You can detect most crypto scams by checking three things before you act: whether the contact was unsolicited, whether the return promised is guaranteed, and whether the platform can be verified outside the message itself. Scammers rely on speed and emotion to skip past those checks. Slowing down is usually enough to catch them.
Americans reported $11.37 billion in losses from IC3 complaints involving cryptocurrency in 2025, up about 22% from 2024, according to the FBI’s Internet Crime Complaint Center. People 60 and older reported roughly $7.7 billion of those losses, about 1.9 times the total reported by any other age group. The numbers keep climbing because the platforms scammers exploit, including real exchanges, wallets, and social media, now look almost identical to the real thing.
How Do Crypto Scams Work?
Most crypto fraud doesn’t involve hacking. It involves convincing someone to hand over access voluntarily, through a transfer, a private key, or a login, after days or weeks of trust-building. Crypto transactions can’t be reversed like a credit card chargeback, which is exactly why scammers prefer them.
Check Point documented an extreme version in January 2026: a scam called OPCOPRO, or the “Truman Show Scam.” Victims were pulled into WhatsApp groups made to look like an exclusive trading community. About 90 “members” posted daily trades and encouragement, and two “leaders” answered questions like real finance experts. None of them were real. The whole group ran on AI.
The app made it worse. Victims were pointed to a trading app in the Apple and Google Play stores, showing balances that climbed in real time. But there was no real trading behind it. Every gain was generated by the scammers’ own server, so a victim could watch fake profits grow for weeks before ever trying to withdraw.
Common Fraud Schemes on Crypto Platforms
The tactics vary, but most schemes fall into a handful of recognizable categories. Knowing the shape of each one makes it easier to spot a new variation before it costs you anything.
Phishing
Phishing relies on a fake email, text, or website built to look like a real exchange or wallet. The message usually claims there’s a problem with your account, a security alert, or a login attempt to approve, and it links to a page that copies the real platform’s design almost exactly. Entering your credentials there hands them straight to the scammer.
The danger isn’t limited to passwords. A phishing page aimed at wallet users will often ask for a seed phrase instead, framed as a “verification” step. No legitimate exchange or wallet provider ever asks for a seed phrase through email, text, or a support chat, so that request alone is enough to confirm the site is fake.
Pig Butchering
Pig butchering scams start with a relationship, not a pitch. A scammer reaches out through a dating app, social media, or a “wrong number” text, then spends weeks building rapport before crypto ever comes up. By the time they mention an investment opportunity, the victim already trusts the person behind it.
Once that trust is in place, the scammer introduces a trading platform, often one they control, and encourages small early deposits that appear to grow. Those early gains are fabricated to keep the victim investing larger amounts, and withdrawals stop working once a significant sum is on the platform.
Fake Exchanges and Wallets
Fake exchanges and wallets copy the branding, layout, and even the customer support language of a real platform. They’re often promoted through ads, search results, or links shared in scam messages, and they function normally enough at first, accepting deposits and showing a balance that updates.
The difference shows up at withdrawal. Fake platforms stall requests, add unexpected fees, or simply go offline once enough users have deposited funds. Because the site was never connected to real infrastructure, there’s no account to recover and no transaction to reverse.
Recovery Scams
Recovery scams target people who have already lost money to a scam. A second scammer, sometimes posing as a law firm, a government agency, or a blockchain forensics service, contacts the victim claiming they can retrieve the stolen funds for an upfront fee.
The fee is the entire scheme. Legitimate recovery through law enforcement doesn’t require upfront payment, and no outside party can guarantee the return of crypto that’s already moved through the blockchain. Anyone offering that guarantee is running a second scam on the same victim.
Fake Giveaways and Airdrops
Fake giveaways typically impersonate a known project, exchange, or public figure, often through a hijacked or convincingly cloned social media account. The post announces a limited-time giveaway and asks users to send a small amount of crypto to a listed address to “verify” their wallet or “unlock” a larger reward.
No legitimate airdrop or giveaway ever requires a payment to receive it. Real token distributions are sent directly to eligible wallets based on criteria set in advance, with nothing owed by the recipient, so any giveaway that asks for money first is the giveaway itself.
