11 crypto scams to avoid

Learn how to spot Bitcoin and other common crypto scams to keep your digital assets safe.

Common crypto scams Browse list
Choosing legit exchanges Learn more
Don't invest unless you're prepared to lose all the money you invest. This is a high-risk investment and you should not expect to be protected if something goes wrong. Take 2 mins to learn more.

Cryptocurrencies are complicated, confusing to new users and basically unregulated in the UK, all of which makes them an ideal subject for scammers. But with a little bit of know-how and common sense, you can protect yourself against cryptocurrency scams, including those involving Bitcoin.

11 common crypto scams to keep an eye out for

We've listed out some of the most common Bitcoin and other crypto scams it's a good idea to have on your radar.

1. Phishing

The first scam on the list is one that you may well be familiar with already, as it's also been widely used to target customers from major banks.

Known as "phishing," this type of scam occurs when you receive an unsolicited email that looks as if it's from your bank or, in this case, from your crypto exchange or wallet provider. This email contains a link that takes you to a site that looks almost identical to the exchange or wallet you usually use, but is actually a scam site.

Once you enter your account details on this unofficial page, the scammers have everything they need to log in to your real account and steal your funds.

How to avoid phishing scams:
  • Always double-check URLs to make sure you're visiting the genuine website.
  • Don't click on suspicious links that are emailed to you.
  • Never disclose your private key.

2. Fake exchanges and wallets

In a similar vein to phishing scams, keep an eye out for fake Bitcoin exchanges. They might walk and talk like a reputable exchange, but they're merely a front to separate consumers from their hard-earned cash.

Some will entice users with promotional offers that sound too good to be true. Others pressure users into creating an account and depositing funds, perhaps even offering "bonuses" to those who deposit larger amounts. But once they have your money these platforms might charge ridiculously high fees, make it very difficult to withdraw funds or simply steal your deposit altogether.

Other scammers have turned their attention to creating quite sophisticated fake wallet apps that, once downloaded to a user's smartphone, can be used to steal critical account details. These apps have even made it into official, legitimate app stores like Google Play, so it pays to do your research before downloading anything to your phone.

BitKRX

In December 2017, the Bitcoin community and South Korean authorities exposed a fake exchange known as BitKRX.

By posing as a legitimate exchange and passing itself off as a branch of KRX, a large and reputable trading platform, it was able to ensnare innocent users.

How to avoid fake exchange and fake wallet scams:

  • Stick with well-known and popular exchanges.
  • Thoroughly research any exchange or wallet before creating an account who is the team behind the exchange or wallet? Where is the company registered? Are there reliable reviews from other users confirming its legitimacy?
  • Don't let yourself be pressured into depositing funds or providing any personal information.
  • Don't just randomly pick a wallet from the app store only download apps and software from legitimate wallet providers and exchanges.

Fake Poloniex apps

In 2017, crypto exchange Poloniex was the target of a sophisticated scam that saw at least three fraudulent Poloniex trading apps listed on the Google Play store.

Two of the apps, "Poloniex" and "Poloniex Exchange," were downloaded more than 5,500 times before they were removed from the store. These apps asked Poloniex users to enter their account credentials, thereby giving fraudsters a way to perform transactions on behalf of users and even lock victims out of their own accounts.


3. Old-school scams

Cryptos may be based on new technology, but there are still plenty of scammers using old tricks to con unwitting consumers.

The classic example of this is an unsolicited phone call or email from someone claiming to be with the IRS. This fictional tax man will try to convince you that you owe the IRS money and you'll be facing legal action if you don't transfer them a certain amount of Bitcoin as soon as possible.

The tried-and-tested "Nigerian prince" scam has also migrated into the world of cryptocurrency. So if you're ever contacted out of the blue by someone overseas promising you a share in a large sum of digital currency if you help them transfer funds out of their own country, use your common sense and recognise it for the scam it is.

