Crypto Scam Identification: Spotting Fake Coins and Exchanges

Cryptocurrency scams cost victims over $5.6 billion in 2023 according to the FBI, making crypto fraud one of the fastest-growing categories of financial crime. The decentralized, irreversible nature of cryptocurrency transactions makes them ideal for scammers: once you send crypto, there is no bank to call, no chargeback to file, and no way to reverse the transaction.

Types of Crypto Scams

Fake exchanges and wallet platforms mimic legitimate services like Coinbase, Binance, or MetaMask. The scammer directs you to a convincing clone site through phishing emails, social media ads, or search engine results. You deposit cryptocurrency or enter your seed phrase/private key, and the funds are stolen immediately. In 2023, a fake Coinbase Pro site ran for months, stealing millions through Google Ads that appeared above the real Coinbase listing.

Rug pulls involve developers creating a new cryptocurrency token, aggressively promoting it to inflate the price, then draining all liquidity and disappearing. The Squid Game token (SQUID) rose 230,000 percent before the developers pulled $3.3 million and vanished. Victims could not sell their tokens because the smart contract included a sell restriction.

Pig butchering scams combine romance scams with fake investment platforms. The scammer builds a relationship (often over weeks), then introduces a “secret” trading platform showing fabricated profits. The victim deposits increasing amounts, sees fake returns on the platform, and when they try to withdraw, is told they must pay “taxes” or “fees.” The platform, profits, and scammer are all fake. The FBI reports pig butchering as the largest category of crypto fraud by dollar volume.

Pump-and-dump schemes use coordinated social media campaigns and Telegram/Discord groups to hype a low-value token. Early insiders buy before the promotion, the hype drives the price up, and the insiders sell at the peak. Latecomers are left holding worthless tokens.

Impersonation giveaway scams use hacked or fake accounts of celebrities like Elon Musk or companies like Tesla, promising to double any cryptocurrency sent to a wallet address. YouTube, Twitter, and Telegram are flooded with these scams. No legitimate giveaway requires you to send money first.

Red Flags

Guaranteed returns or phrases like “risk-free” and “100x guaranteed.” Pressure to invest immediately before a deadline. A new coin or platform with no verifiable team, audit, or track record. An investment opportunity introduced by someone you met online. A platform that shows extraordinary returns but makes withdrawal difficult. Requests to share your wallet seed phrase or private keys.

Protection Strategies

Never share your seed phrase or private keys with anyone, for any reason. No legitimate service, support agent, or smart contract needs them. Your seed phrase is the master key to your wallet.

Verify exchange URLs manually. Type the exchange URL directly or use a bookmarked link. Never reach an exchange through an email link, social media ad, or search result. Check the URL character by character.

Research before investing. Check the project’s team (are they real, identifiable people?), smart contract audit (has it been audited by CertiK, Trail of Bits, or another reputable firm?), and community (organic or artificially inflated?). Check TokenSniffer and RugDoc for scam alerts on new tokens.

For more on how pig butchering intersects with romance scams, see our romance scam warning signs guide. To understand the social engineering behind crypto scams, explore our social engineering defense guide.

Due Diligence Checklist for Crypto Projects

Before investing in any cryptocurrency project, verify: Is the team publicly identified with verifiable professional histories? Has the smart contract been audited by a reputable security firm? Is there genuine utility beyond speculation? Is the community organic or artificially inflated with bots? Does the project’s tokenomics make mathematical sense? Are there lock-up periods for team tokens? A project that fails multiple items on this checklist carries extreme risk regardless of how attractive the potential returns appear.