How to Avoid Crypto Scams (Beginner's Guide)

Crypto is one of the few areas of money where transactions are usually final. There is no bank to call, no chargeback, and no fraud department that can reverse a payment once it has left your wallet. That is exactly why scammers love it — and why learning to spot the warning signs is one of the most valuable things a beginner can do. The good news is that the vast majority of scams reuse the same handful of tactics. Once you recognise the pattern, you can spot a new variation before it costs you anything.

This guide walks through the most common crypto scams in 2026 in plain English, explains how each one actually works, and gives you clear rules to follow. None of this is financial advice — it is safety advice. Think of it like learning to spot a fake email from your bank.

The 10 red flags — quick reference

If you only remember one section, make it this one. Any single flag below is a reason to stop; two or more together is almost always a scam.

1. Seed-phrase and recovery-phrase requests

Your seed phrase (also called a recovery phrase — usually 12 or 24 words) is the master key to your wallet. Anyone who has it can move all your funds, from anywhere, instantly. This is the single most important rule in all of crypto: no legitimate wallet, exchange, support team, "validator," or app will ever ask for your seed phrase. Not to "verify" your wallet, not to "sync" it, not to "fix an error," not to receive an airdrop.

Scammers dress this up cleverly. A fake wallet-support chat asks you to "re-import" your wallet. A pop-up says your wallet needs "re-validation." A form asks you to "connect" by typing your words. Real wallet software only ever asks for your phrase in one situation: when you are restoring a wallet on your own device, in the official app you installed yourself. If a request comes from anyone else, it is theft. The same goes for your private keys and any 2FA/authenticator codes — never type or share them anywhere except the genuine app you opened yourself.

2. Fake "support agents" and impersonation

This is one of the most common ways beginners lose money. You post a question in a public group, an app store review, or on social media — and within minutes a friendly "support agent" messages you privately offering to help. Real exchanges and wallets almost never DM you first. Support happens through the official app or website, not unsolicited private messages.

The scammer's goal is to get you to a fake site, a screen-sharing tool, or a form that captures your login or seed phrase. Red flags: they contact you first, they push you off the official platform ("let's continue on Telegram/WhatsApp"), they ask you to install remote-access software, or they ask for codes. Rule: only ever start a support conversation yourself, from a link you found on the provider's official site — never from a message someone sent you.

3. Phishing links and fake websites

Phishing is a fake version of a real site built to steal your login or drain your wallet. The page can look pixel-perfect. The trick is in the address bar. A fake site might swap a letter, add a word, or use a lookalike domain — for example binance-support.co instead of the real binance.com, or a character that merely resembles a normal letter.

Protect yourself with a few habits: type exchange and wallet addresses in yourself or use a saved bookmark rather than clicking links in emails, ads, or DMs; double-check the spelling of the domain before you log in or connect a wallet; be suspicious of sponsored search results, which scammers sometimes buy to appear above the real site; and never approve a wallet transaction you did not initiate. When a site asks your wallet to "sign" or "approve" something, read what it is actually authorising — a malicious approval can hand over your tokens. For more on this, see our guide on how to keep your crypto safe.

4. Giveaway and "send 1, get 2 back" scams

You will see these constantly: a video, livestream, or post claiming a famous person or big exchange is "giving back to the community." Send 0.1 BTC to this address, they say, and you will instantly get 0.2 BTC returned. Sometimes the video is a hacked or AI-generated clip of a real celebrity to make it look official.

It is always a scam. No legitimate giveaway asks you to send crypto first. The entire mechanic — pay to receive more — is the fraud. Once you send, the money is gone and nothing comes back. Treat every "double your crypto" offer as a bright red flag, no matter how professional it looks or who appears to be endorsing it.

5. Romance and "pig-butchering" investment scams

These are among the most damaging scams because they play the long game. "Pig butchering" (the grim industry term for fattening a victim before the slaughter) usually starts as a friendly or romantic connection — a wrong-number text, a dating-app match, a new online friend. Over days or weeks they build trust and rarely mention money at first. Then they casually reveal how well they are doing with a crypto "opportunity" and offer to help you get in.

The platform they steer you toward is fake. It may show your balance growing nicely, and small early "withdrawals" might even work to build confidence. But when you try to take out a large amount, you are hit with surprise "taxes" or "fees" you must pay first — more money into the trap. Rules: be deeply sceptical of any investment tip from someone you met online, especially if the relationship moved to private chat quickly; never let a person you have not met in real life guide your investing; and remember that a platform showing profits means nothing if you cannot freely withdraw.

6. Fake exchanges and fake apps

Some scams are entire fake platforms — a slick website or a mobile app that looks like a real exchange. You deposit, you see numbers go up, and you cannot get your money out. Fake apps sometimes appear even in official app stores briefly, or are sent to you as a direct download link.

Reduce your risk by sticking to well-known, established exchanges and downloading apps only from the official App Store or Google Play — never from a link someone sends you. Check the developer name, the number of reviews, and the download count; a "major exchange" app with a handful of reviews is a warning sign. If you are still choosing where to start, our list of the safest crypto exchanges for beginners explains what to look for in a trustworthy, regulated platform.

7. Rug pulls and too-good-to-be-true tokens

A rug pull is when the creators of a new token hype it up, attract buyers, and then vanish with the money — often by dumping their own holdings or draining the pool of funds, leaving the token worthless. These usually live around brand-new coins with names promising quick riches, aggressive social-media marketing, and promises of enormous, fast returns.

Warning signs include anonymous teams with no verifiable track record, promises of guaranteed or sky-high returns, pressure to "buy before it explodes," and a project that is mostly hype with no clear use. As a beginner, the safest approach is simple: avoid obscure new tokens you heard about through hype. You do not need to catch every opportunity, and most "opportunities" that reach you through a random DM or viral post are traps.

8. Guaranteed-return and "trading bot" schemes

Any service promising fixed daily or weekly profits — "earn 2% a day," "our AI bot never loses" — is a scam or a Ponzi structure that pays early users with later users' money until it collapses. Real markets go up and down; nobody can guarantee returns. The moment you see a promised, fixed, or guaranteed profit, you can stop reading. That single claim is enough to walk away.

The core rules, in one place

A good mental habit is to add friction. Scammers rely on speed and emotion. If you make a personal rule to wait 24 hours before acting on any "opportunity," and to always verify through a second, independent source, you defuse the majority of scams automatically.

Frequently asked questions

I think I have been scammed — what should I do?

Act quickly but calmly. If your wallet may be compromised, move any remaining funds to a brand-new wallet with a fresh seed phrase you generate yourself. Stop all contact with the scammer and do not pay any "fee" to release funds — that is a second scam. Report it to your local fraud or cybercrime authority and to the exchange involved. Sadly, on-chain transactions are usually irreversible, so recovery is rare — which is why prevention matters so much.

Can someone steal my crypto just from my wallet address?

No. Your public wallet address is safe to share to receive funds — think of it like an account number. What must stay secret is your seed phrase, private keys, and login credentials. Anyone asking for those is trying to rob you.

Are "recovery services" that promise to get my money back legit?

Almost never. After a scam, victims are frequently targeted a second time by people claiming they can "recover" lost crypto for an upfront fee. Legitimate recovery is extremely rare and never guaranteed. Treat anyone who contacts you promising to recover funds as another scammer.

Staying safe in crypto is mostly about a few unbreakable habits and a healthy dose of scepticism. If you want to lock down your setup properly, read our companion guides on keeping your crypto safe and setting up a crypto wallet the right way. And remember: availability, fees, and features vary by country and change over time, so always verify details on the provider's own official site before you act.