How to Spot a Crypto Scam: A Practical Checklist
Learn how to spot a crypto scam in minutes: a clear red-flag checklist, a decision tree and what to do if you suspect fraud in the EU.
Most crypto scams share three signals: a promise of guaranteed or unusually high returns, pressure to act fast, and a request for money, your seed phrase, or screen sharing. Any one of these, on its own, is enough reason to stop. Legitimate platforms never ask for your seed phrase and never rush you. If one thing feels off, don't send anything — verify first.
The three signals that matter most
You don't need to be technical to spot most fraud. Before anything else, run these three checks:
- Return promise. ‘Guaranteed profit’, ‘risk-free’, fixed daily percentages, or ‘double your Bitcoin’ are not how real markets work. No legitimate service can promise a return on a volatile asset.
- Time pressure. ‘Offer ends tonight’, ‘only 10 spots left’, ‘act now or lose your allocation.’ Urgency exists to stop you from thinking and checking.
- The ask. Anyone requesting your seed phrase (the 12–24 recovery words for your wallet), your password, remote screen sharing, or a ‘verification’ transfer is trying to take your funds. Your seed phrase is the key to your wallet — whoever has it owns your crypto.
If even one of these is present, treat it as a scam until proven otherwise.
The most common types of crypto scam
Scams reuse a small number of scripts. Recognising the pattern is faster than judging each case from scratch.
Fake exchanges and cloned apps
A site or app that looks like a real exchange but is controlled by the fraudster. Deposits arrive, the balance ‘grows’, but withdrawals never complete — or a ‘release fee’ is demanded first. Cloned apps sometimes appear briefly in app stores or are sent as direct download links (an .apk file, a ‘beta’ invite). Always reach an exchange through its official domain, typed by hand, not through a link in a message.
Phishing
A message or page that imitates a trusted brand to capture your login, 2FA code, or seed phrase. Common forms: a ‘security alert’ email, a fake support agent in a chat group, or a lookalike domain (binancé, metamaskk, extra hyphens). The tell is that you're being routed to enter credentials somewhere you didn't navigate to yourself.
‘Guaranteed returns’ and pump groups
Signal groups, ‘trading bots’, and investment ‘funds’ promising steady high yields. Some are outright Ponzi structures paying early users with later users' money; others are coordinated pump-and-dumps, where organisers buy a low-volume coin, hype it, and sell into the buyers they attracted. If the return is fixed and the risk is described as low, that combination doesn't exist in a real market.
Romance and recovery scams
Romance scams build a relationship over weeks, then introduce a ‘can't-miss’ crypto opportunity — often via a fake platform the victim is coached to fund. Recovery scams target people who already lost money: someone claims they can retrieve your funds for an upfront fee. These are second-wave frauds that harvest victim lists. No legitimate party recovers lost crypto for a prepaid fee.
Giveaway scams
‘Send 0.1 ETH to this address and receive 0.2 back’, often using a hijacked or impersonated celebrity or brand account, sometimes with a deepfake video. Any scheme that asks you to send crypto first to receive more back is theft. It never returns anything.
Rug pulls
A new token or DeFi project that attracts deposits, then the creators drain the liquidity and disappear. Warning signs include anonymous teams with no verifiable track record, no independent audit, tokenomics that concentrate supply with insiders, and social channels full of price talk but no working product. Custody matters here: if a project holds your funds and you can't withdraw on demand, you don't control them.
Red-flag checklist
Use this as a quick scan. The more boxes you tick, the higher the risk.
Is this a scam? A decision tree
Follow the path from the top. If any single answer lands you on STOP, do not send money or share information.
Did they contact you first (DM, dating app, group, cold call/email)?
│
├─ Yes ──► Are they steering you toward an investment or platform?
│ ├─ Yes ──► HIGH RISK ─► go to the seed-phrase check
│ └─ No ──► stay cautious ─► go to the seed-phrase check
│
└─ No ──► go to the seed-phrase check
Seed-phrase check:
Do they want your seed phrase, password, a ‘verification’ transfer,
or to screen-share?
│
├─ Yes ─────────────────────────────────► STOP. This is a scam.
│
└─ No ──► Are they promising guaranteed / fixed / unusually
high returns, OR pressuring you to act fast?
│
├─ Yes ─► STOP. Verify before doing anything.
│
└─ No ──► Is the platform on an official register,
and can you reach it via its official
domain (not a sent link)?
