Skip to main content

Crypto Scams to Avoid: Protecting Your Assets from Fraud

Cryptocurrency's lack of regulation, irreversible transactions, and pseudonymity make it a target for scammers. Billions of dollars are lost to cryptocurrency fraud annually. Unlike traditional banking (where transactions can be reversed), cryptocurrency losses are typically permanent. Understanding common scams and how to avoid them is essential for anyone entering cryptocurrency.

The good news: Most scams are preventable through skepticism and basic security practices. The bad news: Scammers are sophisticated, using psychology and social engineering to exploit even technically sophisticated people.

Quick definition: Cryptocurrency scams are fraudulent schemes designed to trick people into sending crypto or revealing private keys/passwords to scammers.

Key Takeaways​

  • Irreversibility makes scams costly: Unlike bank transfers (which can be reversed), crypto transactions are permanent
  • Emotional manipulation is effective: Romance and desperation (losses that can be "recovered") are powerful tools
  • Too-good-to-be-true opportunities always are: Nobody offers 10,000% returns without deception
  • Authority impersonation is common: Fake exchanges, fake wallet apps, fake emails from real companies
  • Prevention is only defense: Once lost to scams, crypto recovery is nearly impossible
  • Common targets: New users, older people, people already having lost money
  • Modern scams use multiple vectors: Phishing + fake apps + social engineering combined

The Major Scam Types​

Rug Pulls: The Classic Exit Scam​

What it is:

Fraudsters create a fake cryptocurrency token, promote it heavily, collect investor money, then "pull the rug" (disappear with funds).

How it works:

  1. Create a new token (costs $0)
  2. Create hype: "Next Bitcoin!" "100x potential!" (marketing)
  3. Pay celebrities/influencers to promote (or create fake promotions)
  4. Encourage people to buy via DEXs like Uniswap
  5. Price rises as demand increases
  6. Developers withdraw liquidity from the pool
  7. Token becomes worthless
  8. Developers disappear with the money

Real examples:

  • Squid Game token (2021): Named after Netflix show, raised millions, crashed to near-zero when developers withdrew funds. Investors lost $2-3 million.
  • Luna/UST collapse (2022): More complex mechanism, but similar result: $40 billion in losses
  • Wonderland (TIME token): Promised rewards, created by anonymous team, eventually shut down losing investor money

Numeric example:

You invest $10,000 in "ElonCoin"

  • Day 1: Price $0.000001, you get 10 billion tokens
  • Day 5: Price rises to $0.01 due to hype, your tokens worth $100 million (on paper)
  • Day 6: Developers withdraw all liquidity, price crashes to $0.0000001
  • Your tokens now worth $1
  • Loss: $9,999

How to avoid:

  • Any "coin" with no real utility (actual use case) is suspect
  • Be skeptical of celebrity endorsements (often paid or fake)
  • Check if team is doxxed (real identities known) or anonymous
  • Look for smart contract code audits
  • If something promises 1,000x returns with no real business, it's a scam
  • New coins are riskier; established coins (Bitcoin, Ethereum) are safer

Phishing: Stealing Credentials​

What it is:

Fraudsters trick you into revealing passwords, seed phrases, or private keys by impersonating legitimate companies.

Common phishing methods:

Email phishing:

From: security@coinbase.com (but actually scammer@phishmail.com)
Subject: Your Account Has Been Compromised!

Click here to verify your account identity: 
https://coinbase-secure-verify.com (fake domain)

You click, enter your username/password, scammer now has your account access.

Text message phishing:

SMS from "Bank of America": 
Unusual activity on your card. Verify here: bankofamerica-verify.com
(Fake domain, real-looking)

Fake wallet apps: You search "MetaMask" on app store. A lookalike app appears (created by scammer). You install it, create a wallet, enter your seed phrase (backing up the wallet). The app sends your seed phrase to the scammer.

Fake websites: You go to "Uniswap.com" but it's actually "uniswap-official.com" (one letter different). You connect your real MetaMask wallet. The fake site steals your assets.

How to avoid:

  • Legitimate companies never ask for passwords/seed phrases via email or text
  • Always verify URLs carefully (uniswap.org, not uniswap-official.com)
  • Bookmark real websites instead of searching each time
  • Never download wallet apps from app stores (use browser extensions or hardware wallets)
  • Check the official Twitter/Discord to verify links before clicking
  • Enable 2FA (two-factor authentication) on all accounts
  • Use an authenticator app (Google Authenticator, Authy), not SMS

Romance Scams: Emotional Manipulation​

What it is:

Scammers build romantic relationships online to gain trust, then persuade victims to invest in "crypto opportunities."

