How to Identify and Report Cryptocurrency Scammers

Cryptocurrency scams can arrive as investment offers, fake support messages, romance or friendship, job opportunities, giveaways, or warnings that your wallet is at risk. The common thread is an attempt to make you send funds, reveal account credentials, or approve access to your crypto.

A suspicious message is not proof by itself, and a polished website or convincing profile does not establish that an offer is legitimate. Look for several warning signs together and verify claims independently before taking action. Do not use contact details or links supplied by the person making the claim; find the organization’s official app or contact information separately.

Take extra care when someone asks you to act immediately, keep a conversation secret, or move a discussion to a private channel. Scammers often build trust over time before asking for money. They may also show fabricated account balances or small early “profits” to encourage a larger deposit.

If you are unsure, pause. Do not connect a wallet, sign a transaction, share a recovery phrase, or send a test payment just to see what happens. Ask a trusted person who is not involved to review the request, and verify any investment, exchange, or support claim through an independent channel.

Common red flags include claims of guaranteed returns, unusually high profits with little or no risk, and pressure to deposit before an offer expires. Legitimate investments carry risk; no stranger can guarantee that a token or trading strategy will make money. Be especially cautious if you are told to pay a tax, verification charge, or withdrawal fee before you can access supposed profits.

Watch for impersonation. A scammer may copy the name, logo, photo, or writing style of an exchange, public figure, project, friend, or support agent. Check the exact account handle and website spelling, but do not treat a familiar-looking profile as verification. Unexpected messages asking for your password, one-time code, private key, or wallet recovery phrase are a serious warning sign.

Other warning signs include:

• A stranger steering you to an unfamiliar exchange or wallet app.
• Requests to install remote-access software or share your screen.
• A “support agent” contacting you first and asking you to connect your wallet.
• A job or giveaway that requires an upfront crypto payment.
• A token sale with unclear ownership, no reliable documentation, or intense pressure to buy immediately.
• A request to approve a wallet transaction you do not understand.

Any single sign deserves caution. Multiple signs, especially a demand for secrecy or payment, are reason to stop and verify before proceeding.

Investment and trading scams often show fake gains in an app or dashboard, then block withdrawals unless you pay an additional fee. Romance and “pig butchering” scams can begin with ordinary conversation and grow into a trusted relationship before the other person introduces a trading opportunity. A long conversation or apparent friendship does not make a platform or investment safe.

Impersonation scams use fake accounts, cloned websites, or lookalike email addresses to pose as a real company, employee, public figure, or government agency. Fake support agents may appear in social media replies or direct messages after you ask for help. Real support should not need your recovery phrase or private key.

Wallet scams may ask you to connect to a site, sign a message, or approve a token allowance. Some approvals let a contract move tokens from your wallet; a harmless-looking signature can also authorize an action you did not intend. Read wallet prompts carefully and stop if the site, recipient, network, or requested permission is unclear.

Fake recovery services often target people after a loss. They may claim to trace, hack, or retrieve funds for an advance payment, then demand more. No one can promise that on-chain funds will be recovered. Treat unsolicited offers of help as another possible scam, and do not give a purported investigator access to your wallet or computer.

If you sent funds or exposed account access, act quickly, but do not panic or make rushed payments. Stop replying to the suspected scammer. Do not pay a supposed tax, unlock fee, or recovery charge, and do not follow new instructions to “secure” your funds by moving them to an address someone provides.

If you shared a password, change it from a trusted device and enable multifactor authentication. Secure the email account and phone number used to access your exchange, since they may be used to reset credentials. Contact the exchange through its official app or independently verified support channel and ask it to secure your account. If your identity documents or financial details were exposed, follow your country’s guidance for identity theft and contact affected financial institutions.

If you shared a wallet recovery phrase or private key, treat that wallet as compromised. From a clean device, create a new wallet with a new recovery phrase and move any remaining assets you control to it. Never enter the old phrase into a website or share the new one. If you only connected a wallet or approved a transaction, review and revoke risky token permissions using a trusted wallet feature or reputable tool, taking care to verify the correct network and contract.

Record what happened as you contain the risk. If you are uncertain which steps are safe, contact your wallet or exchange provider through an official channel rather than asking a stranger online.

Save evidence before deleting messages, closing accounts, or blocking the person. Keep original emails and messages where possible, and take screenshots that show the account name, date, and full context. Preserve transaction records from your wallet or exchange, including transaction IDs (also called hashes), sending and receiving addresses, network, asset, amount, and approximate time.

Also record the website or app name, the exact account handle, phone number or email address used, and how you first encountered the person. Save receipts, bank transfers, exchange deposit records, and any instructions or promises that influenced your decision. If a website is still accessible, note its address without revisiting it or connecting your wallet. Do not download files or install software to gather evidence.

