🛡️ The Most Common Crypto Scams and How to Recognise Them Before Losing Money

Cryptocurrency scams have evolved into sophisticated operations that steal billions annually. This guide explains the mechanics of the six most prevalent schemes and the specific red flags that expose them.

Fake Support Accounts on Social Media and Messaging Apps

When you post a question in a crypto community or mention an issue with an exchange, scammers monitor these channels and respond within minutes posing as official support. They use usernames nearly identical to legitimate accounts—often adding a single character, underscore, or using a zero instead of the letter O. On Telegram and Discord, they will direct-message you immediately, while on Twitter they reply to your tweet with a helpful tone.

The tell: no legitimate exchange, wallet provider, or blockchain project will ever initiate a direct message asking you to verify your account, validate your wallet, or resolve a withdrawal issue. Official support always directs you to submit a ticket through their website or in-app system. The moment someone asks you to enter your seed phrase on a website they provide, or to scan a QR code to "synchronize" your wallet, you are speaking to a scammer. Real support never requests this information.

If you have already entered credentials on a link they sent, move your funds immediately to a new wallet with a freshly generated seed phrase. Enable official two-factor authentication on exchange accounts only through the platform's settings page, never through a link sent in a message.

Pig-Butchering Romance and Investment Scams

This scam combines fake romantic interest with fraudulent investment advice. The approach begins on dating apps, social media, or even a "wrong number" WhatsApp message that turns into friendly conversation. Over weeks or months, the scammer builds trust and eventually mentions how much money they make trading cryptocurrency on a specific platform. They offer to teach you, guiding you to deposit funds on what appears to be a functioning exchange interface.

The platform is entirely fake. You will see your balance grow, often dramatically, reinforcing the belief that the strategy works. When you attempt a small withdrawal, it may even succeed to deepen trust. But when you try to withdraw a significant amount, the site will demand tax payments, security deposits, or verification fees—always requiring you to send more cryptocurrency. No matter how much you send, access to your funds will be denied, and eventually the scammer and the site disappear.

The tell: any trading platform you did not discover through independent research is suspect. Verify the exchange through multiple sources: check registration with financial regulators where applicable (rules vary widely by jurisdiction and this is not financial advice, but many countries maintain public lists of registered or warned-against entities), search for the domain name with the word "scam" added, and attempt to find reviews on independent forums. Genuine profits never require upfront tax payments in cryptocurrency; tax obligations are settled during official filing periods with tax authorities, not by sending Bitcoin to an exchange.

Fraudulent Airdrops and Malicious Token Approvals

You notice unfamiliar tokens worth hundreds or thousands of dollars suddenly appearing in your wallet. When you attempt to sell them on a decentralized exchange, the transaction requires you to approve a token spending permission. This approval grants a smart contract full access to the tokens in your wallet. Once signed, the contract drains your legitimate holdings—stablecoins, Ethereum, or other valuable assets.

A variation involves airdrop announcements on social media or via email requiring you to "claim" tokens by connecting your wallet to a malicious website. The site prompts a signature that appears to be a claim function but is actually an approval granting the attacker permission to transfer your assets.

The tell: unexpected tokens in your wallet should be ignored, not sold. Before signing any token approval, check exactly what you are authorizing using tools like Etherscan's transaction decoder or Revoke.cash to review active permissions. Legitimate airdrops from known projects are announced through their official channels and typically do not require you to sign broad wallet approvals. If a token cannot be sold without error, or the swap interface behaves unusually, stop. Revoke any suspicious permissions immediately using the same permission-management tools.

Cloned Exchange and Wallet Websites

Scammers purchase domain names nearly identical to major exchanges—substituting characters, adding hyphens, or using alternative top-level domains like .cc or .co instead of .com. These cloned sites replicate the design perfectly, and often appear in search engine ads above the legitimate result. When you log in, your credentials are captured. If you deposit cryptocurrency to a wallet address displayed on the site, the funds go directly to the scammer.

The tell: always type exchange URLs manually or use a bookmarked link you have verified. Check for HTTPS and examine the exact domain spelling before entering any login details. Search engine advertisements are a common vector; the first result is not always legitimate. If you have logged into a site and later realize it was fraudulent, assume your email, password, and two-factor backup codes are compromised. Immediately log into the real platform from a verified URL and change your credentials. If you enabled two-factor authentication on the fake site, the scammer has access to your 2FA secret; reset it on the genuine platform.

For wallet sites, verify the download link through the project's official social media accounts or GitHub repository. Fake wallet software will steal your seed phrase the moment you enter it.

Guaranteed-Return Investment Funds and Ponzi Structures

Platforms promise fixed daily, weekly, or monthly returns—often 1% per day, 10% per week, or similar figures far exceeding traditional finance. They may brand themselves as crypto hedge funds, mining operations, arbitrage bots, or liquidity pools managed by expert traders. Early participants receive payouts funded by deposits from new investors, which creates testimonials and social proof. The scheme continues until the operator disappears with the remaining funds.

The tell: no legitimate investment can guarantee returns, and certainly not at rates that would double your capital every few months. Returns in cryptocurrency markets, as in all markets, carry risk and fluctuate. Be especially wary of platforms requiring you to recruit others to unlock higher yields or withdrawal permissions—this is a hallmark of a pyramid structure. Check whether the fund is registered or licensed where applicable (regulatory requirements differ significantly by country, and this is not legal advice). A genuine fund will provide verifiable proof of reserves, transparent fee structures, and regulatory filings you can independently confirm.

If you have already deposited funds, attempt to withdraw immediately. Many such platforms impose lock-up periods or withdrawal limits designed to delay your access until the scheme collapses.

SIM-Swap Attacks Targeting SMS Two-Factor Authentication

A scammer gathers personal information about you—often from data breaches, social media, or phishing—and contacts your mobile carrier pretending to be you. They claim to have lost their phone and request the number be transferred to a new SIM card they control. Once the carrier complies, the attacker receives all SMS messages sent to your number, including two-factor authentication codes for email, exchange accounts, and other services.

With access to your SMS codes, they reset passwords and withdraw funds from accounts protected only by SMS-based authentication. This attack does not require physical access to your phone or sophisticated hacking; it exploits the carrier's customer service process.

The tell: SMS authentication is the weakest common form of two-factor security. Replace it wherever possible with authenticator apps that generate time-based codes (such as Google Authenticator, Authy, or others) or hardware security keys. These methods are not vulnerable to SIM swaps because they do not rely on the phone network. Contact your mobile carrier and ask to add a PIN or password requirement for any SIM changes—procedures vary by provider and country, but most now offer this protection. If you suddenly lose mobile service without explanation, assume a SIM swap may be in progress and immediately contact your carrier and begin securing accounts from a trusted device.

What to Do If You Have Been Targeted

If you have shared a seed phrase, entered it on a website, or signed a suspicious smart contract approval, move any remaining funds immediately to a new wallet with a freshly generated seed phrase on a device you trust. Do not reuse the compromised wallet. For exchange accounts, change passwords and reset two-factor authentication from a verified URL.

Report the scam to the platform where it occurred—social media networks, app stores, and exchanges do take action against reported accounts, though recovery of funds is rarely possible. If the amount is significant, consider reporting to law enforcement, though cross-border cryptocurrency theft is difficult to investigate and legal processes differ widely by jurisdiction.

Educate yourself on wallet security, smart contract interactions, and the specific mechanisms of the platforms you use. Scams succeed because they exploit urgency, trust, and unfamiliarity with technical processes. Taking the time to verify before acting is the most effective defense.

All news →