How to Spot a Crypto Scammer: 15 Red Flags and Fast Checks
To spot a crypto scammer, look for guaranteed returns, urgency, unsolicited contact and any request to send crypto to a wallet or site you did not choose. Verify the person and platform independently before moving funds. Crypto transfers are usually irreversible, so checking first is the only reliable protection.
The message looks harmless. A stranger texts "wrong number," chats for two weeks, then mentions a trading platform that is quietly making them money. By the time you see a dashboard showing gains you cannot withdraw, the funds are already gone. This pattern, commonly called pig butchering, drains victims one deposit at a time. This guide gives you the red flags, the verification steps and what to do if you have already sent money.
Key finding: Almost every crypto scam, whatever the story, has the same final step: you are asked to send assets somewhere you cannot reverse. If a request to move funds comes from someone you did not contact first, treat it as a scam until you have proven otherwise through an independent channel.
What the Fraud Data Shows
| Agency | Role in crypto fraud | Where to act |
|---|---|---|
| FBI (IC3) | Collects internet crime complaints, tracks crypto-related losses, coordinates with other law enforcement | ic3.gov |
| FTC | Consumer fraud reports and the Consumer Sentinel database; publishes scam alerts | reportfraud.ftc.gov |
| CFTC | Accepts tips and complaints | cftc.gov (tip and complaint page) |
| SEC | Accepts tips | sec.gov (tips, complaints and referrals) |
Nobody is exempt.
10 Common Crypto Scam Types
- Pig butchering (romance or friendship investment fraud). A long chat builds trust, then you are steered to a fake trading app showing fabricated profits.
- Fake exchange or trading platform. Professional-looking site, no real trading. Withdrawals trigger "tax" or "unlock" fees.
- Giveaway and impersonation scams. "Send 0.1 BTC, get 0.2 BTC back," often using a hacked or fake celebrity account. At the real-time market price of $74,019 per Bitcoin as of November 12, 2026, that 0.1 BTC is about $7,402 gone with no return.
- Fake customer support. You post a problem publicly, and "support" DMs you first, asking for your seed phrase or remote access.
- Phishing and wallet drainers. Fake airdrop or mint sites ask you to connect a wallet and sign a malicious approval.
- Rug pulls. Developers launch a token, collect liquidity, then drain the pool and vanish.
- Ponzi-style "yield" programs. Fixed daily returns paid from new deposits until recruitment stalls.
- Recovery scams. A second wave targeting past victims, promising to retrieve lost funds for an upfront fee.
- Fake wallet apps and browser extensions. Cloned apps that steal your seed phrase on import.
- Pump-and-dump groups. Social channels that hype a low-cap coin so insiders can sell into your buying.
15 Red Flags Table
| # | Red flag | Why it matters | What to do |
|---|---|---|---|
| 1 | Guaranteed or fixed returns | No legitimate market guarantees profit | Walk away |
| 2 | Unsolicited contact (DM, text, dating app) | Common opening for relationship scams | Do not move the conversation to a private app |
| 3 | Urgency or countdown timers | Pressure prevents verification | Slow down; wait 24 hours |
| 4 | Request for your seed phrase or private key | Anyone holding it controls your funds | Never share, with anyone |
| 6 | Send crypto to "verify" or "secure" your account | No real service requires this | Contact the platform via its official app |
| 7 | Platform not discoverable outside the scammer's link | Fake apps are shared by invitation | Search independently; check regulator lists |
| 8 | Fees or "taxes" required before withdrawal | Classic second-stage extraction | Stop depositing; report |
| 9 | Anonymous team, stock photos, no track record | Nothing to hold accountable | Reverse image search the team |
| 10 | Fake or copied audits and licenses | Badge is present, verification is not | Confirm on the auditor or regulator's own site |
| 11 | Referral bonuses that reward recruiting | Ponzi structure | Avoid |
| 12 | Lookalike domain or misspelled URL | Phishing relies on near-identical names | Type the address manually; bookmark real sites |
| 13 | Payment only in crypto, gift cards or wire | Hard to reverse | Question why other methods are refused |
| 14 | Wallet connection plus unlimited token approval | Lets a contract drain tokens later | Reject; use limited approvals; revoke old ones |
| 15 | Pressure to keep it secret or to invest more after a "win" | Isolation and escalation tactics | Talk to a trusted person before any transfer |
Scam Score Self-Check
Add up the points for every statement that is true about the offer or person you are dealing with.
