How to Recognise Crypto Scams: Common Types and Warning Signs
Giveaway fraud, fake investment platforms, wallet drainers and recovery scams all follow patterns. Learn the red flags and what to do if you are targeted.
Crypto payments are fast and final, which makes them attractive to scammers. Once funds are sent, there is normally no bank to reverse the transfer. The good news is that most scams follow a small number of patterns. This guide describes the common ones and the signs that should make you stop. It is general information, not financial advice.
Common types of crypto scam
Fake giveaways and impersonation
A post or video claims that a well-known person or company will double any crypto you send. These are fabricated. Scammers copy profile pictures and names, sometimes hijack real accounts and promote a wallet address. No legitimate giveaway asks you to send funds first.
Fraudulent investment platforms
You are shown a polished website or app with a balance that appears to grow. Early small withdrawals may even work, which builds trust. Then you are asked to pay "taxes" or "fees" to withdraw, or to deposit more. Law enforcement agencies in several countries have warned about investment fraud that begins with a friendly contact on social media or a dating app and builds trust over weeks. It is often called pig butchering in reports.
Phishing and fake websites
Emails, texts or search ads lead to a copy of a wallet or exchange website, designed to capture your login or seed phrase. A so-called wallet drainer is a malicious site or smart contract that asks you to sign a transaction or approval that lets it empty your wallet.
Rug pulls and pump-and-dump schemes
The creators of a new token promote it heavily, collect investors' money and then withdraw the liquidity or sell their holdings, leaving the token worthless. Pump-and-dump groups coordinate buying to lift a price and sell to latecomers.
Fake support and recovery scams
Someone claiming to be wallet or exchange support contacts you privately and offers help. They ask for your seed phrase or remote access to your computer. Similarly, people who have lost money are targeted by services that promise to recover it for an upfront fee. Genuine recovery of stolen crypto is rare, and a stranger who contacts you first should not be trusted.
Address poisoning
Attackers send tiny transactions from an address that looks like one you use, hoping you will copy it from your history by mistake and send funds to them.
Red flags
| Red flag | Why it matters |
|---|---|
| Guaranteed or very high returns | No real investment can guarantee profit |
| Pressure to act now | Scammers want you to skip checking |
| Request for your seed phrase or private key | Legitimate services never need it |
| Contact you did not ask for | Cold messages and friend requests are the usual starting point |
| Send crypto to receive more | Giveaway and advance-fee fraud |
| Fees required to release your own funds | A common trap on fake platforms |
| Anonymous team with no verifiable history | Makes accountability impossible |
Habits that protect you
- Pause. If something feels urgent, step away and verify independently.
- Use bookmarks. Open exchanges and wallets from saved links, not from ads or messages.
- Verify the source. Check official websites and channels, and look for independent reviews and regulator warning lists.
- Check the address and the network before every payment, and send a test amount first.
- Limit approvals. Only approve contracts you understand, and revoke old permissions.
- Turn on two-factor authentication for email and exchange accounts.
If you have been targeted
- Stop sending money, however convincing the explanation.
- Keep records: addresses, transaction IDs, screenshots and messages.
- Contact the exchange you used, which may be able to flag the receiving address.
- Report the case to your local police and to your national fraud reporting service or consumer authority.
- If a seed phrase was exposed, move any remaining funds to a new wallet immediately.
- Be wary of anyone offering to recover the funds for a fee.
Why these scams work
Scammers rely on psychology more than technology. They create urgency so you do not stop to think, claim authority by borrowing a well-known name, and build trust gradually through friendly conversation. They may offer small early gains to make a platform look real. Anyone can be caught, including technically skilled people, and being targeted is not a sign of foolishness. The most reliable defence is to follow fixed rules you decided in advance, such as never sharing a seed phrase and never sending funds to someone who contacted you first.
Paying for services safely
When you pay a business in crypto, start from the company's own website, log into your account and use the payment page it generates. Check that the amount, coin and network match the invoice. Zebra Hosting accepts more than 80 cryptocurrencies through Cryptomus; always begin from your account on our hosting page or order flow rather than from a message or link you received.
For website owners
If you run a site, scammers may also impersonate your business or compromise your pages to redirect payments. Keep your software updated, use HTTPS everywhere and limit who can log in to your hosting account. The security page describes what is in place on Zebra Hosting.
