header-image

A-Z of Crypto Scams to be Aware of

Protect your crypto assets with our comprehensive guide on common and uncommon crypto scams. Learn how to spot and avoid traps like phishing, fake promotions, and more.

Nov. 2, 2023, 11:19 a.m.

Welcome to the wild, exciting, and sometimes perilous world of cryptocurrency! A realm where fortunes can be made overnight, but where the unwary can also lose everything in the blink of an eye.

If you're reading this, chances are you're intrigued by the promise of digital assets and the freedom they offer. But with great freedom comes great responsibility—especially when it comes to safeguarding your hard-earned crypto.

In this ever-evolving landscape, scammers are getting more creative and audacious. From phishing websites to fake exchanges, the crypto underworld is rife with traps for the uninformed.

That's why we've put together this comprehensive guide to arm you with the knowledge you need to identify and avoid the most common—and some not-so-common—crypto scams out there.

So, buckle up and read on. Your financial future may depend on it.


Airdrop Scams and Dusting Attacks


Ah, airdrops! Who doesn't love the idea of free tokens magically appearing in their wallet? Airdrops can be a legitimate way for new projects to attract attention and for existing ones to reward loyal users. But not all that glitters is gold.

Scammers have found ingenious ways to exploit the allure of airdrops. One such method is the "dusting attack." In this scam, a small amount of cryptocurrency is sent to a large number of wallet addresses.

Why would someone give away free money, you ask?

The answer is tracking. By "dusting" multiple wallets with small amounts, scammers can monitor transactions and identify patterns. This information can then be used for more targeted and potentially harmful attacks, such as phishing.

So, how do you protect yourself?

Firstly, if you notice a small, unexplained deposit in your wallet, be cautious. Do not move those funds or interact with them. Many modern wallets now have features that allow you to mark such funds as "do not spend," effectively isolating them from your legitimate assets.

Secondly, always keep your wallet's privacy settings updated. Some wallets offer features that prevent small deposits from unknown addresses, making it harder for scammers to "dust" you.


Chain Split Scams


Chain splits occur when a single blockchain diverges into two separate chains. Typically, this results in the creation of a new cryptocurrency. For example, Bitcoin Cash emerged from a chain split with Bitcoin.

Sounds like a win-win situation, right? Well, not always. Scammers often exploit the excitement and confusion surrounding chain splits to deceive investors.

Here's how it works: Scammers will claim that you need to send your existing coins to a particular wallet to receive new coins from the split. They'll promise you'll get your original coins back along with new coins from the fork.

The catch? Once you send your coins, they're gone for good. The scammers disappear, and you're left with neither your original coins nor the new ones.


Emails warning about account closures or suspicious activity


You've just received an email from your crypto exchange, warning you about suspicious activity on your account. The email urges you to act quickly to secure your assets. Your heart races as you wonder if you've been hacked.

Hold on. Take a deep breath.

Before you click on any links or provide any information, you need to verify the legitimacy of that email. Scammers are becoming increasingly sophisticated, even going so far as to use email addresses that closely resemble those of reputable exchanges.

Here's the trick: Scammers will send you an email that looks almost identical to an official communication from your crypto exchange. The email will often contain alarming messages about account closures or unauthorized transactions. The goal? To panic you into clicking on a link that leads to a phishing site.

Once you're on the phishing site, you'll be prompted to enter your login credentials. If you do, the scammers gain access to your account and your funds.

So, how can you protect yourself?

First, never click on links or download attachments from emails unless you're absolutely sure of the sender's identity. If you receive an email warning about your crypto account, log into the exchange directly by typing the URL into your browser. Do not use the link provided in the email.

Second, check the email address carefully. Scammers often use email addresses that look similar to the official ones but have slight misspellings or extra characters.

Third, enable two-factor authentication (2FA) on your accounts. Even if scammers get your login details, 2FA can provide an additional layer of security.

Finally, if you're still unsure about the email's legitimacy, contact the exchange's customer support directly for verification. Use contact information from the exchange's official website, not from the email you received.


Fake Promotions


Twitter user impersonating Vitalik.

Imagine scrolling through your Twitter feed and stumbling upon a tweet from Vitalik Buterin, the co-founder of Ethereum, announcing a massive giveaway of 100,000 ETH. Your heart races as you think about the incredible returns you could make.

But wait, is it too good to be true?

In the crypto world, if something seems too good to be true, it probably is. Fake promotions are a rampant problem, and even the most seasoned investors can fall prey to them.

