How to Spot a Crypto Scam: 10 Red Flags

How to Spot a Crypto Scam: 10 Red Flags

Cryptocurrency can be a legitimate way to hold and move value. It is also one of the most heavily targeted areas in consumer fraud, because transactions are fast, often irreversible, and easy to move across borders.

The scale is not a rumour. The US Federal Trade Commission reported that consumers lost more than $12.5 billion to fraud in 2024, with investment scams (frequently crypto-linked) the single largest loss category (FTC, 2025). Separately, the FBI's Internet Crime Complaint Center recorded around $9.3 billion in crypto-related losses in 2024, a 66% jump on the prior year, from nearly 150,000 complaints (FBI, 2025).

This guide walks through the ten clearest red flags, how each scam actually works, and the simple checks that protect you. The aim is not to scare you off crypto. It is to help you tell the difference between a legitimate platform and a trap before your money is gone.

TL;DR: the ten red flags at a glance

• Guaranteed or fixed high returns are the classic sign of a Ponzi scheme. Real markets move; no algorithm beats that forever.
• Anonymous teams with no verifiable identities or track record are trusting your money to ghosts.
• Pressure and urgency ("limited spots", countdown timers) are designed to stop you thinking.
• Vague "proprietary" or "AI" tech with no audited, public code is usually a smokescreen.
• Unsolicited contact by DM, text, or call is overwhelmingly malicious.
• Requests for your seed phrase or private keys are always a scam. No legitimate party ever needs them.
• Fake or unregistered platforms that are not on your regulator's authorised list.
• Withdrawal problems, surprise "fees", or "tax" demands before you can cash out.
• Pig-butchering relationships that move from friendship or romance into "investment tips".
• Recovery scams that promise to get your lost funds back for an upfront fee.

Why crypto scams work so well

Three features of crypto make it attractive to fraudsters, and it helps to understand them before we get into the specific flags.

• Transactions are usually irreversible. Unlike a card payment, a confirmed on-chain transfer cannot normally be clawed back. Once funds leave your wallet, they are gone.
• Anyone can create a token or a website. Spinning up a convincing "exchange" or "investment platform" is cheap and fast. A slick interface proves nothing.
• Fear of missing out is easy to manufacture. Rising prices and "everyone's getting in" messaging push people to act on emotion rather than evidence.

None of this means crypto itself is a scam. It means the burden of verification sits with you. The good news: the checks below are quick, and most scams trip at least one of them.

The red flags at a glance

1. The siren song of guaranteed returns

This is the oldest trick in the book, repackaged for the digital age. If a project, trading bot, or "investment platform" promises a fixed daily, weekly, or monthly return, treat it as a scam until proven otherwise.

Real markets fluctuate. There is no secret algorithm that defies financial gravity forever. These schemes are almost always Ponzi schemes: they use money from new investors to pay "returns" to earlier ones, creating an illusion of profit until the inflow dries up and the whole thing collapses.

The question to always ask is: where is the yield actually coming from? If the answer is not clear, transparent, and verifiable, the yield is coming from the next person to be duped. For a real-world example of this playbook, see our YieldMax AI scam warning, which dressed up the same mechanics with AI buzzwords.

2. Anonymous teams and manufactured hype

Who are you actually giving your money to? In a space plagued by fraud, the credibility of the team is central. A common tactic is for founders to stay anonymous behind cartoon avatars or pseudonyms, because it lets them perform a rug pull (abandoning the project and draining funds) with no real-world consequences.

This anonymity is often masked by a blizzard of social media noise: armies of bot accounts spamming hashtags, and Telegram channels full of relentlessly positive, generic messages. These are frequently paid-for illusions of community.

Be just as sceptical of celebrity endorsements. It is trivial to fake screenshots or use deepfake video to make it look as though a well-known figure backs a project. Verify any such claim from the person's official, verified account, not from the project's own marketing.

3. Vague promises and "proprietary" tech

A legitimate project is proud of its technology and explains how it works. A scam hides behind jargon and secrecy.

Look for a clear whitepaper that explains the purpose, architecture, and tokenomics in plain terms. Scam whitepapers tend to be vague, riddled with errors, or plagiarised, and they substitute substance with buzzwords like "decentralised AI synergy" or "proprietary trading algorithm".

