Common Crypto Scams and How to Avoid Them

Crypto scams stole a record amount of money in 2024 — the FBI logged US$9.3 billion in crypto-related fraud, and Chainalysis estimated at least US$9.9 billion in scam revenue, projecting a record US$12.4 billion as more wallets were identified.

The scams fall into a handful of patterns, and every one of them ends in the same two asks: send me money, or give me your seed phrase or login. Once you learn the patterns, spotting them becomes mechanical.

How big is the crypto scam problem in 2024 and 2025?

Crypto fraud is the fastest-growing category of financial crime, and the numbers are rising sharply, not falling.

The FBI’s Internet Crime Complaint Center (IC3) 2024 report, published in 2025, recorded US$9.3 billion in crypto-related fraud losses across nearly 150,000 complaints — a 66% jump from 2023. Within that, crypto investment fraud alone accounted for roughly US$5.7 billion across 41,557 complaints, up 47% year over year. Victims over 60 reported more than US$4.8 billion, much of it tied to fraudulent crypto investments.

Chainalysis’s 2024 scam report, released February 13, 2025, put total crypto scam losses at at least US$9.9 billion, with a projection that the final figure would reach a record US$12.4 billion. Two scam types — high-yield investment schemes and “pig butchering” — accounted for more than 80% of all victim funds that year.

Two things stand out in the data:

• Scammers are going broader, not deeper. Chainalysis found deposits to pig-butchering scams jumped about 210% while the average deposit size fell roughly 55% — a shift from a few long, high-value “romance” cons toward many smaller, faster payments.
• AI is multiplying the problem. Chainalysis reported AI-driven fraud grew roughly 1,900% in 2024, as scammers used language models to write convincing messages at scale and generate fake profiles and deepfake video.

For context on how these losses happen at the technical level, read our guides on what a private key is and how to protect your seed phrase. Most scams are not code hacks — they are social engineering that convinces the victim to hand over the keys or the money.

What are the most common crypto scams in 2026?

Six patterns account for nearly all crypto fraud: pig butchering, phishing, rug pulls, giveaway scams, fake apps and wallets, and job or recovery scams.

The rest of this guide walks through each one, then gives you a single red-flag framework that catches all of them.

What is a “pig butchering” scam, and how does it work?

Pig butchering is a long-con investment fraud that starts with unsolicited friendly contact and ends with the victim sending money to a fake trading platform that shows fake profits.

The name comes from the scammer “fattening the pig” — building trust for days, weeks, or even months — before the “slaughter,” when the money is taken. It is the biggest single category of crypto fraud, about 33% of scam inflows in 2024 and rising roughly 40% year over year.

The playbook is consistent:

1. The opener. A message arrives from a “wrong number” text, a dating app match, or a social-media request. The stranger is friendly, attractive, and in no hurry.
2. The pivot. Over days, the conversation turns to money. The person happens to have an “uncle with an algorithm” or a “sure-thing” trading signal.
3. The platform. You are guided to a trading site or app that looks polished and shows your deposits growing. The profits are fake — nothing is actually trading.
4. The extraction. Small withdrawals may work at first to build trust. When you try to withdraw a large amount, you are told you must first pay “taxes,” “fees,” or a “security deposit.” Those payments are stolen too.

The tell is the platform, not the person. A real exchange like Binance or OKX does not require you to pay a fee before you can withdraw money that is already yours. And the entire relationship began with a stranger initiating contact — something no legitimate investment opportunity does.

Rule of thumb: if an investment opportunity reached you first, especially from a stranger who started with small talk, it is a scam.

What is phishing, and how do you spot a fake site or support agent?

Phishing impersonates a legitimate service to steal your login, password, or seed phrase — usually through a fake website or a fake support agent.

Two flavors dominate. The first is the fake site: an email or message claims there is a problem with your exchange account and links you to a near-identical domain — a real-world example is binnance.com with two “n”s — where you “log in” and hand over your credentials. The second is fake support: an account posing as Binance, MetaMask, or Ledger support messages you first, claiming your wallet is “compromised” and that you must “import your phrase to secure it.”