How to Verify a Platform Before You Trust It
None of these checks take more than a few minutes, and running through them before you deposit anything catches most fake platforms before they cost you a dollar.
- Search the platform’s name with the word “scam” or “review” attached. Legitimate exchanges have years of public reviews, regulatory filings, and news coverage. A platform with no history beyond its own website is a warning sign.
- Check the URL character by character. Fake sites often swap one letter, change a domain extension, or add a subdomain to mimic a real platform, such as “coinbase-secure-login.com” instead of the exchange’s actual domain.
- Confirm the platform through an independent source, not the link you were sent. Type the address in manually or search for it, rather than clicking a link from a text, email, or DM.
- Look for a working support channel and a physical or corporate presence. Real exchanges list licensing information and respond to support tickets. A platform that only communicates through a single Telegram admin is not verifiable.
- Test with a small amount first. Before moving significant funds, send a small transaction and try withdrawing it. Platforms that stall or add unexpected fees at withdrawal are showing their true purpose.
Crypto Scam Red Flags at a Glance
Here’s the fastest way to check yourself against the schemes covered above.
| Scheme | Common Warning Sign | What to Do Instead |
| Phishing | A link asking for your login or seed phrase | Type the platform’s URL in manually, never click a link from a message |
| Pig Butchering | A new online contact introduces a trading opportunity | Treat any investment pitch from someone you met online as unverified |
| Fake Exchanges and Wallets | Withdrawals stall or come with surprise fees | Test with a small deposit and withdrawal before committing more |
| Recovery Scams | A stranger offers to recover funds for an upfront fee | Report the loss to IC3 instead of paying anyone to “recover” it |
| Fake Giveaways and Airdrops | You’re asked to send crypto to “unlock” a reward | Assume any giveaway that charges a fee first is the scam |
Table 1. Crypto Scam Red Flags at a Glance
Enable two-factor authentication with an authenticator app, not SMS, since SIM-swap attacks can intercept text codes. Never enter a seed phrase into a website, app, or chat, no matter who asks, since legitimate platforms never request one.
Move anything beyond what you actively trade to a hardware wallet you control, and review connected apps and account permissions every few months so old approvals don’t stay active unnoticed.
When in Doubt, Verify Before You Send
If something about a platform or an opportunity doesn’t check out against the steps above, the safest move is to walk away and verify independently before sending anything. Newer users looking for that foundation first can start with the basics of crypto, which cover how wallets and exchanges work. Day-to-day account protection, including password managers and device security, falls under everyday crypto security habits.
Frequently Asked Questions
Still working through the basics? These are the questions that come up most often when someone is trying to figure out if a crypto opportunity is real.
How can I tell if a crypto exchange is legitimate?
Check for public regulatory registration, a multi-year history of reviews and news coverage, and a support system that responds to real inquiries. Legitimate exchanges such as Coinbase or Kraken publish licensing details and have years of independent coverage, while scam platforms typically have none of this outside their own marketing.
What should I do if I already sent crypto to a scammer?
Report it immediately to the FBI’s IC3 (ic3.gov) and to the platform or wallet provider used to send the funds. Crypto transactions generally can’t be reversed, but reporting quickly can help investigators trace the funds and may prevent the same scammer from reaching other victims.
Are AI-generated crypto “experts” a new kind of scam?
Yes. Check Point’s January 2026 research on the Truman Show Scam documented fraud groups built entirely around AI-generated personas posing as financial experts and fellow investors, run at a scale no human-staffed scam operation could match. Treat any online “trading community” you can’t independently verify with the same skepticism as a cold DM.
Can I trust a crypto giveaway from a verified social media account?
Not automatically. Scammers regularly hijack or impersonate verified accounts to run fake giveaway schemes. Legitimate giveaways never ask you to send crypto first to receive a larger amount back.
Is it safe to keep crypto on an exchange long-term?
For small, actively traded amounts, most major exchanges are reasonably secure. For larger holdings, moving funds to a hardware wallet you control removes the risk of an exchange hack, an exit scam, or a platform freezing withdrawals, since you hold the private keys instead of the exchange.
