How to recognise a crypto scam before it costs you
Crypto scams do not usually succeed through technical sophistication. They succeed by producing urgency, then offering a way to relieve it. The specific stories change constantly — a giveaway, an airdrop, a support agent, a trading group, a job offer, a romantic interest with an investment tip — but the underlying pattern is remarkably consistent and can be recognised without any technical knowledge.
What makes crypto different from other fraud is that transactions are irreversible and self-custody has no help desk. There is no chargeback, no fraud department that can claw funds back, and no account recovery. That means prevention is essentially the only defence available, and a few minutes of verification is worth far more than any remedy afterwards.
The checklist below is about recognition rather than technique. Every item describes a signal you can verify yourself, using nothing more than a browser and a few minutes, before any funds move. The most valuable habit of all is also the simplest: any message that makes you feel you must act immediately is a reason to stop entirely, not a reason to hurry.
How to use this calculator
- Never enter, type, photograph or share your seed phrase or private key. No legitimate wallet, exchange, support agent, airdrop, migration or 'wallet validation' will ever ask for it — a request for it is proof of fraud, with no exceptions.
- Treat guaranteed returns as disqualifying. Fixed daily percentages, 'risk-free' yields and promises to double your holdings describe something that does not exist; real returns are uncertain and anyone claiming otherwise is either lying or does not understand what they are selling.
- Slow down whenever there is pressure. Countdown timers, limited allocations, 'the window closes tonight' and a helper who keeps you on the call are engineered to prevent you from checking anything. Genuine opportunities survive a night's delay.
- Verify contract addresses only from an official source you navigated to yourself — the project's documentation reached via a bookmark, not a link in a message, reply, ad or search result. Compare the whole string, not just the first and last characters, and check the token on a block explorer for holder count and history.
- Review and revoke token approvals regularly using a reputable allowance manager. Many losses come not from a stolen key but from having signed an unlimited spending permission to a malicious contract, which can then drain that token at any time later.
Frequently asked questions
Someone from support messaged me first — is that normal?
No. Legitimate support responds to tickets you opened; it does not contact you first on Telegram, Discord, X or WhatsApp. Fake support accounts monitor public channels for anyone posting a problem, then message within minutes offering to help. Close the conversation and open a ticket through the official site yourself.
What is an approval or allowance exploit?
Interacting with a contract often requires granting it permission to spend a token from your wallet, frequently in unlimited amounts. A malicious contract asks for that permission during something that looks routine — claiming an airdrop, minting, connecting — then uses it to transfer your balance later. Your keys were never stolen; you authorised the transfer.
What are the warning signs of a rug pull?
Anonymous team with no verifiable history, liquidity that is not locked or is controlled by the team, a contract with mint or blacklist functions or an upgradeable proxy, supply concentrated in a few wallets, and a marketing budget far exceeding any working product. Any one warrants caution; several together are a pattern.
I was shown a dashboard with my profits growing. Is that proof?
No. A website displaying a number is trivial to build and proves nothing about whether funds exist. The standard progression is that small early withdrawals succeed, encouraging larger deposits, and then withdrawal requires a 'tax', 'fee' or 'unlock payment'. That demand is the point of the entire exercise — pay it and more will follow.
How do I check that a token contract is the real one?
Get the address from the project's own documentation, reached by typing the URL or using a saved bookmark rather than clicking a link. Cross-check it against a major explorer and a listing aggregator. Scam tokens copy names, tickers and logos exactly — the contract address is the only thing that cannot be faked.
I think I have already been scammed. What should I do?
Move remaining assets to a completely new wallet with a newly generated seed phrase, then revoke outstanding approvals on the compromised one. Assume the old wallet is permanently unsafe. Report to your local fraud authority and the exchange involved, and treat anyone offering paid 'fund recovery' as a second scam targeting victims of the first.
This calculator is an educational tool. Results are estimates based on the inputs you provide and do not constitute financial advice. Verify figures with your bank, broker or a qualified advisor before acting on them.