How to Spot Crypto Scams: 10 Red Flags to Check First
A message arrives from a stranger who seems friendly. A "support agent" appears in your DMs the minute you post a wallet question. A token has doubled three times since breakfast. Each of these ends the same way: your coins go to an address you can't reverse. Blockchain transfers have no chargeback button, so the checking has to happen before you click send.
What Regulators Say About Crypto Fraud
Fraudsters commonly use guaranteed high returns, pressure to act fast and claims of "no risk" to lure investors, and these patterns apply equally to crypto offerings. A sensible approach is to be suspicious of unsolicited offers, verify who is behind a product, and never share private keys or recovery phrases.
10 Red Flags of Crypto Scams
-
Guaranteed or fixed high returns
No legitimate trading, staking or lending product can guarantee profit. Real yields float with the market and carry risk. Phrases like "daily 2% guaranteed" or "risk-free arbitrage" describe Ponzi-style structures, where early payouts come from new deposits.
-
Urgency and countdown pressure
"Presale ends in 2 hours" or "account will be frozen unless you verify now" is built to cut off your checking time. As a rule of thumb, a real opportunity should still be there after a 24-hour wait.
-
Requests for your seed phrase or private key
Your 12- or 24-word recovery phrase gives full control of your wallet. Wallet providers, exchanges and support teams never need it. Anyone who asks is stealing from you, whatever the reason given.
-
Fake support and impersonation
Scammers monitor public help threads and reply from lookalike accounts. Exchange support does not initiate DMs asking you to "validate" your wallet. Open support only from the official website you typed in yourself.
-
Anonymous team, copied whitepaper, no product
Check whether named founders have verifiable histories, whether the whitepaper is original, and whether any working product exists. Stock-photo team pages and recycled text are common tells.
-
Giveaways that require you to send first
"Send 0.1 BTC, receive 0.2 BTC back" is always fraudulent. Deepfake videos of well-known founders and fake livestreams are often used to promote these. Bitcoin trades at $73,463 according to real-time market data as of November 11, 2026, and no celebrity is doubling that for strangers.
-
Unverifiable or restrictive token contracts
Rug pulls and honeypots rely on contracts that let the creator mint unlimited tokens, block sells or drain liquidity. Unverified source code, a handful of wallets holding most of the supply and unlocked liquidity are all warnings (details below).
-
Wallet-connect and approval traps
Phishing sites ask you to connect a wallet and sign a "claim" or "verify" transaction that actually grants a token approval or transfers assets. Read every signature prompt. If you can't tell what it does, reject it.
-
Withdrawal friction
Fake platforms show growing balances but demand "tax," "unlock," or "verification" fees before you can withdraw. A real exchange deducts fees from your balance. It does not require a separate deposit to release your own money.
Common Scam Types at a Glance
| Scam type | How it works | Main warning sign |
|---|---|---|
| Rug pull | Developers hype a token, then drain the liquidity pool and vanish | Unlocked liquidity, anonymous team, concentrated holders |
| Honeypot token | Contract lets you buy but blocks selling | Buys succeed, sells fail; unverified contract |
| Pig butchering | Long-term trust building, then a fake investment platform | Stranger contact, coaching to deposit, withdrawal fees |
| Phishing / wallet drainer | Fake site collects signatures or approvals | Lookalike URL, unexpected signature request |
| Address poisoning | Attacker sends dust from a lookalike address hoping you copy it from history | Unfamiliar transaction with similar first and last characters |
| Fake exchange or app | Platform shows fake gains and blocks withdrawals | No regulatory registration, pressure to deposit more |
| Impersonation giveaway | Fake celebrity or company promises to multiply deposits | "Send first" requirement |
| Ponzi / high-yield program | Payouts funded by new deposits | Fixed returns, referral bonuses central to the model |
How to Check a Token Before Buying
Explained the way an editor would walk a friend through it, here is a repeatable process that catches most low-effort token scams.
- Get the contract address from a trusted aggregator. Open the coin's page on CoinGecko and copy the contract address from there. Never copy it from a social post or DM, because scammers deploy clone tokens with the same name and ticker.
