How to avoid crypto scams
Almost every crypto scam reduces to one of two things: getting you to reveal your recovery phrase, or getting you to send funds voluntarily. Two rules stop nearly all of them. Never give your recovery phrase to anyone, for any reason. And treat anyone who contacts you first about your crypto as a scammer until proven otherwise — because they almost always are.
Below are the patterns, so you recognise them when the approach is polished rather than obvious.
The uncomfortable part: crypto transactions are final. There is no chargeback, no fraud department, no reversal. Prevention is not the best defence — it is essentially the only one.
The recovery phrase, and why it is everything
Your recovery phrase regenerates your private keys. Anyone who has it controls your funds completely, from anywhere, immediately. Understanding this makes most scams transparent.
No legitimate party ever needs it. Not an exchange, not a wallet maker, not support, not a developer, not a security team calling about suspicious activity. There is no scenario — no verification, no migration, no recovery, no airdrop claim — where a real company asks for it.
So the rule is unconditional rather than a judgement call: if something asks for your recovery phrase, it is stealing from you. No exceptions to weigh, no context that makes it fine.
The same goes for typing it into a website, an app, or a support form. It lives on paper, offline, and nowhere else — covered in what a cold wallet is.
The patterns worth recognising
Fake support
You post a problem in a public forum or social platform. Within minutes someone helpful messages you privately, presenting as official support. They walk you through a "verification" that ends with your phrase or a wallet connection.
Real support does not message you first, and does not move the conversation to a private channel. Go to the company's official site yourself and open a ticket there.
Fake apps and sites
Convincing clones of real wallets and exchanges, distributed through ads, search results and even app stores. You enter your phrase or credentials into what looks exactly right.
Type addresses manually or use your own bookmarks. Be especially careful with sponsored search results — paid placements above the real site are a known distribution route.
Giveaways and doubling
"Send 1 ETH, receive 2 back." Often using hijacked or impersonated accounts of well-known figures, sometimes with fake livestreams and forged comment sections.
Nobody doubles your money for free. This scam persists because it works on urgency, not on logic.
Romance and long-play investment scams
Someone builds a relationship over weeks or months — dating apps, social media, sometimes a "wrong number" text that turns friendly. Eventually they mention an investment platform doing well for them.
The platform is fake but functional-looking. Your balance rises on screen. Small withdrawals may even succeed, to build confidence. When you try to withdraw meaningfully, there are fees, then taxes, then more fees. The money was never there.
The tell is structural rather than emotional: someone you met online eventually steering you toward an investment platform. That sequence is the scam, however genuine the relationship feels.
Malicious approvals
You connect your wallet to a site to claim an airdrop or mint something. The transaction you approve grants permission to move your tokens, and they are drained afterwards.
This one catches experienced people, because a hardware wallet signs whatever you confirm. Read what the device screen actually says before approving. Unknown airdrops arriving unprompted are a common entry point.
Pig butchering
The industrialised version of the long-play scam, run by organised operations with scripts and teams. It combines the relationship build-up with a fake platform showing fabricated returns, and it targets people methodically over months.
Recovery scams
After you lose money, someone contacts you offering to recover it for an upfront fee. They found you because victim lists circulate.
This is the cruellest pattern, because it targets people already hurt. Treat any unsolicited recovery offer as a second scam.
Practical defences
- Phrase on paper, never digital. No photos, no cloud notes, no password manager, no typing it anywhere.
- Bookmark the real sites and use only those bookmarks. Never reach an exchange through an ad or a message.
- Authenticator app, not SMS, for two-factor. SIM swapping is a real attack, not a theoretical one.
- Assume every unsolicited contact is a scam. Support, giveaways, opportunities, warnings about your account — all of it.
- Test with a small amount the first time you send to a new address.
- Review wallet approvals periodically and revoke ones you no longer use.
- Buy hardware wallets only from the manufacturer, never second-hand or from a marketplace. A tampered device is a scam that arrives in a box.
The signals that should stop you cold
- Anyone asking for your recovery phrase or private key
- Guaranteed returns, or returns quoted as a fixed percentage per day or week
- Urgency — limited windows, expiring offers, act-now framing
- Someone you met online introducing an investment platform
- A withdrawal that requires paying a fee first
- Support that contacted you rather than the reverse
- Being told not to discuss it with anyone
The last one deserves attention. Isolation is deliberate — scams that survive scrutiny by friends and family are rare, so the script discourages you from mentioning it. If you are being told to keep something quiet, tell someone immediately.
If it has already happened
Recovery is unlikely, but the order matters:
- Move remaining funds to a new wallet with a fresh recovery phrase, if the compromised one still holds anything.
- Revoke wallet approvals connected to the malicious site.
- Report to the exchange if funds moved to a centralised platform — fast reporting occasionally results in a freeze.
- Report to authorities. In the US, the FBI's IC3 and the FTC take crypto fraud reports.
- Ignore anyone who contacts you offering recovery. That is the follow-up scam.
- Record it for tax purposes and speak to a tax professional about how theft losses are treated in your situation — see crypto taxes in the US.
One more thing worth saying plainly: being scammed is not a sign that you are foolish. These operations are professional, scripted, and practised on thousands of people. Shame is what stops victims from reporting and warning others, and it is the thing scammers rely on most.
Common questions
Will a legitimate company ever ask for my recovery phrase?
Never. There is no scenario where a real company needs it.
Can I get my crypto back after a scam?
Usually not — transactions are final. If funds reached a centralised exchange, fast reporting gives a small chance of a freeze.
Are recovery services legitimate?
Almost never. Unsolicited recovery offers are a follow-up scam targeting people who already lost money.
Is a hardware wallet enough to protect me?
It protects your keys, not your judgement. If you approve a malicious transaction, the device signs it. It is a strong defence against remote theft, not against being deceived.