Take, for example, a scam that unfolded during the Ethereum merge. An account posing as Vitalik Buterin ran a giveaway campaign promising Twitter users double the amount of ETH they sent to a specific wallet.

The result? Those who sent their ETH lost it all. The scammers vanished, leaving investors high and dry, with neither their original ETH nor the promised doubled amount.

So, how can you spot a fake promotion?

Firstly, always verify the identity of the person or organization behind the promotion. Check their social media handles carefully. Scammers often use usernames that are slight variations of the real ones to deceive people.

Secondly, be skeptical of offers that promise guaranteed or unrealistic returns. In the crypto world, there's no such thing as a free lunch.

Thirdly, cross-reference the promotion with official announcements from the cryptocurrency's website or trusted news sources. If it's a legitimate promotion, multiple credible sources will confirm it.

Lastly, never send your crypto to an unknown wallet based on a social media promotion, no matter how tempting the offer may seem. Always do your due diligence before making any financial moves.


Hardware Wallet Giveaway Scams


Free stuff! Who doesn't love the sound of that? Especially when it's something as valuable as a hardware wallet, designed to keep your cryptocurrencies safe. But beware, not all giveaways are as generous as they seem.

In the crypto universe, hardware wallets are considered one of the safest options for storing your digital assets. They're physical devices, disconnected from the internet, making them less susceptible to hacks.

So, when you see a giveaway offering a free hardware wallet, it's tempting to jump at the opportunity. However, this is where the scam comes into play.

Scammers offer hardware wallets as "giveaways," often posing as well-known crypto influencers or companies. They'll send you the wallet, and you might think you've just scored a great deal.

But here's the twist: the scammer already knows the recovery phrase for the hardware wallet they've sent you.

Once you transfer your cryptocurrencies to the wallet, the scammer uses the recovery phrase to regain control of the device. Your cryptocurrencies are then transferred out, leaving you empty-handed.

So, how can you protect yourself?

First and foremost, never accept hardware wallets from unverified or suspicious sources. Always purchase from reputable vendors or directly from the manufacturer.

If you do receive a hardware wallet from a source you trust, consider resetting the device to generate a new recovery phrase. This ensures that only you have access to your assets.

Also, be cautious when you see giveaways on social media platforms. Verify the legitimacy of the account and the offer before taking any action. A quick search or community consultation can often reveal whether an offer is genuine.


Hidden Backdoor on Fake "Make Your Own Exchange" Platforms


The idea of creating your own cryptocurrency exchange is tantalizing, isn't it? You're not just participating in the market; you're facilitating it. But beware, as this entrepreneurial dream can quickly turn into a nightmare.

Enter the "Make Your Own Exchange" platforms. These services promise to provide you with all the tools you need to launch your own crypto exchange. Sounds too good to be true? Often, it is.

Scammers behind these platforms have a sinister trick up their sleeve: a hidden backdoor. This allows them to access the exchange at will, manipulate trades, and even siphon off funds into their own wallets.

Imagine the horror of watching your exchange's funds drain away, powerless to stop it. Not only do you lose money, but your reputation also takes a massive hit.

So, how can you protect yourself?

First and foremost, due diligence is key. Research the platform thoroughly before committing any funds or time. Look for reviews, testimonials, and any red flags that might indicate it's a scam.

Secondly, consult with experts in the field. If you're serious about launching an exchange, it's worth getting professional advice. This can help you identify any potential security flaws or backdoors.

Open-source platforms are another safer option. These allow you to inspect the code for any hidden backdoors or vulnerabilities. However, you'll still need a certain level of expertise to understand what you're looking at.

Lastly, consider starting small and running a test version of the exchange. Monitor it closely for any unusual activity. This can serve as a "trial run" to identify any issues before you go live on a larger scale.



Honeypots


What's a honeypot, you ask? Well, it's not a pot filled with sweet nectar but a devious trap set by cunning scammers. Picture this: a seemingly irresistible crypto investment opportunity that lures you in with the promise of astronomical returns. It sparkles like honey in the sun.

But once you're in, the trap is sprung! Honeypots are deceptive projects or tokens created solely to steal your hard-earned coins. They often masquerade as legitimate investments, boasting high yields and incredible potential.

So, how can you protect yourself?

Before diving in, scrutinize the project thoroughly. Check the team's credentials, read the whitepaper, and assess its real-world use case. Legitimate projects have substance, not just sweet promises.

