Most Common Types of Crypto Scams

New economy, new risks. Crypto scam losses are not shrinking – they are accelerating. US crypto investment fraud alone reached $3.94 billion in 2023, up 53% from 2022, according to the FBI Internet Crime Complaint Center. Globally, illicit crypto activity tracked by blockchain analytics firm Chainalysis reached at least $154 billion in 2025. The scam types have also evolved: AI-assisted impersonation operations now generate an average of $3.2 million per scheme, compared to $720,000 for operations without AI tools.

The blockchain space changes rapidly. That’s why it’s hard for people to catch up, why there are such great business opportunities, and why scammers succeed. Among other reasons, because life-changing returns in crypto investments are the norm (if you’re early).

When something too good to be true is actually true, how do you know the difference between what is and what’s not?

Simple. Most crypto scams you see are the same ones we’ve seen online for decades (while all the rest are just bad projects). There’s nothing new in phishing, identity theft, payment fraud, securities fraud, fake websites, pyramid schemes, advanced fees, and price manipulation. If you know how to recognize these schemes in this new space, crypto scams are easier to avoid than you think.

The common ways of losing money are:

• Getting stolen from fake profiles or fake platforms
• Joining an investment platform that blocks all withdrawals
• Investing in a get-rich-quick, unsustainable project
• Losing on price manipulation or FOMOing into a trap

As you go through the list, you’ll find that investing and social media are closely tied together when it comes to fraud.

Here they are from most to least likely to happen to you:

Crypto Scam Quick-Reference: Probability, Risk, and Red Flags

👉 Quick takeaway: Investment fraud and phishing are the highest-probability threats. Pig-butchering scams are the most financially devastating — victims often lose their entire portfolio before realizing what happened.

Universal Crypto Scam Red Flag Checklist

Before you send any crypto or share any account information, run through this list. If you check even one box, stop and verify independently.

[ ] Someone contacted me first with an investment opportunity.
[ ] The returns promised are consistent, guaranteed, or unusually high.
[ ] I am being asked to share my seed phrase, private key, or password.
[ ] The platform or person is creating urgency or a deadline.
[ ] Withdrawals require additional fees, taxes, or deposits.
[ ] The founder or operator is anonymous or unverifiable.
[ ] A romantic or friendly relationship was established before the investment pitch.
[ ] The platform is not listed on any regulated exchange registry.
[ ] A public figure is promoting this via video, audio, or social media message.
[ ] I found this opportunity through an unsolicited message, email, or social media comment.

1: Identity Fraud

Crypto identity fraud refers to all possible tricks scammers use to make you think they’re someone else. That someone might be your favorite crypto influencer, a popular exchange, or even Elon Musk. To fabricate this image, scammers do:

• Create fake profiles that copy the image and username of the official one
• Use exploit tools to pump their number of followers and likes
• Add links to actually official websites

Chances are you’ve seen them a million times. These bots flood social media comments as soon as someone becomes popular. Fortunately, almost no one falls for these, because trusted people never reach out directly nor ask you to message them, call their phone number, join their investment program, or visit their website (hence why they send so many).

Examples:

• Hundreds of fake profiles recommending a website or trader on the comments
• Someone posing as someone famous asking to private-message them
• A fake customer support profile that messages you first
• A Bitcoin prize email from a misspelled exchange
• Cryptocurrencies or NFTs supposedly created by influencers

Identity fraud is the foundation for most other types of crypto scams.

2: AI-Assisted and Deepfake Impersonation Scams

Traditional impersonation scams used fake social media profiles. In 2025, scammers are using AI-generated voice cloning, deepfake video, and large language models to impersonate executives, celebrities, and even your own contacts.

According to the Chainalysis 2026 Crypto Crime Report, scam operations that used AI vendor tools generated an average of $3.2 million per operation, compared to $720,000 for operations without AI assistance – a 4x revenue advantage.

