Crypto scam

Table of contents

What is a crypto scam?

A crypto scam is any deceptive scheme that exploits cryptocurrency users, investors, businesses, or people new to digital assets, often for financial gain. These scams can take many forms, from phishing attacks and Ponzi schemes to fake investment platforms and malicious hacking — exploiting the decentralized and often anonymous nature of blockchain technology to deceive victims. Additionally, the unregulated status of many cryptocurrency platforms creates fertile ground for fraudsters.

‍

How do crypto payments differ from traditional payments?

Cryptocurrency transactions work differently from bank transfers and credit card payments. These differences explain why crypto scams are often hard to reverse, and why scammers favor payment in cryptocurrency.

Crypto payments are typically irreversible: Once a transaction is confirmed on the blockchain, it generally cannot be reversed the way a credit card charge or bank transfer can. Recovering stolen funds usually requires a law enforcement investigation and legal action — such as the seizure, freezing, or reissuance of assets — not a simple reversal request.
Crypto platforms offer limited recourse: Few exchanges or wallet providers offer chargeback protections or a formal dispute process for fraudulent transfers, leaving victims fewer options than they'd have with a bank or card issuer.
Crypto holdings carry no deposit insurance: Government programs like the FDIC in the United States protect bank deposits. No equivalent protection exists for cryptocurrency held in a wallet or on an exchange.
Public ledgers still expose activity: Most cryptocurrency transactions are recorded on public blockchains, so wallet addresses and transfers can be traced using blockchain intelligence even when users remain pseudonymous.
Cryptocurrency prices are highly volatile: Crypto prices can swing far more than traditional currencies over short periods. Scammers exploit that volatility, pressuring victims to act quickly during periods of market hype or fear.

‍

What are some common types of crypto scams?

Phishing scams

Scammers and other cybercriminals create fake websites or send fraudulent emails to trick users into revealing their private keys or wallet credentials.

Ponzi and pyramid schemes

‍Scammers promise high returns to early investors by using funds from newer participants, collapsing once recruitment slows down.

Pig butchering scams

A type of cryptocurrency or investment scam where fraudsters groom a person over time, gaining their trust before deceiving them into making significant financial investments. The term comes from the analogy of "fattening the pig before slaughter," as scammers cultivate relationships with victims to maximize their eventual financial loss.‍

Fake initial coin offerings (ICOs)

‍Fraudsters lure investors with the promise of a new cryptocurrency project, only to disappear once funds are collected.‍

“Pump and dump” schemes

‍Scammers artificially inflate the price of a cryptocurrency to sell it at a profit, leaving other investors with worthless tokens.‍

Rug pulls

‍Developers abandon a project after collecting funds, leaving investors without recourse.‍

Malware attacks

Malware installed on a victim’s computer or mobile device can steal wallet information or cryptographic keys.

Imposter websites and apps

‍Fraudulent sites or apps impersonate legitimate platforms to steal user data or funds.

Government or law enforcement impersonation

Scammers may impersonate the IRS, FBI, local police, or other agencies and claim that your accounts are compromised or linked to criminal activity. Victims are pressured to “protect” funds by purchasing and sending cryptocurrency.

Business tech support or account-risk impersonation

Fraudsters impersonate companies such as Amazon, Microsoft, Apple, or banks and claim unauthorized account activity has occurred. They direct victims to transfer funds to crypto wallets controlled by scammers.

Job, recruitment, and check overpayment scams

Fake employers may send fraudulent checks, request cryptocurrency purchases, or require “training fees” paid in crypto. Some scams promise remote work opportunities but ultimately steal funds or personal information.

‍

What common red flags of a crypto scam?

Spotting a crypto scam depends on who's looking. Individual users should watch for behavioral red flags in how they're approached. Compliance teams and investigators look for red flags in the transaction pattern itself.

Red flags for individual users

Guaranteed or unusually high returns: Any promise of fixed, guaranteed, or abnormally high returns signals fraud. No legitimate crypto investment can guarantee performance.
Pressure to act immediately: Scammers create false urgency — a bonus, discount, or investment window that will supposedly close within hours — to prevent victims from researching the offer.
Requests for a seed phrase or private keys: No legitimate exchange, wallet provider, or investment manager needs a user's seed phrase or private keys to complete a transaction.
Upfront fees to access funds: Legitimate platforms don't charge additional fees or taxes to release a user's own funds.
Impersonation of real people or companies: Scammers pose as exchanges, government agencies, or well-known companies using cloned logos, spoofed domains, or fake employee profiles.
Fake apps and websites: Fraudulent apps and lookalike domains mimic legitimate platforms to collect login credentials or route deposits directly to a scammer's wallet.
Unverified smart contracts: Contracts that haven't been audited, or that request unlimited token approvals, can drain a connected wallet.
Requests to move to encrypted messaging apps: Scammers often push conversations from a dating app, social platform, or marketplace into WhatsApp, Telegram, or Signal, where there's no platform moderation or record for reporting.

Red flags for AML and compliance teams

Frequent, high-value transfers with no clear business purpose: Large or repeated transfers that don't match a customer's known profile often indicate laundering of scam proceeds.
Structuring: Breaking large transactions into smaller amounts to stay under reporting or monitoring thresholds.
Use of mixers, tumblers, or other anonymity-enhancing tools: These services obscure the origin of funds and are commonly used to launder proceeds from crypto scams.
Chain-hopping: Moving funds across multiple blockchains in quick succession to break the transaction trail. Cross-chain tracing helps investigators reconstruct these paths.
Transactions with high-risk or sanctioned jurisdictions: Exposure to entities or regions subject to sanctions increases the likelihood that funds are tied to illicit activity.
Rapid movement of funds through newly created wallets: Funds that pass quickly through wallets with no prior transaction history are a common pattern in scam-related layering.

