How to Spot Crypto Scams: 8 Warning Signs and What to Do

Updated July 2026

Crypto scams follow predictable patterns: unsolicited contact, pressure to act fast, and promises of guaranteed returns. Knowing these patterns before you encounter them is the most reliable protection you have. This guide covers the eight most common scam types active in 2026, the specific red flags that signal each one, and what to do if you are targeted.

8 Common Crypto Scam Types at a Glance

Scam Type	How It Starts	Key Red Flag	What the Scammer Wants
Pig Butchering	Romantic or friendly contact via app or text	Introduces a private crypto investment platform	Large, repeated deposits over weeks
Phishing Attack	Fake email, ad, or copycat website	URL is misspelled or subtly wrong	Wallet login credentials or seed phrase
Rug Pull	New DeFi token with heavy influencer promotion	Anonymous team, no code audit, unlocked liquidity	Drain the liquidity pool and disappear
Fake Exchange	Social media ad or search result	Withdrawals blocked by endless fee requirements	Deposits that can never be retrieved
Celebrity Giveaway	Impersonation of a public figure or brand	"Send crypto to get more back"	Whatever you send first
Impersonation Scam	Fake support contact after a complaint	Asks for seed phrase or remote device access	Full wallet access
Pump and Dump	Influencer hype around a new token	No real use case, token created very recently	Sell their holdings at inflated prices
Recovery Scam	Unsolicited contact after a previous loss	Demands an upfront fee before any recovery	A second payment from an already-victimized user

1. Pig Butchering Scams

Pig butchering is the most financially damaging scam category in crypto. The name comes from the practice of fattening a pig before slaughter. A scammer builds a relationship over days or weeks, typically starting with a misdirected text, a match on a dating app, or a connection request on LinkedIn. Once trust is established, they introduce a private crypto investment platform they claim to use personally.

The fake platform shows fabricated profits to encourage larger deposits. When you eventually try to withdraw, a wall appears: "tax payments," "verification fees," or "minimum balance requirements" are introduced one after another, each designed to extract more money before the scammer disappears entirely.

The Tinder variant of this scam is documented in detail in our full breakdown of the Tinder crypto scam, including the exact script scammers use and how to recognize it early.

Red flags: The relationship started entirely online with no shared real-world connection. The investment platform does not appear in any independent search. Profits are unusually consistent regardless of market conditions. Withdrawal attempts trigger new, unexpected fees.

2. Phishing Attacks

A phishing attack tricks you into entering sensitive information, typically your wallet seed phrase or exchange login credentials, into a fake site that looks exactly like the real one. Think of it like a duplicate key: the scammer does not need to pick the lock if you hand them a copy.

The delivery method varies: fake emails claiming to be from MetaMask or Coinbase, paid search ads linking to wallet download pages, copycat browser extensions, and Discord messages from accounts posing as project team members are all active vectors. Once credentials are entered on the fake site, the attacker empties your wallet before you notice.

Your seed phrase is the master key to your wallet. What Is a Seed Phrase? explains in plain English why no legitimate service will ever ask for it and why handing it over means losing everything in that wallet permanently.

Red flags: The email sender domain does not exactly match the official domain (example: "metamask-support.com" instead of "metamask.io"). The URL in your browser bar has an extra character, a substitution, or a different extension. The message creates time pressure, such as "your wallet access will be locked in 24 hours."

3. Rug Pulls

A rug pull is a DeFi exit scam. A team launches a new token or liquidity pool, runs a marketing push to attract deposits, then withdraws all the pooled funds and vanishes. The token price collapses to zero within minutes. The pattern repeats hundreds of times a year across multiple blockchains.

DeFi protocols are publicly readable, but auditing them requires technical knowledge that most retail participants do not have. That gap is exactly what rug pull teams exploit.

Red flags: The team is anonymous with no verifiable public track record. The smart contract has not been independently audited by a named firm. Liquidity is not locked, meaning the team can pull funds at any moment. Marketing emphasizes price potential rather than technology, documentation, or use case.

4. Fake Exchange and Platform Scams

Fraudulent sites mimic real exchanges or present convincing new ones, promoted through social media campaigns and paid search ads. Deposits are accepted and displayed on-screen as a balance. Withdrawals, however, are blocked behind a rotating set of requirements: taxes owed before release, a minimum account balance, or a verification process that resets with each attempt. The goal is to extract more money under the cover of unlocking what was already deposited.

Red flags: Interest or yield rates far exceed what any regulated platform offers. Withdrawal fees or conditions were not visible before the initial deposit. Customer support operates only through Telegram or WhatsApp, with no official ticketing system.

5. Celebrity and Giveaway Scams

These scams impersonate public figures or well-known crypto brands. A fake account, sometimes with a verification badge, posts a giveaway: send a specific amount of crypto to a wallet address and receive double back. No legitimate giveaway ever requires you to send crypto first. The arithmetic never works in the participant's favor.

AI-generated video deepfakes of celebrities are increasingly used to add a layer of visual credibility to these scams, a trend noted in the Chainalysis 2026 Crypto Crime Report.

Red flags: The offer requires sending crypto before receiving anything. The account was created recently despite a large follower count. Comment sections appear full of positive responses that were posted in a very short window, a sign of bot activity.