How AI scams work:

• A deepfake video of a well-known figure (Elon Musk, a fund manager, or a CEO) promotes a crypto investment or giveaway.
• AI voice cloning is used to simulate a phone call from a known contact urging you to send funds urgently.
• AI chatbots sustain long-term fake relationships in pig-butchering operations without human operators.
• Fake customer support agents powered by AI respond convincingly to wallet recovery requests.

Red flags: Any unsolicited investment offer from a public figure, regardless of how realistic the video or audio appears. Urgency combined with a request to send crypto. Any ‘support’ contact that asks for your seed phrase or private key.

3: Phishing Scams

The goal of crypto phishing scams is to get access information to your wallets or devices. After you share the address, the thief can lock you out, withdraw your funds, or wait until you deposit enough crypto to steal. A less common method is to install malware and spy until they get that information.

Since we only share this data on trusted platforms (exchanges, Web3 wallets), identity fraud is essential for phishing. The strategy varies with the bait used:

• If it’s a reward (e.g., a fake airdrop), they’ll post it on social media.
• If it’s a warning (e.g., a security issue on your account), they’ll use email or SMSs.

Two common ways people lose money:

• Someone in private chat asks for the information because they claim to be customer support (not even real teams ask for this).
• A link sends them to a fake login page asking for passwords or recovery phrases.

Users should be careful with external links and always check the website domain name. Skilled fraudsters can fake profiles, wallet apps, browser extensions, DEXs, tokens, and even blockchains. For optimal security, you should use different passwords, 2FA codes, and many wallets to distribute your cryptocurrency.

4: Fake ICOs

One reason DYOR (Do Your Own Research) is so hard is scam projects. These coins are the majority of the cryptocurrency list, have no intrinsic value, and copy other projects. They’re often called meme-coins and Shitcoins, driven only by speculation and hype.

They’re dangerous because they copy legit projects and look as promising as the real ones. It’s hard to tell the difference in a bull market when almost every coin goes up. That’s why so many appeared after Bitcoin’s boom in 2018, followed by a crash that wiped out over a thousand projects.

Fake ICOs can be:

• Copycats, which is a form of identity thief. The “project” rebrands someone else’s whitepaper and features to bring credibility and pull and exit scam later.
• Shitcoins, which have no product-market fit. They often rely on heavy marketing, have abstract features, and use questionable names, such as MOON or UPONLY.
• Memecoins, which are speculative tokens with zero technology or utility behind them. Price changes because of influencers and popular sentiment.
• Fake tokens, which are worth ~$0 and impersonate others like Uniswap or PulseChain. They use the exact same icon, token name, description, links, and market cap. When adding custom tokens, scammers hope that you add their coin by mistake, so they dump prices later.
• Fake pre-sale events. Founders make the project look great when there’s nothing built. After they get enough funding, they abandon the project and disappear by the launch day.

The faulty logic is that if a tiny project looks like a Top 10 coin, it’s going to get attention. And if it just gets 1% of the funding, it will massively increase its price. The truth of fundamental analysis is: Most me-too projects won’t even take off (either because of low value or the “founders” dumping it).

5: Ponzi Schemes

If DeFi is trustless and self-custodial, Ponzi schemes are the opposite. The goal is to create greed, so you feel confident about trusting big money for long periods of time. You might trust the investment model because it works, and everyone makes money. Oftentimes, it’s your friends who recommend it with good intentions.

Is it sustainable? Probably not.

The red flags of a crypto Ponzi are:

• Consistent monthly returns, because markets are volatile
• Money-making is the main or only token utility
• There’s no “product” or blockchain infrastructure (because it doesn’t need one)
• Heavy promotion of high passive income for no risk
• The only way to earn is to deposit on their official platform (which isn’t a dApp)
• There are strict withdrawal rules, constant delays, and paperwork
• Unclear revenue model (which points to a zero-sum economy that only improves with new members)

It’s never been harder to recognize Ponzi schemes now that DeFi has appeared. But make no mistake: DeFi is all about giving users control over their money and financial tools. Investment profits are the consequence, not the cause or the primary purpose.