‍

What are the key considerations law enforcement needs to consider when it comes to investigating crypto scams?

Crypto scams pose unique challenges to law enforcement due to the anonymity and global nature of cryptocurrencies, and the speed at which transactions take place on the blockchain. Some key considerations for law enforcement investigating crypto scams include:

Tracing transactions: While blockchain transactions are publicly recorded, identifying the individuals behind wallet addresses often requires advanced forensic tools and international collaboration.
Cross-border crimes: Many crypto scams are orchestrated by international syndicates, complicating jurisdictional enforcement.
Regulatory gaps: The lack of consistent global cryptocurrency regulations can make it difficult to prosecute offenders effectively.
Resource allocation: Law enforcement agencies often lack the technical expertise and resources needed to combat sophisticated crypto crimes.

‍

What impact do crypto scams have on crypto businesses?

Crypto scams can damage the reputation and viability of legitimate cryptocurrency businesses, with impacts including:

Loss of trust: High-profile scams erode public confidence in cryptocurrency platforms, deterring new users.
Increased compliance costs: Businesses must invest in robust security measures, Know Your Customer (KYC) protocols, and anti-money laundering (AML) systems to prevent fraud.
Legal liability: Companies may face lawsuits or regulatory action if they are found negligent in preventing or addressing scams on their platforms.
Customer retention challenges: Users who fall victim to scams may blame the platform and switch to competitors.

‍

What are the key considerations regulators need to consider to mitigate risks posed by crypto scams?

Regulators play a critical role in mitigating the risks associated with crypto scams. Specifically, they are focused on:

Developing clear frameworks: Establishing clear rules for cryptocurrency exchanges, wallet providers, and initial coin offerings (ICOs) can reduce opportunities for fraud.
Consumer education: Regulators must educate the public about common crypto scams and how to avoid them.
Collaboration with law enforcement: Close coordination between regulatory bodies and law enforcement agencies is essential for investigating and prosecuting crypto crimes.
Balancing innovation and security: Regulators must strike a balance between fostering innovation in the cryptocurrency industry and implementing safeguards against scams.

Government agencies increasingly coordinate with regulators and law enforcement to issue guidance, pursue civil and criminal actions, and share intelligence to disrupt large-scale crypto scams.

‍

How can you protect yourself from falling victim to a crypto scam?

While law enforcement and regulatory measures are essential, individual vigilance is equally important. Here are some steps to safeguard your digital assets:

Research thoroughly: Before investing, research the project’s white paper, team, and community feedback.
Only use trusted platforms: Only transact on well-known, reputable exchanges and wallets.
Enable security features: Activate two-factor authentication and use hardware wallets for added protection.
Be skeptical: Be skeptical: If an offer seems too good to be true, it probably is — anyone can be targeted regardless of experience.
Verify sources: Double-check URLs and email addresses to ensure they belong to legitimate organizations. Never send crypto to someone you only met online or to wallets shared over unsolicited messages, even if they claim to represent a trusted service.
Report malicious activity: Report malicious crypto activity to Chainabuse, the leading reporting platform for malignant crypto activity worldwide.

‍

How to tell if someone is a crypto scammer

Crypto scammers rely on recognizable tactics, even as their schemes evolve. Most initiate contact first — through a dating app, social media, a wrong-number text, or a cold call — and steer the conversation toward crypto investing. They create urgency, warning that a bonus or "limited window" will disappear unless you send funds immediately, and they promise fixed, unusually high, or risk-free profits. No legitimate crypto investment can guarantee returns.

Scammers also try to move victims off platforms that can be independently verified. They direct you to a wallet or trading site with no verifiable track record, often one they control, and ask for private keys, seed phrases, or remote access to a device. No legitimate exchange, wallet provider, or investment manager needs any of that.

Some scammers spend weeks or months building trust before making an ask — posing as a romantic interest or friend, a pattern that defines pig butchering scams. They tend to avoid video calls, give inconsistent details about who they are or where they work, and use profile photos that don't match across platforms. When a victim tries to withdraw funds, the platform typically demands additional fees or taxes first, or stops responding altogether.

‍

What should you do if you suspect or fall victim to a crypto scam?

Acting quickly can limit losses and preserve evidence for investigators.

Stop communicating with the scammer: Don't send additional cryptocurrency, personal information, or documents.
Document everything: Save screenshots of conversations, wallet addresses, transaction hashes, websites, and usernames.
Contact your exchange or wallet provider: Some platforms can flag suspicious wallet activity or assist with an investigation.
‍Report the scam:
1. Chainabuse: The leading reporting platform for malicious crypto activity worldwide.
2. FTC: The primary US reporting channel for consumer fraud, including crypto scams.
3. FBI Internet Crime Complaint Center (IC3): Handles reports of internet-enabled crime, including crypto investment fraud.
4. SEC: For scams involving unregistered securities offerings or fraudulent investment products.
5. CFTC: For scams involving commodity or derivatives products, including some crypto asset offerings.
Secure your accounts: Change passwords, enable multi-factor authentication, and monitor financial accounts for further suspicious activity.
Contact local law enforcement: File a report with your local law enforcement agency.