The rapid evolution of cryptocurrency and blockchain technology has created a flourishing market for digital assets. Unfortunately, it has also created fertile ground for scammers looking to exploit new and experienced investors alike. From initial coin offerings (ICOs) to non-fungible tokens (NFTs) and decentralised finance (DeFi) projects, the crypto space’s complexity can often cloak deceptive schemes. Recognising the hallmarks of a scam can save you from substantial financial loss. Below, we explore some of the most notorious crypto scams, the strategies they use, and the red flags to watch for.
How They Work
Ponzi and pyramid schemes rely on recruiting new participants whose money is used to pay returns to earlier investors, rather than generating any legitimate profits. At first, you may see “guaranteed” or “high” returns. But these payouts are usually sourced from the influx of new investors, rather than genuine business activities or trading results.
Case Study: BitConnect
How They Work
An ICO is similar to an IPO (Initial Public Offering) but for tokens. Scammers create a flashy website, whitepaper, and hype around a new crypto project, then invite the public to invest early for supposedly massive future gains. Once money pours in, the criminals may simply disappear.
Case Study: PlexCoin
How They Work
Organisers artificially inflate (pump) the price of a low-volume cryptocurrency by spreading rumours or hype through social media and private groups. Once the price rises sharply, they sell (dump) their holdings, causing the price to crash, leaving other investors with worthless tokens.
Example
How They Work
In a rug pull, developers launch a seemingly legitimate DeFi project or NFT collection. They encourage people to stake or buy tokens, often touting unbelievably high returns. Once the project accumulates significant funds, the dev team abruptly withdraws liquidity or mints more tokens, then sells them en masse, causing the token’s value to collapse.
Case Study: SnowdogDAO
No legitimate crypto investment can guarantee high returns—especially on a daily or weekly basis. The market is inherently volatile, and any claim of “no risk” or “guaranteed profits” is almost certainly deceptive.
Legitimate projects often have clear, accessible information about their founders, developers, and advisers. If a project’s website does not list credible professional backgrounds, or if the team uses only pseudonyms without any track record, proceed with caution.
A whitepaper is the core document outlining a crypto project’s objectives, technologies, and tokenomics. Scammers often rely on buzzwords, hype, and plagiarised text. Look for red flags such as grammatical errors, nonsensical jargon, or lack of clarity on real-world use cases.
Watch out for social media feeds flooded with unrealistic success stories or memes about instant millionaires. Overly pushy marketing, heavy reliance on celebrity endorsements without real substance, or spammy community channels are all indicators of possible foul play.
Legitimate crypto projects typically offer a clear roadmap. If a project claims it will solve huge problems but provides no technical details or realistic timelines, it’s likely just hot air.
On platforms like Ethereum, the underlying code for token smart contracts is usually open-source or at least verifiable through block explorers like Etherscan. If you cannot verify the code or if the code has major vulnerabilities, exercise extreme caution.
Scammers thrive on urgency. They frequently warn prospective investors that an opportunity is time-limited or that they’ll miss out on massive returns if they don’t act immediately. This psychological pressure pushes people to invest without adequate research.
From YouTube personalities to Twitter celebrities, fraudsters may pay or trick influencers into promoting their scams. The influencer might not even know it’s a scam, but their endorsement can quickly attract thousands of followers, injecting legitimacy into a fraudulent project.
Scam websites are often populated with fictitious success stories, phoney user reviews, or even partnership claims with major tech or financial companies. A quick check with the purported partner’s official channels (e.g., their verified Twitter or press releases) can debunk these lies.
Scammers often register their companies in obscure jurisdictions with lax financial regulations, making it hard to track them. They might also fake physical addresses or create shell entities. When things go wrong, victims have nowhere to turn for recourse.
Check LinkedIn, GitHub, or other professional networks to confirm the identities and track records of the founders and developers. See if they’ve worked on notable past projects or have relevant expertise in blockchain technology.
A genuine whitepaper offers insight into the project’s technology, roadmap, and potential risks. Ask yourself these questions:
For blockchain projects, look at public repositories on platforms like GitHub. Legitimate teams often share their source code, maintain regular updates, and openly discuss issues or improvements.
Scammers sometimes lock down their Discord or Telegram channels to censor complaints and questions. In an authentic project, the community is engaged in transparent, constructive discussions. Revisit established crypto forums (e.g., r/CryptoCurrency on Reddit) to see if anyone has flagged concerns.