Beware of High Returns, If an investment promises returns that sound too good to be true, it probably is. Honeypots often dangle this honey to lure you in.

Listen to the crypto buzz. Seek feedback from the community and trusted sources. If others have been stung, it's best to steer clear.

Stick to well-known and reputable crypto exchanges and platforms. They have safety nets in place to catch these pesky honeypots.


Phishing Websites


Picture this: you're surfing the web, seeking crypto wisdom, and stumble upon a website that appears to be your trusted exchange or wallet provider. It looks and feels real, down to the last pixel.

But here's the sinister twist: it's a clever decoy, designed to trick you into revealing your seed phrase.

The moment you enter your seed phrase on such a site, you're handing over the keys to your crypto castle to malicious actors. They'll quickly drain your accounts, leaving you in a state of shock and despair.

So, how can you protect yourself?

Keep a sharp eye out for suspicious URLs and typosquatting. Scammers often create websites with subtle variations of legitimate addresses.

Just because its the top google search result does not mean its the official platform. Especially for smaller platforms scammers will build an almost identical looking platform and work to get it ranked higher on google. Usually the website url will be slightly different making it difficult to spot. But google rankings are not guarantee that you’ve found the official platform.

Before entering any sensitive information, verify the website's URL. Ensure it's the official and secure site of your crypto service provider.

Save trusted crypto websites as bookmarks. This way, you'll always access them directly without relying on search results.

Enable 2FA wherever possible. Even if a scammer gets your seed phrase, they'll still need an additional layer of security to access your accounts.

If you suspect you've fallen into a phishing trap, contact your crypto service provider's support immediately. They can help you secure your accounts. If you receive a suspicious email always contact support directly via the recommended contact lists on the platform. Do not reply directly to the email.


Ponzi Schemes


Ponzi schemes, the age-old swindle that continues to haunt the financial world, even in the realm of cryptocurrencies. It's like a never-ending magic trick, but instead of pulling a rabbit out of a hat, scammers are pulling the wool over your eyes.

Ponzi schemes promise you the moon, the stars, and a rocket to get there, but in reality, they're just stacking empty promises.

Here's how it typically plays out: You invest your hard-earned crypto, and you may indeed see some returns initially. The catch? Those returns come from new investors' money, not from any legitimate profit-generating activity.

As more people get roped into the scheme, the illusion grows. The early investors might even encourage you to join, making it seem like they've found the Holy Grail of investing. But in truth, it's a house of cards waiting to crumble.

So, how can you protect yourself?

Research the investment opportunity thoroughly. Check the company's background, its financials, and its track record. Legitimate investments can withstand scrutiny.

Don't be afraid to ask tough questions. How does the investment generate profits? Where does the money come from? Transparency is key.

If someone is pressuring you to invest quickly, that's a red flag. Legitimate investments don't require haste; they stand the test of time.


Coins you can buy but not sell


Imagine you stumble upon a crypto gem, a new coin with the promise of changing the game. It's like discovering a rare bird in the crypto wilderness. Excitement bubbles, and you decide to invest.

But here's the twist—once you buy this intriguing coin, you find yourself in a bit of a bind. There's no clear path to selling it. It's as if you've found a treasure chest but can't quite open it.

There can be a number of issues at play

  1. Limited Exchange Listings: New coins often struggle to secure listings on major exchanges. Without these listings, you're left with few options to trade your newfound treasure.

  2. Thin Order Books: Even if the coin is listed on a smaller exchange, the order books can be thin. This means there are not enough buyers and sellers, making it hard to execute trades at desired prices.

  3. Inability to transfer your token is nested within the smart contract:

When a purchase is made through the swap contract, such as UNI-V2, it triggers an action that adds the buyer's address to a blacklist. This blacklist effectively prevents users from swapping their tokens back to ETH through the Uniswap contract.

It's important to note that only the owner of the contract has the authority to modify the blacklist variables. This design choice makes it challenging to detect the scam because it doesn't directly block user accounts.

Additionally, the contract has a hard-coded reference to the specific pool contract. This design feature limits users' options for swapping the token using any other decentralized exchange (DEX). Since the liquidity exclusively resides in the pool created by the contract owner, users are effectively locked into this specific DEX for trading the token.

So, how can you protect yourself?

In some cases, over-the-counter (OTC) trading might be an option, allowing you to sell larger quantities directly to buyers

Sometimes, waiting is the best strategy. As the coin gains popularity and more exchange listings, liquidity can improve.

