Getting Started
How to Avoid Crypto Scams: 10 Red Flags for Beginners
Spot the 10 red flags of crypto scams and protect your money.
Crypto's irreversibility makes it a favorite target for scammers. The good news: almost every scam shows the same warning signs. Learn these and you avoid the vast majority.
The golden rules
- No one legit guarantees profits. "Guaranteed 10% a day" is always a scam.
- Never share your seed phrase or 2FA codes. Not with "support," not with anyone.
- If you must act "right now," it's a scam. Urgency is a manipulation tactic.
10 red flags
| Red flag | Why it's dangerous |
|---|---|
| "Double your crypto — send 1, get 2" | Classic giveaway scam; you just lose the 1 |
| DM from "support" asking for your password | Real support never asks |
| Fake exchange/wallet apps | Steal your login or seed phrase |
| Romance / "investment mentor" chats | Long-con "pig butchering" scams |
| Job offers paying in crypto tasks | Task scams that demand deposits |
| Airdrops asking you to "connect & approve" | Malicious token approvals drain wallets |
| Lookalike domains (0kx, okx-vip...) | Phishing clones |
| Screenshots of huge profits | Fabricated social proof |
| Pressure to move off-platform | Removes buyer protection/escrow |
| "Recovery agents" who un-scam you | A second scam on victims |
How to protect yourself
- Bookmark the real exchange domain and only log in from it.
- Use an authenticator app for 2FA and a withdrawal allowlist.
- Verify token contracts and revoke unused wallet approvals.
- Move long-term holdings to self-custody.
- Slow down. Sleep on any "opportunity."
New to exchanges? Start safely with our OKX registration guide.
Anatomy of a "pig butchering" scam
These long-con scams follow a script: (1) a friendly stranger contacts you by "accident" and builds rapport over weeks; (2) they casually mention their trading profits and show a slick platform; (3) your first small "investment" pays out — you can even withdraw it; (4) you invest bigger, the platform shows huge gains, but withdrawal now requires "taxes" or "unlock fees"; (5) the platform vanishes. The early payout is the hook — legitimate platforms never need you to recruit trust through a stranger's DMs.
Anatomy of an approval drain (Web3 wallets)
A malicious site asks you to "connect wallet" and sign what looks like a routine transaction — but the signature grants unlimited permission to move your tokens. Defenses: never connect your main wallet to unknown sites, read what each approval actually requests, keep a small "hot" wallet for experiments, and periodically revoke old approvals with a reputable token-approval manager.
If you've already been scammed
- Cut contact — block them; never pay a "release fee."
- Secure your accounts — change passwords, reset 2FA, review logged-in devices.
- Document everything — chats, addresses, transaction IDs, payment records.
- Report it — to the platform involved and your local cybercrime channel.
- Beware round two — "recovery agents" who promise to get your money back for an upfront fee are a follow-up scam targeting victims.
Small habits that prevent most losses
Bookmark official domains and only log in from bookmarks; treat every DM from "support" as fake by default; never type your recovery phrase anywhere online; sleep on any decision that involves urgency.
FAQ
I sent crypto to a scammer — can I get it back? Usually no; transactions are irreversible. Beware "recovery" services (often a second scam). Is a giveaway ever real? Treat "send to receive" as always fake.
Educational content only. Not financial advice.