The 10 most common cryptocurrency scams

CrabChain.org Team | Updated 13 October 2026

The growth of cryptocurrencies has created a global market in which financial innovation, new digital infrastructures, and risks that can be difficult to identify coexist for those unfamiliar with how they work. Digital asset transactions can be executed quickly and, in certain cases, without intermediaries capable of reversing a transfer. This combination makes the sector particularly attractive to scammers, who use everything from social engineering techniques to manipulated smart contracts to take victims' funds. Although methods constantly evolve, many of the most common scams rely on recognizable patterns. Knowing them makes it easier to assess promises of returns, requests for information, and investment opportunities that appear on social media, messaging applications, websites, and specialized platforms.

1. Phishing. This scam attempts to get the victim to hand over credentials, their seed phrase, or authorization for a transaction while believing they are interacting with a legitimate service. The fraud may be carried out through emails, private messages, fake advertisements, or websites that imitate well-known exchanges and wallets, and a common sign is pressure to act immediately because of a supposed security alert. Links with strange domains, unexpected requests for confidential information, and messages threatening to block an account are particularly important warning signs. The best protection is to access services by manually entering their official address, carefully verify the domain, and never share recovery keys.
2. Fake investments. Scammers create platforms or profiles that promise high profits through cryptocurrency trading, automated bots, mining, or exclusive opportunities. To gain credibility, they may display fake balances, fabricated testimonials, or small initial profits that encourage victims to deposit larger amounts. Promises of guaranteed returns, a lack of verifiable information about the company, and difficulties withdrawing funds are common warning signs. Before transferring money, it is advisable to investigate who operates the service, check its reputation, and be wary of any proposal that presents high profits as if they were certain.
3. Rug pull. In this fraud, the people behind a cryptocurrency project attract capital by promising to develop a token, decentralized application, or innovative ecosystem, and then withdraw the liquidity or disappear with the contributed funds. The appeal is often supported by intensive marketing campaigns, artificial activity on social media, and expectations of rapid price increases. Excessive concentration of tokens in a few wallets, opaque mechanisms, and anonymous teams with no verifiable track record can increase the risk. Protection requires analyzing the project's structure, reviewing token distribution, and understanding how its contracts and liquidity pools work before investing.
4. Honeypot. This method uses a token or contract that appears to allow users to buy and sell assets but includes restrictions that prevent victims from selling their positions once purchased. The price may rise quickly because buying is possible while selling remains blocked or controlled by the creator. Abnormal transaction behavior, low liquidity, and contract functions that grant extraordinary privileges are warning signs that should be examined before participating. Reducing the risk requires investigating the smart contract, using reliable analysis tools, and avoiding tokens whose operation cannot be clearly understood.
5. Impersonated support. Criminals pose as employees of exchanges, wallets, companies in the sector, or community administrators to convince the victim that there is a problem that must be resolved. The supposed agent may ask for remote access to the device, authentication codes, a test transfer, or directly the seed phrase. A common characteristic is that the contact is made unexpectedly through social media, messaging, or public comments, although they may also use profiles that appear official. The most effective protective measure is to initiate contact exclusively through official channels and remember that a legitimate service does not need to know the credentials that directly control the funds.
6. Ponzi and pyramid schemes. These frauds present an apparently profitable investment opportunity whose payments depend largely on the entry of new participants rather than on generating sustainable profits. In the cryptocurrency sector, they may take the form of investment platforms, affiliate programs, or communities that financially reward people who bring in new users. Pressure to recruit others, a lack of transparency about the source of returns, and the constant need for new deposits are characteristic warning signs. To protect yourself, it is essential to analyze where the profitability actually comes from and to be wary of structures that make attracting new investors the main economic driver.
7. Fake giveaway. Scammers use the identity of companies, developers, or well-known figures to announce supposed giveaways in which they promise to return more than the amount the user sends. The message often takes advantage of current events and may be spread through fake profiles, manipulated videos, or pages that imitate verified accounts. The main warning sign is that the participant must send cryptocurrency first in order to receive an apparently larger reward. There is no reasonable economic justification for requiring an advance transfer in this type of promotion, so the safest rule is not to send funds based solely on a post or message received online.
8. Cryptocurrency romance scam. In this fraud, the criminal builds an affectionate or trusting relationship through social media and dating apps in order to gradually introduce conversations about investments. They may then recommend an apparently professional platform and persuade the victim to make increasingly larger deposits. Emotional manipulation, financial opportunities presented as shared secrets, and excuses for delaying withdrawals are common warning signs. Protection consists of separating personal relationships from financial decisions and independently verifying any investment proposal, especially when the person never agrees to meet or verify their identity.
9. Fund recovery scam. After suffering a theft or losing access to a wallet, some victims are contacted by supposed specialists who claim they can recover the cryptocurrency through private techniques, special tools, or inside contacts. The scammer may demand an upfront payment, request confidential data, or ask for access to the device under the promise of later returning the assets. An unmistakable risk signal appears when someone guarantees the recovery of lost funds without having a verifiable procedure and demands credentials to do so. The best defense is to preserve evidence of the incident, use official channels, and avoid any service that requests the information necessary to directly control the wallet.
10. Fake applications and wallets. Some criminals distribute software that imitates the appearance of well-known wallets or services with the aim of stealing keys, credentials, or funds during installation and use of the software. These applications may appear on cloned websites, sponsored advertisements, unofficial repositories, or digital stores using names and icons designed to cause confusion. Discrepancies in the domain, unknown developers, suspiciously uniform reviews, and unnecessary permission requests are signs that justify additional scrutiny. To reduce risk, download software from official sources, verify the developer's identity, and avoid entering a seed phrase into an application whose authenticity has not been verified.

What they have in common

The ten methods described share one fundamental characteristic. The attacker's goal is not always to exploit a technical vulnerability in the blockchain, but to get the victim to perform an action that facilitates the fraud. Social engineering, artificial urgency, promises of extraordinary returns, and imitation of well-known services recur because they work according to a simple principle. The greater the pressure and the less time given to verify an opportunity, the more likely the user is to act without checking the information.

The irreversible nature of many cryptocurrency transactions increases the consequences of these deceptions. When a person sends assets to an address controlled by a scammer, the underlying technology generally does not provide a mechanism equivalent to a traditional bank reversal. For that reason, prevention becomes especially important and should rely on both technical measures and verification habits. Verifying addresses, checking domains, protecting private keys, being skeptical of extraordinary promises, and stopping when faced with an urgent request are simple practices that can prevent serious losses.

The risk also does not disappear simply because a well-known platform or an established blockchain is being used. Scammers can operate around legitimate infrastructures and take advantage of their popularity to build convincing campaigns. Security in the cryptocurrency field therefore requires understanding not only how digital assets work, but also how the psychological mechanisms used to manipulate users work. In a market where any transaction can be executed within seconds, the ability to verify before acting remains one of the most important tools for protecting digital wealth.

Sources

• Ethereum security and scam prevention — ethereum.org
• Internet Crime Complaint Center (IC3) — FBI
• Recognize and report phishing — CISA