Crypto Scam Red Flags: 10 Warning Signs to Check First
Most crypto scams show the same red flags: guaranteed or unusually high returns, pressure to act fast, someone asking for your seed phrase or a one-time code, unsolicited support or recovery offers, and requests to sign a wallet transaction you do not understand. If you see one, stop, verify through the official site you typed yourself, and never send more money to unlock funds.
Crypto scams change their story every few months, but the mechanics barely change. Someone wants you to send funds, hand over access, or sign something, and they need you to do it before you stop and check. Big market events make it worse: when an exchange pauses withdrawals or a hack is in the news, fake support agents and “refund” links show up within hours, because frightened people move fast.
This guide lists the warning signs that show up again and again, a short routine to run before you send or sign anything, and where to report a scam if it is already too late. It is general education, not legal advice.
The 10 red flags that show up in most crypto scams
- Guaranteed returns. Nobody can promise a fixed daily, weekly or monthly profit on crypto. A guarantee is the pitch, not the product.
- Pressure to act now. Countdown timers, “last slots”, and messages saying your account will be closed unless you act today are designed to stop you from checking.
- Requests for your seed phrase or one-time codes. No real exchange, wallet or support agent needs your recovery words or 2FA code. Ever.
- Unsolicited support. Real support does not slide into your DMs. If “support” contacts you first, assume it is fake.
- Payment demanded in crypto. The FTC’s guidance on crypto and scams warns that demands to pay in cryptocurrency, for example from someone posing as a business or government agency, are a sign of a scam.
- A new online friend who talks about investing. Long-con romance and “mentor” scams build trust for weeks before steering you to a trading site they control.
- A platform you cannot withdraw from. Fake trading apps often show big paper profits, then demand a “tax” or “unlock fee” before any withdrawal.
- Links instead of typed addresses. Lookalike domains and sponsored search ads lead to cloned exchange and wallet sites.
- Transactions or approvals you do not understand. Wallet drainers rely on you clicking “approve” without reading.
- Recovery offers after a loss. People who promise to get your stolen crypto back for an upfront fee are usually running a second scam.
How the most common scams actually work
| Scam type | How it starts | What they want | The tell |
|---|---|---|---|
| Fake support | A DM or call after you post about a problem, or after a platform outage | Your login, 2FA code or seed phrase | Support contacted you first |
| Investment or romance long con | A friendly stranger on social media or a dating app | Deposits into a platform they point you to | Profits you can see but cannot withdraw |
| Wallet drainer | A fake airdrop, mint or “claim” page | A signature or token approval | The site asks for broad approvals |
| Address poisoning | A tiny transfer into your wallet from a lookalike address | Your next transfer, sent to them | The address only matches at the start and end |
| Recovery scam | A message after you report or post about a loss | An upfront “recovery fee” | A guarantee to get funds back |
The pattern is the same in each row: the scammer needs you to give something up before you verify. Your job is to insert that verification step every time.
A 60-second check before you send or sign anything
- Type the address yourself. Open exchanges and wallets from a bookmark or by typing the domain, not from a link in a message or a search ad.
- Check who started the conversation. If you did not open a ticket inside the official app, the “agent” is not real.
- Read the request, not the story. Strip away the urgency and ask what they actually want: a code, a phrase, a deposit, or a signature.
- Use a small hot wallet for new sites. Keep long-term holdings in cold storage so a bad signature cannot reach them. Our guide to crypto wallet types explains the difference, and the hardware wallet guide for beginners covers setup.
- Send a test amount first. For any new address, a small test transfer costs little and catches typos and swapped addresses.
- Sleep on anything urgent. Real opportunities survive a day. Scams usually do not.
Keeping only what you actively trade on an exchange also limits the damage if an account is taken over; see how much crypto to keep on an exchange for a way to size each tier.
For the account side, our crypto exchange account security checklist walks through passwords, two-factor settings, withdrawal whitelists, anti-phishing codes and login reviews.
Red flags in copy trading and signal groups
Copy trading and paid signal groups are not scams by default, but they attract them. Watch for screenshots of profits with no verifiable track record, groups that push you to a specific unknown exchange, and “VIP” tiers that require a deposit to a personal wallet. Our look at realistic copy trading results covers what honest performance tends to look like, which makes the exaggerated pitches easier to spot.
What to do if you think you were scammed
- Stop sending money. Do not pay any fee, tax or deposit to “release” funds.
- Secure what is left. Change passwords, reset 2FA, and move remaining funds from any wallet whose seed phrase you shared to a new wallet.
- Revoke approvals. If you signed something on a suspicious site, revoke token approvals for that wallet using a reputable approval checker.
- Save the evidence. Keep transaction hashes, wallet addresses, usernames, screenshots and the site’s URL.
- Report it. In the US, file with the FBI’s Internet Crime Complaint Center and the FTC, and tell the exchange or wallet involved. Exchanges can sometimes flag or freeze funds that arrive at their platform.
- Ignore recovery offers. Expect messages promising to get your money back. Treat every one as the next scam.
One newer pattern: after an exchange incident, messages appear offering to “verify your reserves” or confirm your balance through a link. You never need a third party for that. Checking an exchange’s proof of reserves is done from inside your own account on the official site.
Why scams spike during market news
Scams follow attention. When a large exchange pauses withdrawals, a token crashes, or a big airdrop is announced, scammers copy the headline into fake support messages, fake compensation forms and fake claim pages. The safest habit during those moments is the most boring one: wait for the official announcement on the platform’s own site, act only inside the official app, and ignore anything that arrives by direct message. The news will still be there in an hour, and so will your funds if you do not hand over access.
Frequently asked questions
What is the biggest red flag of a crypto scam?
Anyone asking for your seed phrase or recovery words. No legitimate exchange, wallet maker or support agent needs it, and whoever has it controls the wallet. Guaranteed returns come a close second, because no real investment can promise a fixed profit.
Can a crypto support agent message me first?
Treat any unsolicited message from support as suspicious, whether on social media, Telegram, a text or a phone call. Real support works through tickets you open inside the official app or website. Scammers often appear right after a platform announces an outage or a withdrawal pause.
Are crypto recovery services real?
Be very careful. Services that contact you after a loss and promise to get your crypto back for an upfront fee are a common second scam aimed at people who were already scammed. Report the loss to the authorities instead, and do not pay anyone who guarantees recovery.
What is a wallet drainer?
A wallet drainer is a malicious site or contract that asks you to sign an approval or transaction, then uses that permission to move tokens out of your wallet. Read what you are signing, use a separate hot wallet with a small balance for new sites, and revoke approvals you no longer need.
What is address poisoning?
Scammers send a tiny transfer from an address that looks almost identical to one you use, hoping you copy it from your history next time. Always copy addresses from the original source or a saved address book, and check more than the first and last few characters.
Where should I report a crypto scam?
In the US, you can report to the FBI's Internet Crime Complaint Center at ic3.gov and to the FTC at ReportFraud.ftc.gov. Also report it to the exchange or wallet involved. Save transaction hashes, wallet addresses, screenshots and messages before anything is deleted.
Is it a scam if a platform asks me to pay a fee to withdraw?
If the request comes by message and asks you to send a 'tax', 'unlock fee' or 'verification deposit' before you can withdraw, it is almost certainly a scam. Real network fees are shown on the platform's own withdrawal screen and deducted there, not paid to a person.