Cybercriminals are returning to past victims—and pretending to be lawyers and government employees who can return their funds.