How to avoid old-school scams:

  • Use your common sense.
  • Don't trust unsolicited emails or phone calls.

4. Fraudulent ICOs

Seduced by the astronomical price rises Bitcoin has experienced since its inception, many everyday consumers venture into the world of cryptocurrency looking for the next big thing. After all, if "the next Bitcoin" ever actually arrives, getting in at the ground floor could see early-adopters earn a fortune.

And if you want to get in on the ground floor, the easiest option for the average person is to buy coins or tokens in an ICO. There's a huge appetite for new digital currencies in the first half of 2018 alone, ICOs raised a total of US$11.69 billion — and with many new buyers having limited knowledge of how the crypto industry works, it's the perfect breeding ground for scammers.

Pincoin and iFan

In April 2018, the Pincoin and iFan ICOs, run by the same Vietnam-based company, are believed to have cheated more than 30,000 investors out of a combined total of $660 million.

iFan was meant to be a social media platform for celebrities and Pincoin promised 40% monthly returns to investors. Both were later shown to be multi-level marketing (MLM) scams.

This has led to the rise of fake ICOs which, with some slick marketing and a little bit of hype, can convince people to buy a cryptocurrency that doesn't actually exist. For example, one report found that 78% of ICOs in 2017 were scams, while a separate report put that figure at above 80%.

Finally, if you're dreaming of getting rich quick from a crypto ICO, be aware that for every ICO success story there are many, many more failures, even if the project isn't a scam.

How to avoid fraudulent ICOs:

  • Thoroughly research any ICO before buying in. Look at the team behind the project, its white paper, the purpose of the currency, the tech behind it and the specifics of the token sale.

5. Bitcoin blackmail scams

Similar to how scammers will sometimes pretend to represent the tax office in the hope of coercing victims out of money, they'll also pretend to be hackers with some kind of incriminating evidence.

One common variation of this scam arrives in the form of an unsolicited email, where the sender claims to be a hacker who has accessed your PC. They will say they've found some kind of incriminating evidence, or taken over your webcam to capture footage of you doing something embarrassing or which you'd rather other people didn't know about. The emails promise to send the incriminating evidence to all of your email or social media contacts unless you send some Bitcoin to the blackmailer, and will typically include instructions on how to purchase Bitcoin and where to send it.

Naturally, it's all a lie. The phony blackmailers don't have any evidence and nothing will happen regardless of whether or not you make a payment. This scam is purely a numbers game, where the perpetrators hope that by sending out enough emails they'll scare enough people into sending them some Bitcoin.

How to avoid Bitcoin blackmail scams

  • Search online to see if other people are saying they've received the same email
  • Don't believe the scammers
  • Consider using VPNs to browse more privately, for additional peace of mind against this type of scam

6. Impersonation giveaway scams

One type of scam that's common to many large sites and social media platforms is a celebrity impersonation giveaway scam. Here, the scammers will impersonate a celebrity or other notable person and announce that they're giving away a lot of cryptocurrency for free, as long as you send them some cryptocurrency first.

The scammers will often promise to send back double what you send them. Although especially prominent on X (formerlyTwitter), this scam has also appeared on platforms including YouTube, where scammers will impersonate a celebrity in a video or livestream.

This scam is all about quickly rushing victims into a bad decision by making them think they're missing out. A typical giveaway scam always specifies a total amount of cryptocurrency, such as "5,000 ETH giveaway" and then uses an army of bots and fake accounts to make it look like people are actually receiving money.

After seeing all the apparently free money being given away, victims race to send money to the scammers before they have time to think it over.

On X (formerlyTwitter), the fake giveaway bots will often have a blue "verified" check mark, but this does not mean anything. The scammers obtain this by taking over verified accounts and then changing the names. Similarly, scams will often have thousands of likes, views, retweets or other types of social proof. Those are just from bots, and don't mean anything either.

Although there are some ways to get free crypto, it's only possible to get small amounts and there's often some kind of catch.

