Crypto scams frequently rely on speed, impersonation and irreversible transfers. The names and platforms change, but the patterns are recognisable: pressure to act, requests for secrets, promises of guaranteed gains and instructions that bypass a service’s official support channel.
Ten patterns worth recognising
These patterns can overlap. A fake support message may direct someone to a phishing website; an impersonation account may advertise a fake investment platform; a recovery scam may target someone after an earlier loss.
- Fake support that asks for a seed phrase, private key, password or one-time code.
- Phishing sites that imitate a wallet, exchange or government/regulator page.
- Giveaways that require a deposit or promise to “double” a transfer.
- Impersonation of celebrities, traders, project teams or friends.
- Fake investment dashboards showing invented profits and blocking withdrawals.
- Malicious wallet-connection prompts or token approvals.
- Romance or relationship scams that introduce crypto investment claims.
- Fake airdrops that require signing an unexplained transaction.
- Recovery services that request upfront payment, credentials or remote access.
- Pressure to move assets immediately because of a claimed emergency.
The red flags are behavioural
A scammer may use technical language, polished branding or screenshots of success. The most useful warning sign is often the action they demand. A legitimate provider does not need a recovery phrase. An investment cannot be both risk-free and highly profitable. A genuine emergency can be verified through a known official route.
Urgency
“Act now” is designed to prevent careful checking.
Secrecy
Requests to keep a transfer or support conversation private are a warning sign.
Irreversibility
A request to send crypto, approve a wallet prompt or buy a gift card should trigger extra scrutiny.
How to verify before acting
Pause. Use a bookmark or typed official domain. Search for official support links independently. Ask a trusted person to look at the claim without sharing secrets. Check whether the request is asking for something that should always remain private.
- Verify a website’s exact domain and the publisher of a mobile application.
- Look for independently verifiable official announcements, not reposts or replies.
- Read the wallet transaction prompt carefully; reject unclear approvals.
- Do not use remote-access software at the request of an unsolicited contact.
What to do after a suspected scam
Stop further transfers and preserve the evidence. Secure email and account access through official routes. Report the impersonation to the platform and contact appropriate official channels in your jurisdiction. Be wary of anyone who discovers the victim publicly and offers a paid “recovery” service.
Secure access
Change compromised passwords through verified sites and strengthen account protection.
Preserve evidence
Keep wallet addresses, transaction IDs, screenshots and messages.
Avoid a second loss
Do not disclose recovery information to a new “helper” or pay an unsolicited recovery fee.
A practical next step
Read how to protect crypto from hackers and the wallet basics guide for practical security context.