Here is the test that catches both. A real support agent and a scammer are separated by four bright lines:

Bookmark the real URLs of the exchanges and wallets you use, and only ever log in through the bookmark — never through a link in a message. A seed phrase is never entered on a website, full stop. For the full pattern library, read our phishing field guide.

What is a rug pull, and how do you check a token before buying?

A rug pull happens when token creators hype a project, attract buyers, and then drain the liquidity pool, leaving holders with a worthless token.

It works because the token’s “price” was never backed by anything but the creator’s own liquidity. When the creator pulls that liquidity out — “pulling the rug” — buyers cannot sell, and the token collapses to zero. Pump-and-dump schemes are a cousin: influencers hype a coin, insiders sell at the peak, and everyone else is left holding the loss.

Four checks catch most rug pulls before you buy:

1. Holdings concentration. Open the token on a blockchain explorer (Etherscan for Ethereum, Solscan for Solana) and look at the top holders. If a few wallets hold a large share of the supply, one of them can dump it.
2. Liquidity lock. Legitimate projects lock their liquidity for a set period; if the liquidity is unlocked, the creator can withdraw it at any time.
3. Audit. An independent smart-contract audit is a baseline, not a guarantee — but the absence of one is a red flag.
4. Team identity. An anonymous or unverifiable team has nothing to lose by vanishing.

None of these checks is perfect on its own. Together, they filter out most of the tokens that exist purely to take your money.

What is a giveaway scam, and why does it work?

A giveaway scam promises to multiply whatever you send — “send 1 ETH, get 2 back” — often while impersonating a celebrity, exchange, or well-known project.

The mechanics are simple: a fake account announces a “giveaway,” a “launch event,” or an “Elon Musk / Vitalik” promotion, and instructs victims to send crypto to a listed address to “verify” their wallet or “unlock” a reward. The reward never comes; the address belongs to the scammer.

Giveaway scams work because they look like the real thing. Scammers clone the exact name, avatar, and follower count of a verified account, and reply to legitimate posts so the fake offer appears in the replies of a real announcement. Sometimes a real high-profile account is briefly compromised and posts the scam directly.

The fix is a rule with no exceptions: nobody legitimate ever asks you to send crypto to receive crypto. If sending money is a condition of getting money, it is a scam. The giveaway is free, or it is fraud.

What are fake apps and fake wallets?

A fake app is a convincing clone of a real wallet or exchange that steals whatever you type into it — most often your seed phrase or password.

Scammers distribute these clones through fake app-store listings, ads in search results, or download links in messages. The app works normally for a while; it may even show a balance. The theft happens at setup, when the fake wallet asks you to enter or “back up” your seed phrase and sends it to the attacker.

Two habits prevent this entirely:

• Download from the source. Install wallets only from the developer’s official website or the official app store listing, never from a link in a message or an ad.
• Never enter a seed phrase “to connect.” A real wallet generates a phrase; it does not ask you to type in an existing one unless you are deliberately restoring a backup.

The same logic applies to browser extensions: check the developer name, the install count, and the reviews before adding anything that will hold your funds.

What are crypto job scams and recovery scams?

Two adjacent scams prey on different moments: job scams target people looking for work, and recovery scams target people who have already been scammed once.

Job scams. A “work-from-home” offer arrives with easy money attached — often “process payments” or “manage a wallet.” The victim is asked to receive and forward crypto, or to pay an upfront “training fee” or “equipment deposit.” In the first case, the victim is laundering money for the scammer; in the second, the fee is simply stolen. Chainalysis noted fake job schemes as a growing on-ramp in 2024. A real job never requires you to pay to start, or to move money through a personal wallet.

Recovery scams. After a victim loses money, a “recovery specialist” — often the same scammer or a colleague — reaches out claiming they can get the funds back for a fee. The fee is stolen, and the “recovery” never happens. This is why, after any loss, the safest assumption is that anyone who contacts you promising recovery is a second scam.

What are the universal red flags?

