← All articles

Crypto Scams: How to Spot Them and Stay Safe

Crypto Industry

Crypto Go Team · Published · 10 min read

Crypto scams are schemes that use fake offers, fake people or fake websites to get you to send crypto, or to hand over the keys to it. Because crypto transfers are fast, global and usually impossible to reverse, a scam that works is rarely undone. The good news is that most crypto scams follow a small number of patterns, and once you know them they become much easier to spot.

In brief

  • Crypto scams usually rely on pressure, a promise that sounds too good to be true, or a request for your seed phrase, private keys or passwords.
  • The most costly pattern is the investment scam: a friendly stranger or an "expert" leads you to a fake platform that shows profits but blocks withdrawals.
  • No genuine support team, exchange or trading bot has a reason to ask for your seed phrase or for money to "unlock" your funds.
  • Because a crypto transfer is usually final, the best protection is to pause, check the source through a second channel and never send money to someone you only know online.
Crypto Scams: How to Spot Them and Stay Safe
In this article · 10 min read
  1. What counts as a crypto scam
  2. How big is the problem?
  3. The most common crypto scams
  4. Red flags at a glance
  5. How to protect yourself, step by step
  6. What to do if you have been scammed
  7. Where this fits: safer ways to use crypto
  8. Checklist before you send crypto to anyone
  9. Frequently asked questions
  10. Sources

What counts as a crypto scam

A scam is a deliberate deception to take your money. In crypto it often looks like a normal investment or a helpful message, and the damage is made worse by three features that the European supervisory authorities describe in their crypto fraud and scams factsheet: crypto-assets are accessible worldwide, transactions are fast and often cannot be reversed. The factsheet adds that scammers reach people mainly through social media, messaging apps, email and phone calls that sound real.

It helps to separate three things that people lump together:

  • Scams. You are tricked into sending money or secrets yourself.
  • Hacks. An attacker breaks into a platform or a device without your help.
  • Bad investments. A real project simply loses value. This is a risk of crypto, but it is not a scam.

This guide is about the first group, with a short note on the second where the two overlap.

How big is the problem?

The numbers are large. In its 2026 Crypto Crime Report on scams, published on 13 January 2026, Chainalysis estimates that around 17 billion US dollars were stolen in crypto scams and fraud in 2025, with at least 14 billion confirmed on-chain. It also reports that the average payment to a scam rose from 782 to 2,764 US dollars between 2024 and 2025, and that impersonation scams grew by 1,400% in a year.

These are estimates, and the true figure is hard to know because many victims never report. The direction is what matters: scammers are professional, organised and increasingly use tools such as AI-generated messages and voices.

The most common crypto scams

Crypto scams: how a typical investment scam unfolds, from first contact to blocked withdrawals
Crypto scams: the usual steps of an investment scam

The patterns below are the ones that appear again and again in the guidance of Bitcoin.org's page on avoiding scams and in the EBA factsheet.

1. Investment and "pig butchering" scams

A stranger contacts you by message, on a dating app or in a social media group. Over days or weeks they build trust, then introduce a "platform" or an "insider" who promises strong results. Wikipedia's article on the pig butchering scam describes it as a form of online relationship and investment fraud in which perpetrators cultivate fake romantic or social relationships before persuading victims to invest, often in fraudulent crypto schemes.

The usual script has four steps:

  1. First contact. A friendly message from someone you do not know.
  2. Trust. Daily chats, shared "hobbies", sometimes a fake romantic relationship.
  3. A small deposit. The fake platform shows profits and may even let you withdraw a little, which builds confidence.
  4. A larger deposit, then a wall. When you try to withdraw more, new fees appear, the account is "frozen" or the contact disappears.

2. Ponzi and pyramid schemes

A Ponzi scheme lures investors and pays apparent profits to earlier investors with money from newer ones. Red flags listed there include guaranteed or unusually high returns, unusually consistent returns whatever the market does, and difficulty cashing out. Pyramid schemes work differently: rewards depend on recruiting more people who pay in.

3. Impersonation and fake support

Someone posing as support for a wallet or exchange answers your public question, or contacts you first, and asks for your seed phrase, a "verification" code or remote access. Bitcoin.org states that no legitimate support representative will ask for your seed phrase or private key. A related trick is the "recovery" service that promises to get back money lost in an earlier scam for an upfront fee, which is another scam.

Impersonation also includes lookalike accounts that reply to real posts, and AI-generated voice or video of a person you trust asking you to send money urgently.

4. Fake giveaways

"Send 1 coin and receive 2 back", or a celebrity "giveaway" video, are among the oldest tricks. Real giveaways do not require you to send crypto first. The EBA factsheet lists free offers on social media among the typical tactics.

5. Phishing, drainers and fake apps

Phishing uses fake websites, emails or messages that look like a trusted company to steal logins. In crypto it often goes one step further: a "drainer" site asks you to connect your wallet and sign a transaction that gives the scammer access to your funds. Fake apps and fake search ads lead to copies of real exchanges and wallets. Bitcoin.org also warns about QR codes placed over legitimate ones.

6. Fake exchanges, fake tokens and rug pulls

A fake exchange offers prices that are too good or returns that are too steady. A fake token or "rug pull" is hyped by influencers or a chat group, and then the creators sell and the price collapses. Hype, urgency and no verifiable information about who is behind a project are the warning signs.

7. Address poisoning and clipboard malware

Tiny transfers arrive from an address that looks almost like one you used, hoping you will copy it from your history by mistake. Some malware replaces a copied address with the attacker's. In both cases, check the full address, not just the first and last characters, before you send.