Unlike traditional pyramid schemes, crypto Ponzis will deliver their promises always. But by the time they do, tokens might be worthless. If you didn’t find the project but the project found you, it’s already late.

6. Social Media Shilling

If you prefer to regularly trade rather than hold, chances are you follow traders on social media. You look for clues on what big names think and maybe follow signals from technical analysts. Some of them are so successful they sometimes become advisors or create their own projects.

That’s when conflicts of interests start.

Shilling is about making money by selling a crypto asset rather than investing in it. Because selling is about perceived value, sellers can promote anything regardless of its worth. They often have a large community and funds to fabricate that perception.

Since large crypto influencers often befriend each other, they might coordinate their news to manipulate prices on bigger coins.

Buyers can also shill NFTs and tokens:

• Exaggerating or bragging about their returns
• Spamming the coin or NFT on social media
• Making fun of anyone who criticizes or doesn’t buy
• Overestimating the founder’s past achievements and vanity metrics like market caps

These are ready to sell as soon as you buy, which is a variation of pyramid schemes. Again, users might buy in anyway and hope to dump on later suckers, which doesn’t end well for them either.

7. Romance Scams

Social media and investing go together, and so often do relationships. As the name suggests, crypto romance scams use love to manipulate your financial decisions. But it’s not limited to lovers only: anyone creating a relationship with you for this purpose falls under romance and affinity frauds:

• A love ‘partner’ you only chat with on social media or dating apps – this is often the opening phase of a pig-butchering scam, one of the highest-loss fraud categories tracked by the FBI. In pig-butchering operations, the relationship is built deliberately over weeks before any investment is mentioned. By the time you invest, you trust the person completely. US crypto investment fraud losses reached $3.94 billion in 2023, up 53% from 2022, with romance-linked investment fraud as a primary contributor per FBI IC3 data.
• In a networking platform, you find an interesting person near your area and decide to meet. You have barely introduced yourself and they’re already selling you some MLM cryptocurrency program. It’s the only thing they talk about.
• Someone approaches you (online or not) who just happens to be your age, ethnicity, nationality, and interests (of course, there’s a sales pitch). Or maybe they know a business partner who has a lot in common with you. These affinity groups aren’t necessarily scams but powerful tools for confidence tricks.

Now that cryptocurrencies are mainstream, there’s nothing strange (nor wrong) about investing in them. But just like DeFi shouldn’t be only about getting rich, that shouldn’t be the center of friendships or love relationships.

8. Pig-Butchering Scams

Pig-butchering (also called sha zhu pan) is one of the fastest-growing and highest-loss scam categories tracked by the FBI and Chainalysis. The name describes the tactic: scammers fatten victims over weeks or months before the final extraction.

How it works:

1. A stranger contacts you via social media, dating app, or text message – often claiming to have messaged the wrong number.
2. They build a genuine-seeming friendship or romantic relationship over days or weeks.
3. They introduce a crypto investment platform they claim to have used for significant gains.
4. You invest a small amount and see impressive fake returns on the platform dashboard.
5. You invest more. Friends or family may be encouraged to join.
6. When you try to withdraw, fees or taxes are demanded. After you pay, the platform disappears.

Why it is different from romance scams: Pig-butchering operations are industrialized. They are often run by organized criminal groups, sometimes using trafficked workers in Southeast Asia. The investment platform is always fake. Returns shown are fabricated. US crypto investment fraud losses hit $3.94 billion in 2023, with pig-butchering as a primary driver per FBI IC3 data.

Red flags: Contact from a stranger who quickly pivots to investment advice. A platform you cannot find on regulated exchange lists. Withdrawal requests that trigger new fee demands. Pressure to recruit friends or family.

