Crypto scams stole over $5.6 billion from victims in 2023 alone, according to FBI data. The most common types are phishing attacks, rug pulls, pig butchering schemes, fake exchanges, and romance scams. Each follows predictable patterns that become easy to recognize once you know the specific warning signs. This guide catalogs every major scam category with detection methods that work.
The FBI’s Internet Crime Complaint Center recorded a 45% year-over-year increase in cryptocurrency fraud complaints, with losses reaching $5.6 billion in 2023 according to the IC3 annual report. The actual figure is almost certainly higher because many victims never report. New scam variants emerge constantly, but the underlying mechanics fall into a small number of categories. Recognizing the category is faster and more reliable than trying to evaluate each scheme individually.
What are the most common types of crypto scams?
Crypto scams fall into six primary categories. Each exploits a different vulnerability — technical ignorance, greed, trust, urgency, or isolation. Understanding which category a scheme belongs to immediately reveals the appropriate response.
| Scam Type | How It Works | Primary Target | Average Loss | Detection Difficulty |
|---|---|---|---|---|
| Phishing | Fake websites or messages trick you into entering seed phrases or approving malicious transactions | All crypto users | $1,000-$50,000 | Low (if trained) |
| Rug pull | Developers create a token, attract liquidity, then drain the pool and disappear | New token buyers | $500-$10,000 | Medium |
| Pig butchering | Long-term relationship building followed by directing victims to fake investment platforms | Lonely or isolated individuals | $50,000-$500,000+ | High |
| Fake exchange | Clone sites mimicking Coinbase, Binance, or Kraken that steal login credentials and deposits | Newer crypto users | $5,000-$100,000 | Low (if trained) |
| Romance scam | Fake romantic interest on dating apps who gradually introduces crypto “investment opportunities” | Dating app users | $10,000-$200,000 | High |
| Impersonation | Fake customer support, celebrity giveaways, or government agents demanding crypto payment | Users seeking help or following influencers | $1,000-$25,000 | Low |
Pig butchering is the fastest-growing category and the most financially devastating. The term comes from the Chinese phrase “sha zhu pan” — the scammer “fattens” the victim with trust over weeks or months before the “slaughter” of extracting their savings. Chainalysis tracked over $75 billion in pig butchering transactions between 2020 and 2024. Read our rug pull detection guide for the specific on-chain signals that reveal token-based scams before they execute.
How do crypto phishing scams work?
Crypto phishing targets wallet approvals and seed phrases rather than traditional login credentials. The attacker creates a website that looks identical to a legitimate DeFi protocol, wallet interface, or exchange. When you connect your wallet and sign a transaction, you unknowingly approve a malicious contract that drains your tokens.
The most sophisticated variant is approval phishing, where the malicious transaction grants unlimited spending permission on your tokens to the attacker’s contract. According to Chainalysis research, approval phishing drained over $1 billion in 2023. The victim often does not realize the theft until days later when they check their balance. Always verify the URL in your browser bar before connecting a wallet. Bookmark legitimate DeFi sites and only access them through your bookmarks. Our complete security guide covers wallet-level protections in detail.
How can you identify a rug pull before it happens?
Rug pulls leave detectable traces before execution. The contract code, liquidity structure, and team behavior all contain warning signs visible to anyone who checks. Token Sniffer scans contracts for known malicious patterns including hidden mint functions, blacklist mechanics, and honeypot code that prevents selling.
Check whether the liquidity pool is locked or burned. Unlocked liquidity means the creator can remove it at any time. Verify the lock on the blockchain explorer — do not trust claims on the project website. According to data from Solidus Labs, roughly one in three new tokens on Ethereum DEXes exhibited rug-pull characteristics. The probability drops dramatically for tokens with locked liquidity, verified contracts, and identifiable teams.
I find that the single most reliable indicator is team identity. Fully anonymous teams with no verifiable track record account for the vast majority of rug pulls. A team that has staked their reputation on a project has a structural incentive not to destroy it. Our long-term storage guide explains how to protect assets you have already purchased.
What is pig butchering and why is it so effective?
Pig butchering scams combine social engineering with fake trading platforms. The scammer initiates contact through social media, dating apps, or “wrong number” text messages. Over weeks or months, they build genuine-seeming trust before introducing a crypto investment opportunity. The victim is directed to a professional-looking trading platform that shows fabricated profits.
These platforms are convincing because they are engineered to be. Victims see their “portfolio” growing, can make small withdrawals to build trust, and are encouraged to deposit more. The trap closes when the victim tries to withdraw a large amount — the platform demands taxes, fees, or additional deposits that never end. According to the FBI’s cryptocurrency fraud page, pig butchering victims lose an average of $178,000. Many lose their life savings.
The defense is simple but psychologically difficult: never invest through a platform recommended by someone you met online, regardless of how much you trust them. Legitimate investments happen on regulated exchanges you find yourself — Coinbase, Kraken, Gemini — not platforms suggested by a new acquaintance. This is not financial advice, but it is a safety principle that has no exceptions.
How do you protect yourself from crypto scams?
Protection comes from habits, not tools. Hardware wallets protect your keys but not your judgment. The most effective defense is a personal policy of deliberate slowness: never sign a transaction, send funds, or enter credentials under time pressure. Every legitimate opportunity will wait for you to verify it.
Use Revoke.cash to regularly audit and revoke token approvals you no longer need. Install browser extensions like Wallet Guard that simulate transactions before you sign them, showing exactly what assets will move and where. Enable two-factor authentication on every exchange account using an authenticator app — never SMS. Read our seed phrase guide for the foundational security practice that protects everything else.
Frequently Asked Questions
Pig butchering is the fastest-growing and highest-loss scam category. Approval phishing is the most common by volume, targeting DeFi users who connect wallets to fake protocol websites. Both increased significantly through 2024 and 2025.
Rarely. Blockchain transactions are irreversible. Some exchanges freeze stolen funds if the scammer routes through their platform, but recovery rates are below 5%. Report to the FBI IC3 and your local police. Beware of “recovery services” that are themselves scams.
Any promotion that asks you to send crypto first in order to receive more back is always a scam, without exception. Legitimate airdrops never require you to send tokens. Celebrity crypto giveaways on YouTube and Twitter are fake impersonation accounts.
Verify the exact URL character by character. Check the domain registration date on whois.domaintools.com — scam sites are typically days or weeks old. Cross-reference with the official project’s social media links. Use Wallet Guard to scan for known malicious sites.
Yes. Report to the FBI IC3 at ic3.gov, your local law enforcement, and the FTC at reportfraud.ftc.gov. Also report to the exchange or platform involved. While recovery is rare, reports help law enforcement track and shut down scam operations.
Sources
- FBI Internet Crime Complaint Center — Annual Crypto Fraud Reports
- Chainalysis — Approval Phishing Research
- Solidus Labs — Market Manipulation and Rug Pull Data
- Token Sniffer — Smart Contract Scanner
- Revoke.cash — Token Approval Manager
- FBI — Cryptocurrency Fraud Information
- Wallet Guard — Transaction Simulation Extension
