Staying safe
Terra claim scams: fake Kroll emails, look-alike sites and recovery scams
The common Terra claim scams are fake Kroll emails, look-alike websites and so-called recovery agents. They all want the same things: your claims portal login, your seed phrase or an upfront fee. The SEC has warned about a look-alike domain, ra-kroll.com. Real Kroll mail for this case comes from ra.kroll.com. One character makes the difference.
This page covers phishing and recovery scams. For whether a sale itself is safe, read is selling a Terra claim safe.
Facts checked
Four common scams around Terra claims
The claims process is slow and hard to follow, which makes claimants a target. The patterns to know:
- Fake Kroll emails. A message that looks like Kroll links to a copy of the claims portal, to take your login, seed phrase or money. The domain is often one character off, such as ra-kroll.com instead of ra.kroll.com.
- Pay to release your distribution. A message says your compensation is ready but a tax, fee or verification charge must be paid first. Nothing has been paid to Crypto Loss Claims yet. No date has been announced. A message saying your money is waiting is false.
- Recovery agents. Someone offers to recover your Terra losses for an upfront fee and claims ties to Kroll, the court or a law firm. Claims are filed and decided only through the official process, and the filing deadline passed on May 16, 2025.
- Fake buyers. No named legal entity, no written agreement, no transfers on the court docket, and a request for a fee or your portal access. Our buyer checklist shows how to check any buyer.
How to check whether an email is really from Kroll
- Read the sender address, not the display name. Real mail for this case comes from ra.kroll.com addresses such as donotreply@ra.kroll.com and Terraforminfo@ra.kroll.com, or from claims@terra.money. A hyphen, an extra word or a different ending means it is not Kroll.
- Do not click the link. Open a new browser tab and type claims.terra.money yourself. If Kroll needs something from you, you see it in the portal.
- Look at what it asks for. Never give a seed phrase or pay a fee because an email asks you to. Evidence for your claim goes through the portal, not by reply.
- Compare with Kroll's case page. Kroll's official Terraform page lists the case documents and notices. If a message mentions a deadline or a document you cannot find there or in the portal, treat it as suspect.
Our guide to the Kroll Terraform email shows what a genuine determination email looks like.
Your portal password and your seed phrase
Your portal login protects your claim, and your seed phrase controls your wallet. Nobody needs either to help you, buy your claim or pay you.
TerraClaim never asks for your portal password. On the verification call before a sale, you log in on your own device and share your screen, and a specialist confirms the claim number, the allowed amount and the payout destination. Payout addresses are screened before payment. More on these controls in security and verification.
If you typed your portal password into a site you no longer trust, change it at claims.terra.money at once and contact Kroll. If you entered a seed phrase anywhere, treat that wallet as exposed: move what is left to a new wallet with a new seed phrase.
Recovery scams after the deadline
Recovery scams target people who missed the bar date or dislike their determination. The pitch: an agent, lawyer or insider can still get you paid, for a fee. The facts: a claim filed after May 16, 2025 needs a court motion, and the Plan Administrator may oppose it. If you missed the deadline, read the bar date and late claims and ask your own counsel.
If you disagree with your determination, the dispute runs through Kroll and, later, the court, with fixed deadlines. TerraClaim's Second Look gives a free review of whether a challenge is worth it.
Where to report a Terra claim scam
- Kroll. Tell Kroll about fake emails or sites that use its name, using the contact details on its official Terraform page.
- The SEC. Report suspected securities fraud through the SEC's tips and complaints portal.
- The police. Report a loss to the police or the cybercrime unit where you live. In the United States you can also file with the FBI's Internet Crime Complaint Center.
- TerraClaim. If someone uses the TerraClaim name, tell the desk in the chat or through the contact page.
Keep the evidence: the original email with full headers, screenshots, addresses and transaction hashes.