How it works:

  1. Connect on dating app or social media
  2. Build relationship over weeks (messages, "getting to know you")
  3. Claim to be a successful crypto trader
  4. Suggest investing in a "special opportunity"
  5. Show fake screenshots of huge profits
  6. Encourage you to invest more and more
  7. At some point, claim your account is "locked" and you need to "invest more to unlock profits"
  8. Victim sends more money
  9. Eventually scammer disappears

Real example:

A woman met a "man" on Tinder. After months of chatting, he invited her to invest in a "special Bitcoin opportunity." She invested $5,000, saw $50,000 on the fake trading platform. He suggested investing more to withdraw the $50,000 profits. She sent $20,000 more. Eventually she realized the platform was fake and all money was gone. Total loss: $25,000.

Why it works:

  • Emotional connection reduces skepticism
  • Victim is invested (time, feelings, hope)
  • Greed and FOMO override caution
  • Victims are embarrassed to report (shame)
  • Romantic context makes the lie more believable

How to avoid:

  • Be suspicious of relationships developing rapidly online
  • Never invest based on someone's recommendation without independent research
  • Legitimate traders don't recruit randomly for "special opportunities"
  • If someone you've only met online wants money, it's a scam
  • Remember: romance scammers are professionals at manipulation

Fake Exchanges: The Counterfeit Platform​

What it is:

Fraudsters create a website that looks like a real exchange (Coinbase, Kraken, etc.), collect deposits, then disappear.

How it works:

  1. Create website identical to real exchange
  2. Domain is slightly different: "coinbase-pro.com" instead of "pro.coinbase.com"
  3. Run ads on Google ("Buy Bitcoin on Coinbase" → goes to fake site)
  4. Victim signs up, deposits $10,000
  5. Website shows fake trading interface
  6. Victim sees fake "profits"
  7. When trying to withdraw, website says "Verify your identity first"
  8. Victim sends more information/money
  9. Website goes offline
  10. Money is gone

Real example:

Fraudsters created fake Kraken (kraken-exchange.org instead of kraken.com). Victims lost $2+ million before the site was shut down.

How to avoid:

  • Only use well-known exchanges: Coinbase, Kraken, Gemini, Binance
  • Type the domain directly instead of clicking links
  • Check if the exchange has insurance (Coinbase has $250M+)
  • Look for regulatory licenses (displayed on legitimate sites)
  • Read reviews on independent sites (not reviews on the fake site itself)

SIM Swap: Hijacking Your Phone​

What it is:

Scammer convinces your mobile provider that they're you, gets them to transfer your phone number to a new SIM card the scammer controls.

How it works:

  1. Attacker calls your mobile provider pretending to be you
  2. Says "I got a new phone, transfer my number to this SIM"
  3. Provider transfers your number (weak verification)
  4. Attacker now gets all your SMS messages
  5. Attacker uses SMS to reset passwords on your crypto accounts
  6. Attacker accesses your exchange account and transfers crypto

Real example:

A crypto investor had $1.2 million stolen via SIM swap. Attacker called his provider, got his number transferred, reset his exchange password, emptied his account.

How to avoid:

  • Don't use SMS-based 2FA for important accounts
  • Use authenticator apps (Google Authenticator) instead
  • Use hardware security keys (YubiKey) if available
  • Contact your mobile provider and ask them to add a PIN requirement for SIM swaps
  • Don't share your phone number on social media
  • Use a strong, unique password for exchanges

Pump and Dump: Market Manipulation​

What it is:

Scammers coordinate to buy a token, hype it up (the "pump"), then sell it all at once (the "dump"), leaving late investors with losses.

How it works:

  1. Group buys a small, unknown token
  2. Heavily promote on social media, Discord, Telegram
  3. "This is going to the moon!" "Buy before it's too late!"
  4. Price rises 50-300% due to buying pressure
  5. Original group sells all their holdings (the "dump")
  6. Price collapses
  7. Late buyers are left holding worthless tokens

How to avoid:

  • Be skeptical of hype in trading groups and Discord
  • Check token fundamentals (actual use case, team, activity)
  • Don't buy anything you don't understand
  • Remember: "If everyone is promoting it, someone is profiting from your purchase"

Investment Scams: The "Guaranteed" Return​

What it is:

Someone promises guaranteed returns on crypto investment (10%, 20%, 50% annual returns).

