How to Spot Crypto Scams: The Patterns Behind Almost Every One

Crypto fraud is unusually repetitive. The branding changes constantly and the underlying templates barely change at all. Learning seven patterns covers the overwhelming majority of what you will encounter.

Two structural facts make this sector attractive to fraudsters, and they are worth stating first because they explain everything else: transactions are irreversible, and much of the activity sits outside the consumer protections that cover banks and regulated brokers. There is no chargeback and often no regulator to appeal to.

Pattern 1: guaranteed returns

The oldest fraud in finance, wearing new clothes. A platform, fund or bot offers a fixed daily or monthly return — sometimes modest enough to sound plausible, which is what makes it effective.

Why it cannot be true. Returns come from either taking risk or providing a service someone pays for. A guaranteed return means the risk has been removed, and nobody removes risk for free. Early payouts are funded by later deposits, which is the definition of a Ponzi scheme, and it collapses when deposits slow.

The tell: any promise where you cannot construct a scenario in which you lose money.

Pattern 2: the long-con investment relationship

The most financially damaging pattern currently operating, and the one least like a traditional scam.

It begins with an unrelated contact: a wrong-number message, a dating app match, a professional networking approach. Weeks of genuine-seeming conversation follow with no mention of money. Trust is built deliberately and patiently.

Eventually investing comes up naturally — a relative in finance, a platform that has worked well for them. The victim is guided to a professional-looking site showing a rising balance. A small withdrawal is permitted early, which is the critical step: it proves the platform works.

Larger deposits follow. When the victim tries to withdraw meaningfully, a fee appears — tax, compliance, an unlocking charge. Paying it produces another. The balance was never real.

The tells: an unsolicited contact that becomes a friendship; investment advice from someone you have never met in person; a platform you found only through them; permission to withdraw a small sum early; fees demanded before a withdrawal.

Pattern 3: rug pulls

A token launches with heavy promotion. The price rises as buyers arrive. The team then sells its holding, removes the liquidity pool, or exercises a contract function that prevents anyone else from selling.

Checks that take two minutes:

• Is liquidity locked, and for how long?
• Can the contract mint new tokens, or blacklist addresses from selling?
• How is supply distributed — do a few wallets hold most of it?
• Is the team identifiable, and have they built anything before?
• Is the audit real? Verify with the auditor rather than trusting a logo.

The tell: enormous marketing volume against a vague or absent explanation of what the token does.

Pattern 4: fake platforms and cloned firms

A website that looks like a real exchange or broker. Sometimes it is a straight copy of an authorised firm's site, using the genuine registration number, with only the contact details changed — regulators call this cloned firm fraud and publish warnings about it.

How to check properly: go to the regulator's register yourself, search by firm name, and confirm that the website domain listed there matches the one you are on. Never use a link or reference number the platform gives you.

The tells: a domain that is nearly right but not quite; pressure to deposit quickly; deposits accepted only in crypto or to a personal bank account; no verifiable corporate address.

Pattern 5: impersonation and giveaways

Fake accounts imitating exchanges, projects or public figures, promising to return double whatever you send. Frequently promoted through hijacked verified accounts and fake livestreams.

The tell: nobody sends you money for sending them money. There is no exception.

Also in this category: fake support accounts that appear within minutes of you posting a problem publicly. Official support never initiates contact and never asks for a seed phrase.

Pattern 6: wallet-drainer approvals

You connect a wallet to a site — a mint, an airdrop claim, a game — and sign what appears to be a routine transaction. It is actually an approval granting unlimited spending rights over a token. The balance is emptied later, sometimes weeks later.

Protection: read what you are signing rather than clicking through; use a separate wallet holding only small amounts for interacting with new sites; revoke old approvals periodically using an approval checker.

Pattern 7: recovery scams

The cruellest pattern, because it targets people who have already lost. Victims are contacted by a firm claiming to trace and recover stolen crypto, sometimes claiming a government or law enforcement affiliation, and asked for an upfront fee.

The tell: any private entity promising recovery for payment in advance. Legitimate recovery, where it happens at all, occurs through law enforcement and exchange compliance teams, not through a company that contacted you.

The universal checks

Before sending anything anywhere:

1. Ask how you could lose money. If no honest answer exists, stop.
2. Verify authorisation independently, on the regulator's own site.
3. Refuse time pressure. Urgency exists to prevent you from checking. A genuine opportunity survives a night of sleep.
4. Distrust unsolicited contact entirely. Nobody you have not met sends good investment advice for free.
5. Never share a seed phrase or private key. With anyone, for any reason, ever.
6. Test with a small amount first, and try withdrawing before depositing more — while remembering that an allowed small withdrawal is itself part of pattern 2.
7. Search the name plus the word scam, and check regulator warning lists.

If it has already happened

• Stop paying. Do not pay a fee to release funds. That fee is the scam.
• Record everything: addresses, transaction hashes, screenshots, usernames, domains.
• Report it to your national fraud reporting service and financial regulator. Reports build the cases that lead to takedowns even when individual recovery is impossible.
• Tell your bank immediately if fiat left through it. Card and transfer routes occasionally allow recall if reported fast.
• Expect the recovery scam and refuse it.
• Do not carry the shame. These operations are professional, well-resourced and target competent people. Reporting is more useful than embarrassment.

The bottom line

Almost every crypto scam reduces to one of these seven shapes, and almost every one fails a simple test: how, specifically, could I lose money here?

Fraudsters cannot answer that question honestly without destroying the pitch. Asking it, and refusing to move until it is answered, prevents most of what happens in this space.

This article is educational and is not financial advice.