Crypto Scams: The Red Flags to Spot Before You Lose a Cent

Crypto Scams: The Red Flags to Spot Before You Lose a Cent

The crypto scams that actually steal money — fake investment platforms, pig butchering, phishing, wallet drainers, seed-phrase theft, fake exchanges, rug pulls and recovery scams — and the simple habits that defeat nearly all of them.

Updated June 2026 · Nakta
Quick answer

  • Almost every crypto scam tries to get you to send funds, sign a transaction, or reveal your recovery phrase — usually in a hurry.
  • Universal red flags: guaranteed returns, urgency, a stranger contacting you first, “send X to get 2X,” and any request for your seed phrase.
  • The biggest money-losers are fake investment platforms and “pig butchering” (romance + fake trading) — never invest because of someone you met online.
  • Never type your recovery phrase into any website or app, and never pay a “fee” to withdraw — both are always scams.
  • Crypto is irreversible: sent funds are almost never recoverable, and anyone offering paid “recovery” is a second scam.
  • Defense comes down to one habit: slow down and verify before you send, sign, or share — and this guide shows you exactly what to check.

1. Why crypto is a scammer’s favorite target

Crypto is a scammer’s dream for three reasons — and understanding them protects you more than any single tip.

Why crypto attracts scammersWhat it means for you
Transactions are irreversibleThere’s no chargeback and no “undo.” Once you send crypto or sign a transaction, it’s gone. Banks can claw back fraud; the blockchain can’t.
It’s pseudonymous & borderlessThieves hide behind wallet addresses, move funds across the world in minutes, and are rarely caught. Recovery is the exception, not the rule.
FOMO and complexityThe promise of fast gains plus unfamiliar tech makes people rush, skip checks, and trust “experts.” Scammers engineer urgency on purpose.

Notice what this means: in crypto, prevention is almost everything. Unlike a stolen credit card, there is usually no one to call and no fund to refund you. The good news is that the overwhelming majority of crypto losses come from a small, repeatable set of scams — and once you can recognize the pattern, you can avoid nearly all of them.

One-line answer: almost every crypto scam relies on getting you to send funds, sign a transaction, or reveal your recovery phrase — usually in a hurry. Slow down at those three moments and you defeat most of them.

2. The universal red flags (spot almost any scam)

You don’t need to memorize every scam type. Most share the same handful of tells. If you see any of these, stop — it is almost certainly a scam:

  • Guaranteed or “risk-free” returns. No real investment guarantees profit. “Earn 1% a day,” “double your crypto,” and “guaranteed 300%” are always lies.
  • Urgency and pressure. “Act now,” “offer ends today,” “your account will be locked.” Urgency exists to stop you thinking. Real opportunities don’t expire in minutes.
  • Anyone asking for your recovery phrase or private key. No legitimate wallet, exchange, or “support” ever needs it. This single rule prevents a huge share of all losses.
  • “Send X to receive 2X.” Any “send crypto and get more back” offer — giveaways, airdrops, “verification” — is theft. Money never multiplies by sending it to a stranger.
  • A stranger who contacts you first. Unsolicited DMs, texts, “wrong number” messages, romance, or job offers that drift toward crypto are the start of most large scams.
  • Requests to pay a fee to unlock funds. “Pay tax/fee/gas to withdraw your winnings.” Real platforms deduct fees from the amount — they never ask you to send more in first.
  • Links pushed to you. Connect-wallet links, “support” sites, and login pages sent via DM, ad, or email are how phishing works. Reach services from your own bookmarks.

Print this list in your mind. Almost everything below is just a specific costume on one of these seven patterns.

3. Fake investment platforms & “trading bot” scams

This is the single biggest category of crypto losses worldwide. The setup looks professional: a polished “trading platform,” “AI bot,” “mining,” or “staking” site that shows your balance growing every day.

How it works: You’re invited (often by a new online friend, a group, or an ad) to a platform that promises steady, high returns. You deposit, watch a fake dashboard climb, and maybe even withdraw a small amount early — that early payout is bait to make you deposit far more. When you try to withdraw the big balance, you’re told to pay a “tax,” “fee,” or “deposit” first. You pay; the goalposts move; eventually the site and your money vanish.

