How Crypto Scams Work: 7 Common Patterns to Avoid

Crypto scams have cost Americans billions. The Federal Trade Commission reported that consumers lost more than $4.6 billion to cryptocurrency-related fraud between January 2021 and early 2024—a figure that likely represents only a fraction of actual losses, since many victims never report what happened. These aren’t sophisticated crimes targeting only the naive; they’re designed to exploit universal human impulses: the desire for financial security, the fear of missing out, and the trust we place in communities we believe are looking out for us.

This guide breaks down the seven scam patterns you’re most likely to encounter. Each one works because it taps into something real about how people evaluate opportunity and risk. Understanding the mechanics isn’t about becoming paranoid—it’s about recognizing that the same traits that make you a sensible investor also make you vulnerable to manipulation.

1. Rug Pulls and Pump-and-Dump Schemes

A rug pull occurs when developers create a cryptocurrency token, build hype around it to attract investment, and then drain the liquidity pool before disappearing. The token’s value crashes to zero within minutes, leaving thousands of investors with holdings they cannot sell.

Here’s how it typically plays out: a team launches a new token on a decentralized exchange—often on platforms like Solana or Ethereum where listing requirements are minimal. They promote the token through social media, Telegram groups, or influencer partnerships, promising revolutionary utility or exclusive access. Early investors buy in, creating the appearance of momentum. As the price rises, more people FOMO in. Then, at a predetermined moment, the developers withdraw everything from the liquidity pool. The token becomes worthless. The website goes offline. The Telegram group gets deleted.

The Squid Game token in 2021 remains the textbook example. Promised as a play-to-earn game based on the Netflix show, it rose from $0.01 to over $2,800 in days before the developers executed a rug pull that netted approximately $3.3 million. Investors learned the hard lesson: there’s nothing stopping someone from creating a token with any name and any roadmap they want.

Pump-and-dump schemes operate on similar psychology but through coordinated market manipulation rather than outright abandonment. Organizers accumulate a position in a low-volume token, promote it aggressively to drive price action, then sell their holdings into the inflated market. By the time the broader community realizes what happened, the price has collapsed and they’re holding losses.

Before buying any token, check whether the liquidity pool is locked and whether the developers have renounced ownership. Tokens with locked liquidity and verified team wallets reduce—but don’t eliminate—the risk of a rug pull.

2. Ponzi and Pyramid Schemes

Crypto has given Ponzi schemes a technological facelift, but the underlying mechanics haven’t changed in a century. The promise is consistent: consistent, high-yield returns with minimal risk, often framed as “staking,” “yield farming,” or “mining arbitrage.” New investor money pays returns to earlier investors, creating the illusion of a profitable operation until the recruitment pipeline slows down.

What makes crypto Ponzi schemes particularly effective is the veneer of technical complexity. Rather than simply promising 10% monthly returns, they wrap the pitch in blockchain terminology—smart contract yield, algorithmic trading bots, validator node profits. This jargon serves a purpose: it makes the scheme feel like something only sophisticated participants can access, creating psychological commitment among victims who believe they’ve found an edge.

The PlusToken scheme, which collapsed in 2019, collected an estimated $3 billion from millions of investors across Asia before key operators were arrested. Participants were promised returns of up to 30% monthly from crypto mining and trading operations that never existed. The promised returns were mathematically impossible, but the technical language convinced otherwise cautious investors that they were participating in something legitimate.

HyperVerse, formerly known as HyperChain, operated from approximately 2021 through 2022 as a “Web3” platform promising returns through staking and NFT gaming. Despite multiple regulatory warnings—including cease-and-desist orders from Texas and Alabama securities regulators—the scheme attracted billions in investment before collapsing. The red flags were visible for months before the collapse: vague team identities, impossible return promises, and a structure that required continuous recruitment to sustain payouts.

If an investment opportunity promises consistent returns with minimal risk and requires you to recruit others to earn, you’re looking at a Ponzi scheme regardless of what terminology the pitch uses. No legitimate investment strategy guarantees returns, and legitimate yield comes with documented, auditable on-chain activity—not vague promises of “protocol revenue.”

3. Phishing and Social Engineering Attacks

Phishing in the crypto context targets your credentials, seed phrases, or wallet access rather than direct cash transfers. The attacker’s goal is to obtain what allows them to drain your holdings: the private keys that control your wallet or the login credentials for exchanges where your crypto sits.

The most common vector is fake websites designed to look like legitimate exchanges or Web3 protocols. Attackers register domain names that differ by a single character—binance-login.net instead of binance.com, for instance—and build nearly identical interfaces. When you enter your credentials, they’re captured immediately. Given enough traffic, even a small percentage of victims provides enough login details to make the operation profitable.

