It often starts with a small win. A trading app shows your first deposit growing daily, a friendly mentor explains each move, and a test withdrawal seems to work.
Then a bigger withdrawal runs into a fee, a tax or a “verification deposit”. Here’s how that trap is built, and how to get out before it costs more.
How Crypto Investment Scams Work
The platform names change every few weeks, but the structure barely moves. Once you know the stages, you can tell where you are and what the next request will be.
First Contact Feels Personal
The pitch might be a celebrity deepfake, a fake news article, a “wrong number” text, a dating match or an invitation to a WhatsApp or Telegram investing group.
Nobody asks for money on day one. The goal is trust, so the conversation can run for days or weeks before anyone mentions a platform.
The Platform Shows Profits You Can’t Touch
You’re sent to a website or app that looks like an exchange. Your balance climbs, but the operators control those numbers. Your money may never be traded at all.
Some platforms let you withdraw a small amount early on. That payout is bait. It builds the confidence needed for a much larger deposit.
The Withdrawal Wall
When you try to take out real money, a new obstacle appears. It might be a tax, an anti-money-laundering check, a “membership upgrade” or a penalty for breaking the rules.
Each payment unlocks another fee. The scheme keeps collecting until you stop paying, and then the account freezes or the site disappears.
The Second Scam: Recovery Offers
After the loss, strangers offer to trace and return your crypto for an upfront fee. Some pose as lawyers, ethical hackers or government agents.
This follow-up scam deliberately targets people who have just been robbed, when they’re most desperate for good news.
The Versions You’re Most Likely to Meet
- AI trading platforms: sites sold with fake celebrity videos that promise automated profits from a small deposit, followed by calls from an “account manager”.
- Fake exchanges: lookalike names such as Huobit for Huobi, demo accounts that always win, and withdrawals that stay “under review”.
- Investment groups: WhatsApp or Telegram chats led by a “professor” whose early tips work, until a pump-and-dump or a fake fund takes the deposits.
- Celebrity giveaways: videos telling you to register on a site and enter a promo code to claim free Bitcoin.
- Promo-code crypto casinos: a large free bonus you can only withdraw after making a deposit of your own.
- Wallet drainers: fake airdrops, token presales and trading tools that ask you to connect a wallet and approve a transaction.
- Exchange impersonation: texts and emails about a new login, a withdrawal or a locked account that push you to call a number or sign in.
- Task jobs paid in crypto: online “work” that pays small USDT amounts, then demands deposits to clear a negative balance.
Red Flags and How to Check a Platform
You can run most of these checks in a few minutes, without sending a cent. Do them before any deposit, and again before any fee.
- Guaranteed or fixed returns are a sales script. Real investments can lose value, so fixed daily profits and “no risk” promises tell you what you need to know.
- Check registration yourself. In the US, use FINRA BrokerCheck and Investor.gov. In the UK, search the FCA register.
- In Canada, use the Canadian Securities Administrators registration search. A brand-new platform name may not appear anywhere, which is a warning in itself.
- Search the platform’s name with “warning” and the name of a regulator. Regulators publish alerts about unlicensed firms and impersonators, including lookalike names.
- Check the domain’s age with a WHOIS lookup. A platform claiming years of history on a domain registered last month isn’t telling the truth.
- Notice who chose the platform. If a stranger, a dating match or a group admin picked it for you, treat the platform as part of their plan.
- A fee to withdraw your own money is the clearest sign. Real exchanges take charges from your balance, and taxes go to the tax authority, not to a trading site.
- Never install remote-access apps such as AnyDesk or TeamViewer for an “account manager”. Never share a seed phrase or recovery phrase with anyone, for any reason.
- Before connecting a wallet, read the exact web address. One extra letter is enough for a drainer site, and a single approval can hand over your tokens.
- Celebrities and news anchors don’t hand out crypto or trading tips through ads. Check their verified accounts, and visit the news site directly instead of following the ad.
