Recovery scams turn prior victimization into a fresh attack surface, using databases of already affected users, pressure tactics, and false trust to extract money from people who have been harmed before.