How to avoid impersonation giveaway scams

  • Assume that anytime a celebrity is offering to give away free cryptocurrency on social media, it's a scam
  • Double check the user name of the suspected scam account, and compare that to the username of the celebrity's real account
  • Check the provided cryptocurrency address using a blockchain explorer. You can see how much money the scam is making and whether or not it's actually sending any money out

7. Ponzi or pyramid schemes

A Ponzi scheme is a simple but alarmingly effective scam that lures in new investors with the promise of unusually high returns. Here's how it works: a promoter convinces people to invest in their scheme. These initial investors receive what they believe to be returns, but are actually payouts from the money deposited by newer investors. Now satisfied that the scheme is legit, those investors who received payouts pump more of their money into the scheme and encourage others to do the same.

Sooner or later, the scheme collapses when the promoter runs off with the money or it becomes too difficult to lure new investors. These types of pyramid schemes are nothing new and can be easy to spot, but that hasn't stopped some crypto buyers from being scammed in a handful of high-profile incidents.

Bitconnect

In January 2018, Bitcoin investment lending platform Bitconnect shut down its lending and exchange services amid allegations it was a Ponzi scheme. Launched in early 2017 with promises of returns of up to 40% per month, the platform was quick to attract criticism from the wider crypto community and soon drew the attention of regulators.

How to avoid Ponzi/pyramid schemes:

  • Look out for cryptocurrency projects that encourage you to recruit new investors to enjoy bigger profits.
  • Never trust a scheme that promises returns that sound too good to be true.

8. Rug pulls and exit scams

A crypto rug pull is a type of exit scam in which a smart contract is robbed of its funds by one of the contract's own developers, after a substantial number of users have deposited money. Rug pulls have become increasingly common in the DeFi space, where users deposit funds into specialised smart contracts in order to earn rewards – a process known as "yield farming". Once a large enough sum of funds has been deposited into the contract, one of the developers will then steal the funds, either using the contract's keys or a hidden backdoor in the code.

A rug pull can be very difficult to spot before it happens as they typically originate from profitable projects that function as intended, unlike a Ponzi scheme or ICO scam which are illegitimate from the outset. Furthermore, because of the rapid and dynamic nature of DeFi, users often enthusiastically "pile in" to new projects early in their life-cycle while profits are highest, which may give the project an unwarranted degree of trust.

SushiSwap was famously rug pulled for 37,400 ETH by its developer, Chef Nomi, after amassing US$1 billion worth of funds after only a few weeks of operation.

How to avoid crypto rug pulls:

  • Steer clear of DeFi projects where the private keys are held by one individual.
  • Beware of pseudonymous developers or teams without a thorough reputation.
  • Look for DeFi projects that have gone through a smart contract audit by a trusted third party, as this will help reduce the likelihood of a backdoor attack – although even these can be spoofed.
  • Use restraint to avoid chasing gains and jumping into a project before it has time to prove itself.

9. Malware

Malware has long been a weapon in the arsenal of online scammers. But thanks to the complicated and highly technical nature of cryptocurrencies, much of which isn't well understood by most people, malware now poses an even bigger threat.

Rather than stealing credit card and bank account details, crypto-related malware is designed to get access to your web wallet and drain your account, monitor the Windows clipboard for cryptocurrency addresses and replace your legitimate address with an address belonging to a scammer, or even infect your computer with a cryptocurrency miner.

How to avoid cryptocurrency malware scams:

  • Update your antivirus software regularly to protect yourself against malware.
  • Never download and install programs unless you're 100% sure they're from a reputable, legitimate provider.
  • Don't open suspicious attachments.

10. Mining scams

Cloud mining allows you to mine cryptocurrencies like Bitcoin without having to purchase the expensive hardware required to do so. There are several legitimate cloud mining services that let users rent server space to mine for coins at a set rate. There are also some legitimate ways to invest in Bitcoin mining companies and share profits from them.