Keep a clear timeline: when contact began, what was requested, what you sent or approved, when you noticed the problem, and what steps you took afterward. Distinguish what you know from what you suspect. For example, an address receiving your funds is evidence of a transaction, but it may not identify the person controlling that address.

Store copies securely, and do not post private information publicly. Never include passwords, one-time codes, recovery phrases, private keys, or unredacted identity documents in a public post. Authorities or providers may ask for relevant records through a secure reporting process.

Report the incident to the exchange or wallet provider involved, using its official app or independently verified support channel. If funds left an exchange account, provide the transaction details and ask whether the account can be secured or the receiving address flagged. A provider may have limited options once a transaction is confirmed, but prompt reporting can still help it investigate or identify related activity.

Also report the scam to the service where the contact or advertisement appeared, such as a social platform, messaging app, dating service, marketplace, or app store. Include the relevant profile, post, phone number, or app listing, and ask the service to review or restrict it. Do not continue engaging with the account to gather more information.

Report to the appropriate police, cybercrime, consumer-protection, or financial regulator in your country. In the United States, reports can be made to the FBI’s Internet Crime Complaint Center (IC3) and the Federal Trade Commission (FTC). In the United Kingdom, forward suspicious texts to 7726 and use the official government channel for reporting online fraud or phishing. Elsewhere, look for the national police or cybercrime reporting body and financial regulator. Use official government sources to confirm the correct process.

Give each organization a consistent summary and keep your report reference numbers. Reporting does not guarantee a refund or investigation, but it can help organizations connect reports and warn others.

Make a concise report with the main facts first: what happened, when it happened, how you were contacted, what was requested, and whether you sent money or granted access. Include the crypto asset, amount, network, wallet addresses, and transaction IDs if relevant. Attach screenshots and receipts through the organization’s secure process, not in a public post.

Be accurate about what you know. You can say that a person claimed to represent a particular company without asserting that the company itself was responsible. Explain whether a transaction is confirmed, pending, or only requested. If you are not sure, say so. Avoid guessing who controls an address or making claims about the scammer’s identity without evidence.

A useful checklist:

1. Write down the dates and a short timeline.
2. Identify the platform, account, website, app, or phone number involved.
3. List any payment or wallet transactions and attach records.
4. Note what personal, financial, or account information you shared.
5. Describe steps taken to secure accounts and wallets.
6. Save the report number and the date you submitted it.

If the scam involved a bank transfer or card payment as well as crypto, contact the bank or card provider promptly and ask what options apply. Do not assume a report can reverse a blockchain transaction, and do not pay anyone who claims they can guarantee that outcome.

Cryptocurrency transfers confirmed on a blockchain are generally difficult or impossible to reverse. A report to a police agency, exchange, or wallet provider does not itself cancel a transaction or guarantee that stolen funds will be returned. Still, contact the exchange or service quickly: it may be able to secure your account, investigate activity, or flag an address or account that received funds.

Be cautious about anyone promising to recover assets for a fee, claiming special access to law enforcement, or asking for your recovery phrase. Scammers may pose as lawyers, investigators, blockchain analysts, or victims’ support groups. They may use real transaction information to sound credible, then ask for an advance payment, a wallet connection, or remote access to your device.

Use the reference number from an official report if an agency or provider follows up. Verify the identity of anyone who contacts you by calling or messaging the organization through a channel you find independently. Never rely on a phone number, link, or account supplied in an unsolicited message. Do not send “recovery” funds to an intermediary or approve a transaction that you do not understand.

If recovery is not possible, reports can still help prevent further harm, support an investigation, and establish a record of the loss. Keep documentation of any response you receive and report further demands or suspicious contact as a separate incident.

After reporting, continue to monitor the accounts and wallets that may have been exposed. Review exchange sign-in history, active sessions, withdrawal addresses, API keys, and security settings. Remove sessions or permissions you do not recognize, change reused passwords, and enable multifactor authentication. If a wallet’s recovery phrase was exposed, do not keep using that wallet for new funds.

Check token approvals and other permissions from the affected wallet, but use a trusted interface and confirm that you are on the right network. Revoking an allowance can require a transaction fee, and revocation does not undo a transfer that has already happened. If you are unsure what a permission does, ask the wallet provider through an official support channel; do not hand control to someone offering help in a direct message.

Warn people who may be targeted through your account, especially if a scammer has access to your contacts or social profile. Tell them not to trust payment requests or recovery messages from the compromised account until you confirm it is secure. Report copied profiles and impersonation attempts to the relevant platform.

Finally, be wary of follow-up messages promising refunds, compensation, or recovered funds. Treat unexpected contact about your report as unverified until the organization confirms it through an official channel. Keep evidence and report numbers organized in case a provider or authority asks for more details.