SMS-based phishing, known as “SIM swapping,” has proven particularly devastating. Attackers contact your mobile carrier, impersonate you, and request a SIM card transfer to a device they control. Once they have your phone number, they can receive 2FA codes via SMS and access your exchange accounts. In 2023, a single SIM swap attack resulted in the theft of approximately $24 million from a cryptocurrency investor in Massachusetts—the attacker had convinced the victim’s carrier to port his number.

More sophisticated social engineering involves extended reconnaissance. Attackers join Discord servers, Telegram groups, or Twitter spaces related to projects you hold, learning your username, your investment size, and which wallets or protocols you use. They then contact you pretending to be support staff from that protocol, referencing your specific holdings to build trust, and guide you through a “troubleshooting” process that ends with you signing a malicious transaction or revealing your seed phrase.

Never enter your seed phrase on any website, no matter how legitimate it appears. Legitimate services will never ask for your private keys. Use hardware wallets for significant holdings, enable multiple authentication methods (preferring authenticator apps over SMS), and verify every URL before entering credentials.

4. Fake Exchanges and Wallet Apps

The promise is simple: a new exchange offering lower fees, better rates, or exclusive features. The reality is a platform designed to extract everything you deposit. These scams have proliferated on app stores and social media, where polished marketing materials and fake reviews create an appearance of legitimacy.

Scammers create apps that function normally for deposits and small withdrawals, building trust over weeks or months. Users see their balances grow, they may even successfully withdraw small amounts. Then, at a moment of maximum pain—often when users have just deposited significant funds or when market conditions create urgency—the platform locks withdrawals. Customer support stops responding. The website goes offline. The app disappears from the app store.

Between 2021 and 2023, the Federal Trade Commission documented thousands of complaints involving fake crypto exchanges and wallet apps. One operation, revealed in a 2023 DOJ prosecution, involved at least $10 million stolen through at least thirteen fake apps that imitated legitimate trading platforms.

The Google Play and Apple App Store aren’t sufficient filters. Despite both platforms’ policies against fraudulent apps, fake exchange apps repeatedly appear, are downloaded thousands of times, and are only removed after complaints accumulate. The review process catches obvious imitations but struggles with apps that initially operate legitimately before transforming into scams.

Before using any exchange or wallet app, verify it through independent sources. Check whether the company is registered with FinCEN, look for a physical address and named leadership, and search for user complaints on forums like Reddit or BitcoinTalk. Start with any deposit using funds you can afford to lose, and test withdrawal capability before funding significantly.

5. Romance Scams (Pig Butchering)

This scam exploits the most powerful trust relationship available: an intimate romantic connection. The attacker cultivates a relationship over weeks or months—often through dating apps or social media—before introducing cryptocurrency as an investment opportunity. The term “pig butchering” comes from the Chinese phrase for fattening a pig before slaughter.

The attacker presents themselves as successful, cosmopolitan, and digitally savvy. They mention their crypto investments casually, building curiosity without pushing. Once the victim expresses interest, they offer to “help” by walking them through the process, sharing their own (fabricated) results, and eventually directing them to a platform controlled by the scammer. The platform shows impressive gains, encouraging larger investments. When the victim eventually tries to withdraw, they’re hit with taxes, fees, or verification requirements that demand additional payments—each one designed to extract more before the victim realizes they’ve been manipulated.

What makes this scam particularly cruel is the emotional investment victims have made. By the time the financial reality becomes apparent, victims have built not just a financial relationship but a romantic one. Many continue believing their partner is genuine even after the scheme collapses, because acknowledging the fraud means acknowledging they were manipulated in two dimensions simultaneously.

The FBI’s Internet Crime Complaint Center reported that romance scams resulted in losses exceeding $1.3 billion in 2022 alone, with cryptocurrency becoming the predominant payment method. These figures likely understate the problem significantly, since victims often feel ashamed and don’t report.

Never send money or crypto to someone you’ve only met online, regardless of how convincing their story or how long you’ve been talking. Be especially wary of any relationship that develops quickly and then introduces investment opportunities—that person is likely seeing you as a target rather than a partner.

6. Impersonation and Fake Support Scams

Cryptocurrency’s pseudonymous nature creates unique challenges for customer support. When you lose access to your account or encounter a technical problem, you’re often desperate for help. Scammers position themselves exactly where that desperation converges with your need for assistance.

The most common form involves fake support accounts on social media. When a user tweets about a problem with a major exchange or protocol, scammers using similar usernames respond offering help. They direct users to a “verification” page that collects personal information, or guide them through a process that gives the scammer access to their account. Because many legitimate companies do use Twitter and Discord for support, users have been conditioned to expect this interaction channel—which scammers exploit.

Fake support websites operate similarly. Users searching for help with a specific issue encounter ads or organic results for “official” support pages. These sites collect whatever information victims provide—account credentials, identification documents, even seed phrases in some cases—and use it to drain existing accounts or commit identity theft.