However, there are also plenty of cryptocurrency mining scams out there. Some promise astronomical (and implausible) returns and fail to disclose a range of hidden fees, while others are fronts for Ponzi scams and are simply designed to part you from your money.

It's also important to note that even if it's not an outright scam, cloud mining will always be a bad investment compared to simply buying cryptocurrency, as will leasing any other form of cryptocurrency mining equipment. The quirks of Bitcoin mining economics means that no matter what Bitcoin prices do, you'll always be better off just buying the equivalent amount of Bitcoin instead of trying to invest that money in a mining scheme.

Even if they're not technically scams, it's a mathematical fact that all "legitimate" Bitcoin cloud mining businesses and consumer-oriented miner rental schemes are invariably bad investments.

How to avoid cryptocurrency mining scams

  • Avoid all cloud mining and rent-a-miner schemes under all circumstances

11. Pumps and dumps

Cryptocurrencies are often dismissed as a speculator's dream come true that are ripe for a little bit of market manipulation, which has led to the rise of what are known as "pump and dump" schemes. This is where large groups of buyers target an altcoin with a small market cap, buy that coin en masse at a particular time to drive its price up (which attracts a whole lot of new buyers fueled by FOMO a fear of missing out) and then sell to take advantage of the significant price rise.

This sort of thing is illegal in traditional securities markets, but is a common occurrence in the largely unregulated world of cryptocurrencies. In fact, there are several online groups and forums dedicated to this exact practice, so it's important that you stay savvy and know how to steer clear of these scams.

How to avoid pump and dump scams:

  • Be wary of low-market-cap cryptos that normally have a low trading volume but that suddenly experience a sharp price rise.
  • Keep an eye out for "fake news" on social media that hypes particular coins.
  • Carefully research the credentials of any cryptocurrency before buying.

GVT pump and dump

In January 2018, a fake X (formerlyTwitter) account purporting to belong to cybersecurity guru and crypto enthusiast John McAfee tweeted support for the GVT cryptocurrency, naming it "coin of the day."

For some in the crypto community, this was good enough reason to buy some GVT, and just four minutes after the tweet was posted the price of GVT had jumped from $30 to $45 and trading volume had doubled. Fifteen minutes later, the price was hovering around the $30 mark once again, after early buyers "dumped" and ran.

On closer inspection, the X (formerlyTwitter) account was revealed to be bogus and not associated with McAfee at all. Instead, it was simply a key player in a pump and dump scheme devised and implemented in a chat room called "Big Pump Signal."

How to detect a crypto scam

Unsure whether a particular crypto website is a scam or not? Use this checklist to help sort legitimate providers from those platforms you're better off avoiding altogether.

  • Does the company's app glitch out and make it impossible to log in? If you can't access your account, you can't access your funds either.
  • Does the website connect securely over https (not http)? If the address starts with "http" instead of "https," the data you send to the website is not secure.
  • Can you see the word "Secure" or an image of a padlock in your web browser's address bar? This indicates that a website is secure.
  • Does the website's URL have any noticeable spelling mistakes or errors? If so, it could be a fake.
  • Does the site feature bad grammar, awkward phrasing or spelling mistakes? If it does, this doesn't necessarily indicate a scam, but it does mean you should proceed with caution.
  • Does the website promise abnormally high returns? (For example, does it claim you'll be able to double your investment?) This should raise a big red flag and is a common indicator of a scam.
  • Is there an "About us" page? Does it show the real people behind the company? Does it provide any details about where the company is registered? If there's little or no information about who the company is and what it does, you could be dealing with a scam.
  • Do legitimate, reputable websites link to this site? This could indicate that the site is trusted and respected.
  • What do other users say about the website? Are there any negative reviews and, if so, what do they say? The crypto community is usually pretty quick to spread the word about scams.
  • Who is the registered owner of a domain or website? Is the owner hidden behind private registration? Has the domain been registered for less than six months? (You can find this information by searching for the platform's URL registration details on a site like WHOis.net). The more information you can find about the people/company behind a website, the better.
  • Is there anything else about the website that raises red flags or just seems too good to be true? If there's something that just doesn't seem right, trust your gut.
  • Does the website claim any celebrity endorsements? Many investment scams use fake celebrity endorsements to get people to lower their guard.
  • Did you first hear about it on social media, or did they approach you first? Social media and unsolicited messages are common ways for scammers to reach new victims.

