Cryptocurrency Scams: 10 Common Types and Their Warning Signs
Cryptocurrency scams do not all work in the same way.
Some involve fake investments and fabricated trading platforms. Others rely on wallet compromise, phishing, impersonation, fraudulent tokens or false recovery services.
A victim may be pressured to transfer cryptocurrency, connect a wallet, approve a transaction, disclose a seed phrase or pay another fee to release supposed funds.
Understanding the main categories can help users recognise what has happened and take the most appropriate next steps.
1. Fake Cryptocurrency Investment Platforms
A fake investment platform may appear to offer cryptocurrency trading, managed investments or automated returns.
The victim may buy cryptocurrency through a genuine exchange before transferring it to a wallet controlled by the fraudster. A false platform then displays fabricated profits.
A small withdrawal may be allowed initially to build confidence. Larger withdrawals are later blocked, with further payments demanded for:
- Tax
- Insurance
- Account verification
- Liquidity
- Compliance checks
- Withdrawal processing
A genuine platform should not require repeated payments to release an existing balance.
For broader guidance on false investments and payment demands, read our guide to Investment Fraud.
2. Pig-Butchering Scams
Pig-butchering scams combine relationship building with a false cryptocurrency investment.
The contact may begin through a dating application, social media, a messaging platform or an unexpected text. After trust develops, the victim is introduced to a trading platform or investment opportunity.
Warning signs include:
- An online contact quickly discussing investments
- A platform recommended by that person
- Pressure to increase deposits
- Fabricated account balances
- Blocked withdrawals
- Further fees to release funds
Our specialist guide to Pig-Butchering Scams explains how relationship-led investment fraud develops.
3. Wallet-Drainer and Malicious Approval Scams
Wallet-drainer scams attempt to obtain permission to transfer assets from a cryptocurrency wallet.
The user may be directed to a fake token claim, minting page, investment platform or decentralised application. They may then be asked to:
- Sign a malicious transaction
- Approve token spending
- Grant access to particular assets
- Interact with a harmful smart contract
- Disclose a seed phrase or private key
Connecting a wallet does not always result in immediate loss. The outcome depends on the transaction or permission approved.
Users should read wallet prompts carefully and avoid signing transactions they do not understand. Seed phrases and private keys should never be shared.
4. Deepfake and Celebrity-Endorsement Scams
Fraudsters may use manipulated images, video or audio to make a cryptocurrency promotion appear credible.
A public figure, entrepreneur or financial expert may appear to endorse:
- A token
- An exchange
- A trading platform
- A giveaway
- An automated investment system
The person shown may have no involvement with the promotion.
Do not rely on the advert or video itself. Verify the endorsement through the person’s official channels and independent sources.
Our guides to AI Cryptocurrency Scams and Scam Adverts explain these impersonation methods in more detail.
5. Rug Pulls and Fraudulent Tokens
A rug pull occurs when people connected with a cryptocurrency project remove value or abandon the project after attracting investors.
The mechanism may involve:
- Removing liquidity
- Selling large insider holdings
- Abandoning the project after fundraising
- Restricting other holders from selling
- Misrepresenting the development team or project purpose
Not every failed token is fraudulent.
Warning signs may include anonymous developers, concentrated token ownership, unrealistic return claims, weak technical documentation and unexplained restrictions on selling or withdrawing.
6. Fake Exchanges, Wallets and Cloned Websites
Fraudsters may create websites or applications that imitate genuine exchanges, wallet providers or cryptocurrency services.
The purpose may be to obtain:
- Login credentials
- Authentication codes
- Wallet connections
- Seed phrases
- Identity documents
- Deposits to fraudulent addresses
Warning signs include lookalike domains, unofficial application downloads, recently registered websites and contact details that do not match the genuine provider.
Access the provider independently rather than through a link in an advert, email or message.
7. Exchange, Regulator and Compliance Impersonation
A fraudster may pretend to represent:
- A cryptocurrency exchange
- A wallet provider
- A regulator
- A tax authority
- The police
- A compliance team
- A blockchain-analysis company
The victim may be told that their account is under investigation or that assets must be moved to a safe or verification wallet.
Legitimate organisations should not request seed phrases, private keys or transfers to a supposed safe wallet.
