How to Avoid Crypto Scams: A Practical Guide
Educational content · reviewed for accuracy · not financial advice

Crypto transactions are irreversible — there is no bank to reverse a fraudulent transfer. The most effective protection is recognising scam patterns before you move funds: unsolicited contact promising guaranteed returns, urgency pressure, requests for your seed phrase or private key, unverified token contracts, and platforms not listed on reputable registries. Slowing down and verifying independently prevents the vast majority of losses.
On this pagetoggle
Why Crypto Scams Are So Effective
Cryptocurrency is irreversible by design. When a bank transfer is fraudulent, institutions can sometimes claw it back. When you send crypto to a scammer, it is gone. There is no support line, no charge-back process, no insurance fund for most losses. That finality is what makes crypto attractive to legitimate users — and what makes it an exceptionally lucrative target for criminals.
The other factor is speed. Crypto markets move quickly, and many scams are engineered to exploit the fear of missing a fast-moving opportunity. The urgency is manufactured, not real, but it works — it short-circuits the deliberate thinking that would expose the scam.
According to the US Federal Trade Commission, consumers reported losing over $1 billion to crypto fraud in 2023 alone. The actual number is likely higher because many losses go unreported due to shame or the victim not realising they were defrauded until long after.
Understanding the most common scam types, and the checks that expose them, is the most effective defence available.
The Eight Most Common Crypto Scams
1. Fake Giveaway / Impersonation Scams
You see a post from what appears to be Elon Musk, Vitalik Buterin, MicroStrategy, or a celebrity saying they are doubling all crypto sent to a specific address. The account looks legitimate — verified badge, real photo, correct username at a glance.
These are fabricated. No legitimate person or company runs crypto giveaways by asking you to send funds first. The "double your money" structure is the tell: every legitimate giveaway gives you something; it never asks you to send something first.
These scams run constantly on Twitter/X, YouTube livestreams (using clipped footage of real people), and Telegram. The impersonation technology has improved significantly — AI voice cloning and deepfake video are now used in more sophisticated versions.
Check: Verify the exact account URL, not just the display name. Legitimate announcements from major figures come through official, long-established accounts with posting history — not newly created accounts or accounts with suspicious follower ratios.
2. Rug Pulls
A project launches a new token with an attractive roadmap, aggressive social media, and early price momentum. Influencers promote it. The chart goes up. Then the development team drains the liquidity pool and disappears — the token price collapses to zero within minutes.
What is a rug pull explains the mechanics in detail. The short version: the founders hold a large portion of the supply or the LP tokens, which lets them drain the pool at any time. The community's money exits with them.
Check: Before buying any new token, verify whether the liquidity is locked (a reputable service like Team Finance or Unicrypt should hold the lock, not the dev address). Check whether the contract has been audited by a named security firm. Look at the token distribution on a blockchain explorer — if a single wallet holds 20%+ of supply, that is a serious risk.
3. Phishing Attacks
You receive an email saying your wallet has been compromised and you need to verify it urgently. You click a link that looks like MetaMask or Coinbase, enter your seed phrase, and your wallet is immediately drained.
Crypto phishing exploits the combination of urgency and visual imitation. The sites are pixel-perfect copies of real interfaces. The emails come from addresses that look nearly identical to the real domain at a glance (metamask-verify.com instead of metamask.io).
Check: Your seed phrase never needs to be entered online. No legitimate wallet service, exchange, or support team will ever ask for it. Bookmark the real URLs for services you use; navigate from bookmarks, not from email links.
4. Romance / Pig Butchering Scams
Someone makes contact on a dating app, social media, or messaging platform. Over weeks or months they build a genuine-seeming relationship, gaining trust and emotional investment. Then they introduce a "great investment opportunity" — usually a fake trading platform showing fabricated returns. The victim deposits funds, often escalating amounts. When they try to withdraw, they are asked for fees, taxes, or verification deposits. Eventually contact stops.
"Pig butchering" (from the Chinese 'sha zhu pan', referring to fattening a pig before slaughter) is the industry term for this long-con approach. It is highly organised, often run from criminal operations in Southeast Asia with trafficked workers operating the scripts.
Check: If someone you have never met in person is introducing you to an investment platform — regardless of how long you have spoken online — treat it as a scam until proven otherwise. Never invest through a platform introduced by a romantic contact.
5. Fake Token / Address Poisoning
A scammer creates a token with the exact same name as a legitimate token, or creates a wallet address that starts and ends with the same characters as one you frequently use. You copy-paste the wrong address or buy the wrong token without noticing.
Check: Always verify the full contract address against the official project website or CoinGecko/CoinMarketCap listing before any transaction. When sending, verify the full address — not just the first and last few characters. The guide on how to spot fake crypto tokens walks through the full on-chain verification process.
