How to Avoid Crypto Scams: 10 Red Flags and a Recovery Plan

Bitconnect (2016 to 2018): guaranteed returns

Bitconnect promised fixed monthly returns through a "lending" program. It shut down in January 2018 and its token collapsed. Guaranteed yield is the oldest Ponzi tell, and crypto did not change that.

FTX (2022): trusting a custodian

FTX customers lost access to funds after the exchange collapsed in November 2022. Its founder Sam Bankman-Fried was later convicted of fraud and sentenced to prison. The lesson: a polished brand and famous backers are not proof of safe custody. Do not leave more on any exchange than you can afford to lose.

Emerging scam tactics (2024 to 2026)

• AI deepfakes. Cloned voices and video of well-known figures promote fake investment platforms or giveaways. Verify through the person's official channels, and be suspicious of any video that urges a fast deposit.
• Address poisoning. Attackers send a tiny transaction from an address that looks nearly identical to one you used before, hoping you copy it from your history. Always verify the full address, not just the first and last characters, and use saved contacts or allowlists.
• Permit and approval phishing. Signatures that look harmless but authorize token transfers. Use a wallet that shows decoded transaction details and revoke approvals you no longer need.
• Fake task and job scams. You are paid small amounts to "complete tasks," then asked to deposit crypto to unlock bigger earnings. It follows the pig butchering pattern.
• Fake wallet apps and browser extensions. Counterfeit apps that copy official branding and capture your seed phrase. Install only from links on the official project site, and check the publisher name.
• Fake recovery services. Often run by the same networks that scammed you, or sold to you after you post publicly about your loss. Ignore unsolicited help offers.
• Malicious QR codes and ads. Sponsored search results can lead to cloned sites. Type known addresses or use bookmarks.

Verification routine before you send funds

Experienced traders treat every new address, contract and website as untrusted until checked. This is a concrete routine that reduces the risk of losses:

1. Start from a bookmark. Reach exchanges and wallets only through saved links. Search ads are a common phishing route.
2. Check the regulator register. Search the company name on the official register in your country, then confirm the license number on the regulator's own site, not on the company's page.
3. Read the contract on a block explorer. For a token, confirm the contract address from the project's official site, check whether the code is verified, review the top holders and see whether liquidity is locked. Cross-check price and listing data on an aggregator such as CoinGecko.
4. Send a small test transaction. Send a small amount first, confirm it arrives, then send the rest. This also catches wrong-network errors.
5. Verify the full wallet address. Compare every character, or use an allowlist. Clipboard malware can swap addresses.
6. Read every signature prompt. If your wallet cannot explain what it is signing, do not sign. Treat "unlimited approval" as a red flag.
7. Protect your accounts. Use an authenticator app or hardware security key instead of SMS codes. Set an anti-phishing code on your exchange account if available.
8. Store the seed phrase offline. Write it on paper or metal. Never photograph it, store it in cloud notes, or type it into any website.

Common mistakes: sending on the wrong network, approving a contract "just to see the site," and trusting a verified-looking checkmark on a social profile. A checkmark proves a payment or an account check, not integrity.

What to do if you were scammed

Speed matters, but recovery is not guaranteed. Funds sent on-chain cannot be reversed. What you can do is limit further damage and give investigators the data to freeze funds that reach a regulated exchange.

1. Stop sending money. Any request for another fee is part of the scam.
2. Secure what remains. Move remaining assets to a new wallet created on a clean device, with a new seed phrase. Revoke token approvals from the old wallet. Change passwords and enable authenticator-based 2FA.
3. Document everything. Save transaction hashes, wallet addresses, chat logs, URLs, screenshots, dates and amounts. Export exchange statements.
4. Contact the receiving exchange. If the block explorer shows your funds moved to an exchange deposit address, report it to that exchange's compliance team with the hash. Some exchanges freeze funds when law enforcement requests it.
5. Contact your bank or card issuer. If you paid by card or bank transfer to buy crypto, ask about chargebacks or a wire recall immediately. Time limits apply.
6. File official reports. Use the regional table below. A report number helps with exchange and bank requests.
7. Beware recovery scams. Reject anyone who guarantees recovery or asks for an upfront fee, and never share a seed phrase with a "recovery expert."
8. Seek support. Victims often feel shame, which stops reporting. Report anyway, and talk to someone you trust.

Where to report by country

Rules and contacts change. Confirm current details on the agency's official site, and report even if the amount seems small. Pooled reports help investigators link cases.

Printable scam checklist

Copy this into a note or print it. It is the short version of the whole guide.

• My seed phrase is written offline and has never been typed into a website or app.
• I reached this platform from a bookmark or official source, not a DM, ad or email.
• The company appears on a regulator register that I checked myself.
• There is no promise of guaranteed returns.
• No one is rushing me with a deadline.
• I made a small test transaction first.
• I verified the full wallet address and network.
• I understand what my wallet is asking me to sign.
• 2FA uses an authenticator app or security key, not SMS.
• Savings are on a hardware wallet, and only trading funds sit on exchanges.
• If something goes wrong, I know which agency to call and which hashes to save.

FAQ

What is a crypto scam?

A crypto scam is any scheme that uses deception to take your digital assets or credentials. Common forms include fake investment platforms, phishing sites, rug pulls, giveaway frauds and impersonation of support staff.

How to avoid crypto scams as a beginner?