Crypto scams can combine legitimate technology with fabricated identities, convincing websites, real blockchain transfers, manipulated account dashboards, and carefully constructed relationships. A person may buy genuine cryptocurrency through a legitimate exchange and make a real on-chain transfer while the supposed investment receiving those funds is entirely fraudulent.
That makes crypto scam verification less about spotting one obvious red flag and more about checking each critical claim independently before money is sent, a wallet permission is granted, or a transaction is signed.
source -> identity -> platform -> offer -> asset or contract -> transaction -> exit
The goal is not to prove that an opportunity is safe, profitable, or suitable. It is to identify contradictions before an irreversible or difficult-to-reverse action is taken.
Scam Detection Starts Before the Transaction
Many relationship investment scams begin long before anyone requests money. FBI cryptocurrency investment fraud guidance describes schemes in which scammers build trust, direct victims to fake investment platforms, display fictitious profits, and encourage progressively larger deposits.
The joint SEC, CFTC, FINRA, and NASAA investor alert documents similar patterns involving wrong-number texts, dating and social platforms, professional-networking sites, group chats, impersonated professionals, altered media, and fake trading information.
A polished presentation is therefore not evidence of legitimacy. The strongest defense is a process that separates the source, identity, platform, offer, asset, transaction, and withdrawal path instead of allowing one reassuring signal to validate everything else.
Step 1: Examine How the Opportunity Reached You
Unexpected contact deserves additional scrutiny, particularly when a stranger or newly formed online relationship moves toward investing, cryptocurrency, or requests to transfer money. Relationship scams often begin through unsolicited texts, dating apps, social media, professional platforms, group chats, or messages that appear to have reached the wrong person.
Moving quickly from the original platform to a private messaging service is another recurring pattern. It does not prove fraud, but it removes any reason to treat the original account’s presence on a familiar platform as validation.
This page does not need to duplicate phishing defenses. Kenson’s separate guide to phishing and social engineering attacks covers deceptive links, sender verification, and broader manipulation tactics in more depth.
The first question here is: Why is this person or organization contacting me, and can the origin of the request be verified independently?
Step 2: Verify the Identity Outside the Conversation
Do not verify a person’s identity only with evidence that person supplied. If someone claims to represent an exchange, project, investment firm, government agency, or professional service, reach the organization through a known official site or contact channel rather than using a number, profile, QR code, or link sent by the claimant.
Where a claimed role is subject to registration or licensing, check the applicable regulator or official database. A valid registration is not an endorsement and does not guarantee that a particular communication is genuine; it is only one identity check. The joint relationship-investment alert also recommends independent research rather than relying on online appearance or claimed credentials.
Photographs are weak proof of identity. CFTC romance-fraud guidance recommends reverse-image searching photos used by new online contacts because scam profiles may reuse or manipulate images.
Identity verification and investment verification are separate. A real company can be impersonated, and a real executive’s name or photograph can be attached to a fraudulent account.
Step 3: Verify the Website, App, and Platform Separately
Fake crypto investment platforms can look highly credible. The joint regulator alert warns that fraudsters may direct targets to convincing websites or even apps available through well-known app stores. App-store availability does not establish that the investment activity inside an app is legitimate.
Check the domain independently. Compare it with the organization’s known official site rather than relying on a search advertisement or link sent by the promoter. Look for altered spellings, misleading subdomains, inconsistent company names, unexplained payment destinations, or contact details that do not match the claimed entity.
A displayed account balance is not proof that assets are being held or invested. FTC investment-scam guidance warns that cryptocurrency investment scams can use fake sites or apps that display apparent gains while the company itself is not real.
This is one of the most important crypto scam red flags: an interface can look genuine while the underlying investment does not exist.
Step 4: Test the Offer, Not the Story Around It
Strip away the relationship, screenshots, testimonials, and marketing. Then test the actual offer.
Guaranteed or unusually consistent returns, little or no risk, secret methods, supposed insider access, artificial scarcity, and pressure to act quickly are established investment-fraud warning signs. The FTC’s current investment-scam guidance states that investments involve risk and that guaranteed profits or returns are characteristic scam claims.
Payment instructions can reveal contradictions too. Be cautious when someone claiming to represent one organization directs payment to an unrelated company, individual, or wallet without a credible explanation. Secrecy, pressure to borrow, or instructions to avoid discussing the opportunity with family or advisers should increase scrutiny.
The question is not whether the story sounds sophisticated. It is: Do the offer’s central claims remain credible after they are checked through independent sources?
Step 5: Verify the Asset or Contract Independently
Crypto-specific scams can use real blockchains and counterfeit or malicious tokens. Ethereum.org’s current scam-token guide notes that tokens can copy legitimate names and symbols and that malicious interfaces can trick users into signing harmful transactions.
Where a project claims that a specific token or contract is involved, obtain the contract address from an independently reached official source and cross-check it with a reputable block explorer or other authoritative project material. A matching ticker symbol or token name is not enough.
Liquidity, transfer behavior, reported contract warnings, and administrative privileges can provide additional context, but none is conclusive by itself. Low liquidity does not automatically prove fraud, and substantial liquidity does not prove legitimacy. Do not test an unfamiliar token by sending funds merely to see whether it can be sold.