How it works:

  1. Scammer offers "crypto investment fund" with guaranteed returns
  2. First investors actually receive returns (paid from new investor money, not real returns)
  3. Victim is impressed, invests more
  4. Scammer runs Ponzi scheme
  5. Eventually runs out of new investors
  6. Scammer disappears with the money
  7. Earlier investors might recover something; later investors get nothing

Real example:

OneCoin promised 300% returns. Founder Ruja Ignatova disappeared with $4+ billion. It was a Ponzi scheme from the start.

How to avoid:

  • No legitimate investment guarantees 20%+ annual returns without massive risk
  • If returns are guaranteed, it's a scam
  • Real investments (stocks, bonds) have moderate, variable returns
  • Be skeptical of secret investment strategies

Psychological Manipulation Tactics​

Scammers use psychological principles to exploit you:

Urgency: "Only today! Price going up tomorrow!" Scarcity: "Limited supply!" "Only 100 spots available!" Authority: "Endorsed by Elon Musk!" (fake endorsement) Social proof: "100,000 people already invested!" FOMO (Fear of Missing Out): "Everyone is getting rich except you" Sympathy: "Help me access my trapped funds" (recovery scams targeting previous victims)

Recovery Scams: Targeting Previous Victims​

What it is:

After you've lost money to one scam, scammers contact you promising to recover your money (for an upfront fee).

How it works:

  1. You lost $10,000 to a scam
  2. Someone emails: "We can recover your funds! 50% success rate."
  3. They ask for $2,000 upfront (for "legal fees" or "recovery process")
  4. They never recover anything
  5. You've now lost $12,000 total

How to avoid:

  • Legitimate authorities (FBI, SEC) never charge fees to investigate
  • If money is gone, it's gone; recovery is nearly impossible
  • Don't trust anyone who contacts you about recovering losses

Statistics: How Common Are Scams?​

2023 data:

  • $14 billion lost to cryptocurrency fraud in 2023 (FBI)
  • Rug pulls: $2+ billion
  • Romance scams: $5+ billion
  • Other scams: $7+ billion

Average loss:

  • Romance scam: $10,000-50,000
  • Rug pull: $1,000-100,000 (depends on size)
  • Fake exchange: $5,000-500,000
  • SIM swap: $50,000+ (targets wealthy individuals)

General Defense Strategy​

Preventing all scams:

  1. Extreme skepticism: If it sounds too good, it probably is
  2. Verify independently: Don't trust promoters; research yourself
  3. Small experiments: Test with small amounts first
  4. Slow decisions: Don't rush; scammers create urgency
  5. Trusted sources: Only use established, regulated exchanges
  6. No secrets: Legitimate investments don't require secrecy
  7. Tell someone: If a friend thinks something's a scam, it probably is
  8. Remember: Scammers are psychologically trained professionals

FAQ: Common Questions​

Q1: If I fall for a scam, can I get my money back?

Almost never. Crypto transactions are irreversible. If you sent the money:

  • To a scammer's wallet: it's gone
  • Via exchange: frozen account might be recovered (by police if the exchange cooperates)

Q2: Are all DEXs scams?

No, legitimate DEXs exist (Uniswap, SushiSwap). The problem is anyone can create a token on them, and many tokens are scams.

Q3: Should I avoid cryptocurrency because of scams?

No. Scams exist in all financial systems (Ponzi schemes, fake stocks, etc.). Use safe practices: legitimate exchanges, hardware wallets, independent research.

Q4: Can I recover my seed phrase if I lose it?

No. A seed phrase lost is a seed phrase gone. Backup your seed phrase physically in multiple locations.

Q5: How do I know if an exchange is legitimate?

  • Licensed and regulated (US exchange should be FinCEN-registered)
  • Has insurance ($250M+ coverage)
  • Public company or well-known private company
  • Has customer service/support
  • Been operating for 5+ years
  • No major security breaches (or breaches were handled well)

Summary​

Cryptocurrency scams cost billions annually but are largely preventable through skepticism and basic security. Common scams include rug pulls (exit scams), phishing (credential theft), romance scams (emotional manipulation), fake exchanges, and SIM swaps. The best defense is extreme skepticism, verification of information, slow decision-making, and use of established, regulated platforms. Unlike bank fraud (where transactions can be reversed), cryptocurrency losses are permanent, making prevention essential.

Deeper coverage in Book 18 — Cryptocurrency for Beginners.

Next​

→ Next article: The Energy Debate