The tellsWhy it’s fake
Daily/weekly “guaranteed” profitNo real market pays steady guaranteed returns. The dashboard is just numbers on a screen.
You must deposit to a wallet/site you were sent toFunds go straight to the scammer, not to any real market.
“Pay a fee to withdraw”The core trap — a real platform never asks you to send money in to take money out.
An “account manager” coaching you to deposit moreThey earn by your losses; the friendliness is the hook.
The rule that saves you: if a platform guarantees returns or asks you to pay a fee to withdraw, it is a scam — full stop. Withdraw nothing-more, stop depositing, and walk away.

4. “Pig butchering”: romance + investment scams

“Pig butchering” (from the Chinese term shā zhū pán) is the long-con version of the fake-investment scam, and it has stolen billions. It blends romance or friendship with the fake platform above, played out over weeks or months.

How it works: A stranger connects with you — a dating app match, a “wrong number” text that turns warm, a friendly DM, or a new “mentor.” They build genuine-feeling trust over time (the “fattening”). Eventually they introduce a crypto investment they’re “doing well” with, walk you through depositing on a fake platform, and encourage bigger and bigger deposits — until the “butchering”: you can’t withdraw, and they disappear.

Red flags of pig butchering:

  • An online-only relationship that moves to crypto investing — they always have a “special” platform or coach.
  • They never video-call properly, or always have an excuse; they may use stolen photos.
  • Early small “profits” you can withdraw — then pressure to go much bigger.
  • Love-bombing, isolation (“don’t tell others, they won’t understand”), and urgency around a “limited” opportunity.

It feels personal because it’s designed to. The single defense: never invest based on someone you met online, no matter how real the relationship feels. A genuine partner or friend does not route you into a crypto platform.

5. Fake giveaways & “double your crypto” scams

“Send 1 ETH, get 2 ETH back.” “Official giveaway — first 500 wallets only.” These flood social media, often using hacked or impersonated celebrity/brand accounts (Elon Musk, exchanges, big projects) and slick fake livestreams.

How it works: A post or video claims a famous person or company is “giving back” by doubling any crypto you send to an address. The catch is the entire premise: you send first. Whatever you send is simply taken. The “proof” comments and live viewer counts are fake or bots.

The unbreakable rule: no real person or company will ever ask you to send crypto first to receive more back. That is not how giveaways, airdrops, or anything legitimate works. Every single “double your crypto” offer is a scam — 100% of them.

The same logic covers fake “airdrops” that demand a deposit or fee, and “you’ve won” messages. If receiving value requires you to send value to a stranger, it’s theft dressed up as luck.

6. Phishing: fake sites, apps & support

Phishing is tricking you into entering your details — or connecting your wallet — on a fake site or app that imitates a real one. It’s the engine behind a large share of crypto theft, because it turns your own login or signature into the weapon.

FormHow it tricks youDefense
Fake websitesLookalike domains (e.g. binance-login.com, a swapped letter, or an ad at the top of search) capture your password or 2FA.Type the address yourself or use a bookmark; check the exact domain letter by letter; never log in from an ad or DM link.
Fake appsCounterfeit wallet/exchange apps on app stores or sent as files quietly steal funds or seed phrases.Install only from the official site’s link; verify the developer name and reviews.
Fake support“Agents” in chats, comments, or search ads offer to “help” and then ask for your phrase, password, or remote access.Real support never DMs first and never needs your phrase; reach support only via the official site.
Fake emails/texts“Suspicious login — verify now” links to a fake login page.Don’t click; go to the site directly. Check the sender, but don’t trust it.
The habit that beats phishing: never reach a login or wallet from a link someone gave you. Bookmark your exchange and wallet sites and always arrive through your own bookmarks. A scammer can fake the page perfectly — but not your bookmark.

7. Wallet drainers & malicious signatures

A “wallet drainer” doesn’t need your password or seed phrase — it tricks you into signing a malicious transaction that authorizes it to take your tokens. This is now one of the most common ways active crypto users get robbed.

