What is Crypto Scam?
How it works
Scammers create fake tokens or decentralized finance projects, often on popular chains like Ethereum or Binance Smart Chain. They hype the project through social media, fake endorsements, and paid promotions. Once investors buy the token, the developers remove liquidity from the trading pool (a rug pull), causing the token price to crash to zero. Liquidity removal is executed via functions in the token's smart contract that grant developers exclusive access to funds locked in pools on automated market makers like Uniswap or PancakeSwap.
Phishing remains a common method. Attackers send emails or direct messages mimicking legitimate platforms like MetaMask, Coinbase, or OpenSea. Victims are directed to fake websites that request their seed phrase or private key. Any transaction signed on these sites sends funds to the scammer's wallet. Scammers also deploy malicious browser extensions or smart contracts that approve unlimited token spending, enabling them to drain victims' wallets without further permission via mechanisms like the ERC-20 approve function.
Ponzi and pyramid schemes disguise themselves as yield farming, cloud mining, or trading bots. They promise high, consistent returns using new investors' deposits to pay earlier participants. The scheme collapses when new inflows slow. Notable examples include BitConnect, which attracted billions before its closure. Scammers may also impersonate influencers or support staff in Discord and Telegram to solicit direct payments or private keys. The irreversible nature of blockchain transactions makes recovery nearly impossible.
Why it matters
Crypto scams cause significant financial harm, with billions of dollars lost annually, eroding trust in blockchain technology. They generate negative media coverage and attract regulatory scrutiny, which can lead to restrictive policies that impede legitimate innovation. Scams also discourage mainstream adoption by portraying the crypto space as unsafe. Understanding how scams operate is crucial for users to protect themselves and for the industry to develop better safeguards and educational resources.
Real-world examples
The Squid Game token rug pull on Binance Smart Chain in 2021 saw developers drain over $3 million. BitConnect operated a Ponzi scheme that defrauded investors worldwide. Thodex, a Turkish exchange, allegedly exited with user funds in 2021. Phishing attacks on OpenSea users in 2022 stole NFTs by tricking them into signing malicious orders. These examples highlight diverse scam mechanisms across different blockchain platforms.
FAQ
How can I identify a crypto scam?
Look for unrealistic promises of high returns, pressure to act quickly, anonymous or unverifiable team members, lack of a clear whitepaper, and requests for private keys or seed phrases. Legitimate projects are transparent and do not guarantee profits.
What should I do if I fall for a crypto scam?
Immediately stop any further transactions. Report the scam to the platform where it occurred (e.g., a decentralized exchange, blockchain explorer) and to relevant authorities like the FBI's IC3 or your local financial regulator. Recovery is difficult due to blockchain irreversibility, but prompt action may help trace funds.
Are all rug pulls considered scams?
Yes, rug pulls are a specific type of scam where developers deliberately remove liquidity or abandon a project after attracting investment, leaving investors with worthless tokens. They are fraudulent because the promised functionality is never delivered.
Related terms
Go deeper
Browse the complete crypto glossary to explore related terms and concepts.
Browse Glossary