Cryptocurrency fraud totaled $5.6 billion in reported losses in 2025 according to the FBI, making it the highest-loss category of investment fraud for the third consecutive year. The combination of irreversible transactions, pseudonymous wallets, and public hype creates a perfect environment for scammers. This guide covers every major crypto scam type active in 2026 and how to protect yourself.
Pig Butchering (Romance + Investment Scams)
The most devastating crypto scam by dollar amount is "pig butchering" — a term from the Chinese phrase "sha zhu pan" meaning to fatten a pig before slaughter. Victims lost an average of $178,000 each in 2025.
How It Works
- Initial contact: A stranger reaches out on a dating app, LinkedIn, WhatsApp, or via a "wrong number" text. They are attractive, successful, and interested in you.
- Building trust: Over weeks or months, they develop a genuine-feeling relationship. They share personal stories, photos, video calls (sometimes using deepfake technology).
- The introduction: They casually mention their success with crypto investing. They show screenshots of enormous gains on a trading platform.
- Small investment: They encourage you to invest a small amount — say $500 — on a specific platform. You see your investment "grow" on the platform's dashboard.
- Escalation: Encouraged by fake gains, you invest more. $5,000, then $20,000, then your savings. The platform dashboard shows impressive returns.
- The slaughter: When you try to withdraw, the platform demands "tax payments," "verification fees," or "anti-money laundering deposits." No matter how much you pay, you never get your money back. The platform was fake. Your crypto went directly to the scammer's wallet.
Red Flags
- Unsolicited contact from an attractive stranger who quickly steers conversation toward investments
- Guaranteed returns or "risk-free" crypto trading
- A trading platform you have never heard of
- Being asked to download a specific app or use a specific website to trade
- Inability to withdraw funds or requirements to deposit more before withdrawal
Received an investment offer?
Paste it here — we detect pump-and-dump, Ponzi, and fake return scams.
Free · No signup required · Cmd+Enter to scan
Fake Exchanges and Trading Platforms
These platforms look professional — polished UI, real-time price charts, customer support chat. But they are entirely fabricated. Your deposits go directly to the scammer. The numbers on your dashboard are fictional.
How to verify an exchange is real:
- Check if it is registered with FinCEN as a Money Services Business
- Look for it on CoinGecko or CoinMarketCap's exchange listings
- Search "[exchange name] scam" and read reviews on independent forums
- Stick to well-established exchanges: Coinbase, Kraken, Gemini, Binance (where legally available)
- Use IsThisAScam.to to check any exchange URL before connecting a wallet or depositing funds
Rug Pulls and Token Scams
A rug pull occurs when developers of a new cryptocurrency or DeFi project drain all liquidity and disappear. The token becomes worthless overnight.
In January 2026, a token called "SafeYieldAI" promoted by influencers on X (Twitter) raised $12 million in a presale. The smart contract contained a hidden function that allowed the deployer to withdraw all funds. Within 72 hours of launch, the liquidity pool was drained, and the token price dropped 99.8%.
Protecting Against Rug Pulls
- Audit the smart contract. Has it been audited by a reputable firm like CertiK, OpenZeppelin, or Trail of Bits? If not, proceed with extreme caution.
- Check liquidity lock. Is the liquidity locked, and for how long? Unlocked liquidity means developers can pull it at any time.
- Examine the team. Anonymous teams are higher risk. Doxxed teams with verifiable professional histories are somewhat safer, though not guaranteed.
- Be skeptical of influencer promotions. Many crypto influencers are paid to promote tokens. Disclosure requirements are poorly enforced.
Phishing Attacks on Wallet Users
Crypto phishing takes several forms:
Fake Wallet Sites
Search engine ads for "MetaMask" or "Phantom wallet" sometimes lead to cloned websites that steal your seed phrase during setup. Always access wallet sites by typing the URL directly or using a bookmark.
Malicious Approval Transactions
A website asks you to connect your wallet and approve a transaction. The approval gives the scammer's contract unlimited access to drain specific tokens from your wallet. Always read transaction details before signing, and revoke unused approvals regularly through services like Revoke.cash.
Seed Phrase Phishing
No legitimate service, person, or application will ever ask for your seed phrase. Anyone asking for your 12 or 24-word recovery phrase is attempting to steal your funds. This includes people pretending to be wallet support on Discord, Telegram, or Twitter.
Ponzi and Pyramid Schemes
These promise fixed daily or weekly returns ("2% daily guaranteed"). Early investors are paid with money from later investors. The scheme collapses when new money stops flowing in.
"Deposit any amount and earn 2.5% daily, compounded. Our AI trading bot never loses." — Actual marketing copy from a crypto Ponzi scheme shut down by the SEC in March 2026.
No legitimate investment guarantees fixed daily returns. Any project making this claim is a Ponzi scheme, without exception.
Giveaway and Impersonation Scams
Scammers impersonate Elon Musk, Vitalik Buterin, or other public figures and promise to "double your crypto" if you send them Bitcoin or Ethereum first. These run on YouTube live streams (using deepfake video), hacked Twitter accounts, and fake websites.
The rule is simple: nobody is giving away free cryptocurrency. If you have to send crypto to receive crypto, it is a scam.
How to Protect Your Crypto
- Use a hardware wallet (Ledger, Trezor) for any significant holdings. This keeps your private keys offline.
- Never share your seed phrase with anyone, for any reason.
- Use established exchanges and verify URLs character by character.
- Enable all available security features: 2FA (preferably with an authenticator app, not SMS), withdrawal address whitelisting, and login notifications.
- Be deeply skeptical of guaranteed returns. Legitimate crypto investments carry significant risk.
- Check URLs and messages using IsThisAScam.to before interacting with unfamiliar platforms.
- Diversify. Never invest more than you can afford to lose entirely.
What to Do If You Have Been Scammed
Recovery of stolen crypto is difficult but not always impossible:
- Report to the FBI's IC3 at ic3.gov. The FBI has a dedicated Virtual Assets Unit that has recovered funds in some cases.
- Report to the FTC at ReportFraud.ftc.gov.
- Contact the exchange if funds were sent to an address on a centralized exchange. Some exchanges will freeze accounts under investigation.
- Document everything: wallet addresses, transaction hashes, screenshots of communications, website URLs.
- Be wary of "recovery services" that promise to get your crypto back for an upfront fee. Most are secondary scams targeting people who have already been victimized.
Received something suspicious? Check it now for free →