How it works: You visit a site (a fake “airdrop claim,” “mint,” “staking,” or “wallet verify” page, often pushed via ad or DM) and click “Connect wallet,” then “Approve” or “Sign.” That signature isn’t a harmless login — it can grant the site permission to move your tokens, which it instantly drains.

How to defend against drainers:

  • Read every signature request. If you can’t clearly tell what it does, reject it. Vague “approve all” or token-allowance prompts on a site you don’t fully trust are a stop sign.
  • Don’t connect your main wallet to unknown sites. Use a small, separate “burner” wallet for new apps and airdrops.
  • Be suspicious of “claim,” “verify,” “sync,” and “unlock” pages. Legitimate projects rarely need you to sign something to “verify” your wallet.
  • Revoke old approvals periodically (via a reputable revoke tool) so past permissions can’t be abused later.
  • Use a hardware wallet for meaningful funds and confirm what you sign on its screen — it stops most remote drains.

For the full picture on keys, signatures, and safe setup, see our complete crypto wallet guide.

8. Seed-phrase theft (the #1 way people lose everything)

Your recovery phrase (seed phrase) is the master key to your wallet. Anyone who gets it owns your funds — instantly and irreversibly. A whole class of scams exists purely to trick it out of you.

The disguiseWhat they say
“Wallet validation / sync”A site or pop-up says your wallet must be “validated,” “synced,” or “restored” — and asks you to type your 12/24 words. Entering them hands over everything.
Fake supportAn “agent” helping with a “problem” asks for your phrase or to “import” your wallet to their tool.
Fake wallet appsA counterfeit wallet prompts you to “import” an existing wallet, capturing the phrase you type.
“You won an airdrop — connect/restore to claim”The “claim” flow funnels you into entering your phrase.
The one rule that ends seed-phrase theft: there is never a legitimate reason to type your recovery phrase into any website, app prompt, chat, or form. Your real wallet only asks for it on a brand-new device you control, when you choose to restore. Every other request — without exception — is a thief. If anyone or any site asks, the answer is no.

9. Fake exchanges & “pay a fee to withdraw” traps

Not every “exchange” is real, and even on real platforms scammers run a specific trick. Two dangers to separate:

1. Fake exchanges. A slick site or app promises great prices or bonuses, takes your deposit, shows a balance — and then blocks withdrawals or vanishes. Clones of real exchanges and brand-new “too good” platforms are common.

2. The “pay a fee to withdraw” trap (also used by fake-investment scams). After your balance “grows,” you’re told to pay a tax, fee, or minimum deposit before you can withdraw. You pay; new fees appear; nothing comes out.

How to avoid itWhy
Stick to large, established exchanges with a long public track recordYears of operation, real audits, and millions of users are hard to fake.
Never pay a fee to “unlock” a withdrawalReal platforms deduct fees from your balance — they never need money sent in first.
Ignore “too good” bonuses and guaranteed yieldsThese lures target newcomers; the best real exchanges compete on fees and security, not impossible promises.
Verify the exact domain/appClones rely on one swapped letter; arrive via a bookmark or official link only.

The simplest protection against fake exchanges is to start on a major, well-known one. We compare the most established options — fees, security, and country availability — in our best crypto exchanges guide.

10. Rug pulls, honeypots & pump-and-dumps

These scams live in the tokens themselves. You can buy a coin that was designed so you can never sell it, or whose creators planned to vanish with the money.

ScamHow it works
Rug pullDevelopers hype a new token, attract buyers, then drain the liquidity (or dump their huge hidden allocation), crashing the price to zero and disappearing.
HoneypotThe token’s code lets you buy but not sell. The chart looks like it’s only going up — because no one is allowed to cash out except the creator.
Pump and dumpA group hypes a thin coin to lure buyers, then sells into the spike, leaving latecomers with losses.
How to protect yourself with new tokens:

  • Be deeply skeptical of brand-new tokens hyped in group chats, ads, or by “influencers” paid to shill.
  • “Get in early,” “100x guaranteed,” and countdown timers are manufactured FOMO — not opportunity.
  • Anonymous teams, no real product, and liquidity that isn’t locked are major red flags.
  • The safest stance for beginners: stick to established assets and reputable exchanges; don’t chase coins you found in a DM.

