How to avoid crypto scams and phishing
- Most crypto scams rely on urgency, secrecy, or an offer that sounds too good to be true.
- No legitimate platform will ever ask for your seed phrase or private key.
- Double-check URLs, verify contract addresses, and be skeptical of unsolicited contact.
- If something pressures you to act immediately, that pressure is itself a warning sign.
Crypto scams take many shapes, but nearly all of them lean on the same handful of psychological tactics. Recognizing the pattern is more useful than memorizing every specific scam, since new variations appear constantly.
The recurring patterns
Urgency
"Act now or lose this opportunity" is one of the oldest tricks in the book, and it works because it discourages you from stopping to think or verify. Legitimate opportunities — a real airdrop, a real investment, a real support request — rarely require an instant decision under pressure.
Unsolicited contact
Be cautious of messages you didn't ask for — a "support agent" reaching out first, a stranger offering investment advice, or someone claiming to represent a project you follow. Real support teams generally respond to tickets you open; they don't cold-message you first.
Requests for your private key or seed phrase
This is close to a universal rule: no legitimate wallet, exchange, or support team will ever ask you to type your seed phrase or private key anywhere, for any reason. Anyone asking for it — however plausible the story — is trying to steal your funds.
Guaranteed or unrealistic returns
Any offer promising guaranteed profits, "risk-free" returns, or doubling your money in a short window is a red flag. All investing carries risk, and no legitimate platform can guarantee returns — those claims exist specifically to bypass your skepticism.
Common scam formats
- Phishing sites that closely mimic a real exchange or wallet's login page, designed to capture your credentials or seed phrase the moment you enter them.
- Fake support accounts on social platforms that message you first after you post publicly about a problem, offering to "help" via a link or by asking for your seed phrase.
- Rug pulls, where a new token project attracts investment and then the creators withdraw all liquidity, leaving the token worthless.
- Impersonation of known public figures or projects, often via ads or comments, promoting a fake giveaway that asks you to send crypto first to "verify" your wallet.
Practical habits that help
Always navigate to exchanges and wallets through your own bookmarks, not links from search ads, DMs, or emails.
Before interacting with a token contract, check the address against the project's official channels, not a link someone sent you.
Keeping significant funds in cold storage limits the damage even if one device or account is compromised — see our wallets guide.
Scammers rely on you not pausing to verify. A five-minute delay to double-check costs you nothing; a rushed decision can cost everything.
If you think you've been scammed
Stop interacting with the scammer immediately, don't send any further funds "to recover" the loss (a common follow-up scam), and report the incident to the platform involved and your local authorities. Unfortunately, most crypto transactions can't be reversed once confirmed — which is exactly why prevention matters more here than with traditional payment methods.