The Crypto Scam Playbook

Crypto scams cost victims an estimated $5.6 billion in 2023 according to the FBI — a figure that doesn't include unreported cases. The technology changes; the psychological techniques do not. Every major crypto scam exploits a small set of universal human vulnerabilities: greed, trust, urgency, and the fear of missing out.

This is the playbook they use. Knowing it is the best defense.

Pig Butchering (Sha Zhu Pan)

Estimated annual losses: $3B+ Origin: Originally developed by Chinese organized crime networks How it works: Long-term relationship fraud

Pig butchering is the most sophisticated and devastating crypto scam in operation. The name comes from the Chinese phrase for "fattening a pig before slaughter" — the victim is cultivated over weeks or months before being defrauded.

The sequence:

1. Contact is made via a "wrong number" text, dating app, or LinkedIn message
2. The scammer builds a genuine-seeming relationship over weeks — daily messages, emotional investment, sometimes romantic
3. The scammer "casually" mentions they make money trading crypto
4. They offer to teach the victim, directing them to a fake exchange platform
5. The victim deposits real money; the fake platform shows massive fake gains
6. When the victim tries to withdraw, they're told to pay "taxes" or "fees" first
7. After extracting maximum funds, the scammer disappears

Why it's effective: By the time money is requested, the victim has a real emotional relationship with the scammer. They have seen "profits" on screen. They want to believe.

Real scale: Pig butchering operations are run by organized crime syndicates, often using forced labor in Myanmar, Cambodia, and Laos. Tens of thousands of trafficked workers operate these scams against their will.

Protection: Be deeply suspicious of any unsolicited contact that eventually involves crypto. If someone you met online recommends a specific trading platform, verify it independently.

Fake Exchanges and Wallets

Celebrity Impersonation and Giveaway Scams

"Elon Musk is giving away 5,000 BTC — send 1 BTC to receive 2 back!"

This is one of the oldest and most consistently effective crypto scams despite being completely obvious to anyone familiar with it. Scammers hack or impersonate high-profile accounts (Elon Musk, MrBeast, various politicians) and post giveaway announcements.

Why it still works: The scam relies on volume. Millions of people see the post. Even if 99.9% ignore it, the 0.1% who send funds can represent millions of dollars.

The Twitter/X hack of 2020 was the most dramatic example: hackers compromised the accounts of Barack Obama, Joe Biden, Elon Musk, Apple, Uber, and others simultaneously to run a giveaway scam. They collected approximately $120,000 in Bitcoin before the hack was contained.

Phishing

Crypto phishing follows the same mechanics as traditional phishing with one critical difference: crypto transactions are irreversible. Once funds leave your wallet, they cannot be recalled.

Common vectors:

• Fake MetaMask browser extensions that steal seed phrases
• Email phishing mimicking exchange security alerts
• Discord DMs from "support" claiming your account has an issue
• Google ads for "Coinbase" linking to a cloned login page
• Fake NFT mint websites distributed via social media

The seed phrase rule: No legitimate application, support agent, or website will ever ask for your seed phrase. Ever. If something asks for it, it is a scam.

Smart Contract Exploits (Not Scams, But Costly)

Distinct from fraud, but responsible for billions in losses: smart contract exploits where attackers find vulnerabilities in DeFi protocol code.

Protocol	Year	Amount Lost	Exploit Type
Ronin Network	2022	$625M	Compromised validator keys
Poly Network	2021	$611M	Cross-chain message exploit
Binance Bridge	2022	$570M	BSC bridge vulnerability
Wormhole	2022	$320M	Signature verification bypass
Euler Finance	2023	$197M	Flash loan attack

These are not fraud by developers — they are external attacks on code vulnerabilities. However, the effect on investors is often similar.

Red Flags: Universal Warning Signs

Regardless of scam type, certain signals appear consistently:

Urgency. "This offer expires in 10 minutes." Pressure to act quickly is a manipulation technique designed to bypass rational evaluation.

Guaranteed returns. No legitimate investment offers guaranteed returns. Crypto is volatile. Anyone promising guaranteed profit is lying.

Unsolicited contact. Legitimate companies do not cold-contact people on Telegram, WhatsApp, or dating apps offering investment opportunities.

Request for seed phrase. Never. Not once. Not for any reason.

Fees to release funds. Legitimate platforms process withdrawals without requiring upfront fee payments. "Pay $500 in fees to unlock your $50,000" is always a scam.

If it sounds too good to be true. It is.

If You've Been Scammed

1. Stop sending money immediately — additional payments to "recover" funds are always part of the scam
2. Document everything — screenshots, wallet addresses, communication records
3. Report to FBI IC3 (ic3.gov), FTC (reportfraud.ftc.gov), and your country's financial regulator
4. Report to the blockchain — submit scam addresses to CryptoScamDB and Chainabuse
5. Consult a lawyer if the amount is significant
6. Talk about it — shame keeps many victims silent; sharing experiences helps others

Crypto transactions cannot be reversed, but scammers can be tracked, identified, and prosecuted. The blockchain is forever.