9. Rugpulls

If the first common step is identity fraud, the last one is the rug pull or exit strategy. Similar to social media shilling, the goal is to increase the perceived value. Except there’s no real one whatsoever: all money goes to marketing and making it look like a full-fledged project:

• Cryptocurrencies with sleek websites, plagiarized whitepapers, and anonymous founders
• Play-to-earn tokens that use templates from game assets stores and have no gameplay videos
• NFT creators that over-promote pay-to-join airdrops and presales but disappear on the mint day

When investors’ confidence is the highest, founders sell everything, dump prices, abandon the project, and you never hear from them again. The risk is the highest when the founders receive most of the token allocation. It might be a smart-contract wallet with admin keys or hundreds of alt accounts created the same day. These projects banish for the same reasons Ponzis and fake ICOs do: they’re unsustainable and there’s no innovation behind them.

These risks don’t mean much to value investors, as they’ll probably buy blue-chip coins and not look into newer ones.

10. Giveaway Scams

Giveaway scams emerged around 2018 on YouTube and remain active, now significantly amplified by AI-generated deepfake video and voice cloning. According to the Chainalysis 2026 Crypto Crime Report, AI-assisted impersonation operations generate an average of $3.2 million per scheme – more than four times the revenue of non-AI operations. These are no longer just YouTube livestream tricks: deepfake videos of executives and celebrities now circulate on X (formerly Twitter), TikTok, and YouTube Shorts, making them harder to identify.

Even though they’re less common now, you might still find a few during market rallies. All scammers need is:

1. A swarm of bots to cheat the number of subscribers and likes.
2. One interview video of someone like Elon Musk, Michael Sailor, or Vitalik Buterin
3. An investment scheme to put next to the interview

The text shown in the interview looks like this:

• We’re running a 5000 BTC Giveaway until the end of the live stream
• Send any amount to this address and we will send you the double amount
• But you can only do it once
• The minimum is 0.1 BTC

There’s no giveaway. It’s more of a money printer, except it doesn’t print. The money doesn’t go to Elon Musk but to an identity thief. You just start a live stream, get 10K likes and spectators with bots, disable the comments, and loop the same interview until YouTube takes it down. Then create another fake account to do it again.

Similar ones ran on Twitter, mostly fake NFT airdrops.

11. Pump and Dumps

Pump and dumps are the price manipulation of tokens with low liquidity or market cap. Users think a whale will pump them when it’s really other users buying it and the whale selling. These “whales” are the admins of the group who give signals of when to buy what. It’s like a mini bull trap.

They operate on Telegram/Discord. Once they have enough followers, they profit like this:

1. Find a coin with stable prices and low trading volume (even a worthless project works fine)
2. Accumulate millions of dollars by buying the coin in small batches for weeks
3. Share with the group the coin reveal date (which is when you’ve finished buying)
4. At the specified date and time, you reveal the token name, and hundreds of traders rush to buy it
5. Price skyrockets to +300% (maybe 700%) in a few seconds and you sell everything
6. The sale triggers panic sales and prices go back or below the initial value
7. Everyone who was fast and risk-smart made fast profits.

The truth is that most people lose because there’s no reaction time. Admins were able to buy weeks in advance, and sometimes they have paid sub-groups for early investors. For example, if you want to know the coin before everyone else, it might cost $100 for every 10 seconds in advance.

Obviously, no value is created in such a short time. It’s a zero-sum game of reflexes where someone always loses. Winning is addicting, which motivates greed and increases the risk of losing big.

Yet, people join pump-and-dumps knowing they’re scams. Because it’s easy money and is legal. For now.

12. Fake Apps

Besides impersonation, scammers build fake platforms to steal funds or information. This includes mobile apps, browser extensions, and websites with malicious smart contracts. TRM Labs 2026 Crypto Crime Report highlights developer-environment breaches and malicious browser extensions targeting Web3 wallets as growing attack vectors in 2025. A malicious browser extension can intercept your wallet connection, redirect transactions to attacker-controlled addresses, or silently export your seed phrase without any visible sign of compromise.

