Course contents
Crypto Scam Patterns
Nearly every crypto scam runs one of three plays: phrase theft, unlock-fee payments, or a fake platform. The scripts, and the ten-minute test that kills them.
Nearly every crypto scam runs one of three plays: steal your seed phrase, get you to send funds to 'unlock' or 'verify' something, or pull you into a fake platform that shows profits it will never pay out. The costumes change weekly; the scripts don't. Learn the scripts and you can ignore the wardrobe.
Crypto attracts scammers for a structural reason: transactions are final. A tricked bank transfer can sometimes be recalled; a tricked crypto payment can't. That finality is why the same con artists who once ran phone scams now run wallet 'support' accounts, and why your skepticism has to arrive before your money moves.
One scam DM, dissected line by line
Real example, lightly cleaned up. You post publicly that a withdrawal is stuck. Minutes later a direct message arrives. Take it apart sentence by sentence.
- 'Hello, this is Mark from Support Team.' Real support doesn't initiate DMs. The scammer found you through your public complaint, seconds after you made it.
- 'We noticed a synchronization error affecting your wallet.' Vague technical language that explains nothing but sounds like it explains your exact problem.
- 'Your assets may be lost if not validated within 24 hours.' Manufactured urgency. A deadline exists to stop you from thinking or asking anyone.
- 'Please verify ownership through our secure portal below.' The link leads to a cloned site whose only real feature is a seed-phrase form.
- 'Do not share this process publicly for security reasons.' Isolation. Scams die in daylight, and the scammer knows it.
Five sentences, five tells: unsolicited contact, vague authority, urgency, a phrase request in disguise, and secrecy. You'll see the identical skeleton in fake exchange emails, fake airdrop sites, and fake job offers that pay in crypto. The 'portal' varies; the skeleton doesn't.
Run the ten-minute test on that DM and it collapses. Search the official site: there's no 'Mark', no synchronization-errors page, no validation portal. Contact real support through the app: they see nothing wrong with your wallet, because wallets don't 'desynchronize'. The scam's entire lifespan is the gap between your fear and your first independent check.
The other scripts in circulation
- Giveaway scams: 'send 1 coin, receive 2 back', usually via a hijacked celebrity or brand account. Nobody doubles money.
- 'Pig butchering': a friendly stranger from a dating app or wrong-number text builds trust for weeks, then coaches you onto a fake investment site where the dashboard climbs and withdrawals never come.
- Lookalike apps and sites: wallet or exchange clones one character off the real address, pushed through search ads.
- Recovery scams: after you've been scammed once, 'recovery agents' appear, offering to retrieve funds for an upfront fee. It's the same thief, back for seconds.
Notice the shared fuel: urgency plus a promised reward or a threatened loss. Every script needs you moving fast, because almost none survive ten minutes of calm verification. That's also why 'guaranteed returns' is a red flag in any form, investment site or unlicensed casino alike; a promise of certain profit is the fake-platform script wearing different graphics. If you play at crypto casinos, avoiding crypto scams walks through the casino-specific versions of these scripts. Slowness is your home-field advantage; use it.
Mistakes that keep victims coming
The costly mistakes are rarely stupidity; they're speed. Clicking the link in the message instead of typing the official address yourself. Trusting a profile because it has a logo and a checkmark. Believing that because you're careful, you're immune, which is exactly the confidence scammers rent for a few minutes. And staying silent out of embarrassment after a loss, which keeps the recovery-scam pipeline fed.
The defenses are boring on purpose. Type addresses by hand. Verify any alert through the platform's official site or app, never through the message that delivered the alert. Sleep on anything urgent; a legitimate opportunity survives a night, a scam usually doesn't. And talk about attempts openly, because every dissected scam DM inoculates the next reader. In the US, report scams to the FTC or the FBI's IC3; reports are what turn one person's loss into everyone else's warning. None of this requires technical skill, which is the good news: the defense against social engineering is social, not cryptographic.
Two sentences defeat most crypto scams: 'Nobody legitimate ever asks for my seed phrase' and 'Nobody legitimate guarantees returns.' The moment either rule is tested, you're talking to a thief, however friendly, official, or urgent they appear.
Frequently asked questions
How can I tell if a crypto support message is a scam?
Real support never initiates direct messages. Scam messages share the same skeleton: unsolicited contact, vague technical language like a 'synchronization error', a manufactured deadline, a link to a portal that is really a seed-phrase form, and a request to keep the process secret. If a message hits even one of these tells, verify it independently through the platform's official site or app before doing anything.
Why is it so hard to recover money lost to a crypto scam?
Crypto transactions are final. A tricked bank transfer can sometimes be recalled, but a tricked crypto payment cannot, which is exactly why scammers target crypto users. That finality means your skepticism has to arrive before your money moves, and it is why so-called recovery services that appear after a loss are themselves a follow-up scam rather than a genuine remedy.
What is a pig butchering scam in crypto?
Pig butchering is a long-game scam where a friendly stranger, often from a dating app or a wrong-number text, builds trust over weeks. They then coach you onto a fake investment site where the dashboard shows climbing profits but withdrawals never come. The displayed gains are fabricated; the platform's only purpose is to keep you depositing until you try to cash out.
Are crypto recovery agents legitimate?
No. Recovery scams target people who have already been scammed once: 'recovery agents' appear and offer to retrieve your lost funds for an upfront fee, but it is typically the same thief coming back for a second payment. Staying silent about a loss out of embarrassment is what keeps this pipeline fed, so talking openly about scam attempts protects both you and the next potential victim.
What is the quickest way to check whether a crypto offer or alert is real?
Give it ten minutes of calm verification. Type the platform's official address yourself instead of clicking the link, search the official site for the claimed issue, and contact real support through the app rather than through the message that raised the alarm. Sleep on anything urgent: a legitimate opportunity survives a night, while almost no scam survives independent checking, because scams rely entirely on speed.
What are the biggest red flags that a crypto platform is a scam?
Two rules defeat most crypto scams: nobody legitimate ever asks for your seed phrase, and nobody legitimate guarantees returns. Any promise of certain profit, whether from an investment site or an unlicensed casino, is the fake-platform script in different graphics. Add manufactured urgency and requests for secrecy, and you are almost certainly talking to a thief, no matter how official or friendly they appear.
Finished this lesson?
Mark it complete to track your progress.