Spotting crypto scams before the story becomes convincing

Ignore the costume; inspect the request

A scam may arrive as investment coaching, a romantic relationship, a security alert, a job, a tax problem, or asset recovery. The surface changes because the attacker is testing which authority or emotion will move you. The request underneath is more stable: act quickly, keep the conversation private, install or visit something, then send crypto or reveal access.

The FTC warns that government agencies and legitimate businesses do not unexpectedly demand cryptocurrency to protect money or solve an account problem. Guaranteed returns and “risk-free” opportunities are also reliable reasons to leave.

Break the attacker's channel

Do not verify a message by replying to it. Find the organization's official number or website yourself and start a new conversation. Ask a trusted person who is not invested in the story to read the request. Time away from the message is a security control.

• Unexpected contact plus urgency: stop.
• Guaranteed profit or secret method: leave.
• A fee to unlock withdrawals or recover funds: do not pay.
• Remote-access software or screen sharing: refuse.
• Recovery phrase, private key, or one-time code: never disclose.

If money already moved

Stop sending. Scammers often invent taxes, verification deposits, or recovery fees after the first payment. Preserve addresses, transaction hashes, messages, usernames, receipts, and timestamps. Report the account to the platform and the fraud to the appropriate authority in your country.

Be alert for follow-up “recovery specialists.” Victim lists circulate, and a second scam may promise to retrieve funds for an upfront payment. Legitimate investigations do not require your seed phrase.