- They contacted you first: 2 points
- Returns are guaranteed or unusually steady: 3 points
- You are told to act within hours: 2 points
- They ask for a seed phrase, private key or remote access: 10 points (automatic stop)
- You must send crypto to a wallet or platform you did not already use: 3 points
- You cannot find independent reviews or a regulator listing: 2 points
- Fees or taxes are demanded before you can withdraw: 5 points
- The relationship moved from a public app to a private chat: 1 point
| Total | Reading | Action |
|---|---|---|
| 0 to 2 | Low signal | Still verify the platform independently |
| 3 to 5 | Elevated | Pause; verify through regulator and exchange channels |
| 6 or more | Treat as a scam | Stop contact, send nothing, report |
This is a screening aid, not a legal determination. A low score does not make an offer safe.
How Scammers Pick and Work Victims
- Entry points: social media DMs, dating apps, messaging groups, fake job offers, search ads and cloned YouTube livestreams.
- Trust phase: days to weeks of casual conversation, shared photos and "financial success" stories.
- Test deposit: a small deposit that appears to grow, sometimes with a small successful withdrawal to build confidence.
- Escalation: larger deposits, margin calls, "VIP tiers" and borrowed money.
- Lockout: withdrawal fees, frozen accounts and finally silence.
Scripts are often run by organized operations that rotate fake profiles and use polished platforms. The pattern matters more than the persona.
Anonymized Case Examples
These are illustrative composites of common scam patterns. They are not individual victim accounts, and no loss figures are claimed.
Case 1: The "wrong number" mentor (stopped before loss)
- Before: A stranger on a messaging app shares gains from a "private trading platform" and offers to teach the strategy.
- Check run: The target searched the platform's name with "scam" and "withdrawal," found no regulator listing and no independent coverage, and noticed the only way to reach it was a link in the chat.
- After: No funds sent. The chat was blocked and reported to the platform it started on.
Case 2: The unlock fee (loss, partial recovery steps)
- Before: A victim deposited into a fake exchange, saw balances grow, then was told a "tax" was needed before withdrawal.
- Turning point: A family member questioned why a real exchange would require a deposit to a personal wallet to release funds.
- After: Payments stopped. The victim saved transaction hashes, reported to IC3 and the FTC, and notified the exchange used for the original purchase so the destination address could be flagged. Recovery is not guaranteed, but timely reports give investigators something to work with.
Case 3: The fake support DM (stopped at the last step)
- Before: A user posted a login problem in a public community. Within minutes, an account named "Support" messaged first and asked for the 12-word recovery phrase.
- Check run: Real support teams do not DM first and never ask for a recovery phrase.
- After: Phrase kept private. The user contacted support through the official app.
Platform Verification Methods
| Check | Legitimate platform | Scam platform |
|---|---|---|
| How you found it | Your own search, an app store listing, a known brand | A link from a stranger or ad |
| Domain | Matches the official domain listed in the company's help center | Slight misspelling, odd extension or a very new domain |
| Regulation | Listed with a regulator you can search yourself (for example FinCEN MSB registration or state licensing in the US, the FCA register in the UK) | License number given, but not on the regulator's own site |
| Withdrawals | Routine, no deposit required to release funds | Fees, taxes or "verification deposits" first |
| Support | In-app tickets and official help center | Private chat accounts only |
| Security requests | Never asks for seed phrase or passwords | Asks for either, or for remote access |
Coinbase, Kraken and similar exchanges
- Type the exchange address yourself or use the official app; do not use ad links or links from messages.
- Read the exchange's help center page on official communications. Major exchanges publish their official domains and state that staff will not ask for passwords, 2FA codes or recovery phrases.
- If a call, text or email claims there is an account issue, hang up and check the notification inside your logged-in account.
- Turn on app-based or hardware-key two-factor authentication and enable withdrawal address allowlisting where the exchange offers it.
- Never move funds to a "safe wallet" at an exchange's supposed request. No genuine support process requires it.
For tokens, check the contract address on the project's official channels and confirm it against independent listing data. Fake tokens often copy the name and ticker of real ones but use a different contract.
Blockchain Tracing Basics
Public block explorers let you inspect wallet activity without special skills. Use Etherscan for Ethereum, mempool.space or Blockchain.com's explorer for Bitcoin, Solscan for Solana and Tronscan for TRON.
- Paste the receiving address into the explorer for the correct network.
- Check wallet age and activity. A brand-new address that only receives from many different people is a warning sign.
- Look at where funds go. Quick forwarding to many new addresses, mixers or exchange deposit addresses suggests laundering.
- Check labels. Explorers tag known exchange wallets, which helps you tell which exchange to contact.