11. Impersonation, fake jobs & fake airdrops

Scammers borrow trust by pretending to be someone you’d believe. Impersonation underpins many of the scams above.

  • Fake support / admins. In Telegram, Discord, or X, “support,” “mods,” or “admins” DM you to “help” — real ones almost never DM first, and never ask for your phrase or to connect your wallet.
  • Impersonated projects & exchanges. Cloned accounts, lookalike handles (an extra letter, a “0” for “o”), and fake verified badges push phishing links and fake giveaways.
  • Fake job offers. “Crypto job” or “task-based earning” roles ask you to deposit, buy crypto, or “top up” to start — a common front for theft.
  • Fake airdrops. “Claim your tokens” pages that demand a deposit, a fee, or a wallet signature are drainers in disguise.
  • Friends/influencers “hacked.” A real account that’s been taken over can post a scam. A surprising “I made money on this” from a known account can still be a thief at the keyboard.

Verify through a second channel. If “support” or a “friend” reaches out about money, confirm via the official website or a known contact — never act inside the message that contacted you.

12. Recovery scams: getting victimized twice

This one is especially cruel: after you’ve already lost money, a “recovery” scammer targets you again — promising to get your funds back.

How it works: You’re contacted (or you find an ad/comment) by a “fund recovery service,” “crypto recovery expert,” “blockchain investigator,” or even a fake “government agency” claiming they can trace and return your stolen crypto. They ask for an upfront fee, your wallet details, or remote access — and steal again. Victims are often targeted precisely because scammers share lists of people who already fell for something.

The truth about recovery: once crypto is sent, it is almost never recoverable by a private service. No legitimate party can guarantee getting it back, and anyone asking for an upfront fee to recover funds is running a second scam. Legitimate help comes from your local police and official fraud-reporting channels — which do not charge you to “unlock” a recovery.

If you’ve been scammed, the right steps are below — and paying a “recovery” service is not one of them.

13. The psychology scammers use against you

Every scam above runs on the same psychological levers. Naming them makes them lose their power — when you feel one being pulled, slow down.

TacticWhat it sounds likeWhy it works
Urgency“Only today,” “act now or lose your spot,” “account will be locked”Rushing stops you from checking facts.
Authority“I’m from support,” “official team,” a celebrity’s faceWe obey trusted-looking figures without verifying.
Greed / FOMO“Guaranteed 10x,” “everyone’s getting rich,” “limited spots”The dream of easy money overrides caution.
Trust / intimacyA new friend, partner, or mentor who “cares”We don’t suspect people we’ve bonded with.
Isolation“Don’t tell anyone, they won’t get it”Cut off from second opinions, you can’t be talked down.
Small win firstA tiny “profit” you can withdraw early“Proof” it works makes you deposit much more.
The meta-defense: scams need you to act fast, alone, and emotional. So make your rule the opposite — slow, with a second opinion, and calm. Any pressure to skip those is itself the biggest red flag.

14. Where crypto scams live (by platform)

Scams cluster where strangers can message you and hype spreads fast. Knowing the terrain helps you stay alert in the right places.

WhereCommon scams there
Telegram / DiscordFake “support”/admin DMs, signal/“pump” groups, fake airdrop bots, impersonated project channels.
X (Twitter) / YouTubeHacked-celebrity “giveaways,” fake livestreams, reply-bot phishing links, shilled tokens.
Dating apps / WhatsAppPig butchering: romance that turns into a “great investment” on a fake platform.
Search & adsFake exchange/wallet sites ranked via paid ads; fake “support” numbers.
TikTok / Instagram / Reels“Get rich” gurus, fake trading bots, and recovery-scam ads.
Email / SMS“Verify your account,” “suspicious login,” fake withdrawal alerts linking to phishing pages.

The common thread: someone reaches you, unprompted, and steers you toward sending crypto, signing something, or visiting a link. The platform changes; the playbook doesn’t.

