Crypto moves fast, and that speed is exactly what scammers rely on. The good news is that most scams follow repeatable patterns. If you learn the red flags, you can spot problems early and keep your funds safe.
1) “Guaranteed Returns” And Unrealistic Yield Promises
Scammers love simple, confident claims like “2% per day” or “risk-free passive income.” In crypto, high returns always come with high risk, and anyone claiming otherwise is usually selling a fantasy.
How to spot it early
Look for language that speaks in certainty rather than probability, paired with vague explanations of where the yield comes from. Another early red flag is being discouraged from asking questions, or being overwhelmed with jargon instead of getting a clear, simple answer.
What to do
Ask directly where the yield comes from and who is paying it. If the explanation is vague, circular, or changes when challenged, treat that as your cue to step away.
2) Fake Giveaways And “Send 1, Get 2 Back” Scams
These show up on social media, in comment sections, or via impersonated accounts. The hook is urgency and authority: “limited time,” “official event,” “verified account.”
How to spot it early
If you are told to send funds first to “activate” a reward, that is the core tell. These scams also commonly post a wallet address publicly and use an account name that is almost—but not exactly—the real brand or influencer.
What to do
Treat any “send crypto to receive more crypto” offer as a scam by default, and only trust announcements you can verify on the project’s official website and its genuinely official channels.
3) Impersonation Scams (Support, Influencers, And ‘Admins’)
Scammers impersonate exchange support, wallet support, project admins, or even people you know. They will often move the conversation to DMs to isolate you.
How to spot it early
Be suspicious when “support” messages you first, especially if they quickly ask for a seed phrase, private key, 2FA codes, or remote access. Another major warning sign is being pushed to install software or connect your wallet through a link they provide.
What to do
Legit support will never ask for your seed phrase or private key. End the conversation and contact support only through the exchange or wallet’s official website or app.
4) Phishing Links And Fake Websites
Phishing is one of the most common ways people lose crypto. The site looks identical to a real exchange, wallet, or dApp, but it is designed to steal logins or trick you into signing a malicious transaction.
How to spot it early
Check the URL carefully for small changes, extra words, or odd hyphens, and be extra cautious if you arrived via an ad, a DM, or an email link. Repeated prompts to “reconnect” your wallet can also be a sign something is trying to force a risky signature or approval.
What to do
Bookmark official sites and use those bookmarks to navigate, rather than clicking links. A password manager can help by refusing to autofill on lookalike domains, and you should always double-check the domain before logging in or connecting your wallet.
5) Rug Pulls (Projects That Vanish After Raising Money)
A rug pull is when creators hype a token, attract buyers, then drain liquidity or abandon the project.
How to spot it early
Early signals include a team that is anonymous without good reason or whose details cannot be verified, plus sudden influencer-heavy marketing that is light on substance. Also pay attention to token distribution and liquidity: if supply is concentrated in a few wallets or liquidity is not meaningfully locked, the risk increases.
What to do
Check whether liquidity is locked and for how long, and look for credible audits while remembering that an audit is not a guarantee of safety. Most importantly, avoid buying purely on hype—read the tokenomics and understand how supply, unlocks, and incentives actually work.
A Simple Safety Checklist Before You Click, Connect, Or Send
Verify the source by checking the official website, official social accounts, and the exact domain. Never share secrets like a seed phrase, private key, or 2FA codes, and deliberately slow down when you feel rushed—urgency is a scammer’s best tool. Use layers of protection (like a hardware wallet, a separate dApp wallet, and withdrawal allowlists where available), and treat links as hostile by relying on bookmarks and carefully typed domains.
Final Thoughts
Crypto can be empowering, but self-custody means self-responsibility. If you build a few habits, like verifying domains, ignoring guaranteed-return pitches, and keeping your seed phrase offline, you will avoid most scams long before they reach your wallet.
Written by Niall O’Riordan Money