In a particularly aggressive variant, scammers call victims directly, claiming to be from exchange compliance or security teams. They cite real account details—often obtained from data breaches or social engineering—to build credibility—and then request information “to verify your identity” or “to secure your account.” By the time victims realize the call was fake, the damage is done.

No legitimate support representative will ever ask for your password, seed phrase, or 2FA code. Support will never ask you to send crypto to “verify your wallet” or “cover fees.” When you need help, navigate to support pages directly through the exchange’s official website rather than through search results or social media responses.

7. Unregistered Investment Platforms and ICO Fraud

Initial Coin Offerings and token sales were once the dominant crypto fundraising mechanism, and they remain a frequent vector for fraud. The basic pitch is appealing: get in early on the next Bitcoin, Ethereum, or Solana, and retire early. The problem is that most token launches have no functional product, no viable business model, and no intention of delivering on their roadmap.

SEC Chair Gary Gensler has repeatedly characterized the vast majority of token offerings as securities offerings that should have registered with the regulator but didn’t. The legal question is complex, but the practical implication is clear: when you buy a token during an ICO or presale, you’re largely buying a promise. Promises are easy to make and cheap to break.

The 2017 and 2018 ICO boom produced countless examples. OneToken raised $3.7 million in an ICO before disappearing entirely. The Confideal project raised $400,000 and delivered nothing. These weren’t edge cases—they were the norm. Even projects with genuine intentions often failed, but the absence of registration meant investors had no legal recourse when things went wrong.

Today’s equivalent includes “launchpad” platforms promising early access to new tokens, staking-as-a-service offerings promising yields that defy market mathematics, and NFT projects with roadmaps that exist only as marketing copy. The common thread is the same: you’re asked to trust that something will deliver value in the future, with no enforceable mechanism ensuring that trust is honored.

Treat any investment opportunity that claims to be “coming soon” or “in development” with extreme skepticism. Verify whether the team is publicly identified—real teams put their names and faces behind projects. Check whether the token has been listed on reputable platforms. And understand that the absence of regulation means the absence of recourse: if you send money and receive nothing, you have limited legal options.

How to Protect Yourself

Protecting against these patterns requires more than vigilance—it requires restructuring how you evaluate any opportunity involving cryptocurrency. The most effective defense is procedural: verify before you trust, and accept that no legitimate opportunity requires urgency.

Before using any platform, confirm its registration status through appropriate regulators. In the United States, the SEC’s EDGAR database and FinCEN’s registry provide verification points. For exchanges specifically, check whether they’re licensed in your state—many states require money transmitter licenses, and legitimate companies prominently display their compliance.

For any investment, ask basic questions: Who is behind this? What is the actual product or service? How do they generate returns? Why are they offering this to me rather than keeping the opportunity to themselves? Legitimate operators can answer these questions specifically. Scammers offer vague responses, deflection, or excessive technical jargon designed to obscure the absence of substance.

Finally, accept that cryptocurrency’s greatest strengths—decentralization, pseudonymous transactions, minimal intermediation—also make it uniquely hospitable to fraud. When you send crypto to someone, the transaction is irreversible. There’s no bank to dispute the charge, no chargeback mechanism, no consumer protection bureau with jurisdiction over the counterparty. That finality is a feature for legitimate use cases, but it makes every transaction with unverified counterparties an act of trust you may not be able to afford.

What to Do If You’ve Been Scammed

If you’ve fallen victim to a cryptocurrency scam, act immediately. Time matters: blockchain transactions are visible, and while they’re often difficult to trace, early action improves any chance of recovery.

First, document everything—screenshots of communications, transaction hashes, wallet addresses, and any identifying information about the scammer. This documentation is essential for any subsequent investigation.

Second, report the incident to the FTC at ReportFraud.ftc.gov. The FTC aggregates scam reports and uses them to pursue enforcement actions. File a separate report with the FBI through ic3.gov, the Internet Crime Complaint Center. While individual recovery through these channels is rare, your report contributes to cases that may result in asset seizures and broader enforcement.

Third, if you sent credentials to a fake exchange or wallet, immediately change your passwords on legitimate platforms, enable new 2FA methods, and move remaining assets to a new wallet. Assume that any information you provided has been compromised.

Recovery is difficult, and many victims never see their funds again. The blockchain’s transparency helps investigators but doesn’t inherently lead to recovery, especially when scammers use mixing services, cross-chain bridges, or overseas exchanges to obscure their tracks. Prevention remains vastly more valuable than remediation.

The patterns described here succeed because they exploit universal human tendencies: trust in communities, belief in exclusive opportunities, and the desire to act decisively when circumstances feel urgent. Crypto didn’t invent fraud—it simply provided new technical mechanisms for age-old manipulation.

Understanding these patterns won’t make you immune to sophisticated attacks. But it will help you recognize the warning signs before you commit funds, and it will train you to pause when anyone asks you to act with urgency. That pause is worth more than any technical security measure: it’s the difference between being a passive target and an active participant in your own financial protection.