The key distinction is: a legitimate-looking website does not validate the token, and a genuine token contract does not validate the person promoting it.
Step 6: Understand What the Wallet Is Being Asked to Authorize
Simply connecting a wallet does not, by itself, transfer tokens. The critical risk arises when the user signs a transaction, message, or token approval that authorizes an action they did not intend.
Before approving anything, verify the intended network, recipient, asset, amount, contract, and action. Wallet approvals can grant a smart contract permission to spend tokens without moving them immediately. Ethereum.org’s scam-support guidance warns that malicious approvals, including unlimited spending permissions, can remain usable after the initial interaction.
Blind signing creates a related problem. In May 2026, the Ethereum Foundation’s Clear Signing initiative emphasized human-readable transaction descriptions so users can better understand what they are authorizing before approval.
If a wallet prompt cannot explain what an approval or signature will do, or the permission appears broader than the intended action, stop and verify before signing.
Broader account, device, and storage protection belongs elsewhere. Kenson’s digital asset cybersecurity guide and digital asset trading security guide cover those controls in greater depth.
Step 7: Treat Withdrawal Problems as a Major Warning
A successful deposit does not prove that a platform is legitimate. Neither does a small successful withdrawal. The FBI and the joint regulator alert both describe schemes in which early withdrawals or displayed profits are used to build confidence before victims are asked for much larger deposits.
Later, withdrawals may be blocked, and the victim told to send additional money for taxes, fees, verification, or account unlocking. The FBI explicitly warns victims not to pay additional fees or taxes to withdraw money from a suspected cryptocurrency investment fraud.
Real financial services can have genuine tax, fee, and compliance obligations. The warning sign is the combination of an already-funded account, unexpected out-of-pocket payment demands, changing explanations, blocked withdrawals, and pressure to send more cryptocurrency before supposedly owned funds can be released.
Worked Example: When Legitimate-Looking Pieces Form a Scam
A person receives an accidental-looking text from a stranger. Over several weeks, the contact develops into a friendship. The stranger eventually discusses successful crypto trading and recommends a platform.
The victim buys real cryptocurrency through a legitimate exchange and transfers it to an address supplied by the contact. The blockchain transfer is real. A polished app then shows profitable trades and a rising balance. A small withdrawal succeeds, encouraging the victim to deposit substantially more.
When the victim later requests a larger withdrawal, the platform demands a separate cryptocurrency payment for supposed taxes or account verification.
Several components are genuine, but none validates the investment. The purchased cryptocurrency was real. The blockchain transfer was real. The app may be professionally built. The small withdrawal may have been deliberately permitted.
The critical fact that remains unverified is whether the fake crypto investment platform actually held assets or conducted the investment activity it claimed. This pattern closely matches fraud structures documented by the FBI and U.S. financial regulators.
A Stop, Verify, Proceed Framework
| Decision | Examples | Response |
| STOP | Seed phrase or private key requested; guaranteed profits; unexplained recipient; payment demanded to release funds; wallet action cannot be understood. | Do not send, sign, connect further, or pay. Verify the request independently. |
| VERIFY | Unsolicited investment contact; unfamiliar platform; claimed regulated professional; new token or contract; unusual approval; urgency or secrecy. | Check identity, domain, platform, asset or contract, recipient, and transaction purpose through independent sources. |
| PROCEED | Critical claims have been independently checked, and the requested transaction is understood, with no unresolved contradiction found in the scam-screening process. | Proceed only with the separate evaluation appropriate to the transaction. Passing a scam screen does not establish safety, suitability, profitability, or freedom from other risks. |
If Money Has Already Been Sent
Stop sending additional funds. Do not pay supposed recovery agents who promise guaranteed recovery for an upfront fee. FBI guidance warns that recovery schemes frequently target people who have already lost money.
Preserve transaction hashes, wallet addresses, screenshots, domains, app names, phone numbers, usernames, emails, and conversation history. Contact any legitimate exchange, custodian, or financial institution involved as quickly as possible. If funds reach a centralized exchange, that intermediary may sometimes be able to freeze an account or assist law enforcement, but recovery is not guaranteed.
For U.S. reporting, the FBI directs cryptocurrency-investment-fraud victims to the Internet Crime Complaint Center, IC3. Other jurisdictions have their own law-enforcement and financial-fraud reporting channels.
If a suspicious application received token approvals, review and revoke unnecessary permissions where appropriate. Ethereum.org’s scam-support page explains that malicious approvals can remain usable after the initial interaction.
Verification Should Happen Before Trust Becomes Authorization
Advanced crypto scam detection is not about memorizing every fraud variant. Scam scripts, identities, apps, tokens, and communication channels change too quickly for a static list to remain complete.
The durable approach is to verify the chain of claims before acting: Where did the request originate? Who is behind it? Is the platform genuine? Are the offer’s claims credible? Does the token or contract match authoritative information? What will the transaction authorize? Can funds be withdrawn without unexplained additional payments?
That process cannot prove an investment will succeed. It can expose contradictions before a transfer, approval, or signature becomes difficult or impossible to undo.
Continue the Research
Kenson Investments provides education, research, analysis, and market intelligence on digital-asset security, market infrastructure, and operational risk. For questions about Kenson’s research coverage and educational resources, Contact Us.
