Free guide · 9 min · facts checked 13 October 2026

How to spot a crypto scam: eight patterns and three reflexes

Crypto scams almost never defeat technology. They defeat a person, with the same four levers every time: contact you did not ask for, a reason to hurry, a promise, and a request to keep quiet. Learn the eight shapes they take and you stop meeting them one by one.

What the reported figures show, and what they do not

In 2025, the FBI’s Internet Crime Complaint Center recorded 61,559 complaints about cryptocurrency investment fraud and $7.228 billion in reported losses. The FBI says losses in that category rose 25% from 2024.

Read the figure carefully, because its limits matter. These are losses reported by people who filed a complaint with one United States agency. They are not a worldwide total, and nobody knows the real one.

One detail in the FBI’s own table is worth keeping. Every age band, from under 20 to 60 and over, reports losses. The largest reported total, $2.76 billion, sits in the 60 and over band. No age group is outside the pattern.

The FBI also describes the usual shape of the thing. A text from a number you do not know, an advert, or a friendly match on a dating app. The contact moves the conversation to a messaging platform and introduces “industry insiders” who offer guidance on trading. You send cryptocurrency to a platform that shows you profits, and you are offered loans to invest more. When you try to withdraw, you are charged taxes and fees, and the scammers disappear.

The eight patterns

Each pattern below has a name, the way it feels from the receiving seat, and the one detail that gives it away. Remember the names. Under pressure they come back faster than a list of rules.

1. The Friendly Guide (fake platform, fake adviser). It feels like a patient professional is helping you, and your screen agrees: the balance climbs. The tell: to withdraw, you must first pay a “release fee” or a “tax”. The gains never existed.
2. The Slow Hello (emotional manipulation). It feels like a real friendship or romance, built over weeks on a messaging app or dating site. Doubting it would feel rude. The tell: a person you never met in real life who steers the conversation to an investment.
3. The Copied Door (phishing). It feels like an alert, and you want to fix it now. An email, text or sponsored link imitates your exchange or wallet maker. The tell: the message chose the door you are asked to walk through, and the site behind it collects your login or your seed phrase.
4. The Helpful Stranger (fake technical support). It feels like relief, because someone finally answers your problem. They contact you, or reply to your question on a forum. The tell: help you did not request, followed by a demand for your recovery phrase or for control of your screen.
5. The Safe Machine (guaranteed return). It feels calm and mathematical: a small, steady percentage per day or month, capital protected, a “bot” or “managed account” doing the work. The tell: a fixed return with no risk. The first withdrawals are paid with the money of later victims.
6. The Borrowed Face (impersonated public figure). It feels trustworthy because you know the face and the voice. The tell: a famous person is selling you something, or promising to double what you send. Photos, voices and videos can be stolen or generated by artificial intelligence; the FBI reports that in 2025, investment-fraud complaints with a reported AI link represented more than $632 million in losses.
7. The Poisoned Address (lookalike address). It feels like nothing at all, because you do everything right. A tiny deposit appears in your history from an address that starts and ends like one of yours. The tell: you are about to copy an address from your history instead of from its source.
8. The Rescuer (fake recovery). It feels like hope, right after a loss. A “firm” or an “authority” offers to get your money back. The tell: fees paid in advance. It is a second scam aimed at the same victim. The FBI report counts 10,516 recovery-scam complaints in 2025 and $1.4 billion in losses, and warns that these losses may include the money lost in the earlier scam that led the victim to the recovery firm.

The six signals they share

You do not have to identify the pattern to be safe. The eight of them pull on the same levers, and those are easier to spot.

• You are contacted though you asked for nothing.
• You are rushed: short deadline, limited offer, account “about to be frozen”.
• You are promised a gain, or told you cannot lose.
• You are asked for your recovery phrase, a code received by text message, or control of your screen.
• You are asked to pay in order to withdraw.
• You are asked to tell no one.

One signal alone can have an innocent explanation. Two together should stop you. Three together is the shape of a scam.

The reverse matters too. Some genuine messages look alarming: a regulated provider asking you to update your proof of address, or an exchange announcing it is leaving your region. Spotting scams also means not seeing one everywhere, so verify rather than panic.

Three reflexes that defeat all eight

1. Stop the clock. Do not answer in the moment. Very few legitimate situations require a decision within the hour, and the pressure itself is information.
2. Choose the door. Check through a channel you choose yourself. Type the site address by hand. Call the number printed on your documents. Look the company up on the official register of authorised providers and on the warning lists of your national financial regulator.
3. Say it out loud. Tell someone you trust before any payment. Scams need you to keep quiet. A second pair of eyes usually breaks them.

Notice what all three have in common: none of them requires you to know anything about crypto-assets. They work on the structure of the approach, not on its subject.

If you have already paid

Anyone can be caught, and shame helps only the scammer. Act in this order.

1. Stop all payments. Pay no “release fee”, no “tax”, no “last deposit”.
2. Call your bank or card issuer at once if a bank transfer or card payment is involved.
3. Keep everything: messages, website addresses, destination addresses, statements, screenshots.
4. Report it to the police and to the other bodies in the table below.
5. Expect to be contacted again by fake investigators or fake lawyers. That is The Rescuer, pattern 8.