How to spot scams

The crypto world is full of scams. Knowing the common patterns will protect you from most of them.

The golden rule

If it sounds too good to be true, it's a scam

• "Earn 10% daily, guaranteed" → Scam
• "Double your Bitcoin by sending it to me first" → Scam
• "Technical support contacts you first" → Scam
• "Exclusive opportunity, today only" → Probably a scam

Common types of scams

1. Phishing

Fake sites that imitate exchanges or wallets to steal your credentials.

Real sites vs fake:
✅ app.uniswap.org
❌ app-uniswap.org
❌ uniswap-app.com
❌ app.unisvvap.org  (the "w" is two "v"s)
❌ app.uniswap.org.scam.xyz

How to protect yourself:

• Save official sites as bookmarks
• Never search on Google and click on ads
• Verify the full URL before connecting your wallet
• Check the SSL certificate (padlock)

2. "Technical support" scams

You get a message from "MetaMask support" or similar asking for your seed phrase.

TYPICAL SCAM

"Hi, this is MetaMask support. We detected suspicious activity on your wallet. To protect your funds, we need you to verify your seed phrase at this link…"

No legitimate support will ever ask for your seed phrase. Never. For any reason.

Reality:

• Real support never contacts you first
• They never need your seed phrase
• They never ask you to connect your wallet to "verify" anything

3. Fake giveaway/airdrop

"Elon Musk is giving away Bitcoin, send 0.1 BTC and get 1 BTC back"

TYPICAL SCAM

🎉 TESLA BITCOIN GIVEAWAY 🎉 "To celebrate, we're doubling all Bitcoin sent to this address…"

Nobody doubles your crypto. If someone asks you to send first to receive double back, it's a scam, no exceptions.

They show up on:

• YouTube (fake videos with deepfakes)
• Twitter/X (hacked or impersonating accounts)
• Telegram/Discord
• Emails

4. Rug pull

The creator of a project disappears with the funds.

Warning signs:

• Anonymous team with no verifiable history
• Promises of guaranteed returns
• Liquidity not locked
• Unaudited code
• Pressure to invest fast ("today only")

5. Honeypot tokens

Tokens you can buy but can't sell.

How to detect them:

• Check honeypot.is before buying
• Look for sells in the token's history
• Be suspicious of tokens with only buys

6. Pig butchering

A long-running scam where someone cultivates a relationship with you (romantic or a friendship) to eventually ask you to "invest" on a fake platform.

Signs:

• Unexpected contact via WhatsApp/Telegram/dating apps
• They build a relationship over weeks/months
• They eventually mention an "investment opportunity"
• An unknown platform with incredible returns
• The first "gains" can be withdrawn (to build trust)
• When you invest more, they disappear

7. Impersonation

Accounts that imitate well-known projects or people.

Twitter/X:
✅ @VitalikButerin (verified, millions of followers)
❌ @VitalikButerin_ (extra underscore)
❌ @VitaIikButerin (capital I instead of lowercase l)
❌ @Vitalik_Buterin (different format)

8. Malware wallet drainer

Malicious software that:

• Steals your seed phrase
• Replaces copied addresses with the attacker's addresses
• Signs transactions without you noticing

Protection:

• Don't install pirated software
• Verify the full address before sending
• Use a hardware wallet for large amounts

9. "Trading signal" groups

Very common on WhatsApp and Telegram in Latin America. They add you to a group where everyone is making money and sharing screenshots of their gains.

   "VIP Signals Group — 2026 Gains"

   Ana M.:    "Started with $500, already at $1,800 🚀"
   Carlos R.: "Thanks, boss, withdrew my first $1,000"
   Admin:     "New signal in 10 minutes, get ready"
   Ana M.:    "I already deposited more"

How it works: almost all the "members" are accounts run by the same group of scammers. They show you gains for days to build trust. When you deposit, the platform they recommend is fake: it shows you making money, but when you try to withdraw they ask for "taxes," "release fees," or a "verification deposit." That money is lost too.

Unmistakable signs

• You were added without asking for it
• They lead you to a platform you've never heard of
• Withdrawals require depositing more first
• There's constant urgency

10. The fake job offer

You get contacted on LinkedIn, WhatsApp, or Telegram offering an easy, well-paid remote job: "like videos," "rate products," "complete tasks."

At first they really do pay you — small amounts — to build trust. Then the "tasks" require you to front your own money to unlock bigger commissions. That money never comes back.

A more technical variant targets developers: they send you a "technical test" in a repository, and the code contains a script that steals your wallet keys when you run it.

The rule is the same

No legitimate job ever requires you to put up your own money to get paid. And never run code from a stranger on the machine where you keep your wallet.

11. The hardware wallet you didn't order

A sealed Ledger or Trezor turns up at your home with an official-looking letter: there's been a breach, your old unit is compromised, here's the replacement. Inside are instructions to "restore" by typing in the words you already had.

It works because nothing about it feels off. No suspicious link, no urgency, and the unit is genuine — what's been altered is the software inside, which ships your words to the attacker the instant you key them in. And it reaches your door because Ledger's buyer records have leaked more than once, name, phone and address included (the detail).

Neither Ledger nor Trezor mails replacements nobody asked for

If you didn't buy it, it's an attack — sealed, letterheaded, logo and all. Bin it and carry on with the one you already have.

The digital version of the same trick: counterfeit builds of Ledger Live and Trezor Suite, indistinguishable on the surface, bought as search ads so they rank above the real site. They ask for the words "to migrate" or "to restore". It's the one thing that slips past a genuine unit, because the unit never learns that window exists. Reach the program by typing the address or from a bookmark, never from a search result.

Checklist before investing

Before putting money into any project:

• I know the team and it has a verifiable track record
• The code is audited by someone reputable
• The liquidity is locked
• There is a real community, not accounts repeating the same thing
• The promised returns are realistic
• I understand how this makes money
• I verified the contract address against the official source
• I can afford to lose this money entirely

0 of 8

What to do if you think it's a scam

1. Don't send money - Obvious, but the pressure can be intense
2. Don't give out information - No seed phrase, no passwords, no personal data
3. Block and report - On the relevant platform
4. Warn others - Share it so they don't fall for it

If you've already been a victim

1. If you shared your seed phrase:

   • Create a new wallet IMMEDIATELY
   • Move all funds to the new wallet
   • The old wallet is compromised forever

2. If you sent crypto:

   • Unfortunately, transactions are irreversible
   • Report it to the authorities (it can help investigations)
   • Learn for next time

3. If you gave access to a malicious dApp:

   • Go to revoke.cash
   • Revoke all permissions for that dApp
   • Consider moving funds to a new wallet

Summary

• Nobody gives away money - giveaways are scams
• Support never asks for your seed phrase
• Verify URLs before connecting
• If it's too good to be true, it's a scam
• Research before investing
• If you got scammed, move funds to a new wallet immediately

---

If you came looking for something else:I'm about to receive crypto · I want to cash out to local currency · Start from the beginning