A convincing crypto scam does not always ask for your password. It might ask you to pay for a job, trust an invented account balance, approve a token permission or copy an address that looks familiar. Recognizing the request matters more than recognizing the logo.
General information, not financial advice. This guide explains fraud patterns, not which assets to buy or how to recover a particular loss. Crypto-assets carry substantial risks, and transfers can be difficult or impossible to reverse. No checklist guarantees safety.
How these ten types were selected
We selected documented patterns from consumer regulators and wallet-provider security guidance. The order moves from deceptive earning schemes to pressured payments and wallet-level traps; it is not a ranking by frequency, losses or danger. Categories can overlap. A romance conversation, celebrity video or fake support message is often the delivery method rather than a separate scam mechanism.
1. Fake investment platforms and invented balances
A website displays growing profits, but the numbers are controlled by the people running the deception. An online acquaintance may guide you there and later demand another payment before a withdrawal. The FBI’s investment-fraud guide describes this progression.
Recognition point: an impressive dashboard is not independent evidence that assets exist or belong to you. Treat demands for additional deposits to release a displayed balance as a serious warning. The relationship that introduced the platform does not verify the platform.
2. Crypto Ponzi schemes
Here, early payouts can be real, but their source is deceptive: money arriving from newer participants funds payments to earlier ones. The scheme needs continuing inflows rather than the successful business activity it claims. The SEC’s Investor.gov guide identifies unusually consistent returns, secrecy and payment difficulties among the warning signs.
Recognition point: a friend’s payout proves that a payment occurred, not where the money came from. Unlike an entirely invented dashboard, a Ponzi can use genuine transfers to create false confidence. Promised returns without a credible, independently checkable explanation deserve skepticism.
3. Token-launch rug pulls
A project attracts buyers and then its operators abandon it or remove funds or liquidity on which trading depends. A token can exist on a blockchain while the surrounding project is deceptive. ASIC’s Moneysmart guide explains the token-launch and liquidity-exit pattern.
Recognition point: owning a real token is different from having a trustworthy project behind it. Pressure to join a presale and vague explanations of who controls project funds warrant scrutiny. A falling price or unsuccessful project alone does not establish fraud; this entry describes deliberate deception, not ordinary market losses.
4. Fake jobs that require crypto payments
The supposed employer offers easy online work, then requires you to deposit cryptocurrency to continue tasks or withdraw your earnings. In the FTC’s task-scam warning, an app’s growing commission balance is bait for payments from the worker.
Recognition point: the key reversal is that you must fund the job to receive the pay. A polished task interface does not make those earnings real. Keep this separate from investment fraud: the hook is employment, and the requested deposit is disguised as a work requirement.
5. Business or government impersonation demanding crypto
A caller claims an account is endangered, a bill is overdue or an official investigation requires moving money. They direct you to a wallet or crypto ATM. The FTC describes these impersonation schemes, including transfers supposedly made for safekeeping.
Recognition point: urgency plus a payment destination supplied by the caller is not verification. End the interaction and independently contact the organization through an established channel. Different uniforms, logos and agency names do not make these separate scam types.
6. Blackmail demanding cryptocurrency
Instead of promising a reward, the sender threatens to reveal compromising information unless you pay in crypto. This pattern appears in the FTC’s cryptocurrency guidance.
Recognition point: the demand uses fear, not a legitimate transaction. A threatening message is not, by itself, proof that every claim it makes is true. This guide cannot assess a particular threat; use verified police or relevant support channels rather than following payment instructions in the message.
7. Send-first cryptocurrency giveaways
A post, livestream or impersonated celebrity promises to multiply whatever crypto you send. The giveaway is a pretext for an outgoing payment, not a reward you have already received. The European supervisory authorities’ crypto-fraud factsheet documents this pattern.
Recognition point: focus on the requirement to send money first, not the apparent popularity of the promotion. This does not mean every genuine promotional distribution is fraudulent. A copied brand identity or convincing video does not authenticate an offer.
8. Credential and seed-phrase phishing
A fake support agent or imitation wallet page asks you to “verify,” restore or synchronize your wallet by supplying secrets. A seed phrase or private key can give someone control of the relevant wallet accounts. MetaMask says its support team will not request these secrets.
Recognition point: handing secrets to another person is not the same as restoring your own wallet in a verified wallet application. Do not enter them into a link supplied by an unsolicited helper. Passwords, authentication codes and wallet recovery phrases are not interchangeable, but all deserve protection appropriate to their role.
9. Malicious token approvals hidden behind airdrop lures
An unexpected token or reward directs you to a site that asks for spending permission. MetaMask documents tokens whose failed transactions lure people to fraudulent websites. Those sites may seek either wallet secrets or a harmful approval.
Recognition point: an approval can authorize a spender to transfer a particular token within its allowance. It does not transmit your private key. Legitimate applications also use approvals, so the permission itself is not proof of fraud. Check what token, spender and amount are involved; do not approve a request you cannot explain. See MetaMask’s approval explanation.
10. Address poisoning
An attacker introduces a lookalike address into your transaction history, often through a tiny or zero-value transfer. The hope is that you later copy that address instead of the intended recipient’s. MetaMask’s address-poisoning guide explains why matching only the beginning and end is unsafe.
Recognition point: the danger is the later transfer you authorize. The incoming history entry alone does not mean your keys were stolen. Verify the full destination against a trusted source rather than treating a familiar-looking history entry as an address book.
The distinction worth remembering
Sending a payment, revealing a secret, granting spending permission and choosing a recipient address are different actions. A scam may combine them, but they expose you in different ways. Stop when a request changes from what you expected; a reassuring explanation is not a substitute for independent verification.
For official guidance, US readers can consult the FTC and FBI resources linked above. EU readers can use the European authorities’ factsheet and its national-language editions. Reporting channels and consumer protections differ by country; this list does not establish a right to reimbursement.
Explore more educational guides in our Cryptocurrency section.