# AI agent sent crypto by mistake: what you can and can’t undo

A confirmed crypto transfer can’t be reversed, but you can stop the next one. First-hour steps after an AI agent sends crypto by mistake, recovery-scam warnings, and the limits that keep it small.

Canonical HTML: https://agentlane.net/guides/ai-agent-sent-crypto-by-mistake/

## What you can and can’t undo

You can:
- Stop the agent from sending again.
- Cut its keys, API tokens and token approvals.
- Move what is left to a wallet it never touched.

You can’t: Reverse a confirmed transfer. Coinbase says crypto transactions “cannot be canceled or reversed once initiated,” and the FTC says you can usually get crypto back only if the person you paid sends it back.

## The first hour

1. **Stop the agent.** Pause or kill the run and turn off any schedule that restarts it, so it can’t send again while you work.
2. **Revoke its keys and tokens.** Delete or rotate every wallet key, exchange API key and connector token the agent used. If it ever saw a seed phrase or private key, treat that wallet as compromised.
3. **Revoke token approvals.** A contract the wallet approved can keep spending those tokens until you revoke it. Review and revoke them with Etherscan’s Token Approval Checker (Ethereum) or Revoke.cash (80+ networks). Each revoke is a transaction with a network fee.
4. **Move what’s left.** Send remaining funds to a wallet the agent never had access to. If new funds vanish as soon as they arrive, the seed phrase is compromised: abandon that wallet.
5. **If it left an exchange account, contact support now.** Use the exchange’s official help site, and delete the API key the agent used. Expect a confirmed send to be final: Coinbase, for one, says it can’t cancel or reverse it.
6. **Trace it, and contact the recipient only if known.** Look up the transaction hash on the chain’s block explorer. If the address is an exchange or company deposit address, give that company’s support the hash, amount, time and network, and ask for help. If you don’t know who owns the address, there is no one to ask.
7. **Report theft.** If the agent was tricked, report it at ic3.gov and ReportFraud.ftc.gov, and to the exchange you sent from. Ignore anyone who offers to get it back for a fee; see the last question below.

Revoke tools named above: Etherscan Token Approval Checker https://etherscan.io/tokenapprovalchecker · Revoke.cash https://revoke.cash

## How to keep the next mistake small

- **Separate funding wallet, small balance.** The agent’s wallet holds only what one job needs and is refilled by hand. See separate funding from trading wallet and dedicated agent wallet. Savings stay in a wallet the agent never connects to, such as a hardware wallet like Ledger.
- **Spend caps.** A per-transaction and daily cap, enforced outside the agent where you can. Coinbase’s wallet policy engine, for example, can reject any transfer over a set value. See AI agent spending limits.
- **Recipient allow-list.** Only addresses you approved in advance. The same policy engine accepts or rejects by destination address, and exchanges such as Kraken make you confirm a new withdrawal address first. See whitelist merchants only.
- **Review before send.** A person approves any new address or amount over the cap, and a tiny test transfer goes first. See which AI agent actions need a human OK.
- **No withdrawal permission on exchange keys.** A trading key doesn’t need it. Kraken’s docs say a key used only for placing orders does not need Withdraw Funds.
- **Never share the seed phrase.** It controls the whole wallet. See never share a seed phrase with an agent.
- **Use a capped card when crypto isn’t needed.** A virtual card for AI agents has a hard limit, can be frozen, and card payments come with a dispute process that crypto lacks.

## FAQ

**Can I reverse crypto my AI agent sent by mistake?**
Not once it is confirmed on the blockchain. Only the recipient can choose to send it back; step 6 covers how to reach one you can identify.

**Does disconnecting the wallet stop the agent?**
No. Token approvals stay active after you disconnect, and the agent may still hold keys or API tokens. Revoke all of them (steps 2 and 3).

**Should I pay a crypto recovery service?**
Be very careful. The FBI warns that recovery services often charge an up-front fee and then go quiet or ask for more, that private companies cannot issue seizure orders, and that some pose as law firms working with the government. Law enforcement does not charge victims a fee. Even Revoke.cash, a real revoke tool, says it cannot recover stolen funds.

## Sources (checked 20 October 2026)

- Coinbase Help — Deposit missing: sent to wrong address: https://help.coinbase.com/en/exchange/crypto-transfers/sent-to-wrong-address
- FTC — What to know about cryptocurrency and scams: https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-and-scams
- ethereum.org — How to revoke smart contract access to your crypto funds: https://ethereum.org/en/guides/how-to-revoke-token-access/
- Etherscan — Token Approval Checker: https://etherscan.io/tokenapprovalchecker
- Etherscan Information Center — Token Approvals: https://info.etherscan.com/tokenapprovals/
- Revoke.cash — approvals dashboard and FAQ: https://revoke.cash/
- Revoke.cash — What are token approvals?: https://revoke.cash/learn/approvals/what-are-token-approvals
- FBI IC3 — Companies falsely claiming an ability to recover funds lost in cryptocurrency scams (PSA, 11 Aug 2023): https://www.ic3.gov/PSA/2023/psa230811
- FBI IC3 — Fictitious law firms targeting cryptocurrency scam victims (PSA, 13 Aug 2025): https://www.ic3.gov/PSA/2025/PSA250813
- Coinbase Developer Platform — Policy Engine: https://docs.cdp.coinbase.com/wallets/security-and-policies/policy-engine/overview
- Coinbase Developer Platform — EVM policies (allowlist, value limits): https://docs.cdp.coinbase.com/wallets/security-and-policies/policy-engine/evm-policies
- Kraken Developers — API key permissions: https://docs.kraken.com/exchange/guides/rest/api-keys
- Kraken Support — Adding and confirming a new withdrawal address: https://support.kraken.com/hc/en-us/articles/360000672863

- Canonical HTML: https://agentlane.net/guides/ai-agent-sent-crypto-by-mistake/
- Site index: https://agentlane.net/llms.txt

Related: [Dedicated agent wallet](https://agentlane.net/guides/dedicated-agent-wallet/) · [AI agent spending limits](https://agentlane.net/guides/agent-spend-caps/)