eventually add up to an investigation even when individual reports don't. The cost to file is 10–30 minutes; the downside is essentially zero.

The best dispute is the one that never starts.

Deep Poker is an official agent for three ClubGG unions. Published rakeback ladder. Documented withdrawal SLA. No Telegram agent to dispute with. The dispute surface is structural, not procedural.