│
├─ No ─► STOP. Treat as unverified.
│
└─ Yes ─► Lower risk. Still start
small and withdraw a test
amount before committing.
A test withdrawal — depositing a small amount and successfully taking it back out — is one of the most reliable practical checks. Fake platforms fail it.
A note on ‘regulated’ and payments in the EU
Two EU-specific points worth knowing:
- MiCA registration is not a safety guarantee. Under the EU's MiCA framework, crypto-asset service providers (CASPs) can be authorised in one member state and ‘passport’ across the EU. National registers are still in transition. Registration means a provider has met baseline requirements — it does not mean any specific product is safe or that you can't be scammed by an impersonator using a real firm's name. If you want the fuller picture, read what MiCA means for crypto in the EU.
- Card and SEPA transfers are hard to reverse. Once you've sent a SEPA bank transfer or completed a card payment to a fraudster, recovery is uncertain and slow. Crypto sent on-chain is effectively irreversible. This is exactly why scammers push these methods — and why the checks above matter before you pay.
What to do if you suspect fraud
Speed helps, but so does not making it worse.
- Stop all contact and payments. Don't send a ‘final’ transfer to release funds — that's the same scam continuing.
- Secure your accounts. If you shared a password or 2FA code, change it and enable a hardware or app-based 2FA. If you exposed your seed phrase, move any remaining funds to a new wallet with a fresh seed phrase immediately.
- Check the warning lists. Consult your national financial regulator's warning list — for example the AFM (Netherlands), BaFin (Germany), the AMF (France), the CNMV (Spain), CONSOB (Italy) or the CMVM (Portugal) — and the pan-EU ESMA investor warnings to see if the entity is already flagged. Our latest crypto news and scam warnings also track major cases as they surface.
- Report it. File a report with your national police or fraud-reporting service — Europol maintains a directory of national cybercrime reporting channels — and, where relevant, notify your national financial regulator.
- Tell your bank. If a card or SEPA payment is involved, contact your bank without delay — some cases can be limited if reported quickly.
- Keep evidence. Save messages, transaction IDs, wallet addresses, screenshots, and URLs. They matter for any report.
Reporting rarely recovers funds, but it flags the operation for others and feeds the same warning lists you'll want to check next time.
CryptoCode may earn a commission when you open an account through selected links. This does not affect our editorial assessment.
If you're moving away from an unverified platform and want a safer starting point, compare regulated crypto exchanges that are transparent about custody and fees before you commit any funds. New to this? Start with the fundamentals in our crypto guide for beginners.
Risk warning: Crypto-assets are volatile. You can lose money. This is not financial advice. Only invest what you understand and can afford to lose.
Frequently asked questions
How can I check if a crypto exchange is legitimate?
Reach it only through its official domain typed by hand, confirm it appears on an official register rather than just claiming to be ‘regulated’, read independent reviews, and run a small test deposit and withdrawal before committing. If withdrawals stall or a fee is demanded to release them, stop.
Is it a scam if they ask for my seed phrase?
Yes. No legitimate exchange, wallet, or support agent ever needs your seed phrase. Anyone who asks for it is trying to take your funds. The same applies to requests to screen-share or install remote-access software.
Someone promises to recover my lost crypto for a fee — is that real?
Treat it as a recovery scam. Legitimate parties do not ask for an upfront fee to retrieve lost funds, and fraudsters specifically target people who have already been scammed. Report it instead of paying.
Can I get my money back after a crypto scam?
Often not, because on-chain transfers are irreversible and SEPA or card payments to fraudsters are hard to reverse. Acting fast improves the odds: contact your bank immediately for card/SEPA payments, and report to your national authority. Never pay a ‘release fee’ to get funds back.
Does MiCA regulation mean a platform is safe?
No. MiCA sets baseline requirements for authorised providers across the EU, but it doesn't guarantee any product is safe, and scammers frequently impersonate real, registered firms. Always verify you're on the genuine platform.
Sources
- ESMA — investor warnings and regulatory context for the EU (esma.europa.eu).
- Your national financial regulator's public warning list — e.g. AFM (afm.nl), BaFin (bafin.de), AMF (amf-france.org), CNMV (cnmv.es), CONSOB (consob.it), CMVM (cmvm.pt).
- Europol — directory of national cybercrime and fraud reporting channels (europol.europa.eu/report-a-crime).
Last checked: 12 July 2026.