Fake drive data recovery: what to do first

If a USB drive or SD card shows more storage than it can really hold, files saved to it may be missing, damaged, or unreadable. The first priority is to avoid changing the drive further. More testing or repair attempts can overwrite data you may still be able to recover.

Before using the Fake USB & SD Check, protect any files you need. The check fills the drive and reads the data back, so it is meant for empty media or a drive you can erase, not for recovering existing files.

Protect the files before recovery

1. Do not run a capacity test. The Fake USB & SD Check writes across the drive to find its real size. If files on it matter, do not start the check, even if you only want to confirm that the drive is fake.
2. Stop writing to the drive. Cancel file copies, downloads, camera recording, or any other task that saves data there. Do not delete, rename, or move files on the drive.
3. Eject it when no transfer is active. On Windows 11, use Safely Remove Hardware and Eject Media in the taskbar. On macOS, click the eject icon beside the drive in Finder. If the computer asks to format, initialize, scan, or repair the drive, cancel the prompt.
4. Write down what happened. Note the drive's label, its reported capacity, when files disappeared or became unreadable, and what you had just copied. This can help you or a recovery specialist decide what to do next.

What the symptoms mean

Files became unreadable after a large copy

This can happen when a drive's controller reports more storage than its flash memory can hold. Data written beyond the real capacity may fail, or may overwrite data stored earlier. The exact behavior depends on the drive, so unreadable files do not prove that every file is lost. Stop using the drive rather than testing the same copy again.

The computer asks you to format or repair it

The file system may be damaged or unreadable, but that message does not mean the files have disappeared. Formatting creates a new file system, and repair tools can change information used to locate files. Cancel the prompt and avoid repair until you have an image of the drive or have spoken with a recovery specialist.

The drive reports an unusually large capacity

A capacity shown by Windows or macOS is what the drive claims to have, not proof of how much usable flash memory it contains. A mismatch can be a warning, especially if files fail after a certain amount has been saved. Do not use a full-drive capacity test to investigate until anything important has been recovered.

The drive disconnects or is not recognized consistently

Intermittent detection may point to a damaged connector, a failing device, or a controller problem. Repeatedly reconnecting it can make a fragile device harder to read. If the files are valuable, stop and ask a data recovery service before trying more connections.

Choose a safer next step

1. Copy files only if they are plainly accessible. If the drive stays connected and important files open normally, copy the most valuable ones to a different drive. Never save recovered files back to the suspect drive. If copying causes errors or the device disconnects, stop.
2. Make an image before attempting software recovery. An image is a sector-by-sector copy of the readable drive data. A recovery program can scan the image while the original remains unchanged. Save the image and any recovered files to separate storage with enough free space.
3. Avoid repair commands on the original. On Windows 11, cancel any scan-and-fix prompt and do not run chkdsk on the drive before making an image. On macOS, open Applications › Utilities › Disk Utility only if needed to identify the device, and do not run First Aid on the original before imaging it.
4. Use professional help for irreplaceable files. If the only copy is on this drive, the device is unstable, or the data has business, legal, or personal value, leave it disconnected and contact a reputable data recovery service. Ask what they will do before authorizing work, since recovery is not guaranteed.

When the drive itself may be damaged

A fake-capacity problem is not always a broken connector or failed flash chip. The drive may still be detected while its controller misreports the available space. But if it repeatedly disappears, becomes unusually hot, or cannot be read on more than one computer, treat it as unreliable. Do not open a USB drive or memory card yourself. A recovery service can assess whether the memory is readable, though counterfeit or damaged media may limit what can be recovered.

If the files are already backed up or no longer needed, you can test the drive after erasing it, or replace it instead. The Fake USB & SD Check writes across the media, so use it only when losing everything on that drive is acceptable.