What to Do If You Sent Money or Connected a Wallet
Speed matters most in the first hours. Crypto transfers usually can’t be reversed, but funds still sitting at a regulated exchange can sometimes be frozen.
- Stop all payments, including “taxes”, “release fees” and “verification” deposits. No fee will unlock a balance that only exists on the scammer’s screen.
- Record the transaction hashes, wallet addresses, amounts, dates, platform addresses, usernames and phone numbers. Screenshot the chats before they’re deleted.
- Contact the exchange or wallet service you sent the crypto from. Give them the transaction details and the receiving address, and ask them to flag it.
- If you paid by card or bank transfer, call your bank now. Some banks can stop or recall a very recent payment, although many crypto purchases can’t be reversed.
- If you connected a wallet or approved a transaction, revoke the token approvals and move any remaining funds to a new wallet with a new recovery phrase.
- If you installed a remote-access app or a “trading assistant”, uninstall it, scan the device for malware and change your passwords from a different device.
- Turn on two-factor authentication for your exchange and email accounts, using an authenticator app rather than text messages where you can.
- Expect recovery offers and refuse them. Government agencies don’t charge fees to return stolen money, and genuine tracing firms don’t promise results for an upfront payment.
If Someone You Love Is Being Drawn In
People inside these schemes often defend the platform, because admitting the problem means admitting the loss. Arguing about the mentor rarely works.
- Ask questions instead of making accusations. Who recommended the platform? Is it registered? Has a large withdrawal ever arrived in their own bank account?
- Offer to run the registration check together. A neutral search result is easier to accept than your opinion.
- Suggest one firm test: no new money until a full withdrawal clears with no fee attached. A real platform passes. A scam invents a reason.
- Watch for secrecy, new loans, cash withdrawals or crypto ATM visits. Those are signs the pressure is increasing.
Where to Report Crypto and Investment Fraud
Report even if the amount feels small or embarrassing. Investigators link cases by wallet address, and one report can connect to hundreds of others.
- United States: file with the FBI’s Internet Crime Complaint Center (IC3) and the FTC at ReportFraud.ftc.gov.
- US investment offers can also be reported to the SEC or the CFTC, depending on whether they involved securities, commodities or crypto trading.
- UK: in England, Wales and Northern Ireland, use Report Fraud (formerly Action Fraud) or phone 0300 123 2040. Scottish victims should ring Police Scotland on 101.
- Canada: tell your local police first, then file with the Canadian Anti-Fraud Centre online or by phone at 1-888-495-8501.
- Platforms: report the receiving address to the exchange you used, and report the ad, group or profile to the social network or messaging app.
Keep every report number. Your bank, your exchange and later a tax adviser may ask for it.
Our Crypto and Investment Scam Investigations
These reports cover the patterns above in detail. Most include the exact warning signs for that platform and the next steps for anyone who already paid.
Fake AI Trading Platforms and Celebrity Investment Ads
- Quantum AI: doctored Elon Musk videos promising huge returns from a small deposit through “AI trading”.
- Immediate X App: a fake AI trading platform promoted with celebrity images and fake news pages.
- Fake Kevin O’Leary ad: a copied news story that leads to rotating AI trading platforms, sales calls and blocked withdrawals.
- Ryan Reynolds “American Oil” investment: deepfake videos and a fake Fox Business article selling a $250 “oil investment”.
Fake Exchanges and Trading Platforms
- GROKR Exchange: regulator warnings from Austria and Spain, and why an SEC filing isn’t the same as approval.
- Huobit.io: a Huobi lookalike exchange with staking plans and no named company, now offline.
- FentiCoin.com: demo profits, site code that favors losses on real accounts, and withdrawals held for approval.
Investment Groups, Private Chats and Crypto Jobs
- WhatsApp pump-and-dump groups: winning tips that build trust before a manipulated small-cap crash.
- Bonchat KKR investment group: a family friend’s invitation, a funded first deposit and an exchange site with withdrawal barriers.
- XTB MENA Telegram impersonators: fake contracts and advance fees using a regulated firm’s name.
