Introduction
Crypto scams are not a niche problem anymore. They are an industrial-scale fraud ecosystem. In 2025, the FBI’s Internet Crime Complaint Center received 181,565 complaints involving cryptocurrency, with reported losses exceeding $11 billion — the highest of any fraud category . Investment fraud alone accounted for nearly half of all scam-related losses .
The numbers are staggering, but they hide a simpler truth: most crypto scams follow predictable patterns. Once you know the patterns, you can recognize them in seconds. This guide covers the 10 most common types of crypto scams in 2026, the red flags that expose them, and the exact steps to take if you’ve already been targeted.
It’s the central hub of our Security silo. If you’ve already encountered a specific scam, you’ll find dedicated guides linked throughout.
1. Giveaway and Impersonation Scams
This is the scam that never dies. A fake account impersonates a celebrity, an exchange, or a project founder, and promises to double or multiply any crypto you send. “Send 0.1 BTC, receive 0.2 BTC back.” The replies are flooded with fake accounts confirming they received their funds .
The red flag: No legitimate giveaway ever asks you to send crypto first. Ever. If the “prize” requires a deposit, it’s a scam.
For a detailed breakdown of the most famous variant, see our guide on the Elon Musk Bitcoin giveaway scam.
2. Phishing Scams
Phishing is the entry point for most crypto theft. Scammers create fake websites, emails, or apps that closely mimic real exchanges or wallets. The goal is to get you to enter your seed phrase, private key, or login credentials into a form they control. Once they have it, your wallet can be drained in minutes .
Common vectors include fake exchange login pages sent via email or SMS, cloned wallet apps in unofficial app stores, and browser extensions posing as legitimate tools.
The red flag: A legitimate service will never ask for your seed phrase or private key. Not by email, not by chat, not ever.
3. Pig Butchering (Romance + Investment Scams)
Pig butchering is one of the fastest-growing and highest-loss scam categories. The name refers to “fattening up” a victim over time before extracting funds. It typically starts on a dating app or social media, where the scammer builds trust over weeks or months before introducing a “lucrative” investment opportunity .
The victim is guided to a fake trading platform that shows fabricated gains. When they try to withdraw, they’re told they must pay “fees” or “taxes” first. Those payments are also stolen. In one 2026 case, a Madagascar-based operation used fake NFT investment sites to steal at least $516,695 across 74 victim wallets .
The red flag: Investment advice from someone you met online. Always. No exceptions.
4. Rug Pulls and Fake Tokens
A rug pull happens when developers launch a new token, build up hype and liquidity, then withdraw all the funds and abandon the project. The token becomes worthless overnight. These are especially common with new tokens on decentralized exchanges that have little or no track record .
The red flag: An anonymous team, heavy hype, and no verifiable track record. If you can’t find out who is behind a project, assume the worst.
5. Ponzi and Pyramid Schemes
Ponzi schemes promise guaranteed high returns, paying early investors with money from new investors to create the appearance of legitimacy. Once new deposits slow down, the scheme collapses. Pyramid schemes work similarly, but reward recruitment rather than investment .
In crypto, OneCoin, Bitconnect, and PlusToken were all large-scale Ponzi operations. Bitconnect collapsed in 2018 with an estimated $2.4 billion in losses .
The red flag: Guaranteed returns. No legitimate investment guarantees returns. If the revenue model is unclear and the returns are high, it’s a Ponzi.
6. Airdrop Scams
Airdrop scams start with free tokens that suddenly appear in your wallet, or a post promising a token drop if you “connect your wallet.” Interacting with the token or the site asks you to sign an approval that lets the scammer drain your real assets. Legitimate airdrops never ask for your seed phrase or for a payment .
The red flag: A token you never asked for. Ignore it. Never connect your wallet to a site you don’t trust.
7. Telegram and Social Media Scams
Telegram is a haven for crypto scams because anyone can create a group or pose as an admin. Common versions include fake support agents who message you after you post a question, pump-and-dump signal groups, and fake investment bots .
The red flag: Real admins and support teams never message you first. If someone contacts you claiming to be “support,” it’s a scam.
