The Scale of the Problem
Cryptocurrency scams are a multi-billion dollar industry. In 2025 alone, reported losses from crypto-related fraud exceeded $5.6 billion globally — and that only counts reported cases. The irreversible nature of blockchain transactions means that once your Bitcoin is sent to a scammer, there is no chargeback, no fraud department to call, and virtually no way to recover the funds.
The best defense is prevention. Every scam exploits one of two things: technical vulnerability (hacking your device or accounts) or psychological vulnerability (tricking you into voluntarily sending money). This guide covers both.
Common Scam Types
1. Phishing Attacks
Phishing is the most common attack vector. Scammers create fake websites, emails, or messages that look identical to legitimate platforms — exchanges, wallet interfaces, DeFi protocols — and trick you into entering your credentials or seed phrase.
How to spot it: Check the URL character by character — scammers use lookalike domains (binance.co instead of binance.com, or Unicode characters that look like Latin letters). Legitimate platforms will never DM you first with links. Never click links in unsolicited emails or messages — navigate to the platform by typing the URL yourself.
Golden rule: Never enter your seed phrase or private key into any website, ever. A legitimate wallet only asks for your seed phrase during initial device recovery — never on a website.
2. Impersonation Scams
Scammers pose as customer support agents, exchange employees, or well-known figures in the crypto space. They contact you via Telegram, Discord, Twitter/X DMs, or even phone calls — claiming there's an issue with your account, offering "help" with a transaction, or promoting a "giveaway."
How to spot it: No legitimate exchange or wallet company will ever DM you first. No one legitimate will ever ask for your seed phrase, private keys, or remote access to your computer. Celebrity "giveaways" that ask you to send crypto to receive double back are always scams.
Golden rule: If you need support, initiate contact yourself through the official website or app — never respond to someone who contacts you first.
3. Rug Pulls and Exit Scams
A rug pull happens when developers create a cryptocurrency project (token, DeFi protocol, NFT collection), market it aggressively, collect investor funds, and then suddenly abandon the project — withdrawing all the liquidity and leaving investors with worthless tokens.
How to spot it: Anonymous or pseudonymous teams with no verifiable track record. No public code audit from a reputable firm. Liquidity that isn't locked or time-locked. Unrealistic promises of guaranteed returns. Aggressive marketing with urgency ("launching in 2 hours — don't miss out!").
Golden rule: Only invest in projects with transparent, verifiable teams, audited smart contracts, and locked liquidity. If you can't explain how the project generates real value in one sentence, don't invest.
4. Ponzi and Pyramid Schemes
These schemes promise guaranteed high returns and pay early investors with money from new investors rather than from legitimate business activity. They work until new investor inflow slows — at which point the scheme collapses and most participants lose everything.
How to spot it: Guaranteed returns (no legitimate investment guarantees returns). Emphasis on recruiting others (referral bonuses for bringing in new investors). Complex or vague explanations of how returns are generated. Promoters who deflect questions with "do your own research" instead of providing clear answers.
Golden rule: If the promised returns significantly exceed what traditional markets offer, the risk is extreme — and the "investment" is likely a scam or unsustainable.
5. Social Engineering and Romance Scams
Also known as "pig butchering," these long-con scams involve building trust with the victim over weeks or months — through dating apps, social media, or messaging platforms — before steering the conversation toward crypto "investment opportunities." The victim is guided to a fake trading platform that shows fake profits, encouraged to invest more, and eventually finds they cannot withdraw.
How to spot it: Someone you've never met in person offering investment advice. Pressure to move conversations off dating platforms to WhatsApp, Telegram, or Signal. Investment platforms you've never heard of that they "personally guarantee."
Golden rule: Never take investment advice from someone you've only met online. Verify any platform independently before depositing funds.
The Universal Warning Signs
Across all scam types, these red flags are consistent:
- "Guaranteed returns" — Nothing in investing is guaranteed. This alone should end the conversation.
- Urgency and pressure — "Limited time offer," "only 100 spots," "price increases in 2 hours." Scammers create artificial scarcity to prevent you from thinking.
- Unsolicited contact — Anyone who reaches out to you first about crypto is almost certainly a scammer. Period.
- Requests for private keys or seed phrases — Never, under any circumstances, share these with anyone.
- Requests for remote computer access — Scammers pose as "support" and ask to access your computer via AnyDesk or TeamViewer to "help" you.
- Screenshots of others' profits — Easily faked. Never base investment decisions on what strangers show you.
Practical Protection Checklist
- Use a hardware wallet for significant holdings. Your private keys stay offline and can't be stolen remotely.
- Enable two-factor authentication (2FA) everywhere. Use an authenticator app, not SMS. SMS-based 2FA can be defeated by SIM-swap attacks.
- Bookmark official sites. Never search for exchange or wallet URLs — use your bookmarks to avoid phishing sites that buy search ads.
- Verify addresses before sending. Check the first 4 and last 4 characters of every address. Malware can replace addresses in your clipboard.
- Use a dedicated email for crypto accounts. Don't use the same email you use for social media, shopping, and newsletters.
- Never discuss your holdings publicly. Revealing how much crypto you hold makes you a target.
- If it sounds too good to be true, it is. There is no "risk-free" yield. There is no "guaranteed" return. There is no "double your Bitcoin" giveaway.
The single most powerful protection: slow down. Scammers create urgency to bypass your critical thinking. Take your time. Research independently. Ask questions in public forums where scammers can't control the answers. A legitimate opportunity will still be there tomorrow.
What to Do If You've Been Scammed
If you've lost funds to a scam:
- Stop all communication with the scammer immediately. Do not send more funds — "recovery" offers are themselves scams.
- Report to law enforcement. File a report with your local police and national cybercrime agency (FBI IC3 in the US, Action Fraud in the UK).
- Report to the exchange or platform. If funds were sent through an exchange, report the receiving address — exchanges can freeze accounts linked to criminal activity.
- Report to blockchain analytics firms. Companies like Chainalysis and CipherTrace work with law enforcement to track stolen funds.
- Secure remaining assets. Move any remaining funds to a new wallet with a new seed phrase — your old wallet may be compromised.
Next Steps
- Secure your Bitcoin properly — see our wallet setup guide
- Learn about cold storage — see our cold storage guide
- New to Bitcoin? Start with our beginner's guide
- Look up terms in our glossary