6. Investment Platform Scams
These range from outright Ponzi schemes (early investors paid from new investor funds) to fake yield platforms promising 50–200% APY with no realistic source of return. The platforms often look professional and show a real-time "balance" in your account. That balance is fabricated; the platform controls it entirely.
Check: Understand where yield comes from before depositing. Legitimate DeFi yields come from trading fees, lending spreads, or token emissions — all of which have calculable sources. "Guaranteed" high yields with no explained mechanism are not real.
7. Fake Exchanges and Wallets
Scammers create fake app versions of MetaMask, Trust Wallet, Binance, or Coinbase — sometimes listed on third-party app stores or promoted through search ads. When you enter credentials or a seed phrase, they are captured.
Check: Download apps only from the official developer's listed store links, accessed through the verified official website — not through a search result or advertisement.
8. Airdrop / Free Token Drainers
You receive a message that you qualify for a free token airdrop. To claim it, you connect your wallet and approve a transaction. The transaction turns out to be a 'setApprovalForAll' call — it grants the contract unlimited permission to transfer your NFTs and tokens.
Check: Read every approval transaction carefully before signing. Use a tool like Revoke.cash to audit and revoke existing approvals you no longer need. Be especially wary of any contract interaction required to claim "free" tokens.
The Four Checks to Run Before Any Transaction
These four steps catch the majority of scams:
-
Slow down deliberately. Urgency is a manipulation tactic, not a property of a genuine opportunity. If pressure to act immediately is part of the pitch, that is itself a red flag.
-
Verify independently. Search for the project or person on multiple independent sources — not links provided by the person promoting it. Check if the domain is newly registered. Read what critics and sceptics say, not just promoters.
-
Check on-chain. For any token, look up the contract address on a blockchain explorer. See who deployed it, how old it is, what the top holders look like, and whether liquidity is locked.
-
Never share your seed phrase or private key. This is the absolute rule. There is no legitimate scenario where any service or person needs these to help you. Anyone asking for them is attempting to steal your funds.
Where to Report a Crypto Scam
If you have been scammed:
- FTC (US): ReportFraud.ftc.gov
- FBI IC3 (US): ic3.gov (particularly for investment fraud)
- Action Fraud (UK): actionfraud.police.uk
- Your exchange: If funds left via a centralised exchange, report immediately — in rare cases they can flag the destination address
Recovery of funds is unlikely in most cases, but reporting helps law enforcement build patterns that lead to eventual prosecutions.
You can also monitor live crypto prices to understand what legitimate market conditions look like — extreme promises of guaranteed gains during any market condition are a sign something is wrong.
This article is for educational purposes only and does not constitute financial, legal, or investment advice. Cryptocurrency markets are volatile and unregulated in many jurisdictions. If you believe you have been defrauded, contact your local law enforcement and relevant financial regulator. Do your own research before interacting with any crypto platform or token.
Frequently asked questions
What is the most common crypto scam?+
Fake investment platforms and romance scams (pig butchering) consistently generate the highest reported losses. Rug pulls are the most common in DeFi. Phishing attacks targeting seed phrases are ubiquitous. The common thread: any scheme requiring you to send funds first or share private credentials is a scam.
Can you get your money back after a crypto scam?+
In most cases, no. Crypto transactions are irreversible by design — once funds leave your wallet to a scam address, they cannot be recalled. Centralised exchanges can occasionally freeze a destination address if notified immediately after a transfer. Law enforcement can trace funds but recovery rates are very low. Report the fraud anyway, as it helps build cases against organised groups.
How do I verify if a crypto project is legitimate?+
Check that the team is publicly identified and verifiable (search their claimed identities). Look for an audited smart contract from a named security firm. Verify the liquidity pool is locked. Read the whitepaper critically and check whether the tokenomics make sense. Search for independent commentary from people with no financial stake in the project doing well.
Is "guaranteed return" in crypto ever real?+
No. Cryptocurrency markets are volatile and no one can guarantee a return. Any platform or person promising guaranteed profits — especially double-digit percentages per week or month — is either running a Ponzi scheme (paying early investors from new investor funds) or a blatant fraud. Legitimate DeFi yields exist but they fluctuate and carry real risks of loss.
What should I never do with my seed phrase?+
Never enter it on any website, never share it with anyone for any reason, never photograph it and store the image in cloud storage, never type it into a message or email, and never enter it into an app you did not download directly from the official developer. Your seed phrase is the master key to your wallet. Anyone who has it can take everything in it.
Our editorial team covers cryptocurrency market data, on-chain metrics and beginner education. Every guide is fact-checked against live market data from CoinMarketCap and Binance and reviewed for accuracy. Content is educational only and not financial advice. Learn about our data & methodology →
Track the market live
Real-time prices, market cap and trends for the top 100 coins.