- Inspect token approvals. On Ethereum, the Etherscan approval checker or Revoke.cash shows which contracts can spend your tokens; revoke anything unfamiliar. Ethereum trades at $2,060 as of November 12, 2026, per real-time market data, and unlimited approvals can drain far more than a single transaction.
- Save evidence. Record transaction hashes, addresses, timestamps and amounts for reports.
Tracing shows where funds went. It does not identify the person behind the wallet. Law enforcement can sometimes use clustering and exchange records to link addresses to people, which is why fast reporting matters.
Printable Verification Checklist
Use your browser's Print or Save as PDF option to keep this list handy.
- [ ] I found this platform or person through my own search, not through an unsolicited message.
- [ ] The domain matches the one published in the company's official help center.
- [ ] The company appears in a regulator's own database that I searched myself.
- [ ] There are independent reviews and news coverage beyond the company's own materials.
- [ ] No one has asked for my seed phrase, private key, passwords or 2FA codes.
- [ ] No one has asked for remote access to my device.
- [ ] Returns are not guaranteed or fixed.
- [ ] I am not being rushed.
- [ ] I can withdraw without paying extra fees or taxes first.
- [ ] I checked the receiving address on a block explorer.
- [ ] I tested with a very small amount and withdrew it successfully before considering more.
- [ ] I told a trusted person about the offer and they had no concerns.
If You Already Sent Funds
- Stop sending. Do not pay any "fee" or "tax" to retrieve funds.
- Preserve evidence. Screenshots, chat logs, wallet addresses, transaction hashes, website URLs and dates.
- Secure your accounts. Change passwords, move remaining assets to a new wallet if a seed phrase was exposed, and revoke token approvals.
- Contact the exchange. If funds left a centralized exchange, tell its fraud team immediately with the destination address.
- Report to authorities (see below).
- Beware recovery scams. Anyone promising guaranteed recovery for an upfront fee is almost certainly running a second scam.
- Get support. Victims often feel shame, which scammers exploit. Telling friends or family reduces the risk of repeat targeting.
Where to Report
| Region | Agency | Contact point |
|---|---|---|
| United States | FBI IC3 | ic3.gov |
| United States | FTC | reportfraud.ftc.gov |
| United States | CFTC | cftc.gov (tips and complaints) |
| United States | SEC | sec.gov (tips, complaints and referrals) |
| United Kingdom | Action Fraud and the FCA | actionfraud.police.uk; FCA warning list on fca.org.uk |
| Canada | Canadian Anti-Fraud Centre | antifraudcentre-centreantifraude.ca |
| Australia | Scamwatch | scamwatch.gov.au |
| Singapore | MAS Investor Alert List and police | mas.gov.sg |
| India | National Cyber Crime Reporting Portal | cybercrime.gov.in |
Editor's Note on Common Mistakes
The same errors show up in fraud reports again and again. People verify the platform's website but never check how they were introduced to it. They trust a dashboard balance as proof that the money exists. They treat a successful small withdrawal as proof of legitimacy, when scammers often allow one to build confidence. And they use a "verify" deposit to a personal wallet as if it were a normal onboarding step. A practical rule is to separate identity from infrastructure: confirm the person is who they claim through another channel, and confirm the platform through a regulator or established listing you searched for yourself. Hardware wallets help, but only if you never type the recovery phrase into a website or app. Test withdrawals with small amounts first, and remember that a real exchange never needs you to fund an outside wallet to release your own money.
FAQ
What is a crypto scammer?
A crypto scammer uses fake investments, impersonation, cloned platforms or malicious smart contracts to take digital assets. Most scams end with you voluntarily sending crypto to an address the scammer controls.
How to tell if a crypto investment is a scam?
Look for guaranteed returns, urgency, unsolicited contact, requests to move funds to an unfamiliar wallet and fees demanded before withdrawal. One of these is enough to stop and verify independently.
Is it safe to talk to strangers about crypto online?
Talking carries little risk. Acting on their advice does. Never send funds, share a recovery phrase, install remote-access software or use a platform a stranger recommends.
Why do crypto scams work so well?
Transfers are fast and usually irreversible, there is no chargeback, and scammers use trust-building and fake profit dashboards to pull victims into larger deposits.
How to report a crypto scam?
In the US, file with the FBI at ic3.gov and the FTC at reportfraud.ftc.gov, and send tips to the CFTC or SEC where relevant. Notify the exchange involved and keep all transaction hashes and chat logs.
Related Reading
- More crypto articles for market and security coverage
- Complete fintech guide
- Best crypto wallet guide
- How to buy Bitcoin safely
- How to verify a crypto exchange before depositing
- How to spot a DeFi rug pull
- How to avoid pump and dump schemes