15. How to verify before you act (the SLOW method)

You don’t need to identify which scam it is. You need one habit that defeats all of them: verify before you act. Use the SLOW method whenever money, a signature, or your phrase is involved.

SLOWDo this
S — StopFeel the urgency? That’s the cue to pause. Nothing legitimate collapses if you wait an hour or a day.
L — Look it upIndependently search the platform/person/token. Go to official sites via your own bookmark, not their link. Check the exact domain.
O — Other opinionTell one trusted person what you’re about to do. Scams rely on isolation; a second view breaks the spell.
W — WithholdNever send a “fee to withdraw,” never reveal your seed phrase, never sign what you can’t read. When unsure, do nothing.
Two yes/no questions that catch most scams: (1) Is anyone asking me to send crypto, pay a fee, or reveal my phrase? (2) Did this come to me from a stranger, a link, or a DM? If “yes” to either, treat it as a scam until proven otherwise.

16. What to do if you’ve been scammed

If it’s happened to you, you’re not alone, and acting fast can limit the damage. Work through these steps calmly:

  1. Stop all contact and payments immediately. Send nothing more — especially not a “fee” to release “profits.” The pressure to send again is part of the scam.
  2. Secure what’s left. If you shared a password or 2FA, change them and enable strong 2FA. If your seed phrase may be exposed or a drainer touched your wallet, move any remaining funds to a brand-new wallet (new phrase) right away, and revoke token approvals.
  3. Document everything. Save addresses, transaction IDs (TXIDs), usernames, links, and screenshots. This is what any investigation needs.
  4. Report it. File with your local police and your country’s official fraud/cybercrime channel; notify the exchange involved (they can sometimes flag addresses). Reporting also helps protect others.
  5. Beware the second scam. Anyone who now offers to “recover” your funds for an upfront fee is a follow-up scammer. Don’t pay them.
Honest reality: sent crypto is usually unrecoverable, and no private service can guarantee otherwise. The most valuable thing you can do is secure your remaining assets, report it through official channels, and protect yourself going forward.

17. How to protect yourself long-term

You can’t control what scammers try — but you can make yourself a very hard target. These habits, kept boringly consistent, stop the vast majority of attacks:

  • Treat your recovery phrase as never-shareable. No site, app, support agent, or person ever needs it. This one rule blocks a huge share of theft.
  • Use a hardware wallet for meaningful amounts and confirm every transaction on its screen, so even malware can’t move funds without you.
  • Keep a separate “burner” wallet for new apps, mints, and airdrops; never connect your main wallet to unknown sites.
  • Bookmark your exchange and wallet and only arrive via bookmarks — never via ads, DMs, or search-ad links.
  • Enable strong 2FA (an authenticator app, not SMS where possible) on every exchange and email account.
  • Assume unsolicited contact about money is hostile. No real opportunity arrives via a stranger’s DM or a “wrong number.”
  • Start on a major, established exchange. The safest way to dodge fake-exchange scams is to use a large, long-running one from the start.

💡 Where to start safely (established exchanges): these links go to each exchange’s official site with our referral applied (a sign-up benefit such as a fee discount; confirm on the sign-up page). Using them costs you nothing extra, and we only point to large, long-running platforms. Compare them fully — fees, security, country availability — in our best crypto exchanges guide.

Binance

Binance signup QR — scan to open Binance (Cryptonakta referral)Claim your perk →

Code: CRYPTONAKTA
Installing the app directly? Enter CRYPTONAKTA in the “Referral” field at sign-up — that’s how your benefit (and our credit) attaches.
Established & highly liquid · long public track record

Gate.io

Gate.io signup QR — scan to open Gate.io (Cryptonakta referral)Claim your perk →

Code: VFIWUQTAUQ
Installing the app directly? Enter VFIWUQTAUQ in the “Referral” field at sign-up — that’s how your benefit (and our credit) attaches.
Lifetime 10% off trading fees

KuCoin

KuCoin signup QR — scan to open KuCoin (Cryptonakta referral)Claim your perk →

Code: CXEM4JP5
Installing the app directly? Enter CXEM4JP5 in the “Referral” field at sign-up — that’s how your benefit (and our credit) attaches.
Lifetime 5% off trading fees