6. Impersonation Scams

After you post a complaint or question about a crypto product on X, Reddit, or a Telegram group, fake support accounts contact you almost immediately. They offer to resolve your issue but ask for your "recovery phrase" or request remote access to your device. Real support teams never ask for either. A seed phrase handed to a scammer gives them complete, permanent control of your wallet.

If you self-custody your crypto in a non-custodial wallet, our guide to non-custodial wallets covers what genuine self-custody means and why no legitimate team will ever need your recovery phrase.

Red flags: The contact reached out to you rather than you initiating through an official support channel. They ask for your seed phrase, password, or permission to control your screen. The conversation moved off the original platform quickly, to Telegram or a private message.

7. Pump-and-Dump Schemes

A coordinated group accumulates a low-value or newly created token, then floods social channels with promotion: influencer posts, Telegram channel blasts, and coordinated buying to push the visible price upward. Retail buyers who enter during the hype create the exit opportunity the group needs. Once the group sells, the price collapses and buyers are left holding near-worthless tokens.

Red flags: The token was created days or weeks ago. Promotion focuses entirely on recent price gains rather than technology, team credibility, or use case. Any influencers involved either disclose a paid position in footnotes or do not disclose one at all.

8. Recovery Scams

Recovery scammers target people who have already lost money to crypto fraud. A "blockchain recovery specialist" or "crypto lawyer" makes unsolicited contact, often through social media forums where victims discuss their losses, and claims to have a method for retrieving stolen funds. An upfront fee is required before work begins. After payment, they disappear.

Public blockchains have no mechanism to reverse committed transactions. Anyone claiming special access to do so on a public network is lying.

Red flags: The contact was unsolicited and appeared shortly after you mentioned a loss publicly. The service requires payment before showing any results. They claim the ability to reverse or recall a transaction that has already been confirmed on a public blockchain.

How to Protect Yourself

• Verify every URL before connecting a wallet or entering credentials. Bookmark official sites directly rather than searching each time.
• Never share your seed phrase with any person, app, or website under any circumstances. No legitimate service will ever ask for it.
• Treat urgency as a warning sign. Legitimate platforms do not expire offers in hours or threaten to lock accounts without a genuine, documented security reason.
• Search for independent reviews before depositing on any platform. Look for verified coverage in outlets such as CoinDesk, The Block, or Decrypt. No independent coverage at all is itself a red flag.
• Check DeFi projects on DefiLlama (defillama.com) before interacting. Verified code and locked liquidity are baseline requirements, not guarantees of safety.
• Enable two-factor authentication on every exchange account using an authenticator app. SMS two-factor is better than nothing but is vulnerable to SIM-swap attacks.
• If someone you met online introduces you to a crypto investment platform, verify it independently before depositing any amount. The relationship itself may be the scam.

What to Do If You Have Been Scammed

1. Stop sending funds immediately. Do not pay release fees, taxes, or verification deposits in the hope of recovering what you already sent. Each additional payment goes to the same scammer.
2. Document everything: screenshots of all conversations, every transaction ID, the wallet addresses you sent to, and any platform URLs.
3. Report to the FBI at ic3.gov and to the FTC at reportfraud.ftc.gov. These reports contribute to the database law enforcement uses to track large fraud networks.
4. Contact your bank or payment provider if you converted fiat currency to crypto before the transfer. They may be able to act on the fiat side of the transaction.
5. Do not engage with recovery specialists who contact you after a loss. Unsolicited recovery offers are almost always a second fraud targeting the same victim.

Recovering stolen crypto is genuinely difficult. Public blockchains are designed to make transactions irreversible. Law enforcement occasionally freezes assets held on centralized exchanges, but peer-to-peer and DeFi theft recovery rates remain very low. The most effective protection is recognizing the patterns before you encounter them.

Frequently Asked Questions

Can stolen crypto be recovered?

Rarely. Public blockchain transactions are irreversible by design. Law enforcement can occasionally freeze assets on centralized exchanges, but peer-to-peer and DeFi losses have very low recovery rates. Prevention is significantly more effective than any recovery attempt after the fact.

What is the most common crypto scam right now?

Pig butchering, also called romance-investment fraud, is the largest category by total dollar losses. The FBI Internet Crime Report for 2025 found that investment fraud, primarily the pig butchering variant, drove the majority of crypto-related losses reported by Americans that year.

How do I check if a crypto platform is legitimate?

Look for verified, independent coverage in outlets such as CoinDesk, The Block, or Decrypt. Check whether the platform is registered with FinCEN or holds a state money transmitter license. Confirm the URL in your browser bar matches the official domain exactly, character by character. An absence of independent third-party coverage is itself a meaningful red flag.

What is a seed phrase and why do scammers want it?

A seed phrase is a sequence of 12 or 24 words that functions as the master key to a non-custodial crypto wallet. Anyone who has your seed phrase has full and permanent control of every asset in that wallet. Scammers want it because it provides instant, irreversible access to your funds without needing to break any encryption or bypass any security system.

What should I do immediately after being scammed?

Stop sending funds immediately. Screenshot all conversations and record every transaction ID. Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. Contact your bank if you used fiat currency to purchase crypto before the transfer. Avoid any unsolicited recovery services, which are almost always a second fraud aimed at the same victim.

This content is for informational and educational purposes only and is not financial, investment or tax advice. Crypto assets are volatile and you can lose what you put in. Do your own research and consult a licensed professional before making financial decisions.