- Paste it into the chain's block explorer. For Ethereum that is Etherscan. Look at the creation date, the number of holders and the top holder percentages. If a few wallets own most of the supply, the price can be dumped at will.
- Check that source code is verified. Unverified contracts hide what the code does. Verified code can still be malicious, but unverified code is an immediate no for most traders.
- Look at liquidity. On a DEX analytics page, see how much liquidity exists and whether it is locked or burned. Thin, unlocked liquidity means the creator can pull it out.
- Test with a small amount, then try to sell. A honeypot only reveals itself when you sell. Small test trades cost a little gas, which is cheap next to losing a full position.
- Compare against listed assets. For reference, Ethereum trades at $2,048 and Solana at $83.11 per real-time market data as of November 11, 2026. A new token claiming guaranteed multiples of that kind of move is a marketing claim, not data.
Common errors: trusting a "verified" checkmark on social media (paid badges are not endorsements), buying from a link in a group chat, and approving unlimited token spending when a fixed amount would do. To fix a risky approval, review your wallet's token approvals through a block-explorer approval checker and revoke what you don't recognize. Revoking costs a small network fee.
Trade-offs to be honest about: no checklist removes risk. Legitimate new tokens also have anonymous teams and thin liquidity at launch, so these signals raise odds of a scam but do not prove one. Treat them as reasons to size positions small or skip entirely.
Pre-Send Checklist
- Did I find this site or address myself, or did someone send it to me?
- Is the URL exactly right, typed or bookmarked, with no lookalike characters?
- Does anyone promise a return, or tell me to hurry?
- Am I being asked for a seed phrase, a private key or remote access to my device? If yes, stop.
- Can I name the people behind the project and find them elsewhere?
- Have I sent a small test transaction first?
- Is the destination address verified character by character, not just the first and last few?
- Would I still do this after waiting 24 hours?
Hardware wallets help by showing transaction details on a separate screen. Keep long-term holdings there and use a small hot wallet for experimentation. For setup advice see our best crypto wallet guide and the walkthrough on how to store crypto safely.
What to Do If You Were Scammed
- Stop all contact and further payments. Recovery "services" that contact you afterward are usually a second scam.
- Move remaining funds. If a seed phrase was exposed, create a new wallet with a new phrase and transfer what's left. Revoke token approvals on the old one.
- Save evidence. Keep transaction hashes, wallet addresses, screenshots, URLs and chat logs.
- Notify the exchange. If funds passed through a centralized exchange, report the destination address to its compliance team. They can sometimes freeze related accounts.
- Report to authorities. In the US, that means the FBI's Internet Crime Complaint Center (IC3) and the FTC. Other countries have national equivalents. Reports rarely guarantee recovery, but they feed investigations.
FAQ
What is a crypto scam?
A crypto scam is any scheme that uses deception to take digital assets: fake investments, phishing sites, impersonators, rigged tokens or fake platforms. Because blockchain transfers are irreversible, victims rarely get funds back.
How to spot crypto scams quickly?
Look for guaranteed returns, pressure to act fast, unsolicited contact, requests for your seed phrase, and tokens with unverified contracts or concentrated holders. As a rule of thumb, if several of these signs appear, walk away.
Is it safe to connect my wallet to a new website?
Connecting alone typically exposes only your public address, but signing a transaction or approval can give a site control over your tokens. Only connect to sites you reached via a bookmark or the project's verified channels, and read every signature prompt.
Why are crypto scams so common?
Transactions are irreversible, pseudonymous and cross-border, and token creation is cheap. That makes it easy for fraudsters to operate and hard for victims to recover funds.
Can lost crypto be recovered after a scam?
Sometimes, if funds are still at a centralized exchange that can freeze them. Recovery is often not possible. Be wary of anyone who charges an upfront fee to "recover" your coins.
Related Reading
- Pillar: Complete fintech guide
- Category hub: More crypto articles
- Sibling: how to buy Bitcoin safely
- Sibling: best crypto wallet guide
- Sibling: how to store crypto safely
- Adjacent: DeFi security risks explained
- Adjacent: crypto exchange security checklist
Disclosure: XPERTRAX (xpertrax.com) is an affiliated platform. Links and pop-ups pointing to xpertrax.com promote it. This article is for information only and is not financial advice.