Every scam, regardless of type, triggers one or more of the same warning signs. If you see any of these, stop.

The common thread: the scammer needs you to act before you verify. Slowing down — even by a day — defeats most of these schemes, because their entire model depends on momentum.

How do you verify a project or platform is legitimate?

Before sending money to any platform, run a short due-diligence checklist that takes ten minutes and filters out most fraud.

1. Check registration. Is the exchange registered with a financial regulator you can verify? Look for the regulator’s register directly, not a badge on the site.
2. Check the URL. Type it yourself or use a bookmark. Do not follow a link from a message, ad, or search result you did not verify.
3. Check the team. A real project names its founders. Anonymous teams have nothing to lose.
4. Check the token. Holdings concentration, liquidity lock, and audit — the three checks from the rug-pull section.
5. Check the claims. If the promised return sounds impossible, it is. “10% per day” is not an investment; it is arithmetic that cannot exist.

If any single check fails, walk away. The asymmetry is stark: a legitimate opportunity will still be there after you verify it, while a scam needs you to act now.

What should you do in the first hour after being scammed?

If you have been scammed, move fast: report to the platform and the authorities, revoke wallet approvals, secure your other accounts, and preserve evidence. Do not expect the funds themselves to come back.

Crypto transactions are irreversible, so the realistic goal of the first hour is to stop further loss and give law enforcement the best chance to freeze funds at a centralized exchange before they are cashed out. The steps, in order:

1. Stop sending money. Do not pay any “tax,” “fee,” or “unlock deposit” — these are always more theft.
2. Revoke wallet approvals. If you connected a wallet to a scam site, revoke token approvals immediately (tools like revoke.cash let you do this). Approvals can let the attacker drain funds even after the balance moves.
3. Report to the platform. If money went to a real exchange’s address, report the transaction to that exchange’s support immediately — they may freeze the receiving account.
4. Report to authorities. In the US, file with the FBI’s IC3 (ic3.gov). In the UK, use Action Fraud. Other countries have equivalents. Include transaction hashes.
5. Secure everything else. Change passwords, enable two-factor authentication, and treat any account that shared a password as compromised.
6. Preserve evidence. Save transaction IDs, messages, screenshots, and wallet addresses before they are deleted.
7. Expect the follow-up. Anyone who contacts you promising to “recover” the funds is likely a second scam. Do not pay them.

Reporting rarely recovers the money, but it matters for a different reason: it feeds the datasets — like the FBI’s IC3 and Chainalysis’s scam tracking — that law enforcement and exchanges use to freeze funds and identify the operations behind them.

How do you protect yourself going forward?

Protection is a set of defaults, not a single trick: slow down, verify independently, keep your keys offline, and never act on unsolicited contact.

A short checklist that covers nearly every scenario in this guide:

• Slow down. Scammers engineer urgency because calm people do not send money to strangers.
• Verify independently. Check URLs, regulators, teams, and token metrics yourself — never through a link the stranger sent.
• Never share your seed phrase or password. With anyone, ever, for any stated reason. See our seed phrase guide for how to store it.
• Bookmark the real sites. Log in only through your own bookmarks, not links in messages.
• Use 2FA and a hardware wallet for anything significant. An account with two-factor authentication survives a stolen password; a hardware wallet survives a phished seed phrase.
• Match your trust to the amount. Treat large amounts as worth serious due diligence, and treat every unsolicited offer as hostile by default.

The goal is not paranoia. It is making the scammer’s two questions — “send me money” and “give me your keys” — land on a wall of automatic “no.”

The bottom line

Crypto scams are at record scale — US$9.3 billion in FBI-logged fraud and at least US$9.9 billion in Chainalysis-estimated scam revenue in 2024 — but they all collapse into two asks: send money, or hand over your seed phrase or login. Learn the six patterns, run the verification checklist, and slow down whenever someone creates urgency.

The order in which you build your defenses matters. Start with what a private key is and how to protect your seed phrase — the two things every scam is ultimately after — then use our phishing field guide to recognize the messages before you act on them.