Users can recognize these by looking for these signs:

• It’s existed for less than a year and has either no reviews or some fake five-stars
• It’s easy to deposit but impossible to withdraw
• It claims the token has market value, yet you can’t trade it outside the platform
• You need to wait for months to withdraw or pay high penalty fees
• It requests too many device permissions
• It asks you to share a seed phrase

Watch these before you deposit on new apps. Most applications today are decentralized and connect to WEB3 wallets, so you don’t need to download anything else.

13. Crypto ATM Scams

Crypto ATMs allow anyone to convert cash to cryptocurrency at a kiosk. Scammers exploit this because transactions are instant and irreversible. The FBI IC3 and 2025 media synthesis data identify crypto ATM scams as a notable and growing loss category, particularly targeting older adults.

How crypto ATM scams work:

• A scammer impersonates a government agency (IRS, Social Security Administration, or local police), a utility company, or tech support.
• They tell the victim there is an urgent problem – a tax debt, a compromised bank account, or a warrant – that can only be resolved by sending cryptocurrency.
• The victim is directed to a nearby crypto ATM and instructed to deposit cash and send it to a wallet address provided by the scammer.
• Funds are irreversible once sent.

Red flags: Any government agency or utility company asking you to pay via crypto ATM. Urgency combined with a specific ATM location instruction. A QR code sent by the requester to scan at the ATM kiosk.

What to do: Hang up immediately. Call the agency directly using a number from their official website. Report to the FBI IC3 at ic3.gov.

14. P2P Payment Fraud

On peer-to-peer transfers, crypto buyers and sellers agree to trade directly. You choose whoever has the best rating, lowest rates, and most payment methods. Problems appear when you’re the one selling cryptocurrency.

When trading crypto for fiat, you should trade with escrow parties and double-check received payments:

• If you both trade without middle platforms, you rely on trust. The person can fake a deposit and then lie that they didn’t receive your crypto
• If the fiat deposit isn’t permanent, their bank can still revert the transaction after you already transferred cryptocurrency

P2P crypto payments are becoming common payment methods outside financial sectors.

What To Do If You’ve Been Scammed

Acting quickly matters. Here are the steps to take in the first 24-48 hours:

Step 1: Stop sending funds immediately. Do not send additional payments, even if the scammer claims it will unlock your previous deposits.

Step 2: Document everything. Screenshot all conversations, wallet addresses, transaction IDs, and platform URLs before they disappear.

Step 3: Report to the FBI IC3 at ic3.gov. This is the primary US reporting channel for crypto fraud. Include all documentation.

Step 4: Contact your bank or payment provider if you used fiat to fund the crypto purchase. Some reversals are possible on fiat transactions.

Step 5: Report to your state attorney general and the FTC at reportfraud.ftc.gov.

Step 6: Notify the crypto exchange you used. Some exchanges can flag or freeze connected wallets.

Step 7: Consult a lawyer before paying any ‘recovery service.’ Most crypto recovery services are secondary scams targeting victims.

Note: Crypto transactions are irreversible by design. Recovery is not guaranteed. The best protection is prevention. If you are outside the US, contact your national cybercrime reporting agency.

The Hard Truth About Crypto Scams

Crypto scams are not rare, and they are not slowing down. US crypto investment fraud losses hit $3.94 billion in 2023, up 53% from 2022. Globally, illicit crypto activity reached at least $154 billion in 2025 per the Chainalysis 2026 Crypto Crime Report.

Regulatory enforcement is intensifying: global AML fines exceeded $900 million in just the first half of 2025, according to CertiK’s State of Digital Asset Regulations Report. The technology is evolving, but so are the scammers. AI-assisted operations now generate more than four times the revenue of traditional scams.

The best defense remains the same: verify independently, never share your seed phrase, and report anything suspicious to the FBI IC3 at ic3.gov. See the victim action guide above if you believe you have already been targeted.