Please note that this checklist is far from foolproof, as it's possible for a website to pass several of the above tests with flying colors and still be a scam. The important thing to remember is to do your due diligence before providing any personal or financial information to any website or app.

What to do if you've spotted a scam or become a victim

If you've sent money overseas as the victim of a scam, unfortunately the chances of you getting your money back are very slim. This is true for all international scams, but cryptocurrency in particular is especially difficult to recover.

You can still report it though, to help prevent other people from falling victim, to the British Cybercrime Centre at the National Crime Agency. To help spread the word faster, you can also report specific types of scams to the relevant agencies.

  • ActionFraud. Report cybercrimes here, including phishing, blackmail, Nigerian prince schemes and online extortion attempts.
  • FCA. Report financial crimes here, such as investment scams and Ponzi schemes.

You can also help by reporting any scams you see on social media, using the 'report' button provided by most platforms.

Tips to help you avoid crypto scams

There are plenty of other simple steps you can take to protect yourself against fraud and Bitcoin scams, which we've listed below. Thankfully not all crypto promotions are scams, and you can find legitimate crypto offers in our guide.

Choosing a legitimate exchange

When you're choosing an exchange, you can consider factors like where it's based, how long it's been around, how popular it is, what people say about it online and what licensing/authorisation it has.

In the UK, cryptocurrency is unregulated, so the UK watchdog – the Financial Conduct Authority (FCA) – doesn't authorise or regulate any exchanges. However, since 2020, the FCA has been supervising crypto asset firms operating from the UK for their compliance with anti-money laundering and counter-terrorism financing laws (AML/CTF). Crypto businesses which pass the FCA's checks can be on its register of crypto asset firms. This doesn't technically offer any huge protection to consumers, but it may offer reassurance that a crypto asset firm has applied and been accepted onto the FCA's register.

Some examples of FCA-registered crypto asset firms include:

There are plenty of other simple steps you can take to protect yourself against Bitcoin and crypto fraud, such as:

  • Use 2-factor authentication. If you're using a crypto wallet or exchange that supports two-factor authentication, enable this feature before depositing any funds. It's simple to set up and provides an extra layer of account security.
  • Use a cold wallet. A "hot" wallet is one that's connected to the internet, while a "cold" wallet is one that's held offline. Storing your crypto offline in a secure cold storage wallet is usually considered to be a much safer option than using an online wallet.
  • Stick with established providers. Avoid new and untested platforms. Let the early-adopters take the risks and make sure you don't get involved with an exchange or wallet until you can be sure it's legitimate. Better still, only use exchanges that are registered with the Financial Conduct Authority (FCA).
  • Update your antivirus software. Make sure your PC is protected against malware by keeping your antivirus software up to date.
  • Always double-check addresses. Get into the habit of scanning the URL bar to look for the https and "secure" lock symbol, and remember to double-check the URL to make sure you're visiting the correct site.
  • Never share your private keys with anyone.You need your private key to access your crypto holdings, so make sure you never disclose any of your private keys to a third party.

*Cryptocurrencies aren't regulated in the UK and there's no protection from the Financial Ombudsman or the Financial Services Compensation Scheme. Your capital is at risk. Capital gains tax on profits may apply.