Smart contract audits by reputable third-party firms (e.g., CertiK, Quantstamp, PeckShield) can be a good sign. However, not all audits are equal. Some scammers buy superficial audits that gloss over code flaws. Always verify the auditing firm is trustworthy and the audit is thorough.
Major regulated exchanges (e.g., Coinbase, Binance, Kraken) conduct due diligence before listing assets. While not foolproof, the likelihood of listing outright scams is reduced. When dealing with smaller or decentralised exchanges, be extra careful to validate the token’s legitimacy.
Even if one of your cryptocurrency investments turns out to be a scam or suffers a market collapse, having a diversified portfolio can help mitigate losses. Spread your investment across several projects, ideally ones with proven track records or legitimate fundamentals.
Use hardware wallets (e.g., Ledger, Trezor) or reputable software wallets with strong encryption. Always activate two-factor authentication (2FA). Avoid clicking on suspicious links or downloading unknown software claiming to offer free tokens or secret tips.
The crypto world evolves quickly, and so do scammers’ tactics. Follow trusted crypto news outlets, subscribe to reputable analysts, and participate in educational forums that discuss the latest trends and potential pitfalls.
If you’re considering a substantial investment or a complicated DeFi project, consult professionals—lawyers, certified financial planners, or blockchain experts—who understand the landscape. They can help you navigate regulatory ambiguities and assess potential risks.
Crypto scams don’t always involve fraudulent platforms alone—sometimes they’re boosted by affiliates who receive commissions for every new sign-up or deposit they generate. While there are legitimate affiliate marketers, some operate under false pretences, posing as independent reviewers or news outlets when they’re really pushing questionable projects for profit. These “affiliates in disguise” might gloss over risks, exaggerate returns, or use aggressive marketing techniques to sway unsuspecting investors.
If you’d like to dive deeper into this aspect of the crypto scam landscape—learning how affiliates function, why they may not properly vet the products they promote, and how to spot disguised promotional content—be sure to read our full guide on affiliate marketing pitfalls. It covers the tactics affiliates use, red flags to watch for, and best practices for protecting yourself from dishonest endorsements.
The best defence against crypto scams is a mix of knowledge, caution, and due diligence. If an opportunity sounds too good to be true, it almost certainly is. Always question marketing claims, verify project details, and be wary of any investment that guarantees profit without risk. Use the resources at your disposal—code repositories, professional networking sites, reputable crypto media, and regulatory bodies—to confirm a project’s legitimacy.
With the crypto market growing daily, new opportunities will emerge—but so will new scams. By staying informed and vigilant, you can safeguard your investments and contribute to a healthier, more transparent cryptocurrency ecosystem.
Crypto products and NFTs are unregulated and can be highly risky. There may be no regulatory recourse for any loss from such transactions.
Look out for promises of guaranteed or excessively high returns with little or no risk. Genuine cryptocurrency investments are volatile and never come with such guarantees.
No. Many legitimate projects launch regularly. However, new or lesser-known projects do carry heightened risks—so always research the team, read the whitepaper, and verify project authenticity before investing.
A credible whitepaper outlines the problem the project aims to solve, explains its technology, and offers detailed tokenomics. If it’s filled with vague promises, unverified claims, or heavily plagiarised content, that’s a major red flag.
A rug pull occurs when a project’s creators abandon it suddenly and drain its liquidity, causing token prices to crash. To avoid rug pulls, check if the development team is transparent, verify locked liquidity or vesting schedules, and assess the project’s code audits.
No. Some celebrities and influencers are paid to promote projects they haven’t researched thoroughly. Always corroborate an endorsement with your own due diligence—don’t just rely on star power.
Affiliate-driven sites sometimes hide their financial incentives and post overly positive reviews. Look for balanced coverage (pros and cons), transparent disclaimers about affiliate links, and verifiable author credentials.
It’s often difficult to recover lost funds, as crypto transactions are generally irreversible. Your best bet is to contact law enforcement or relevant regulatory bodies, and gather as much evidence (transaction IDs, emails, chat logs) as possible.
Proceed with caution. Social media is rife with pump-and-dump groups and sponsored posts disguised as impartial advice. Cross-check all tips with legitimate news sources, project documentation, and community discussions.
Use reputable anti-malware and antivirus software, and never download suspicious files or click unknown links. Always check URLs for typos or slight variations (e.g., “coinhbarat” instead of “coinbharat”) before entering sensitive information.
Report to your local financial regulatory authority or law enforcement agency. You can also share your experience on trusted crypto forums or communities to warn others.