9 min read Updated 2026-08-14 CryptoSumo guide

How to Spot a Crypto Scam: The 12 Red Flags

AI deepfakes, drainers, pig-butchering, fake exchanges — the modern scam playbook and the red flags that expose every one of them before you lose money.

Scams have professionalised. AI voices clone CEOs. Fake trading dashboards show profits that don't exist. Fake exchanges process withdrawals right up until they don't. But every scam — no matter how sophisticated the packaging — trips over the same red flags.

The 12 red flags

  1. They contacted you first. Real platforms never DM you with opportunities, warnings or support. Incoming contact about your money is the scam's opening move.
  2. Guaranteed or unrealistic returns. Fixed daily percentages, 'risk-free arbitrage', doubling your deposit. If it were real, they wouldn't need you.
  3. Urgency and pressure. 'Limited slots', countdown timers, 'act now or lose it'. Pressure exists to stop you thinking.
  4. They ask for your seed phrase, password or remote access. No legitimate service has ever asked. This red flag alone is sufficient — walk away.
  5. Celebrity or 'expert' endorsements. Deepfakes make anyone say anything. Verify through official channels, never through the video you were sent.
  6. Profits you can see but not withdraw. Fake dashboards are cheap. If withdrawals require 'tax fees', 'gas deposits' or 'VIP unlock payments' — it was always a scam.
  7. Romance plus investment. 'Pig-butchering' builds trust for weeks before the investment pitch. Someone you met online combining love and money talk is running a script.
  8. Unsolicited NFTs, tokens or airdrops. Airdropped assets are often drainer bait: interacting with them can trigger malicious signatures.
  9. Typo domains and lookalike sites. Check the URL character by character. Bookmark real domains and only use the bookmarks.
  10. 'Vote', 'claim' or 'verify' pages asking you to connect a wallet. Connecting costs nothing — but the signature that follows can drain everything. Read every signature prompt.
  11. Crypto-only payments or ATM instructions. Banks, police and tax offices don't demand Bitcoin ATM payments. Scammers do, because it's irreversible.
  12. Job offers requiring you to pay or 'process' crypto. Upfront 'training fees', buying crypto to 'activate tasks', receiving funds to forward — these are money-mule traps.

The five most common scams right now

  • Wallet drainers: a fake mint, airdrop or 'token checker' gets you to sign an approval that transfers your assets. Defence: transaction simulation + checking approvals.
  • Fake exchanges and trading platforms: the site looks real, shows profits, and accepts deposits forever. Defence: only use exchanges from a curated list you trust, and test small withdrawals early.
  • Fake support: 'support agents' find people posting about problems and offer to help — for a seed phrase or a 'verification deposit'. Defence: support never DMs first.
  • Impersonation and deepfakes: cloned YouTube channels, hijacked accounts, AI CEOs. Defence: verify every claim through official websites you navigate to yourself.
  • Recovery scams: after you lose funds, 'recovery experts' offer to retrieve them for an upfront fee. Defence: nobody can reverse blockchain transactions. Nobody.

The three-question test

Before sending anything anywhere, answer honestly:

  • Did this opportunity contact me, or did I seek it out? If it contacted you, treat it as a scam until proven otherwise.
  • Would this survive me sleeping on it? Scams die when you wait 24 hours and ask someone you trust.
  • What does the other side get? If you can't identify how the counterparty profits from your success, you're the product — or the exit liquidity.

Tip: If you suspect a scam, report it: the platform involved, your local authorities, and community databases like Chainabuse. Reports protect the next person — which might be someone you know.

Frequently asked questions

Is this guide up to date?
Last reviewed 2026-08-14. Crypto changes fast — we re-verify guides regularly. If you spot something outdated, tell us via the contact page.
Where should I go next?
Follow the links in the guide, browse the full directory, or start with the security checklist — it's the most important read on this site.