- Fun Coffee: a coffee-shop story used to recruit people into a Tether-paying scheme now tied to police cases.
- Holdely task job: small USDT payouts, then a frozen balance and pressure to deposit more.
Celebrity Giveaways and Promo Codes
- MrBeast crypto scams: deepfakes, fake giveaways, “secret coins” and withdrawal fees.
- Elon Musk Bitcoin promo codes: deepfake giveaway videos that send viewers to sites promising free Bitcoin.
- Coinfari.com: a livestream-style celebrity video asking viewers to register and enter a promo code for free Bitcoin.
Promo-Code Crypto Casinos
- Zenoroll.com: a free crypto reward for a promo code, followed by a deposit demand before any withdrawal.
- Trixrum.com: a lapsed promo-code casino domain, and what you can still do if you deposited.
- Rollobix: a vanished crypto casino with a name close to Rollbit and Rollbet, and how to tell them apart.
- Wrapwin.com: a slick casino lobby and signup bonus that stop working at the withdrawal step.
Wallet Drainers, Fake Airdrops and Presales
- Solana giveaway scams: fake SOL giveaway sites that promise free tokens in exchange for wallet access.
- Fake Aster airdrop sites: portals that trick users into approving malicious contracts.
- Fake ETH farming sites: yield-farming lookalikes built to drain connected wallets.
- $GROK presale: a fake token sale that collects wallet access and personal data.
- Fomoo.family: a one-letter typo of a real trading platform that runs a wallet drainer.
- Telegram Safeguard bot: fake group verification pages that drain wallets once connected.
- Fake AI trading assistant: an installer that can swap browser wallets for counterfeit versions.
Fake Exchange Alerts, Texts and Emails
- Coinbase “New Device Registered”: fake security alerts that push you to call a fake support number.
- Coinbase withdrawal code texts: urgent messages about a withdrawal, designed to take over your account.
- Binance “New Login Detected”: texts about a login from another city that lead to a scam phone line.
- Crypto.com withdrawal emails: fake transaction alerts with risky attachments and cloned login pages.
- BlockFi distribution emails: which payout messages are real, and how wallet phishing copies them.
- Bittrex account verification email: a fake liquidation notice that promises access to an outstanding balance.
Crypto Recovery Scams
- Crypto recovery services: how fake recovery firms charge upfront fees to people who already lost money.
- iBolt Cyber Hacker: “hackers” who promise to retrieve stolen crypto and take more money instead.
- Ghost Mystery Recovery Hacker: fake testimonials that steer victims toward a paid “recovery” service.
More MalwareTips guides: online shopping scams, health supplement scams and browser hijacker removal.
Frequently Asked Questions
Can I get my crypto back after a scam?
Sometimes, when funds reach an exchange that can freeze them or police trace and seize them. It’s uncommon, so report quickly and never pay anyone who guarantees recovery.
Why does the platform want a fee before I can withdraw?
Because the balance isn’t real. The fee is simply the next payment. Real platforms deduct charges from your balance, and taxes are paid to the tax authority.
The platform let me withdraw a small amount. Is it legit?
No. A small early withdrawal is a common way to build trust before a larger deposit. Judge the platform by its registration and by who sent you there.
How do I check if a crypto trading platform is legit?
Search your country’s regulator register and warning lists, check the domain’s age, and be wary of anyone who chose the platform for you. Unregistered and unknown means no.
Are crypto recovery services real?
Some legitimate firms trace blockchain payments for lawyers and police. They don’t cold-call victims or promise your money back for an upfront fee. Unsolicited recovery offers are a known scam.
What should I do if someone has my seed phrase?
Treat that wallet as compromised. Create a new wallet with a new recovery phrase on a clean device, move what’s left immediately, and never reuse the old phrase.
The Bottom Line
Never deposit on a platform that a stranger, group admin or ad picked for you, and never pay to unlock a withdrawal. Those two rules stop most of these scams.
If you’ve already paid, stop the payments, collect the transaction details and report today. Then expect recovery offers, and ignore every one that wants money upfront.