Back to Blog

Security

How to Avoid Crypto Scammers

Scams rely on urgency and brand cloning. Bookmark official links, use hardware security, and never share keys.

Visual guideStop the scam before money or access moves
Stop the scam before money or access movesA security decision flow covering urgency, independent identity checks, official URLs, secret protection, and reporting.
How to read itScams rely on urgency and borrowed trust. Pause, verify through an independent official channel, type the known URL yourself, never share seed phrases or codes, and report the attempt.

Crypto scams usually rely on urgency, impersonation, and a request you cannot undo. The safest habit is simple: slow down, independently verify, and never let a direct message decide what happens to your money or wallet.

Recognize the pressure pattern

“Act now,” guaranteed returns, secret access, recovery offers, and support agents who message first are red flags. Fraudsters use fake screenshots, stolen logos, and familiar names to make a rushed decision feel normal. The CFTC's digital-asset fraud guidance describes common schemes and warning signs.

Never share seed phrases or private keys

No legitimate exchange, wallet provider, or educator needs your recovery phrase or private key. Do not paste it into a website, form, chat, or “verification” tool. If somebody requests it, stop the conversation. A transaction signature can also be risky, so read the wallet prompt and reject anything you do not understand.

Reach support independently

Do not use search ads, DMs, or links in surprise messages to find support. Use a bookmark you created, an official app, or an address typed carefully from a trusted source. Check spelling character by character, including lookalike letters and extra subdomains.

Protect accounts in layers

Use a password manager to create unique passwords, enable strong multi-factor authentication, and keep recovery codes offline. Consider a hardware wallet for assets you do not actively trade, while remembering that hardware does not make unsafe signing safe. Keep software and devices updated.

Treat giveaways and copy trades carefully

Nobody can responsibly promise fixed daily returns. Do not send crypto to “double” it, pay an advance fee to unlock a withdrawal, or let a stranger remote into your device. The Investor.gov fraud resources explain how investment fraud often uses pressure and unrealistic claims.

Pause before any irreversible action

Use this short check before sending funds or connecting a wallet:

  • Did I navigate to this site myself from a verified bookmark?
  • Is anyone asking for a secret, remote access, or urgent transfer?
  • Can I confirm the request through an official channel I found independently?
  • Do I understand the exact address, network, and transaction approval?

If you think you were targeted

Stop interacting, preserve screenshots and transaction details, change compromised credentials from a clean device, and contact the real platform through its official route. Report fraud to the relevant authorities in your jurisdiction. Do not pay a “recovery specialist” who contacts you unexpectedly; recovery scams often target people twice.

Before acting, take ten minutes away from the message and ask a trusted person to read the request without its urgency. A legitimate offer will still exist after an independent check; a scam often depends on preventing that check. Preserve a clear record of what occurred, but do not expect a report alone to recover funds.

Keep a small security routine

Once a month, review account sessions, withdrawal addresses, recovery methods, and software updates. Remove apps and browser extensions you no longer trust. Test that you can find official support without using a search result. Small checks are easier than responding after an incident.

Be equally sceptical of “education” that asks for custody of your funds or claims a bot cannot lose. The common trading mistakes guide is a reminder that urgency and overconfidence also damage decisions before a scam is involved.

Verify before sharing information

Screenshots can expose balances, wallet addresses, email addresses, and recovery details. Share only what is necessary when seeking help, and redact identifiers where possible. A genuine support request can usually be handled without revealing secrets or granting remote device control. A written trading plan can include a security pause rule for irreversible transfers.

If a transaction is already pending, do not assume a person in a chat can cancel it. Follow the official wallet or exchange instructions and document the time, address, network, and transaction identifier. Be wary of anyone who asks for an upfront payment or additional signature to “recover” assets. Official reports can help others identify a pattern, but they cannot guarantee funds will be returned.