Ask whether the code is open-source and audited by a reputable security firm. Open code can be inspected for flaws and backdoors. Closed, "proprietary" technology asks you to trust claims with no proof, which is a major red flag. Our CryptoMine Pro scam warning shows how a "secret mining algorithm" was really just a front for a payout-to-earlier-victims scheme.

4. Pressure, urgency, and shady mechanics

Scammers do not want you to think. They want you to act on fear of missing out and greed. Be on high alert for:

• Countdown timers for special bonus rates.
• "Limited spots" in an exclusive group.
• One-time-only pre-sale prices that "will never be seen again".

A legitimate opportunity will still be there tomorrow. Pressure to commit immediately is itself the warning sign. The same logic applies to unsolicited approaches: no genuine investment manager, developer, or exchange slides into your DMs with a hot tip.

5. Requests for your seed phrase or private keys

This deserves its own flag because it is so devastating and so common. Your seed phrase (also called a recovery phrase) and your private keys are the master keys to your crypto. Anyone who has them controls your funds.

No legitimate exchange, wallet, support agent, or "verification" process ever needs your seed phrase. Anyone who asks is trying to rob you, full stop.

Two patterns to watch for:

• Fake support staff who say they need your phrase to "fix a problem" or "unlock" your account.
• Wallet-drainer attacks, where an unexpected "airdrop" or a connect-your-wallet prompt asks you to approve a malicious smart contract that empties your wallet.

The strongest defence is to keep your keys offline entirely. A hardware wallet signs transactions on the device itself, so your phrase never touches an internet-connected computer. Our guide to self-custody vs custodial wallets explains the trade-offs, and our Ledger vs Trezor hardware wallet comparison covers the leading devices. If you want a deeper look at one of them, see our Trezor review.

6. Unregistered or impersonated platforms

Many crypto scams pose as exchanges, brokers, or "investment firms" that are not authorised by any regulator, or that impersonate ones that are.

Before you send money, check your national regulator's register. In the UK, the Financial Conduct Authority maintains a list of firms it has authorised and publishes warnings about unauthorised ones (FCA: Crypto investment scams). If a platform is not on the official register, treat that as a serious warning.

Watch closely for impersonation, too. The FCA reported nearly 5,000 fake-FCA scam reports in just the first six months of 2025, with one common ploy being fraudsters claiming the regulator had "recovered funds" from a crypto wallet supposedly opened illegally in the victim's name (FCA, 2025). Regulators do not cold-contact people to hand back money.

If you do want to use crypto, stick to established, transparent, well-regulated venues. Our best crypto exchange UK 2026 guide compares the mainstream options, and our Kraken review looks at one widely used exchange in detail.

7. Withdrawal problems and surprise "fees"

A telltale sign of a fraudulent platform is that deposits are easy but withdrawals are not. Your dashboard may show healthy "profits", but when you try to cash out, the obstacles appear:

• A "withdrawal fee", "release fee", or "anti-money-laundering deposit" you must pay first.
• A "tax" that has to be settled before funds can leave.
• Repeated technical "errors" and stalling from support.

These charges are simply more theft. The displayed balance is a number on a screen with nothing behind it. You should never have to send more money to access money that is supposedly yours. Once you hit this stage, do not pay another penny.

8. Pig-butchering and relationship-led scams

One of the fastest-growing and most damaging categories blends romance or friendship with investment fraud. Often called "pig butchering", the scammer spends weeks or months building trust through a dating app, social media, or even a "wrong number" text, before steering you toward a crypto platform they control.

The pattern is consistent:

• A warm, attentive new contact who never quite meets in person.
• Gradual introduction of a "great" investment they are personally doing well from.
• A polished platform that shows fake gains to encourage bigger deposits.
• Pressure to invest more, and then the withdrawal wall from flag seven.

The FBI's IC3 data shows people over 60 reported the heaviest losses in this area, though victims span every age group (FBI, 2025). The rule of thumb: no one you meet online should ever be managing or directing your investments.

9. Fake tokens dressed up as "real-world assets"

As tokenisation of real-world assets (RWAs) like gold, real estate, and bonds becomes more popular, scammers are exploiting the trend. They launch tokens claiming to be "backed" by physical assets, vaults, or property that either do not exist or are never independently verified.

