Agent Lane robot mascotAgent Lane
Menu

Guide

AI agent sent crypto by mistake: what you can and can’t undo

Some links may earn us a commission at no cost to you, which helps keep these guides free and up to date.

A confirmed crypto transfer can’t be pulled back. What you can do is stop the agent from sending more, and make sure the next mistake is small.

By Agent Lane Editorial · Page dated 20 October 2026

What you can and can’t undo

You can:

  • Stop the agent from sending again.
  • Cut its keys, API tokens and token approvals.
  • Move what is left to a wallet it never touched.

You can’t: Reverse a confirmed transfer. Coinbase says crypto transactions “cannot be canceled or reversed once initiated,” and the FTC says you can usually get crypto back only if the person you paid sends it back.

The first hour

  1. Stop the agent. Pause or kill the run and turn off any schedule that restarts it, so it can’t send again while you work.
  2. Revoke its keys and tokens. Delete or rotate every wallet key, exchange API key and connector token the agent used. If it ever saw a seed phrase or private key, treat that wallet as compromised.
  3. Revoke token approvals. A contract the wallet approved can keep spending those tokens until you revoke it. Review and revoke them with Etherscan’s Token Approval Checker (Ethereum) or Revoke.cash (80+ networks). Each revoke is a transaction with a network fee.
  4. Move what’s left. Send remaining funds to a wallet the agent never had access to. If new funds vanish as soon as they arrive, the seed phrase is compromised: abandon that wallet.
  5. If it left an exchange account, contact support now. Use the exchange’s official help site, and delete the API key the agent used. Expect a confirmed send to be final: Coinbase, for one, says it can’t cancel or reverse it.
  6. Trace it, and contact the recipient only if known. Look up the transaction hash on the chain’s block explorer. If the address is an exchange or company deposit address, give that company’s support the hash, amount, time and network, and ask for help. If you don’t know who owns the address, there is no one to ask.
  7. Report theft. If the agent was tricked, report it at ic3.gov and ReportFraud.ftc.gov, and to the exchange you sent from. Ignore anyone who offers to get it back for a fee; see the last question below.

How to keep the next mistake small

  • Separate funding wallet, small balance. The agent’s wallet holds only what one job needs and is refilled by hand. See separate funding from trading wallet and dedicated agent wallet. Savings stay in a wallet the agent never connects to, such as a hardware wallet like Ledger.
  • Spend caps. A per-transaction and daily cap, enforced outside the agent where you can. Coinbase’s wallet policy engine, for example, can reject any transfer over a set value. See AI agent spending limits.
  • Recipient allow-list. Only addresses you approved in advance. The same policy engine accepts or rejects by destination address, and exchanges such as Kraken make you confirm a new withdrawal address first. See whitelist merchants only.
  • Review before send. A person approves any new address or amount over the cap, and a tiny test transfer goes first. See which AI agent actions need a human OK.
  • No withdrawal permission on exchange keys. A trading key doesn’t need it. Kraken’s docs say a key used only for placing orders does not need Withdraw Funds.
  • Never share the seed phrase. It controls the whole wallet. See never share a seed phrase with an agent.
  • Use a capped card when crypto isn’t needed. A virtual card for AI agents has a hard limit, can be frozen, and card payments come with a dispute process that crypto lacks.

Common questions

Can I reverse crypto my AI agent sent by mistake?

Not once it is confirmed on the blockchain. Only the recipient can choose to send it back; step 6 covers how to reach one you can identify.

Does disconnecting the wallet stop the agent?

No. Token approvals stay active after you disconnect, and the agent may still hold keys or API tokens. Revoke all of them (steps 2 and 3).

Should I pay a crypto recovery service?

Be very careful. The FBI warns that recovery services often charge an up-front fee and then go quiet or ask for more, that private companies cannot issue seizure orders, and that some pose as law firms working with the government. Law enforcement does not charge victims a fee. Even Revoke.cash, a real revoke tool, says it cannot recover stolen funds.

Sources

Checked 20 October 2026 on each organization’s own site.

Related guides

All guides