7 Common Crypto Scams and How to Avoid Them
Crypto scams work because they target haste and trust in tools that feel technical. Most people lose money by clicking a link or sending coins before they check basic details. Here are the seven that appear most often, grouped by how they reach you, plus the exact steps that block them.
Phishing Sites and Emails
Attackers send messages that look like they come from a wallet provider or exchange. The link leads to a page that copies the real login screen and records your seed phrase or password. One user lost 4 ETH after entering details on a fake MetaMask site reached through an urgent email about a “security update.”
- Always type the domain yourself instead of clicking any link.
- Check the URL character by character for swapped letters such as metamaskk.com.
- Never enter a seed phrase on any website that asks for it.
Fake Giveaways and Airdrops
Posts on X or Telegram promise free tokens if you send a small amount first. The wallet address they provide belongs to the scammer. These run in cycles around major token launches and often use verified-looking accounts that have been compromised.
Real projects do not require you to send coins to receive an airdrop. If the message demands a transaction before you receive anything, close it.
Rug Pulls in New DeFi Projects
Developers launch a token, promote liquidity pools, then pull the funds once enough people buy in. Liquidity vanishes and the token price drops to zero within hours. This happened to several tokens on Uniswap in 2023 where the deployer wallet held the majority of supply.
- Review the contract on a scanner before buying and confirm the liquidity is locked or burned.
- Check whether the team wallet can mint more tokens at will.
- Start with very small test amounts on any new pool.
Impersonation on Social Media and Support Channels
Scammers create accounts that copy exchange or project support teams. They message you after you post about a transaction issue and ask for your transaction ID or seed phrase to “help.” The conversation moves to a private chat where they request remote access or direct coin transfers.
Legitimate support never asks for private keys. End any chat that does and report the account on the platform.
Malware Disguised as Wallets or Tools
Downloads labeled as “updated wallet apps” or “trading bots” install keyloggers that capture your recovery phrase when you enter it. One common vector is a fake browser extension that looks like a legitimate hardware wallet connector.
Only install software from the official project site or app store. Verify the extension ID against the vendor’s documentation before adding it to your browser.