Contact the organisation through independently verified details before taking action.
8. Airdrop, Giveaway and Phishing Scams
A fraudulent airdrop or giveaway may offer free tokens, a reward or a multiple return on any cryptocurrency sent.
The scam may involve:
- A malicious website
- A fake social-media account
- A wallet connection
- A harmful token approval
- An advance transfer
- A request for login details
An unsolicited token appearing in a wallet should not automatically be treated as genuine or valuable.
Avoid interacting with unknown tokens or links without checking the project independently.
9. Cryptocurrency Recovery Scams
Recovery scams target people who have already lost money.
The caller may claim that:
- The assets have been located
- A wallet has been frozen
- A regulator has approved repayment
- Tax must be paid before release
- A final fee will unlock the funds
The provider may impersonate a solicitor, investigator, regulator, exchange or law-enforcement body.
Warning signs include guaranteed recovery, upfront release fees, cryptocurrency payment requests and claims that funds are already waiting.
Never disclose passwords, seed phrases or private keys to a recovery provider.
10. Fake Crypto Jobs and Money-Mule Recruitment
A fake cryptocurrency job may involve supposed trading, payment processing, account testing or online tasks.
The person may be asked to:
- Receive money into a bank account
- Buy cryptocurrency
- Transfer it to another wallet
- Open exchange accounts
- Complete paid online tasks
- Deposit personal funds to unlock earnings
Someone recruited in this way may initially believe the work is legitimate, but moving money for others can create serious financial and legal consequences.
A genuine employer should not require a worker to process unexplained funds or pay money before receiving wages.
See our guide to Task Scams for further warning signs.
Warning Signs Across Cryptocurrency Scams
Common warning signs include:
- Guaranteed returns
- Pressure to act immediately
- Requests for seed phrases or private keys
- A platform recommended by an online contact
- Payments to unexplained wallets
- Withdrawal taxes or release fees
- Remote-access requests
- Lookalike domains
- Claims that funds are already frozen or recovered
- Instructions to move assets to a safe wallet
- Advice to mislead a bank or exchange
- Refusal to allow independent verification
Several warning signs appearing together should prompt immediate checks.
What to Do After a Suspected Cryptocurrency Scam
Act quickly:
- Stop further transfers.
- Contact the relevant bank or cryptocurrency exchange.
- Secure affected accounts and wallets.
- Change compromised passwords and enable multi-factor authentication.
- Revoke suspicious token approvals where appropriate.
- Preserve wallet addresses, transaction identifiers and communications.
- Report the fraud through the applicable national service.
- Beware of recovery scams.
- Obtain specialist advice where the value and complexity justify it.
Do not delete messages or reset affected devices before preserving relevant evidence.
Can Cryptocurrency Be Traced?
Public blockchains may allow transactions between wallet addresses to be mapped.
Analysis may identify receiving wallets, subsequent transfers, connections between known addresses and exchange or service-provider touchpoints.
However, a wallet address does not automatically identify the person controlling it. Tracing may also be limited by cross-chain activity, privacy tools, off-chain transfers, incomplete information and services in uncooperative jurisdictions.
An exchange may hold customer information, but disclosure may require its cooperation, legal process or official powers.
Our detailed guide, Can Stolen Cryptocurrency Really Be Traced?, explains the possibilities and limitations.
Fraud and Financial Investigation Services
Conflict International provides Fraud and Financial Investigation Services to individuals, businesses, law firms and professional advisers dealing with cryptocurrency scams and related financial loss.
Our work may include:
- Wallet and transaction mapping
- Company and connected-party research
- Website and domain enquiries
- Payment-recipient analysis
- Review of communications and documents
- Cross-border corporate research
- Evidence chronology preparation
- Clearly sourced reporting for legal and professional review
We distinguish confirmed findings from possible connections and matters that remain unverified.
We do not guarantee that every participant will be identified or that assets will be frozen or recovered.
Discuss a Suspected Cryptocurrency Scam
If you are concerned about a cryptocurrency investment, wallet transaction, fake exchange, token promotion or recovery approach, contact Conflict International with the available wallet addresses, transaction identifiers, exchange records, communications and payment information.
We can assess what corporate, digital and financial enquiries may be proportionate.
Complete the enquiry form below to request an initial assessment.