How crypto scams work: the script behind most cases

Why crypto attracts fraud

Crypto-assets have a few features that criminals find convenient. A transfer can cross borders in minutes, at any hour, without a bank clerk asking questions. Once it is confirmed on a public blockchain there is normally no central operator who can reverse it. Recipients are identified by long strings of letters and numbers rather than names, so a victim often cannot tell who received the money. And because the subject is new to many people, a confident stranger can easily sound like an expert.

None of this makes the technology itself a scam. It does mean that some of the safety nets people rely on with bank cards — chargebacks, a fraud department, a branch to visit — may be missing. Your own habits carry more of the weight.

The four stages of a typical scam

Consumer agencies such as the US Federal Trade Commission and the UK Financial Conduct Authority describe hundreds of different stories. Underneath, the structure is remarkably similar.

1. Contact

The fraudster reaches you first. It might be a "wrong number" text, a friendly comment under a post, an advert, a search result, a call that appears to come from your bank, or an e-mail about a problem with an account. The opening message is usually harmless. Its only goal is to start a conversation.

2. Trust

Next comes credibility. Sometimes it is borrowed: a familiar logo, the name of a regulator, a celebrity photo, a fake news article. Sometimes it is built slowly over weeks of daily chat. Some schemes let you take out a small amount at first, or show an account page where a balance appears to grow, so that the story seems proven.

3. Urgency

Then the clock starts. An account will be "frozen" unless you act now. An offer "ends tonight". A fee must be paid "before the transfer can be released". Urgency exists to stop you from checking anything or talking to anyone.

4. The request

Finally, you are asked for something that cannot be undone: a transfer to an address the fraudster controls, remote access to your device, a one-time code, or the most valuable prize of all — your recovery phrase. Once you hand that over, the scam has done its job.

What fraudsters are really after

It helps to know which things are dangerous to give away, because the request is often wrapped in innocent words such as "verify", "secure" or "upgrade".

• Your recovery phrase or private keys. Whoever has them controls the funds. No genuine service needs them. See what a recovery phrase is and why nobody may ask for it.
• A transfer. Real platforms do not ask you to send funds to prove that you own an account or to "unlock" it.
• One-time codes. A code sent to your phone is for you to type into a site you opened yourself, never to read out to a caller.
• Remote access. Screen-sharing and remote-control apps give a stranger the same view and control of your device that you have.
• Identity documents. Photos of a passport or driving licence can be used to open accounts in your name.

Why careful people still get caught

Scams do not target a lack of intelligence. They target moments: being tired, lonely, worried, excited or rushed. Organised fraud groups test their scripts on large numbers of people and keep what works, so the messages are polished. Being caught out is not a personal failing. Talking about it openly is one of the most effective ways to protect others, because the same scripts are used again and again.

Habits that break the script

Because the stages are so predictable, a handful of habits interrupt nearly all of them:

1. Treat unexpected contact as unverified. If someone reaches out first, assume nothing about who they are, however convincing they seem.
2. Check through your own channel. Find the official website or phone number yourself, not from the message, and ask there.
3. Pause when you feel rushed. A genuine organisation will still be there tomorrow.
4. Keep secrets secret. Recovery phrases, private keys, passwords and one-time codes are never shared, whatever reason is given.
5. Say it out loud. Describing the situation to a friend or relative often makes the problem obvious within a minute.

The other guides on this site look at each common pattern in detail. If you read only one more, choose the guide to social engineering and pressure tactics, because it explains the psychology behind all of them.

This guide is general safety education. It is not financial, legal or security advice for your individual situation, and it does not recommend acquiring, holding or disposing of any crypto-asset. If you think you are dealing with fraud, contact your bank and the police.