For experienced crypto traders:

Deploy the contract to a testnet environment, such as Remix. This allows you to interact with the contract and experiment with its functionalities without risking any real assets.

Additionally, you have the option to create a local fork of the Ethereum mainnet using tools like Hardhat. This approach replicates an exact snapshot of the mainnet, complete with an address containing 100 test ETH. This setup allows you to test any deployed code and interact with all the contracts and addresses that exist on the live mainnet, all within a secure and controlled testing environment.



Pump and Dump Schemes


In the crypto world, there's a sinister game that plays out, one you should approach with utmost seriousness—the "Pump and Dump" scheme.

Pump and Dump schemes are like financial illusions. They start with a coordinated effort by a group of traders to inflate the price of a particular cryptocurrency. This is the "pump" phase. During this time, unsuspecting investors, enticed by the soaring prices, rush in to join the frenzy.

However, when the price has reached its peak, those orchestrating the scheme initiate the "dump" phase. They sell off their holdings in large quantities, causing the price to plummet rapidly. This leaves the latecomers with substantial losses, while the instigators walk away with ill-gotten gains.

So, how can you protect yourself?

Be careful of free investing advice. Nothing is ever really free. Free advice that is accurate can be expected to already be priced into the market. Alternatively, this free advice can be shared once the person sharing the advice already has a significant share of the coin they are promoting. Once their advice has caused enough of a price rise they sell their crypto leaving you with the scraps.

Avoid making impulsive decisions driven by the fear of missing out (FOMO) on quick gains. Sometimes, staying out of the dance is the wisest choice.

Utilize stop-loss orders and risk management strategies to protect your investments. These tools can act as safeguards when the music suddenly stops.



Rotten Seedphrases


You've probably heard it a million times: "Your seedphrase is the key to your crypto wallet. Keep it safe." But what if the seedphrase you're safeguarding is rotten to begin with?

A rotten seedphrase is essentially a compromised set of words that you believe to be secure. However, unbeknownst to you, someone else has access to it.

This scam often starts with a seemingly helpful tool or service that offers to generate a seedphrase for you. It could be a mobile app, a website, or even a hardware wallet that you've purchased online.

Once you've set up your wallet using this seedphrase, you start transferring your cryptocurrencies into it. You think your assets are safe, but they're anything but.

The scammer, who has access to the seedphrase generated by their tool or service, can now easily access your wallet. They can transfer out all your assets, leaving you with an empty wallet and a sinking feeling in your stomach.

So, how can you protect yourself?

Firstly, always generate your seedphrase through a trusted and secure method. Use reputable hardware wallets or well-known software wallets that have been vetted by the community.

Secondly, never use a seedphrase that someone else gives you or that you find online. Always generate a new, unique seedphrase for every wallet you create.

Thirdly, be skeptical of any service that offers to store or back up your seedphrase for you. Remember, anyone who has your seedphrase has access to your assets.

Lastly, always do your due diligence. Read reviews, consult with knowledgeable friends, and do your own research before trusting any tool or service with your seedphrase.



Rugpulls


Rug being pulled from under the Divly mascot.

Imagine investing in a promising new cryptocurrency, only to wake up and find that all your funds have vanished. Welcome to the world of "Rug Pulls," one of the most devastating scams in the crypto universe.

A rug pull is essentially a swift exit scam by the developers or insiders of a cryptocurrency project. They hype up a new token, attract investors, and then suddenly remove all liquidity, making it impossible for anyone to sell.

The term comes from the metaphor of having the "rug pulled out from under you." One moment you're standing on solid ground, and the next, you're falling flat on your face.

So, how do these scams usually unfold?

First, the scammers create a new token and list it on decentralized exchanges like Uniswap or PancakeSwap. They'll use social media, influencer endorsements, and other marketing tactics to create buzz.

Once the token gains traction and the price starts to rise, that's when they strike. The scammers will remove all the liquidity from the exchange, effectively making it impossible for investors to sell their tokens.

The result? A worthless token and a group of defrauded investors.

So, how can you protect yourself?

Protecting yourself from rug pulls requires due diligence. Always research the team behind a new project. Are they anonymous, or do they have a track record in the crypto or tech industry?

Check for audits and reviews of the project's smart contracts. An audit by a reputable firm can add an extra layer of security.

Be cautious of projects that offer unusually high returns. If it sounds too good to be true, it probably is.

