TL;DR: Crypto scams cost investors an estimated $5–10 billion every year. The most dangerous are rug pulls, phishing attacks, and fake investment platforms. Recognising the red flags is your first line of defence.
Why Crypto Is a Target for Scammers
Cryptocurrency transactions are irreversible and pseudonymous. Once a scammer has your funds, there's no bank to call, no chargeback, and often no way to trace or recover the money. This makes crypto uniquely attractive to fraudsters — and makes vigilance uniquely important for users.
The Most Common Crypto Scams
Rug Pulls
A rug pull happens when developers launch a new token, hype it on social media, attract investors, and then drain the liquidity pool — taking all the money and disappearing. The token price collapses to zero instantly.
Red flags: anonymous team, no audited code, unrealistic promises, sudden explosive social media growth, no real product or utility.
Phishing Attacks
Phishing involves fake websites, emails, or social media accounts designed to look like legitimate exchanges or wallets. The goal is to steal your login credentials or convince you to enter your seed phrase.
Red flags: slightly wrong domain names (binance-pro.com instead of binance.com), unsolicited emails asking you to verify your account, any website asking for your seed phrase.
Fake Exchanges and Investment Platforms
Fraudulent exchanges look professional and may even let you make small withdrawals early on to build trust. Once you deposit a significant amount, withdrawals are blocked — and the platform eventually disappears.
Red flags: no verifiable company registration, promises of guaranteed returns, pressure to recruit friends, inability to withdraw your full balance.
Pump-and-Dump Schemes
Coordinated groups artificially inflate the price of a low-liquidity token through hype, then sell their holdings at the peak — leaving latecomers with worthless tokens.
Red flags: sudden price spikes with no fundamental news, Telegram or Discord groups hyping obscure coins with "100x guaranteed" messaging.
"Pig Butchering" Romance Scams
Scammers build fake romantic relationships online, then gradually introduce "investment opportunities" — usually fake trading platforms where victims deposit increasing amounts before the scammer vanishes.
Red flags: someone you met online pushing you toward a specific crypto platform, unusually high trading returns, difficulty withdrawing profits.
How to Protect Yourself: Step by Step
- Never share your seed phrase — ever, with anyone, for any reason. No legitimate service will ask for it.
- Bookmark your exchanges — always access crypto platforms through bookmarks, not search results or links in emails.
- Use a hardware wallet for significant holdings — it's immune to phishing because keys never leave the device.
- Verify before you trust — check a project's smart contract on independent auditing sites; look up the team on LinkedIn; search "[project name] scam" before investing.
- Enable 2FA everywhere — use an authenticator app (not SMS) on all exchange accounts.
- Ignore "too good to be true" offers — 100x guaranteed returns don't exist. Free crypto giveaways are almost always scams.
- Be sceptical of celebrity endorsements — most are fake, created with AI-generated images or hacked accounts.
What to Do If You've Been Scammed
Unfortunately, crypto transactions are irreversible — recovery is rarely possible. However:
- Report to your national cybercrime authority (Action Fraud in the UK, IC3 in the US)
- Report the scam to the exchange it used — they may be able to freeze associated accounts
- Document everything: wallet addresses, transaction IDs, screenshots
- Warn others in community forums to prevent further victims
Key Takeaways
- Your seed phrase is the master key to your crypto — never share it with anyone
- Guaranteed returns and "too good to be true" opportunities are always scams
- Always verify exchanges and projects through independent sources before depositing
- Use hardware wallets and authenticator apps for meaningful holdings