Bybit

Bybit signup QR — scan to open Bybit (Cryptonakta referral)Claim your perk →

Code: 5ZGKX#0
Installing the app directly? Enter 5ZGKX#0 in the “Referral” field at sign-up — that’s how your benefit (and our credit) attaches.
Major global exchange · active-trader features

MEXC

MEXC signup QR — scan to open MEXC (Cryptonakta referral)Claim your perk →

Code: 43zJH
Installing the app directly? Enter 43zJH in the “Referral” field at sign-up — that’s how your benefit (and our credit) attaches.
Large established platform · wide coin range

Affiliate disclosure: some links are partner links. We may earn a commission at no extra cost to you. This is not investment advice.

Honesty note: using an established exchange reduces fake-exchange risk — it does not make crypto “safe” or guarantee profit. Crypto is volatile and high-risk, and good security habits still matter everywhere. We’d rather tell you that than oversell.

18. Crypto scam glossary

A quick reference for the scam terms you’ll meet:

TermPlain meaning
PhishingFake sites/apps/messages that trick you into entering details or connecting your wallet.
Pig butcheringA long romance/friendship con that ends in a fake investment platform.
Wallet drainerA malicious transaction you sign that authorizes thieves to empty your wallet.
Rug pullDevelopers abandon a token and run off with the money, crashing it to zero.
HoneypotA token coded so you can buy but not sell.
Pump and dumpHyping a coin to lure buyers, then selling into the spike.
Recovery scamA second scam promising to get your lost funds back for an upfront fee.
Seed / recovery phraseThe 12–24 words that control your wallet — never share or type online.
2FATwo-factor authentication — a second login code; use an authenticator app.
Approval / signaturePermission your wallet grants an app; malicious ones enable draining.

19. Next steps

You now know how the major crypto scams work and the one habit that defeats them: slow down and verify before you ever send funds, sign a transaction, or share your recovery phrase. Turn that into a routine — bookmark your real sites, keep your seed phrase offline and private, use a hardware wallet and a separate burner wallet, and treat any unsolicited “opportunity” as hostile until proven otherwise. New to crypto? Start safely with our complete beginner’s guide to crypto and learn to hold your own keys in our crypto wallet guide. When you’re ready to buy, use a large, established platform — compare them in our best crypto exchanges guide — and brush up on the two coins most beginners hold with our guides to Bitcoin and Ethereum. In crypto, the calm, skeptical person almost never gets scammed.