Lastly, diversify your investments. Don't put all your eggs in one basket, especially when investing in new or less-known token



Shilling


You're scrolling through social media or a crypto forum and stumble upon a post raving about the next big cryptocurrency. It's going to "moon," they say, and you'd be a fool not to invest right now.

Hold on. Before you jump on the bandwagon, let's talk about "shilling."

Shilling is the act of excessively promoting a cryptocurrency, often orchestrated by individuals or groups with a vested interest. The goal? To artificially inflate the price by creating a sense of urgency and FOMO (Fear of Missing Out).

Now, not all promotion is shilling. Many genuine enthusiasts share their favorite projects, and that's perfectly okay. The problem arises when the promotion is misleading or downright false.

So, how can you protect yourself?

Firstly, be wary of accounts that are newly created or have very little activity aside from promoting a single coin. These are often "burner" accounts created solely for the purpose of shilling.

Secondly, watch out for overly optimistic or unrealistic claims. If something sounds too good to be true, it probably is.

Thirdly, look for corroborating evidence. Are reputable sources or well-known figures in the crypto community also talking about this coin? If not, proceed with caution.

Another red flag is the use of high-pressure tactics. Phrases like "last chance" or "limited time offer" are often employed to rush you into making impulsive decisions.

To protect yourself, always do your own research. Dive into the project's whitepaper, check out the team behind it, and assess its real-world utility.

Consult with trusted community members or financial advisors who are knowledgeable about cryptocurrency. A second opinion can often shed light on whether the hype is justified or just hot air.



Trading Signal Scams


Imagine getting insider tips that promise to make your crypto investments soar. It's tempting, isn't it? But beware, the Trading Signal Scam is a cunning trick that plays on this very allure.

In the crypto market, trading signals are suggestions or tips for buying or selling a particular asset at a specific time and price. These signals can be incredibly useful when they come from credible sources. However, scammers have found a way to exploit this.

Here's how the scam unfolds: The scammer sends out trading signals to two different groups, each with opposite predictions. For example, one group gets a signal to buy a certain coin, while the other gets a signal to sell it.

When the market moves, one of the predictions inevitably turns out to be correct. The group that received the correct prediction is then targeted again, this time with another set of opposite trading signals.

The cycle continues until the scammer is left with a small group of people who have received multiple "correct" predictions. These individuals now trust the scammer and are more likely to buy into whatever is being sold next—often, a paid membership to an "exclusive" trading group.

Once payment is made, the scammer vanishes, leaving you with a lighter wallet and a tough lesson learned.

So, how can you protect yourself from trading signal scams?

Firstly, be skeptical of unsolicited trading signals, especially those that promise guaranteed returns. Remember, if it sounds too good to be true, it probably is.

Secondly, do your due diligence. Research the source of the trading signals and look for reviews or testimonials. A credible trading signal provider will have a track record that you can verify.

Lastly, never invest more than you can afford to lose. Scammers prey on greed and the fear of missing out. Keep your emotions in check and stick to your investment strategy.



You Need to Pay Taxes to Us to Get Your Funds Back


Imagine this: You've just made a handsome profit on a crypto trade. You're ready to cash out, but suddenly, you receive a message from your trading platform. They claim you need to pay taxes directly to them or the "international tax authority" to release your funds.

Hold on, something smells fishy.

This is a classic scam that preys on the fear and uncertainty surrounding crypto taxation. Scammers operating fake platforms will lock your funds and claim that you need to pay a tax fee to get them back.

The audacity, right? But it's a tactic that has fooled many.

Here's the kicker: Legitimate platforms will never ask you to pay taxes directly to them. Taxes on crypto gains are usually settled with your country's tax authority, not the trading platform itself.

So, how do you protect yourself?

First and foremost, do not pay any "taxes" to the platform. Instead, reach out to customer support to clarify the situation. If the platform is legitimate, they'll confirm that they don't collect taxes in this manner.

Next, consult with a tax professional familiar with cryptocurrency. They can guide you on how to properly report your gains and pay any taxes owed, all through official channels.


Help Us Keep the Crypto Community Safe


Have you encountered a crypto scam that we haven't covered in this article? We'd love to hear from you. Please email the details to [email protected] so we can update our list and continue to educate the community. Your input is invaluable in making the crypto space safer for everyone.


    Facebook share button

    Ready to get your tax report?

    To get started, simply sync your wallet and exchanges.