Here's the most useful thing to understand before we start: most crypto scams aren't technical. They don't hack the blockchain. They succeed through pressure, impersonation, and fake authority, then lock in the loss with an irreversible transaction. In other words, they hack the person, not the code. That's good news, because it means awareness alone protects you from most of them.
Here are the patterns you'll actually run into.
1. Phishing (fake sites and links)
A scammer sends an email, DM, or ad with a link to a login or "connect wallet" page that looks exactly like the real thing. You type your details or connect, and they drain you.
Red flags: a link you didn't ask for, urgency ("verify before lockout"), and a URL that's almost right but slightly off, like `binanace.com` instead of `binance.com`. Bookmark the real sites you use, and reach them through your bookmark, never through a link someone sends you.
2. Fake support
You post a problem in a public group, and within minutes a friendly "support agent" DMs you to help. They're a scammer. Real exchange support never asks for your seed phrase, never tells you to move funds to a "secure wallet," and never moves the conversation to WhatsApp or Telegram.
Red flag: anyone who contacts you first claiming to be support. Treat every unsolicited "support" message as fake by default.
3. The "send 1, get 2 back" giveaway
This is the classic. A post, often using a deepfake video of someone famous, promises that if you send some crypto to an address, you'll get double back. You will not. Your coins are simply gone.
Red flags: it promises to return more than you send, it requires you to send crypto first, and it pushes urgency by claiming limited spots or limited time. No real giveaway ever asks you to send money first.
4. Fake investment platforms
A slick site or app shows you steady, "guaranteed" profits. Your small first deposit even seems to work. Then, when you try to withdraw, sudden "fees" or "taxes" block you, and they push you to deposit more. The pattern is consistent: the first small amount "works," then endless fees follow, and the larger balance never comes out.
Red flags: guaranteed or fixed returns, pressure to deposit more, and trouble withdrawing.
The one rule that ties them together
You'll notice a theme. Almost every scam relies on one of three hooks: free money, urgency, or someone pretending to be an authority. So when you feel any of those, slow down. That feeling is the alarm.
A simple habit beats any checklist: pause, then verify independently. Don't click the link, go to the site yourself. Don't trust the DM, check the official channel. Don't act on the countdown, let it run out. Real opportunities survive you taking an hour to think. Scams don't, which is exactly why they rush you.
And the rule from our seed phrase lesson still covers the worst case: no one legitimate will ever ask for your seed phrase. If they do, it's a scam, every single time.
The takeaway
If it feels too good to be true, feels urgent, or comes from someone who contacted you first, treat it as a scam until you've proven otherwise. Pause and verify. That one habit stops the large majority of crypto theft before it starts.