8. Fake hardware wallets and seed phrase theft

Counterfeit wallets are sold on third-party marketplaces, sometimes with a recovery phrase already written down. Buy only from the manufacturer or an authorised reseller, and read how to protect your words in our guide to the seed phrase.

9. Fake "trading bots" and "AI trading" offers

Promises of automatic profit are a favourite scam, because a bot sounds technical and passive. The warning signs are the same as above: returns promised as certain, pressure to deposit on a platform you do not control, a "secret algorithm" nobody can explain and a promoter who contacted you first. Our articles on the crypto trading bot and on AI trading explain what a legitimate setup looks like.

Red flags at a glance

Crypto scams: red flags compared with signs of a safer offer
Crypto scams: red flags and safer signs

The EBA factsheet lists warning signs that fit almost every case:

Red flag Safer sign
A promise that seems too good to be true, or a guaranteed fast, high return No promises, and risk is stated plainly
An unsolicited offer, message or call You went looking for the service yourself
Urgency, such as a limited-time offer Time to read, compare and decide
A request for your seed phrase, private keys or passwords Nobody ever needs them
Payment by crypto, gift cards or wire transfer to a person Payment to a known, verifiable company
A look-alike website, strange URL or unknown exchange An address you typed or saved yourself

How to protect yourself, step by step

  1. Slow down. Urgency is the scammer's main tool. If you feel rushed, that is the signal to stop.
  2. Verify through a second channel. If a "support agent", a friend or a public figure asks for money or codes, contact them through an address or number you already trust.
  3. Never share your seed phrase, private keys or passwords. Anyone who has them can take control of your assets.
  4. Check who is behind the offer. The EBA suggests checking whether the provider is authorised and whether your financial authority has published warnings.
  5. Use a platform where your funds stay with you. Prefer setups where you keep control, with limited permissions and no withdrawal rights for third-party tools.
  6. Secure your accounts. Use strong, unique passwords and multi-factor authentication, and keep your devices updated.
  7. Start small and test. Send a small amount first, and read what you sign in your wallet.
  8. Be wary of the people you have only met online. A friendly stranger who talks about investing is a classic opening.

For the basics of buying safely, see our guide to buying cryptocurrency, and for keeping assets away from internet-connected devices, our article on the hardware wallet.

What to do if you have been scammed

The EBA factsheet recommends acting immediately:

  • Stop all transfers and cut contact with the scammers.
  • Change your passwords on all your accounts and devices, not just one.
  • Revoke wallet permissions that the scammer may hold, using a trusted permission checker.
  • Move your remaining funds to a new, secure wallet if yours may be compromised.
  • Contact your crypto provider through its official channels: in most cases the transaction cannot be reversed, but the provider might freeze an account or blacklist an address.
  • Report it to the police or your financial authority.
  • Beware of "recovery" offers. The factsheet warns that a person who contacts you claiming to recover your money for a fee is often another scammer.

Where this fits: safer ways to use crypto

Safe use comes down to custody and permissions. Crypto Go Bot, which we built, runs on your own server and trades your own Kraken account through an API key that can trade but cannot withdraw. It never asks for a seed phrase, and the money stays in your Kraken account. Trading is risky, the bot also closes trades at a loss, and no system can guarantee profits: anyone who says otherwise is a red flag in itself.

John Bax's book Cryptocurrency Investing explains wallets, exchanges and how to hold and invest in crypto step by step, so you can recognise a bad offer before it costs you.

Checklist before you send crypto to anyone

  • I did not receive this offer unprompted.
  • Nobody is rushing me.
  • Nobody has asked for my seed phrase, keys or passwords.
  • I checked the website address and the company through a second source.
  • The returns promised are not guaranteed or unusually steady.
  • I can withdraw a small amount before I commit more.
  • I could explain to a friend exactly where my money goes.

Frequently asked questions

What are the most common crypto scams?

The most common are investment scams with fake platforms, impersonation of support or public figures, fake giveaways, phishing and drainer sites, and Ponzi or pyramid schemes. They share the same ingredients: pressure, a promise that is too good to be true, and a request for money or secrets.

How can I tell if a crypto investment is a scam?

Be suspicious if the offer is unsolicited, promises guaranteed or very steady returns, creates urgency, or makes withdrawals difficult. Check who is behind it and whether they are authorised, using sources you find yourself rather than the ones the promoter gives you.

Can stolen crypto be recovered?

Usually not. A crypto transfer is rarely reversible, although a provider may sometimes freeze an account on its platform if you report quickly. Be wary of anyone offering to recover funds for an upfront fee, because that is a common second scam.

Will anyone ever ask for my seed phrase?

No legitimate wallet maker, exchange, support team or trading bot has a reason to ask for it. Treat any request, however professional it looks, as a scam.

Are crypto trading bots scams?

Not by definition, but many scams use the name. A legitimate tool does not promise profits, does not ask you to deposit money with it and does not need withdrawal permission. Judge it by how it handles risk and where your funds stay.

Is it safer to keep crypto on an exchange or in my own wallet?

Each has risks. On an exchange, the platform holds your keys and your protection is your account security. In your own wallet you hold the keys yourself and must protect your seed phrase. Whichever you choose, use strong passwords and multi-factor authentication.

What should I do if someone I met online talks about crypto investing?

Do not send money and do not move the chat to another app at their request. Take the offer to someone you trust, and search for the platform by name together with the word "scam" before you do anything else.

Sources