Avoiding Crypto Scams: The Common Traps and How to Spot Them
Most crypto theft isn't high-tech hacking. It's ordinary tricks that get you to hand over access. Learn the patterns and you'll dodge the vast majority of them.
Here's the reassuring truth about crypto scams: almost all of them rely on the same handful of tricks, and once you recognize the patterns, they become easy to spot. The bad news is that crypto transactions are irreversible, so there's no chargeback to save you. This guide walks through the scams you're most likely to meet and the simple habits that defeat them.
The one rule behind almost every scam
Nearly every crypto scam is trying to get you to do one of two things:
- Reveal your seed phrase or private key, or
- Approve a transaction that sends your funds away or grants access to your wallet.
If you treat both as sacred, never sharing the first and always scrutinizing the second, you've closed the door on most attacks before they start.
Fake support and impersonation
This is the most common trap. You post a question in a forum, app, or social channel, and within minutes a "support agent" messages you privately offering to help.
- Real support will never DM you first, and will never ask for your seed phrase, password, or remote access to your screen.
- Scammers spoof official names, logos, and handles. A friendly, fast, unsolicited message is a red flag, not good service.
- The "wallet sync / validation" trick: they send you to a site that asks you to "restore" or "validate" your wallet by entering your seed phrase. Entering it hands them everything.
Habit: only use support channels you navigate to yourself from the official app or site. Ignore anyone who reaches out first.
Phishing sites and approval scams
Phishing sites mimic real wallets, exchanges, or popular apps, often promoted through ads, fake search results, or links in messages.
- They may ask for your seed phrase outright (never enter it), or
- They may prompt you to connect your wallet and approve a transaction. A malicious approval can give a contract permission to move your tokens later, draining your wallet even after you close the tab.
Protect yourself:
- Type official URLs yourself or use a trusted bookmark. Don't click links from emails, DMs, or ads.
- Read every transaction before signing. If you don't understand what an approval grants, reject it.
- Periodically revoke old token approvals you no longer use.
- A hardware wallet helps, because you confirm the real details on the device screen, but as noted in hot vs. cold wallets, it won't stop you from approving a bad transaction yourself.
"Too good to be true" offers
If the return is guaranteed or the gift is free, it's a scam. Common forms:
- Giveaway scams: "Send 1 coin, get 2 back." No one doubles your money. The coins you send are simply gone.
- Guaranteed-return investment platforms: slick sites or "advisors" promising fixed daily profits. Many are Ponzi schemes that pay early users with later users' money until they collapse.
- Pig butchering: a long, friendly (often romantic) relationship that slowly steers you toward a fake investment app showing fake gains, until you try to withdraw and can't.
Habit: real investing carries risk and never guarantees returns. Pressure, urgency, and "exclusive" opportunities are manipulation tactics.
Other traps worth knowing
- Fake apps and extensions. Downloads outside official app stores, or even convincing fakes inside them, can be wallet-draining clones. Verify the publisher and reviews; check the developer's official site for the correct link.
- Address-swapping malware. Some malware silently replaces a copied wallet address with the attacker's. Always double-check the first and last few characters of a destination address before sending.
- Fake tokens and "airdrops." Unexpected tokens may appear in your wallet to lure you to a phishing site to "claim" them. Don't interact with assets you didn't expect.
- Counterfeit hardware wallets. A device with a pre-filled seed phrase is a planted trap. Buy only new, from official sources, see our wallet comparison.
- SIM swapping. Attackers hijack your phone number to bypass SMS codes. Prefer an authenticator app over SMS for two-factor authentication, and choose a reputable exchange (how to choose a crypto exchange).
A quick gut-check before you act
When anything feels off, pause and ask:
- Is someone creating urgency or pressure? Scammers rush you so you can't think.
- Am I being asked for my seed phrase or to approve something I don't fully understand?
- Did this person or link come to me unsolicited?
- Does the address or URL exactly match what I expect, character by character?
- Is the return guaranteed or the offer free? Then it isn't real.
Slowing down for thirty seconds defeats most scams, because they depend on you acting fast.
Key takeaways
- Almost all scams aim to get your seed phrase or a harmful transaction approval. Guard both.
- Real support never DMs first and never asks for your recovery phrase.
- Type official URLs yourself, read what you sign, and revoke unused approvals.
- Guaranteed returns and free-money giveaways are always scams.
- Verify addresses character by character, and buy hardware wallets new from official sources.
You now have the core of self-defense in crypto. Put it all together with the secure your crypto path, or brush up on terms in the glossary.