Cryptocurrencies are speculative and investing in them involves significant risks - they're highly volatile, vulnerable to hacking and sensitive to secondary activity. The value of investments can fall as well as rise and you may get back less than you invested. Past performance is no guarantee of future results. This content shouldn't be interpreted as a recommendation to invest. Before you invest, you should get advice and decide whether the potential return outweighs the risks. Finder, or the author, may have holdings in the cryptocurrencies discussed.

To make sure you get accurate and helpful information, this guide has been edited by Joelle Grubb as part of our fact-checking process.
Tim Falk's headshot
Written by

Writer

Tim Falk is a freelance writer for Finder. Over the course of his 15-year writing career, he has reported on a wide range of personal finance topics. Whether you're investing in stocks and ETFs, comparing savings accounts or choosing a credit card, Tim wants to make it easier for you to understand. When he’s not staring at his computer, you can usually find him exploring the great outdoors. See full bio

More guides on Finder

19 Responses

    Default Gravatar
    GeoffJune 7, 2023

    I replied to an advert and decided to invest £200 in blockchain.A company rang me and sent my money by card.after a couple of days I changed my mind so sent an e.mail requesting my money back and they put it back.great.
    Now they ring me almost weekly saying I have money in my account which has been trading and what do I want to do with it.
    I have no wallet or any other means of connection to them this surely must be a scam

    Default Gravatar
    dazMarch 29, 2023

    hi i have been approached by a company claiming to be NBFCS saying i have a crypto account that has been frozen due to fraudulant use but to my knowledge i thought i didnt have one , they have rang me for 4weeks now and asking me to verify myself so they can start to release the funds but need me to transfer $250 to make sure i am who i say i am and to link bank account to my crypto wallet can you give me advice , is this scam or does this really happen for real

      AvatarFinder
      LizFebruary 16, 2024Finder

      That sounds very much like a scam, Daz.

    Default Gravatar
    TimAugust 1, 2019

    I have received an email promoting “Click Money” for trading bitcoins.
    They say one will make many dollars a day etc.
    Is this a legitimate scheme?

    Thank you.
    Tim Allpress

      AvatarFinder
      fayemanuelAugust 2, 2019Finder

      Hi Tim,

      Thanks for contacting Finder.

      If you think that the offer is too good to be true then its a scam. Know that market trading is a risky endeavor, and cryptocurrencies are very volatile. Cryptocurrencies rise and fall without warning so nobody can guarantee that you can make lots of dollars a day.

      I hope this helps.

      Kind Regards,
      Faye

    Default Gravatar
    WilliamJuly 3, 2019

    Is Coin-bits a genuine company/ broker

      AvatarFinder
      fayemanuelJuly 4, 2019Finder

      Hi William,

      Thanks for contacting Finder.

      I’m afraid, we don’t have a review page for Coinbits Exchange. Their website looks legitimate though, using the checklist above looks like the website connect securely over https and I can see the word “Secure” or an image of a padlock in your web browser’s address bar. No mispelled words and they have an About us page.

      If you want to know more, you can ask around, read reviews, and see what other people say about this company. The final decision is yours to make.

      I hope this helps. Should you have further questions, please don’t hesitate to reach us out again.

      Have a wonderful day!

      Cheers,
      Faye

    Default Gravatar
    asakeMarch 14, 2019

    Scams are unfortunately all too common in the field of binary options. Dishonest brokers and reviews, or rigged robots and other auto trading services the scams can come in many forms. So we feel it’s necessary to create this blacklist and list all known frauds and dishonest techniques in one place. We also go through the steps you can take to identify a scam and how to deal with the situation after the fact if you’re already a victim. If you know or suspect something is a scam, or you’re already a victim of a scam, please let us know and we will look into it!
    myscamexperience.com let’s help others not to fall victims to scams like this

      AvatarFinder
      johnbasanesMarch 15, 2019Finder

      Hi Asake,

      Thank you for reaching out to Finder.

      Thank you for your feedback on the page.

      Cheers,
      Reggie

Go to site