How to Avoid Crypto Scams: The Cornerstone Safety Guide

Crypto's biggest risk for most people isn't the market — it's getting scammed out of their coins. The good news: almost every scam relies on the same few tricks, and a handful of simple habits will protect you from nearly all of them. This is the guide we wish every beginner read first.

How crypto scams actually work

Crypto is catnip to scammers for one structural reason above all: transactions are irreversible. There's no bank to call, no chargeback to file, no fraud department to claw a payment back. Once coins leave your wallet, they're gone — the way cash handed to a stranger on the street is gone. That single fact shapes the entire scam economy around crypto, and it's why fraud here is so much more punishing than a dodgy card payment you can dispute.

Once you see that, the dizzying variety of scams collapses into something far simpler. Strip away the costumes — the fake support agent, the friendly stranger, the too-good giveaway — and almost every scam is trying to get you to do one of just two things: reveal your seed phrase, or willingly approve a transaction that sends your funds away. That's it. Everything else is set dressing. Learn to spot those two underlying goals and the disguises stop working, because you stop reacting to the story and start asking, 'wait — is this trying to get my phrase, or get me to sign something?'

The most common scams to recognise

These are the big ones you'll actually run into. They're listed not so you can memorise every variation — scammers invent new ones constantly — but so you start to feel the family resemblance between them. Notice how nearly all of them end with either your seed phrase or your signature:

• Fake support / seed-phrase phishing — a 'support agent', usually appearing in a DM or a fake pop-up, asks you to 'verify', 'sync' or 'validate' your wallet by entering your recovery phrase. Real support never, ever needs it. This is the most common way people lose everything.
• Phishing sites — a near-perfect copy of a real exchange or wallet, often reached through a sponsored search ad or a link in an email. You log in as normal and hand your credentials straight to the thief without realising.
• Giveaway / doubling scams — 'send 1 ETH and we'll send 2 back', frequently dressed up with a fake celebrity video or a hacked account. The money you send never returns, because that was always the entire point.
• Romance / 'pig butchering' — a warm, attentive stranger builds genuine-feeling trust over weeks, then gently steers you toward a fake investment app showing fake profits, until the day you try to withdraw and can't. These are patient and cruel.
• Rug pulls and fake tokens — a shiny new coin or app that hoovers up deposits and then vanishes, developers and all. See how to spot a rug pull for the warning signs.
• Malicious approvals / drainers — a slick site asks you to 'connect wallet' and sign a transaction that quietly grants it permission to move your tokens whenever it likes, draining you minutes or weeks later.

Red flags that appear again and again

Here's the liberating bit: you rarely need to correctly identify which exact scam you're facing. You just need to notice the warning signs they nearly all share. Scams are like a magic trick — endlessly varied on the surface, but built from the same few moves underneath. Spot the move and the trick falls apart:

If you remember only one line from this whole guide, make it this: urgency plus a request to act is the universal fingerprint of a scam. Genuine services and genuine opportunities can wait an hour while you check. Scams can't, because checking is exactly what kills them — so they manufacture panic to stop you doing it.

The habits that protect you

You don't need to be a security expert to stay safe — you need a few stubborn habits that you follow even when it's inconvenient, especially when it's inconvenient. These six between them shut down the overwhelming majority of attacks:

1. Treat your seed phrase as unshareable — full stop. No 'verification', no exception, no matter who's asking or how official it looks.
2. Reach websites by typing the address yourself or using a saved bookmark, never via search ads, emails, or links in DMs. Fake sites buy ads to sit right at the top of the results.
3. Slow down the instant something feels urgent. Scammers manufacture panic on purpose; legitimate services give you all the time you need.
4. Use a hardware wallet for any meaningful amount, so even a convincing phishing site can't move your funds without you physically confirming on the device.
5. Keep a separate 'burner' wallet holding only small amounts for trying new apps, and review and revoke old token approvals every so often.
6. Verify any surprising message through the official app or website you already trust and have used before — never through the link you were just sent.

If you think you've been scammed

First, breathe — and don't let shame stop you acting, because hesitation is exactly what the scammer is counting on. These frauds are professionally designed to fool smart, careful people, so being caught says nothing about you and everything about them. The priority now is to protect whatever is left and to avoid the second trap waiting for victims: 'recovery agents' who promise to get your money back for an upfront fee. That promise is itself a scam, targeting the same people a second time. Move quickly through these steps:

• If you entered your seed phrase anywhere at all, assume the entire wallet is compromised. Create a brand-new wallet with a fresh phrase and move any remaining — and all future — funds there.
• If you approved or signed something on a malicious site, revoke its token approvals from a wallet interface you trust, to cut off its permission to move your funds.
• Change your passwords and switch on two-factor authentication on every exchange account, in case your login details were exposed too.
• Report it to your local authorities and the platform involved — and firmly ignore anyone who slides in offering to 'recover' your funds for a payment. That is the follow-on scam, every time.

Frequently asked questions