Common Crypto Scams and How to Avoid Them

Most crypto losses don't come from hacks of blockchains — they come from people being talked, tricked, or rushed into handing over money or keys. Crypto scams work because transactions are irreversible, pseudonymous, and global: once funds move, there is no chargeback and usually no one to sue. The good news is that the scams are highly repetitive. Learn the half-dozen standard scripts and the red flags they share, and you'll recognize almost every variation you'll ever encounter.

Phishing and Fake Websites

Phishing is the volume leader: fake versions of real things, built to capture your login, your card details, or — the jackpot — your seed phrase.

The classic forms:

Lookalike sites reached through search ads or typo domains. You search for your wallet or exchange, click a sponsored result, and land on a pixel-perfect clone that harvests whatever you type. Scammers actively buy ads above legitimate results.
Urgent emails and texts: "suspicious login detected," "your account will be suspended," "verify your wallet." The link leads to a clone; the urgency exists to stop you from thinking.
Airdrop and claim pages promising free tokens if you "connect and verify" your wallet — where verification means entering your seed phrase or signing a malicious transaction.

The defenses are boring and nearly absolute: reach exchanges and wallets only through bookmarks you created, never through search ads or message links; treat every unsolicited message about your accounts as hostile until proven otherwise; and remember that no legitimate service ever needs your seed phrase — not to verify, sync, validate, or un-freeze anything. A companion guide in our security path covers phishing and social-engineering defense in day-to-day depth; the point here is simply to recognize the shape.

Impersonation and Fake Support

When something goes wrong — a stuck transaction, a confusing error — beginners ask for help publicly, and scammers are waiting. Post a question in a Discord, Telegram, or X thread and you'll often receive a direct message within minutes from "support staff" with an official-looking logo. Real support teams for wallets and exchanges do not initiate DMs, and they never ask you to share your screen, install remote-access software, enter your seed phrase into a "sync tool," or send funds to a "verification address."

The same playbook powers celebrity giveaway scams: streams or posts using a founder's or celebrity's likeness — increasingly AI-generated video — promising to double any crypto you send to an address. Nobody doubles crypto. The transaction is simply a donation to a thief.

Rug Pulls and Pump-and-Dumps

These scams live inside the market itself: the product being sold is the trap.

A rug pull is a token or project whose creators plan to take the money and vanish. Common mechanics include dumping a huge insider token allocation on buyers once the price rises, draining the liquidity pool that makes the token tradeable (leaving holders unable to sell at any price), or shipping a token contract with hidden code — a "honeypot" — that lets others buy but blocks them from selling. Memecoin launchpads and DEXs make token creation nearly free, so thousands of such tokens launch weekly; the overwhelming majority of anonymous, hours-old tokens exist to extract money from late buyers.

A pump-and-dump is coordinated hype: a group accumulates a thin, small-cap token, floods social media with urgency ("100x incoming, get in before the announcement"), and sells into the buying they created. Paid influencer promotion, often undisclosed, is a standard ingredient.

Practical filters: anonymous teams, unlocked liquidity, a large insider supply share, guaranteed-return language, and manufactured urgency are each individually disqualifying for meaningful money. If you can't explain who built it, what it does, and who holds the supply, you're not investing — you're buying a lottery ticket from the person printing the tickets.

Romance and "Pig Butchering" Investment Scams

The most financially devastating scam category isn't a quick trick — it's a long con. So-called pig-butchering operations (the scammers' own term: fatten the victim before slaughter) begin with an innocuous wrong-number text, a dating-app match, or a friendly social media contact. Over weeks or months, the scammer builds a genuine-feeling relationship, then casually mentions their success trading crypto and offers to teach you.

The victim is directed to a professional-looking trading platform — entirely fake, run by the scammers. Small deposits show handsome "profits," and small withdrawals are honored to build trust. Then the pressure builds to invest seriously: savings, retirement funds, loans. When the victim finally tries to withdraw, the site demands "taxes" or "fees" — a last extraction — and then everything disappears. These operations are industrialized, run from scam compounds with scripts and quotas, and losses per victim regularly reach six figures. US authorities have reported billions of dollars in annual losses to this category alone.

The tells: an online-only relationship that steers toward investing; a platform you've never heard of that only your contact recommends; effortless early profits; withdrawal problems that can be solved by paying more. Anyone you have never met in person who wants to guide your investments is a scammer — treat that as a rule with no exceptions.

Wallet Drainers and Malicious Signatures

A newer class of theft never asks for your seed phrase. Drainer kits are turnkey criminal software embedded in fake mint pages, airdrop claims, and compromised project Discords or hijacked official accounts. You connect your wallet and are asked to sign something; the signature is actually a token approval or off-chain order granting the attacker rights to your assets, and your wallet empties minutes later.

Defenses: read what you're signing, and be suspicious of any unexpected approval request, especially "unlimited" approvals; use a wallet that simulates and plainly describes transaction effects; keep long-term holdings in a wallet that never connects to websites, and do your experimenting from a separate hot wallet with small balances; and periodically review and revoke old token approvals. Assume that any "limited-time claim" arriving via DM or a just-hacked account is a drainer until proven otherwise.

The Habits That Keep You Safe

Individual scams evolve; the underlying red flags don't. Nearly every scheme above triggers at least two of these:

Guaranteed or outsized returns. Nobody legitimate promises profits, let alone doubles your money.
Manufactured urgency. Countdown timers, "last chance," "act before the announcement" — pressure exists to bypass your judgment.
Unsolicited contact. Real opportunities don't arrive by DM, wrong-number text, or comment-section reply.
Requests for keys, remote access, or upfront fees. Seed phrase requests are theft attempts, always; "pay a fee to unlock your withdrawal" is a second theft on top of the first.
Verification-resistant stories. Anonymous teams, unheard-of platforms, profits only visible on the scammer's own site.

Adopt the matching habits: bookmark your services, ignore DMs about money entirely, verify claims through official channels you navigate to yourself, keep serious holdings isolated from the wallet you experiment with, and give yourself a mandatory 24-hour pause before any significant, novel transaction. Scams are engineered for speed; deliberation is their natural predator. And if you are caught — it happens to careful people — stop all further payments immediately (recovery services demanding fees are a follow-up scam), document everything, and report to the relevant authorities.

Key Takeaways

Crypto scams exploit irreversibility: there is no chargeback, so prevention is the whole game.
No legitimate service ever asks for your seed phrase, initiates a DM, or needs remote access to your device — each of those is the scam itself.
Anonymous tokens with insider-heavy supply and urgent hype are engineered extractions; assume brand-new hyped tokens are rug pulls until proven otherwise.
Long-con investment scams ("pig butchering") cause the largest losses — never invest through a platform recommended by someone you've only met online.
Guaranteed returns, urgency, and unsolicited contact are the universal red flags; a 24-hour pause before any significant transaction defeats most scams by itself.