Common Crypto Scams and How to Avoid Them
The scams that cost retail crypto users the most money — recognized by the patterns rather than the specific names, because the names change but the patterns don't.
Crypto scams have separated retail users from billions of dollars over the past decade. The frustrating truth is that the great majority of these scams are recognizable from a small set of patterns that repeat over and over. New names, same playbook.
If you can recognize the patterns, you can avoid almost all of the major scams. This guide walks through the categories, the specific tells, and the rules that protect you.
1. The "support" impersonation scam
You post a question about a wallet, exchange, or protocol on Twitter, Discord, Telegram, or Reddit. Within minutes, a friendly account claiming to be official "support" messages you privately. They want to help. They ask for your seed phrase, your password, or for you to "validate" your wallet at a specific URL.
The rule: No legitimate company or project messages you first on social media. Ever. Official support is always pull (you contact them), never push (they contact you). Anyone who DMs you offering help is, with near 100% certainty, a scammer.
2. Fake giveaways
"Elon Musk is giving away 5,000 Bitcoin. Send 0.1 BTC to this address and receive 1 BTC back. Limited time!" The same scam runs with hundreds of celebrities. The premise is always the same: send crypto to an address, receive more crypto back.
The rule: No one is giving away crypto on the condition that you send some first. The math doesn't work for legitimate giveaways. Every single one of these is a scam.
3. Pig butchering ("romance + investment" scams)
One of the most damaging scams of recent years. You meet someone on a dating app or social media. They are charming, attractive, attentive. Over weeks or months, they mention their successful crypto investing. Eventually they introduce you to a platform that is producing remarkable returns. You make a small initial investment; it appears to gain value. You invest more. When you try to withdraw, there are problems — taxes owed, fees required, technical issues. By the time you realize there is nothing real on the other end, your money is gone.
The rule: If someone you met online introduces you to a "crypto investment platform" you have never heard of, it is a scam. Period. Real investment platforms do not need to be marketed by your love interest. The platform interfaces look perfectly legitimate; that is part of the design. Trust the structural pattern, not the specific details.
4. The "approval" drain
You connect your wallet to a "new airdrop" or "yield farm" or "NFT mint." The site asks you to approve a transaction. The transaction is not a swap or a mint — it is a token approval that gives the contract permission to spend your funds. After you sign, the contract drains your wallet.
The rule: Read what your wallet is asking you to sign. Token approvals to unknown contracts are dangerous. Use tools like Revoke.cash to periodically clear out approvals you no longer need. Approve specific amounts, not unlimited spending caps, when possible.
5. Fake wallet apps
You search for a popular wallet (MetaMask, Trust Wallet, Trezor Suite) in the app store. Multiple results appear. You install one. The wallet looks identical to the real thing. You transfer your seed phrase to "restore" your wallet. The scammer immediately drains every connected address.
The rule: Download wallet software only from the project's official website. Verify the URL carefully — scammers register lookalike domains (metam4sk.io, trezr.com, etc.) that are almost indistinguishable from the real ones. For hardware wallet companion software, link directly from the device's documentation.
6. Rug pulls and exit scams
A new token launches with an active marketing campaign, a slick website, and ambitious roadmap. The price rises rapidly as new buyers pile in. Then suddenly the team disappears, the liquidity is removed, and the token crashes to zero. The "team" (often anonymous) walks away with the proceeds.
The rule: Anonymous teams, unaudited contracts, and tokens that launch with most of the supply held by insiders are the warning signs. Newly launched tokens with no track record are gambling, not investing — treat them accordingly. The honest truth is that the majority of new token launches end this way; the few that succeed are statistically improbable to identify in advance.
7. Phishing emails and SMS
An email or text claims to be from an exchange, wallet provider, or government agency. It contains a link to "verify your account," "reactivate your access," or "claim your reward." The link goes to a perfect-looking but fake site that captures your credentials.
The rule: Never click links in emails or SMS to access financial accounts. Always navigate to the site by typing the URL directly or using a bookmark you created previously. Enable two-factor authentication using TOTP (Google Authenticator, Authy) rather than SMS, which is vulnerable to SIM swap attacks.
8. The "trust me, send a small amount first" verification scam
You are buying crypto from someone person-to-person, or selling to a buyer. They ask you to send a small amount first as a "verification" or "trust test." After you send it, they disappear. Or they send a small amount to you, you reciprocate by sending a larger amount, and they reverse the original payment.
The rule: Use regulated exchanges with escrow for crypto purchases, not random people on Telegram or Craigslist. The "person-to-person" market is a high-fraud environment that experienced traders manage carefully; beginners should avoid it entirely.
9. Cloud mining and HYIP scams
A website promises high yields on Bitcoin "deposits." Returns are real for a while — you can even withdraw small amounts. This builds trust and encourages larger deposits. Eventually the site disappears with everyone's funds.
The rule: If a return seems implausibly high, it is. The only sustainable Bitcoin yield comes from legitimate lending and staking products on regulated platforms — and even those have risks. Anything promising 1% per day, 30% per month, or "guaranteed returns" is a Ponzi scheme. The fact that early users got paid is how the scheme grows, not evidence of legitimacy.
10. Recovery scams (the scam-after-the-scam)
You have been scammed once. You post about it on a forum or social media. Within hours, you receive messages from "recovery experts" who can get your money back for a small upfront fee. They are a second wave of scammers targeting victims of the first wave.
The rule: If you have been scammed, file reports with your local law enforcement and the relevant national agency (FBI IC3 in the US, Action Fraud in the UK, etc.). Do not pay anyone who claims they can recover your funds. Recovery services that are legitimate work through formal legal channels, are regulated, and do not solicit victims via social media.
The protective principles
Drawing from all of these, the principles that protect you are simple:
- Never share your seed phrase, recovery phrase, or private keys with anyone, ever, for any reason.
- Never click links in unsolicited messages. Navigate to sites directly.
- Treat anonymous messages claiming to be from companies as scams by default.
- Read what your wallet is asking you to sign before signing.
- Be deeply skeptical of any "investment opportunity" introduced to you by someone you met online.
- If returns sound too good to be true, they are.
- Use regulated exchanges, well-known wallets, and major cryptocurrencies. The cutting edge is where most of the scams live.
- If you have been scammed once, you are now a target for further scams. Tighten your defenses.
The bottom line
The specific scams in this guide will be replaced by new ones over the next few years. The underlying patterns will not. Anyone who internalizes the patterns — unsolicited contact, urgency, too-good-to-be-true returns, requests for seed phrases or signatures — can navigate crypto safely. Anyone who treats each new specific scam as something they would recognize while missing the pattern will get caught eventually.
Defense is mostly about discipline and a small set of habits. Build those habits early and they will protect you for the rest of your time in the space.