CoinHawkCoinHawk ← Back to dashboard

How to spot a crypto scam (2026)

Updated July 2026 · Reading time ~9 min

Crypto scams are having a record year, and they've grown far more sophisticated than the old "send me Bitcoin and I'll double it" tweets. In 2025, one category alone — pig butchering — caused an estimated $7.2 billion in reported losses. Impersonation scams rose roughly 1,400% year-on-year, and AI-generated deepfakes drove hundreds of millions more. The good news: nearly every scam, however advanced, relies on the same handful of psychological triggers. Learn to recognise those, and you can spot almost any of them. This guide comes from a security-first perspective — the goal is to make you genuinely hard to fool.

The one rule that stops most scams: No legitimate person, platform, or "support agent" will ever ask for your seed phrase (recovery words) or private key. Anyone who does is trying to rob you — no exceptions, ever. Your seed phrase is the keys to your funds; it should never be typed into a website, shared in a chat, or entered anywhere except your own hardware wallet during setup.

The universal red flags

Before the specific scams, learn the signals they almost all share. If you see any of these, stop and treat the situation as hostile until proven otherwise:

The major scams of 2026, and how to spot each

1. Pig butchering (romance / investment fraud)

The costliest scam of the era. A stranger builds a relationship with you over weeks or months — romantic or friendly — often starting from a "wrong number" text, a dating app, or LinkedIn. Once trust is built, they mention the great returns they're making on a specific crypto platform. You invest a little, see fake profits on a slick dashboard, and are even allowed to withdraw a small amount to build confidence. Then you invest more — and when you try to withdraw, the platform demands escalating "taxes" or "fees" until you run out of money and they vanish.

How to spot it: anyone you've only met online who steers the conversation toward a crypto investment is the scam, full stop — no matter how genuine the relationship feels. The "small successful withdrawal" is a manufactured trick, not proof. Real platforms never demand fees to release your own funds.

2. Wallet drainers / approval phishing

The technical evolution of crypto theft, and the target of a major March 2026 international crackdown (Operation Atlantic). Instead of asking you to send funds, the scammer gets you to sign a permission. You land on a convincing fake site — a fake NFT mint, a token airdrop, a DeFi app — and click "Connect Wallet," then "Approve." That approval signs a malicious smart contract granting the attacker permission to move your assets, often drained weeks later when you've forgotten the interaction.

How to spot it: be extremely cautious about what you approve when connecting a wallet. Read what a transaction actually requests; unlimited-spend approvals to unknown contracts are the danger. Use a separate "burner" wallet for experimental sites, and periodically review and revoke token approvals. If an airdrop or mint appeared from nowhere, assume it's bait.

3. Fake exchange and wallet clones

In the age of quick AI-assisted app development, criminals can clone a real exchange pixel-for-pixel, or publish a fake wallet app to the app stores. You create an account, deposit, see fake profits — then hit a wall when withdrawing, often with demands for more money to "unlock" or "verify."

How to spot it: always navigate to exchanges by typing the URL yourself or using a saved bookmark — never through an ad, a link in a message, or a search result you didn't verify. Check the exact domain spelling. Stick to well-established, licensed platforms; in the EU, verify a platform holds a MiCA licence in the official ESMA register (see our licensed-exchanges guide). Download apps only from official links on the company's real website.

4. AI deepfakes and fake endorsements

AI-generated videos and voice clones of well-known figures — Elon Musk, exchange CEOs — now promote fraudulent platforms and fake giveaways, sometimes in convincing live-stream or "interview" footage. In 2026 the quality is high enough that many people can't tell real from fake by eye.

How to spot it: treat any celebrity crypto endorsement or giveaway as fake by default — real ones essentially don't exist in this form. No legitimate giveaway asks you to send crypto first. If "Elon Musk" is livestreaming a double-your-Bitcoin event, it's a scam, no matter how real the video looks.

5. Rug pulls

Developers launch a token, hype it hard on social media, attract investment — then drain the liquidity or dump their holdings, collapsing the price to zero. Rug pulls caused billions in losses across chains in 2025.

How to spot it: extreme hype with anonymous developers, no real product, and pressure to buy early are the markers. Be wary of tokens where a few wallets hold most of the supply, or where liquidity isn't locked. If the entire pitch is "number will go up because everyone's buying," that's not an investment.

6. Fake support agents

You post about a problem, or search for support, and someone "from support" reaches out — via DM, a fake support site, or a bot. They offer to help, then ask for your seed phrase, password, or remote access to "fix" it.

How to spot it: real support never initiates contact via DM and never needs your seed phrase or remote control of your device. Only ever use support channels reached from inside the official app or the verified official website.

Your defence checklist

A few habits make you a hard target:

  1. Never share your seed phrase or private key. With anyone. For any reason. This alone prevents most losses.
  2. Use a hardware wallet for meaningful holdings. It keeps keys offline and forces physical confirmation of transactions — see our hardware wallet guide.
  3. Enable two-factor authentication (app-based, not SMS where possible) on every exchange account.
  4. Navigate to sites yourself. Bookmark your exchange; never reach it via ads, DMs, or unverified search results.
  5. Verify before depositing. Check licences (ESMA register in the EU), domain spelling, and that the company is a real, established entity.
  6. Slow down. Urgency is the scammer's main weapon. Any pressure to act immediately is itself a red flag — step away and think.
  7. Review wallet approvals periodically and revoke ones you don't recognise.
  8. Assume unsolicited contact is hostile. Strangers who message you first about crypto are, overwhelmingly, running a script.

Buying safely matters as much as storing safely. Use established, licensed platforms — see our exchange comparison — or buy directly on CoinHawk through Transak, a licensed on-ramp, with coins sent straight to a wallet you control. The fewer unknown middlemen between you and your crypto, the fewer chances for something to go wrong.

What to do if you've been scammed

If it happens, act fast and don't blame yourself — these operations are professional and prey on normal human trust:

Frequently asked questions

What's the biggest crypto scam right now?

Pig butchering — long-con investment fraud that starts with a social or romantic relationship — caused an estimated $7.2 billion in reported losses in 2025 and remains the highest-value category.

Will anyone legitimate ever ask for my seed phrase?

Never. Not support, not an exchange, not a wallet app, not a "verification" step. Any request for your seed phrase or private key is theft, without exception.

How do I check if an exchange is real?

Verify the exact domain spelling, confirm the platform is licensed (in the EU, check the official ESMA register), stick to well-established names, and navigate there yourself rather than via ads or links. Our licensed-exchanges guide covers this.

Are celebrity crypto giveaways ever real?

No. Treat every "send crypto to receive more" giveaway and every celebrity-endorsed doubling event as fake — AI deepfakes make them look convincing, but the underlying offer is always a scam.

Can I get scammed funds back?

Sometimes authorities freeze funds through blockchain analytics, so report quickly — but recovery is difficult and never guaranteed. Critically, ignore anyone who contacts you offering guaranteed recovery for a fee; that's a follow-up scam.

Educational information, not financial or legal advice. This guide describes common scam patterns as of July 2026 to help you protect yourself; it can't cover every variant, and scams evolve constantly. If you believe you've been targeted, contact your local authorities. Some links on this site are affiliate links, disclosed clearly; they never change your price.