8. AI Deepfake Scams
This is the newest and fastest-growing category. Scammers use AI to generate convincing video or audio of real people — exchange executives, celebrities, even family members — to lend credibility to fraudulent requests. A deepfake video of a well-known figure promoting a giveaway or trading platform is almost certainly fake .
European regulators have explicitly warned that AI is making crypto fraud “increasingly convincing and harder to spot” .
The red flag: Any unsolicited message about a crypto opportunity, regardless of who it appears to be from. Verify through official channels before acting.
9. Fake Payment Scams (Counterfeit Tokens)
Binance warned users in October 2026 about a new scam: fraudsters create counterfeit tokens that mimic well-known assets like USDT or BTC, complete with the same name and logo. The victim’s wallet even displays a dollar value, making it look like payment went through. But the token is worthless and cannot be exchanged .
The red flag: Before accepting crypto as payment, verify the contract address against the official one. Don’t trust the name, logo, or wallet display.
10. Recovery Scams
This is the cruelest scam of all. After you’ve already lost money, a “recovery agent” or “blockchain investigator” contacts you promising to trace and return your stolen funds — for an upfront fee. They disappear with the fee, and your original loss remains .
The red flag: Anyone asking for payment to recover lost crypto. Legitimate law enforcement does not charge victims. There is no legitimate recovery service for irreversible transactions.
The Universal Red Flags
Across all 10 scam types, a few patterns recur. If you remember nothing else, remember these:
1. “Send crypto first.” Any offer that requires you to send crypto to receive crypto is a scam. This covers giveaways, airdrops, and “investment opportunities.”
2. “Guaranteed returns.” No legitimate investment guarantees returns. High returns with low risk is the oldest lie in finance.
3. “I need your seed phrase.” No legitimate service ever needs your seed phrase or private key. Not exchanges, not wallets, not support agents.
4. Urgency. Countdown timers, “limited spots,” “act now.” Urgency is a manipulation tactic. Slow down.
5. Unsolicited contact. If someone messages you first about a crypto opportunity, it’s a scam. Always.
What to Do If You’ve Been Scammed
If you’ve already lost funds, here’s the honest truth: crypto transactions are irreversible. Recovery is extremely unlikely. But there are still steps worth taking.
1. Stop all interaction. Don’t send more funds. Don’t respond to messages. Don’t click on links.
2. Secure your accounts. If you shared credentials or a seed phrase, move any remaining funds to a new wallet immediately. Change passwords and enable 2FA everywhere.
3. Report the scam. File a complaint with your national cybercrime unit. In the US, use the FBI’s IC3. In France, use the PHAROS platform. Report the scam to the platform where it happened (the exchange, social media site, or messaging app).
4. Report the address on Chainabuse. Chainabuse is a community-driven database that helps law enforcement link reports of the same scam and improves recovery chances . Reporting won’t get your funds back, but it adds to the public record and may help others.
5. Don’t pay a “recovery service.” As mentioned above, these are always scams.
How to Protect Yourself Going Forward
1. Use a hardware wallet for significant holdings. Don’t keep large amounts on exchanges or hot wallets.
2. Never share your seed phrase. Write it down on paper, store it offline, and never enter it into any website or app.
3. Verify everything through official channels. If you receive a message about a crypto opportunity, go directly to the official website or social account. Don’t click links in the message.
4. Slow down. Urgency is the scammer’s primary tool. If you feel pressured to act quickly, that’s the signal to stop.
5. Check addresses before sending. Use a blockchain explorer to verify addresses. Our guide on checking a Bitcoin address explains how.
Conclusion
Crypto scams are diverse in form but consistent in pattern. The names change, the technology evolves, but the core tactics remain the same: create urgency, build false trust, and extract funds through irreversible transactions.
The defense is not technical sophistication. It’s skepticism, verification, and patience. No legitimate opportunity requires you to send crypto first. No legitimate service needs your seed phrase. No legitimate investment guarantees returns.
Three takeaways:
- “Send crypto first” is always a scam, regardless of who appears to be promoting it.
- Never share your seed phrase or private key with anyone.
- If you’ve been targeted, report the scam and don’t pay a “recovery service.”
Last updated: November 2026.