Frequently asked questions

Q. What is the most common crypto scam?
Fake investment platforms — including “pig butchering” romance scams that funnel you into one — steal the most money overall. They show a fake growing balance, let you withdraw a little early as bait, then demand a “fee” to release the rest, which never comes. Phishing and seed-phrase theft are the most common ways individual wallets get drained.
Q. Can you get scammed crypto back?
Almost never. Crypto transactions are irreversible, and stolen funds are quickly moved and laundered. No private service can guarantee recovery, and anyone asking for an upfront fee to “recover” your money is running a second scam. Report it to your local police and official fraud channels, and focus on securing what you have left.
Q. How do I know if a crypto website is legit?
Don’t reach it from an ad, DM, or link someone sent — type the address yourself or use a bookmark, and check the exact domain letter by letter (scams use one swapped character). Prefer large, long-established platforms, never pay a fee to withdraw, and be skeptical of any site promising guaranteed returns or “too good” bonuses.
Q. Will an exchange or wallet ever DM me or ask for my password?
No. Legitimate support never messages you first, never asks for your password, and never asks for your recovery phrase. Anyone who DMs you offering “help,” a “giveaway,” or to “fix” your account is a scammer. Reach support only through the official site.
Q. What is pig butchering?
It’s a long-con scam where a stranger builds a romance or friendship online over weeks, then introduces a “great” crypto investment on a fake platform and pressures you to deposit more and more — until you can’t withdraw and they vanish. The defense: never invest based on someone you met online, no matter how genuine it feels.
Q. Is a crypto giveaway ever real?
Not when it asks you to send crypto first. No legitimate person or company will ever require you to send coins to “receive more back.” Every “send 1, get 2” or “verify your wallet to claim” offer is a scam, including ones using hacked celebrity accounts and fake livestreams.
Q. Can someone steal my crypto if they have my wallet address?
No — your public address is safe to share; it only lets people send to you. Funds can only move with your private key or recovery phrase (which you never share) or via a malicious signature you approve. Theft happens through phrase leaks, drainer signatures, or fake platforms — not from your address alone.
Q. What is a wallet drainer?
A scam that tricks you into signing a transaction that authorizes it to move your tokens — then instantly empties your wallet. It needs no password or seed phrase, just your signature. Defend by reading every signature request, using a burner wallet for unknown sites, and confirming on a hardware wallet for meaningful funds.
Q. Someone promised guaranteed daily profit — is it a scam?
Yes. No real investment guarantees profit, let alone a fixed daily or weekly return. “Earn 1% a day,” “guaranteed 10x,” and similar promises are the defining sign of a fake-investment scam. The growing “balance” you see is just numbers on a screen.
Q. They’re asking me to pay a tax or fee to withdraw my funds — is that normal?
No — it’s a classic scam. Legitimate platforms deduct any fees from your balance; they never require you to send money in before you can take money out. If you’re told to pay a “tax,” “fee,” or “deposit” to unlock a withdrawal, stop and send nothing more.
Q. Why would anyone ask for my recovery phrase?
Only to steal your funds. Your recovery phrase is the master key to your wallet; anyone with it can take everything. No legitimate wallet, exchange, support agent, or airdrop ever needs it. There is no safe situation in which you type your phrase into a website, app prompt, or chat — every such request is theft.
Q. How can I tell a real crypto project from a scam token?
Be very cautious with brand-new tokens hyped in group chats, ads, or by paid influencers. Red flags include guaranteed “100x” claims, countdown-timer FOMO, anonymous teams, no working product, and unlocked liquidity (enabling rug pulls). Beginners are safest sticking to established assets on reputable exchanges rather than coins found in a DM.
Q. How do I report a crypto scam?
Document everything first — wallet addresses, transaction IDs, usernames, links, and screenshots — then report to your local police and your country’s official fraud or cybercrime reporting channel, and notify any exchange involved. Reporting won’t usually recover funds, but it can help flag addresses and protect others.
Q. Are hardware wallets scam-proof?
They massively reduce remote theft because you confirm every transaction on the device, so malware alone can’t move funds. But they don’t protect you from yourself: if you reveal your recovery phrase, approve a malicious signature, or buy a tampered “pre-set-up” device, you can still be robbed. Buy new from the maker and guard your phrase.
Q. I think I’ve been scammed — what should I do right now?
Stop sending anything immediately (especially a “fee” to release “profits”). Change any exposed passwords and enable strong 2FA; if your seed phrase or wallet may be compromised, move remaining funds to a brand-new wallet and revoke approvals. Save all evidence, report to police and official fraud channels, and ignore anyone offering paid “recovery.”
Q. To avoid fake exchanges, which established ones can I use — and is there a referral code?
The safest way to avoid fake-exchange scams is to start on a large, long-running platform reached via its official site. On well-known exchanges a referral code simply gives you a sign-up fee discount: on Binance use code CRYPTONAKTA (10% off spot trading fees), on Bybit use 5ZGKX#0, and on MEXC use 43zJH. Enter the code in the “Referral” field during sign-up — it can’t be added after your account is created. An established exchange reduces fake-platform risk but doesn’t make crypto risk-free.
This article is for information and education only and is not investment, financial, or legal advice. Crypto is high-risk and you can lose money, and scam tactics evolve constantly — always verify current details from official sources and your local authorities. Using an established exchange reduces fake-exchange risk but does not make crypto safe or guarantee any outcome. Some links are partner links; using them costs you nothing extra and never changes what we recommend.

Compare large, established crypto exchanges →

Editorial standardsIndependent crypto editorial · honest, no hype · not investment advice.
🌐 English