Legitimate asset-backed products can be checked: independent audits, named custodians, proof of reserves, and clear redemption terms. If a project waves the "RWA" or "asset-backed" label around but cannot show who holds the assets or how you redeem them, the backing is likely fictional. Our explainer on RWA tokenisation of gold, silver, and real estate covers what genuine backing should look like and the questions to ask.

10. Recovery scams: the second wave of theft

This is a particularly cruel fraud that preys on people who have already lost money. After a hack, collapse, or rug pull, a new wave of scammers appears posing as "crypto recovery experts", "blockchain investigators", or "asset retrieval services".

They contact victims directly, promising to recover lost funds for an upfront fee, sometimes even impersonating regulators or law enforcement to seem credible. It is almost always a complete fabrication. It is not possible for a third party to "hack back" or reverse a confirmed blockchain transaction, and genuine investigators and law enforcement do not cold-solicit individuals for fees.

Recovery offers are simply a second layer of theft. If you have been scammed, be extremely wary of anyone who arrives promising to get your money back.

A quick pre-investment checklist

Before sending a single coin, run through this:

• Who runs it? Can you name and verify the team?
• Is it authorised? Is the firm on your regulator's official register?
• Where's the yield from? Is the return mechanism transparent, or just promised?
• Is the tech real? Public, audited code, or buzzwords?
• Who contacted whom? Did they approach you out of the blue?
• Can you exit? Are there documented, fee-free withdrawals?
• Are your keys safe? Has anyone asked for your seed phrase? (If so, walk away.)

If a platform fails even one of these, slow down. If it fails several, do not invest.

What to do if you think you have been scammed

• Stop all payments immediately. Do not send "fees" or "taxes" to release funds.
• Record everything. Screenshots, wallet addresses, transaction hashes, usernames, and URLs.
• Report it. In the UK, report to Action Fraud and the FCA; in the US, to the FTC and the FBI's IC3. Reporting helps build cases and warn others.
• Beware the follow-up. Expect recovery scammers to target you next. Ignore unsolicited "we can get it back" offers.

Reporting may feel pointless when funds are gone, but aggregated reports are exactly what drives regulators to issue warnings and remove fraudulent sites and apps.

Frequently asked questions

Can I get my money back after a crypto scam? Often, no. On-chain transactions are typically irreversible, and once funds are moved through mixers or overseas exchanges they are very hard to trace. Report it to your regulator and law enforcement anyway, and be extremely sceptical of anyone who offers to recover your funds for an upfront fee, which is itself a common follow-on scam.

Is it ever safe to share my seed phrase? No. There is no legitimate scenario in which an exchange, wallet provider, support agent, or "verification" process needs your seed phrase or private keys. Anyone who asks is trying to steal your crypto. Store your recovery phrase offline and never type it into a website or share it with anyone.

How can I check if a crypto platform is legitimate? Verify it against your national regulator's register, confirm the team's real-world identities, look for audited and ideally open-source code, and test a small withdrawal before committing more. Be wary of any platform that contacted you first or promises guaranteed returns. The FCA publishes guidance and warnings on this at its crypto investment scams page.

Are all high returns a scam? Not automatically, but "guaranteed" or fixed high returns almost always are. Genuine investments carry risk and cannot promise a set payout. If the marketing emphasises certainty and downplays risk, treat that as a major red flag.

What is a "pig-butchering" scam? It is a long-con that combines a fake relationship (romantic or friendly) with investment fraud. The scammer builds trust over weeks or months, then steers you to a crypto platform they control that shows fake profits to encourage larger deposits. When you try to withdraw, the money is gone.

Does using a hardware wallet protect me from scams? A hardware wallet greatly reduces the risk of your keys being stolen, because they stay offline and transactions are signed on the device. It does not, however, protect you from voluntarily sending funds to a fraudulent platform or approving a malicious smart contract, so the checks in this guide still matter.

The bottom line

Most crypto scams are not technically sophisticated. They rely on emotion: greed, urgency, trust, and the false hope of recovering losses. The defences are equally simple. Verify who you are dealing with, confirm they are authorised, never share your keys, and never let anyone rush you.

When you do hold crypto, favour established, transparent venues and keep your own keys offline. If something promises certainty, demands speed, or arrived in your inbox uninvited, step back. The pause is almost always what saves you.

This guide is for general information and is not financial advice. Always do your own research and consider seeking independent, regulated advice before investing.