How to Recognize Crypto Scams: A Survival Guide
Most crypto scams rely on a small set of recurring patterns: urgency, fake authority, unrealistic returns, and unsafe wallet interactions. Once you recognize those patterns, many scams become much easier to spot early.
Common Scam Types: Know Your Enemy
Rug Pulls
A team creates a new token, hypes it up, attracts investors, and then disappears with the money. The token becomes worthless overnight. It's called a "rug pull" because they literally pull the rug out from under you.
How it works: Developers create a token, add liquidity to a DEX so people can buy it, drive up the price with marketing and fake hype, then withdraw all the liquidity and vanish.
Phishing
Fake websites, emails, or messages that look like legitimate services (your exchange, your wallet, a DeFi protocol). They trick you into entering your login credentials or connecting your wallet to a malicious site.
Classic example: You receive an email saying "Your Coinbase account has been locked. Click here to verify." The link leads to a perfect copy of Coinbase β but it's fake. You enter your password, and the scammer now has access to your account.
Fake Airdrops
You see "free tokens" in your wallet that you never bought. When you try to sell or interact with them, the smart contract drains your wallet. The "gift" was the bait.
Rule: If you didn't expect it, don't touch it. Unknown tokens appearing in your wallet are almost always scams.
Ponzi Schemes / "High-Yield" Programs
These promise guaranteed returns (often 1-10% per day). Early investors get paid with new investors' money. It works until it doesn't β and it always collapses eventually. The last ones in lose everything.
Famous example: BitConnect (2018) promised 1% daily returns. It collapsed, wiping out roughly $3.5 billion in investor funds.
Romance Scams ("Pig Butchering")
Someone builds a relationship with you online β dating apps, social media, even LinkedIn. Over weeks or months, they gain your trust. Then they introduce you to a "special investment opportunity." You invest, see fake profits on a fake platform, invest more, and eventually can't withdraw anything.
Why it's dangerous: It exploits trust and emotion. Victims often lose life savings because the scammer has become someone they trust and care about.
The Red-Flag Checklist: When to Walk Away
If any project, person, or platform shows these signs, proceed with extreme caution β or better yet, run:
- π© Guaranteed returns: "Earn 5% per week, guaranteed!" β No legitimate investment can guarantee returns. If they promise it, it's a scam.
- π© Time pressure: "This offer expires in 2 hours!" or "Only 100 spots left!" β Scammers create urgency because informed decisions are bad for their business.
- π© Anonymous or unknown team: If you can't find real, verifiable people behind a project, be very suspicious. Legitimate projects have identifiable teams.
- π© No audit: Serious DeFi projects get their smart contracts audited by reputable security firms (CertiK, Trail of Bits, OpenZeppelin). No audit = higher risk.
- π© Unrealistic APY: 10,000% annual yields are mathematically unsustainable. If it sounds too good to be true, it is.
- π© Pressure to recruit others: "Bring 3 friends and earn bonuses!" β Classic pyramid scheme structure.
- π© Can't withdraw funds: You invested, but when you try to withdraw, there are always new conditions, fees, or "taxes" to pay first.
- π© Too-perfect social proof: Thousands of identical positive comments, fake Telegram groups filled with bots, celebrity endorsements that aren't real.
How to Protect Yourself
Seed phrase requests are always a scam
Your seed phrase is the backup to a self-custody wallet. If a website, DM, or "support agent" asks for it, treat that as a hard stop.
- Never share it. Legitimate services do not need your seed phrase.
- Never type it into a website. Recovery phrases belong only in the wallet recovery flow you started yourself.
- Store it offline. For the full storage basics, read our wallet guide.
Always Verify URLs
Before connecting your wallet or entering credentials on any site:
- Check the URL character by character. Scammers use lookalike domains (e.g., "uniswαΊ‘p.org" with a special character instead of "uniswap.org").
- Bookmark official sites and always use your bookmarks instead of clicking links.
- Be extra careful with links from Discord, Telegram, Twitter DMs, or emails.
Use a hardware wallet for larger amounts
Large holdings should not sit in the same hot wallet you click around with every day. A hardware wallet keeps the signing keys offline and adds friction before funds move.
- Only buy directly from the manufacturer. Never buy second-hand hardware wallets.
- For the full setup and backup rules, read our crypto security guide.
General Safety Rules
- Enable 2FA (two-factor authentication) on every exchange account. Use an authenticator app, not SMS.
- Use separate wallets: Keep a "hot wallet" with small amounts for daily use and a hardware wallet for long-term storage.
- Research before investing: Read the whitepaper, check the team, look for audits, check how long the project has existed.
- If it feels wrong, stop. Trust your gut. Taking 10 minutes to verify is better than losing everything in 10 seconds.
If you've already been scammed: act fast
- Don't send more money. Scammers often claim you need to pay a "fee" or "tax" to unlock your funds. This is part of the scam.
- Document everything: Screenshots, wallet addresses, transaction hashes, communication logs.
- Report it: Contact your local police and report to the exchange (if one was involved). In Germany, you can also report to the BaFin.
- Warn others: Share your experience to prevent others from falling for the same scam.
- Be wary of "recovery services": Accounts promising to recover stolen crypto are usually scams themselves.
If you want to lower the odds of becoming a victim, follow this with our guides on crypto security, DeFi, and portfolio construction.