The cryptocurrency industry loses billions of dollars to scams and fraud every year. In 2023 alone, crypto scams cost victims over $3.9 billion according to the FBI. Unlike bank fraud, crypto transactions are irreversible — once your funds are sent to a scammer, they are gone forever. Understanding the tactics scammers use is your most effective defence.
Rug Pulls
A rug pull occurs when a project’s developers suddenly withdraw all liquidity from a trading pool and disappear with the funds, leaving token holders with worthless coins.
How it works: Developers create a token, build a community through aggressive marketing on Twitter/Telegram, list the token on a DEX, drive up the price, then drain the liquidity pool (worth millions) and vanish — often within hours or days of launch.
Warning signs:
- Anonymous team with no verifiable identities
- No code audit from a reputable firm
- Liquidity not locked (check on Unicrypt or Team Finance)
- Unrealistic promises (100x guaranteed, insider information)
- Token launched with extreme hype but no working product
- Very short time window pressure (“only 24 hours to buy!”)
How to check: Use Token Sniffer or Honeypot.is to scan contract addresses for malicious code before buying any new token.
Pig Butchering Scams (Most Financially Devastating)
Pig butchering (Sha Zhu Pan) is the most sophisticated and financially damaging crypto scam. It is a long-con romance or investment fraud that has cost victims globally over $75 billion.
How it works:
- You receive a random message — “wrong number” text, LinkedIn connection request, or dating app match
- The scammer (often a trafficking victim themselves forced to run the scam) builds a genuine relationship over weeks or months
- They casually mention they have been making great returns on a crypto “investment platform”
- They show you fabricated profits, offer to teach you, and guide you to a fake platform (often a near-perfect clone of a real exchange)
- You deposit small amounts, see impressive “gains,” and deposit more
- When you try to withdraw, you are told you owe taxes, fees, or a “deposit insurance” payment
- Eventually the scammer disappears with everything
Rule: Any investment opportunity that comes through an unsolicited online relationship is a scam, without exception. No legitimate platform requires you to pay fees to withdraw your own money.
Phishing Attacks
Phishing scams trick you into entering your credentials or seed phrase on a fake website or approving a malicious transaction.
Common vectors:
- Google ads: Scammers buy ads for “MetaMask,” “Uniswap,” or “Ledger” that rank above real sites. Clicking leads to a fake site that steals your seed phrase.
- Discord DMs: “Support staff” contact you about a problem with your wallet, asking you to “verify” via a link that steals your seed phrase
- Email phishing: Fake emails from “Ledger,” “Coinbase,” or “MetaMask” claiming your account is compromised
- Fake wallet apps: Clone apps on Google Play or App Store that steal your seed phrase on entry
Defence: Bookmark legitimate sites. Never click crypto links in ads or emails. Never enter your seed phrase on any website. Download wallets only from official URLs.
Pump and Dump Schemes
Coordinated groups buy a low-liquidity token, aggressively promote it to attract outside buyers driving the price up, then sell their holdings at the peak — crashing the price and leaving latecomers with losses.
Common in Telegram “signals” groups, low-cap meme coins, and BSC/Solana tokens with thin order books. The promoters may disguise themselves as analysts or influencers giving “tips.”
Signs: Sudden unexplained price spike in a low-liquidity token; aggressive promotion across multiple channels simultaneously; celebrity or influencer promotion with no organic basis.
Fake Giveaway Scams
“Elon Musk is giving away 10,000 BTC — send 0.1 BTC and receive 0.2 BTC back!” These scams are surprisingly effective, stealing millions annually despite being obviously fraudulent in hindsight.
Scammers hack verified Twitter accounts (or use lookalike accounts), post fake giveaway announcements that look official, and direct victims to send crypto to a receiving address with promises of double returns.
Rule: No legitimate person or company will ever ask you to send crypto to receive more crypto back. This is always a scam, every single time, with no exceptions.
Fake Exchanges and Wallets
Scammers create fake versions of popular exchanges (Binance, Coinbase, Kraken) or wallets (MetaMask, Trust Wallet) that look pixel-perfect but steal login credentials or seed phrases.
Defence: Always access exchanges by typing the URL directly or from your bookmarks. For wallets, download only from official project websites — verify the URL independently before downloading.
Smart Contract Exploits Targeting Users
- Infinite approval scams: A malicious DeFi site asks you to approve unlimited token spending. The contract then drains your entire balance of that token at any time. Use revoke.cash to audit and revoke token approvals regularly.
- Airdrop claiming malware: Sites claiming to let you “check eligibility” for popular airdrops actually prompt you to sign a transaction that empties your wallet
- Fake NFT offers: An “offer” to buy your NFT prompts a transaction signature that, if signed, transfers your entire NFT collection to the attacker
Investment Fraud (Ponzi / HYIP)
High-Yield Investment Programs (HYIPs) promise guaranteed daily or weekly returns (e.g., “3% daily”) that are mathematically impossible from legitimate trading. They pay early investors with new investor money (Ponzi structure) until they collapse.
BitConnect ($2.6B in losses), OneCoin ($4B+), and many smaller projects have followed this model. Red flag: any guaranteed return in crypto is impossible. All legitimate investments carry risk.
Red Flags Checklist
- Guaranteed returns or risk-free profits
- Pressure to act immediately (“limited time offer”)
- Requires you to recruit others to earn (MLM structure)
- Celebrity endorsements that seem out of character
- Unverifiable team members or anonymous founders
- No audited smart contracts
- Asks for your seed phrase or private key
- Fees required to unlock or withdraw your own funds
What to Do If You Are Scammed
- Do not send more money under any circumstances
- Report to the FBI’s IC3 (ic3.gov), FTC (reportfraud.ftc.gov), and your local financial regulator
- Report to the exchange if the scam involved a centralised platform
- Document everything (screenshots, wallet addresses, communication records)
- Consult a blockchain forensics firm if amounts are significant — recovery is rare but not impossible in some cases
Conclusion
Crypto scams succeed by exploiting greed, trust, urgency, and information asymmetry. The defence is simple to state but requires discipline to practice: verify everything independently, never share your seed phrase, treat guaranteed returns as guaranteed fraud, and remember that if something sounds too good to be true in crypto, it is always, without exception, too good to be true.