Last Updated: March 2026
Cryptocurrency scams cost investors billions of dollars every year. As the crypto market grows, so do the sophistication and variety of crypto scams. Whether you’re a beginner or an experienced trader, understanding how scams work and how to protect yourself is essential. This guide covers the most common crypto scams, red flags to watch for, and actionable steps to keep your funds safe.
The Scale of Crypto Scams
Crypto scam losses have reached staggering levels, with billions stolen annually through various schemes. The irreversible nature of blockchain transactions means that once funds are sent to a scammer, recovery is nearly impossible. This makes prevention your most powerful tool.
Common Types of Crypto Scams
1. Phishing Scams
Phishing is the most prevalent crypto scam. Attackers create fake websites, emails, or social media messages that mimic legitimate platforms to steal your login credentials, private keys, or seed phrases.
How it works: You receive an email appearing to be from your exchange claiming suspicious activity. The link leads to a convincing but fake login page. Once you enter your credentials, scammers access your real account and drain your funds.
Red flags:
- Slightly misspelled URLs (e.g., “coinbaze.com” instead of “coinbase.com”)
- Urgent language pressuring immediate action
- Requests for private keys or seed phrases (legitimate services never ask for these)
- Unsolicited emails with login links
2. Rug Pulls
Rug pulls occur when developers of a new token or DeFi project suddenly withdraw all liquidity, leaving investors with worthless tokens. This is particularly common with new memecoins and unaudited DeFi protocols.
How it works: A team launches a new token with flashy marketing, drives up the price through hype and fake partnerships, then drains the liquidity pool and disappears with investors’ funds. For more on this space, see our memecoin guide which covers how to evaluate new tokens.
Red flags:
- Anonymous team with no verifiable track record
- Unaudited smart contracts
- Locked liquidity that can be unlocked by the team
- Unrealistic promises of guaranteed returns
- Extremely aggressive social media marketing
3. Pump-and-Dump Schemes
Organized groups artificially inflate a token’s price through coordinated buying and social media hype, then sell their holdings at the peak, crashing the price and leaving latecomers with losses.
How it works: A group accumulates a low-cap token, then promotes it aggressively through Telegram groups, Twitter, and YouTube. As the price surges from new buyers, the group sells their holdings for profit. The price collapses within hours or days.
4. Fake Investment Platforms
Fraudulent platforms promise guaranteed high returns through “AI trading,” “arbitrage,” or “staking.” They may pay early investors with new investors’ money (Ponzi scheme) before eventually collapsing.
Red flags:
- Guaranteed returns (no legitimate investment can guarantee profits)
- Unusually high yields with “no risk”
- Pressure to recruit new investors
- Difficulty withdrawing funds
- No verifiable registration or licensing
5. Romance Scams (“Pig Butchering”)
One of the fastest-growing crypto scams, “pig butchering” involves scammers building romantic or friendly relationships with victims over weeks or months before introducing a “can’t-miss” crypto investment opportunity.
How it works: The scammer reaches out on dating apps, social media, or messaging platforms. After building trust, they introduce a fake investment platform showing impressive (fake) returns. The victim invests increasing amounts before the platform and scammer disappear.
6. Impersonation Scams
Scammers impersonate well-known figures (Elon Musk, Vitalik Buterin, CZ) or companies, typically through fake social media accounts or YouTube livestreams, promoting fake giveaways.
How it works: “Send 1 BTC and receive 2 BTC back!” These giveaway scams seem obvious, yet they continue to net millions. Fake livestreams use deepfake technology to make them increasingly convincing.
7. Malicious Smart Contract Approvals
When interacting with DeFi protocols, you grant smart contracts permission to access your tokens. Malicious contracts can be designed to drain your wallet of all approved tokens.
How it works: A seemingly legitimate DeFi protocol or airdrop asks you to connect your wallet and approve a transaction. The approval actually grants unlimited access to your tokens, which the scammer then transfers out.
How to Protect Yourself
Essential Security Practices
- Use a hardware wallet: Store the majority of your crypto in a hardware wallet that keeps private keys offline. See our crypto wallet guide for recommendations
- Enable 2FA everywhere: Use an authenticator app (not SMS) for two-factor authentication on all exchange accounts
- Verify URLs manually: Always type exchange URLs directly or use bookmarks—never click email links
- Never share your seed phrase: Write it on paper/metal and store securely. No legitimate service will ever ask for it
- Use separate wallets: Keep a “hot” wallet with small amounts for DeFi interactions, and a “cold” wallet for main holdings
- Revoke unused token approvals: Regularly check and revoke smart contract permissions using tools like Revoke.cash
Research Before Investing
- Verify the team: Look for doxxed team members with verifiable LinkedIn profiles and track records
- Check for audits: Legitimate projects have their smart contracts audited by reputable firms (CertiK, Trail of Bits, OpenZeppelin)
- Read the documentation: Real projects have detailed whitepapers, documentation, and open-source code
- Check liquidity lock: For new tokens, verify that liquidity is locked and can’t be withdrawn by developers
- Be skeptical of hype: If everyone on social media is promoting something, it might be a coordinated campaign
Red Flags Checklist
- Guaranteed returns or “risk-free” investments
- Pressure to invest quickly (“limited time offer”)
- Requests for private keys or seed phrases
- Unsolicited investment advice from strangers
- Projects with anonymous teams and no audits
- “Send crypto to receive more back” schemes
- Extremely high APY with no clear source of yield
- Difficulty withdrawing funds from a platform
What to Do If You’ve Been Scammed
- Secure your remaining assets: If your wallet or exchange account is compromised, immediately transfer remaining funds to a new, secure wallet
- Revoke all token approvals: If you interacted with a malicious contract, revoke its permissions immediately
- Document everything: Save transaction hashes, wallet addresses, screenshots of communications, and any other evidence
- Report the scam: File reports with your local law enforcement, the FBI’s IC3 (in the US), and the exchange or platform involved
- Report to the blockchain: Flag scammer addresses on blockchain explorers and scam databases
- Be wary of “recovery” services: Many scam recovery services are themselves scams that target victims a second time
Frequently Asked Questions
Can stolen crypto be recovered?
In most cases, stolen cryptocurrency cannot be recovered due to the irreversible nature of blockchain transactions. In some high-profile cases, law enforcement has traced and recovered funds, but this is the exception. Prevention is far more effective than attempted recovery.
Are crypto exchanges safe?
Major, regulated exchanges implement strong security measures and insurance funds. However, exchange hacks have occurred historically. Using strong passwords, 2FA, and keeping only trading amounts on exchanges reduces your risk. See our exchange comparison guide for security ratings.
How do I spot a fake crypto project?
Key warning signs include anonymous teams, unaudited code, unrealistic promises, aggressive marketing without substance, and copied or plagiarized whitepapers. Always research thoroughly before investing—if something seems too good to be true, it probably is.
Is DeFi safe to use?
Established, audited DeFi protocols like Aave, Uniswap, and Curve have strong track records. However, newer or unaudited protocols carry significant risk. Start with trusted platforms, use hardware wallets, and never invest more than you can afford to lose. Learn more in our yield farming guide.
