Crypto-enabled fraud cost victims over $14 billion globally in 2025, with UK investment scam losses up 40% to £221 million. This guide breaks down every major scam type, the red flags to watch for, and the exact steps to secure your digital assets.
Crypto's biggest feature for investors — no bank, no middleman, no one holding your hand — is exactly what scammers exploit. There's no fraud department to call and no reversal button. Here's how the major scams actually work, and the habits that keep you out of them.
Key Takeaways
UK investment scam losses hit £221 million in 2025, up 40% year-on-year, with AI-powered crypto fraud a major driver.
Globally, crypto-enabled fraud cost victims at least $14 billion in 2025 — and "pig butchering" romance-investment scams are now the single costliest category tracked by US authorities.
No legitimate platform ever guarantees returns, asks for your seed phrase, or pressures you to act immediately.
AI-generated deepfakes and cloned celebrity videos made 2025's scams dramatically more convincing than earlier years.
Blockchain transactions are irreversible — prevention, not recovery, is the entire game.
At a Glance
Metric
Figure
UK investment scam losses (2025)
£221 million (+40% YoY)
UK investment scam cases reported by banks (2025)
~15,000
Global crypto-enabled fraud (2025)
$14 billion+
US crypto investment fraud losses (2025)
$7.2 billion
Revenue multiple for AI-powered scams vs. traditional
~4x
UK fraud reporting body
Action Fraud / National Fraud and Cyber Crime Reporting service
Why Crypto Is a Scammer's Paradise
Crypto was built to be borderless, decentralised, and irreversible. That last part is exactly what scammers love. When someone drains a bank account, there's a paper trail and a dispute process. When someone drains a crypto wallet, the transaction settles permanently — there's no branch to visit and no chargeback to file.
Layer on the fact that most people are still learning how it works, that new projects launch daily with zero vetting, and that 2025 saw scammers weaponise AI-generated deepfakes and cloned voices to make their pitches dramatically more convincing — and you get a genuinely difficult environment to navigate. The good news: the scams themselves follow a small number of repeatable patterns. Learn the patterns, and most of them become obvious.
9 min read·September 6, 2026·0
Marcus A. Ellison
Writer
The Scams You're Most Likely to Meet
Romance and "Pig Butchering" Scams
A stranger messages you on a dating app or social media. Weeks of genuine-feeling conversation follow. Eventually they mention a crypto platform that's been paying them well, and offer to show you. You deposit funds, watch "profits" build on a dashboard — then can't withdraw. This is what US authorities now call "pig butchering," and it's the single costliest fraud category the FBI tracks, having overtaken every other type of investment fraud in 2025. Never take investment direction from someone you've never met in person, no matter how real the relationship feels.
Rug Pulls
A new token launches with a slick whitepaper and big promises. Price pumps as money pours in. Then the developers drain the liquidity pool and disappear overnight. Check whether the team is publicly identified, whether the smart contract has been independently audited, and whether liquidity is locked before you invest a penny.
Phishing
A near-perfect fake email or website mimics Coinbase, MetaMask, or your exchange, warning that your account needs "urgent verification." Enter your seed phrase there and it's gone instantly. Fake sites now regularly outrank real ones in search ads. Bookmark your exchange and wallet URLs directly, and never follow a link from an email or text.
Fake Investment Platforms
"Guaranteed 3% daily returns." "94% win-rate AI trading bot." These are Ponzi schemes with a crypto skin — early investors get paid with new investors' money until it collapses. It always collapses. No legitimate investment guarantees profit.
Celebrity and Deepfake Impersonation
Fake livestreams and AI-generated deepfake videos of real public figures promise to "double any crypto sent to this address." Verified accounts get hijacked to lend it credibility. AI-assisted scams generated roughly four times the revenue of traditional scams in 2025 — this category specifically is where that technology shift shows up hardest.
Pump-and-Dump Groups
A coordinated group quietly buys a low-cap token, then floods Telegram and social media with hype. Retail buyers pile in, the price spikes, the organisers sell at the top, and latecomers are left holding a token in freefall.
Red Flags You Should Never Ignore
Treat any one of these as a scam until proven otherwise:
Guaranteed or unusually high returns — no legitimate investment can promise this
Pressure to act immediately — urgency is a manipulation tactic, not a market condition
An anonymous or unverifiable team — real projects have identifiable founders
Requests for your seed phrase or private key — no legitimate service ever needs these
You have to recruit others to earn — a textbook Ponzi/MLM structure
Unaudited smart contracts, especially in DeFi
Withdrawals that are locked "for reinvestment bonuses" — money you can't take out isn't really yours yet
💬 What this means for you: If you spot even one of these, the correct response isn't caution — it's disengagement. Scammers rely on you rationalising the first red flag away.
How to Verify Before You Invest
Research the team — search founders on LinkedIn and GitHub; check for a credible track record
Read the whitepaper critically — is the technology genuinely novel, or just buzzwords?
Check the smart contract — look for a published audit (CertiK, Hacken) and review the contract on Etherscan or BscScan
Assess the community — real projects have genuine discussion, not bot-filled hype channels
Check holder distribution — if a handful of wallets hold the vast majority of supply, that's a red flag
Security Habits That Actually Work
Use a hardware wallet for meaningful holdings. Devices like Ledger or Trezor keep private keys fully offline. For a walkthrough of software wallets and how they differ, see our guide: Best Crypto Wallets for Beginners.
Never store your seed phrase digitally. No photos, no cloud notes, no typing it into any website. Write it down, store it physically, and keep a separate backup.
Separate your DeFi wallet from your savings. If a protocol you're interacting with gets exploited, only the funds in that wallet are at risk.
Turn on app-based two-factor authentication, not SMS — SIM-swapping remains a real and growing risk.
Periodically audit token approvals. DeFi approvals can grant a contract ongoing access to your tokens; tools like Revoke.cash let you review and cancel ones you no longer need.
If You've Already Been Scammed
Stop sending any further money — "recovery fees" and requests to send more to unlock funds are themselves a second scam.
Revoke any smart contract permissions tied to the incident via Revoke.cash.
Move remaining assets to a new, clean wallet if you suspect compromise.
Document everything — transaction IDs, wallet addresses, screenshots, and all communications.
Report it. In the UK, report to Action Fraud (transitioning into the National Fraud and Cyber Crime Reporting service) and check whether the platform involved appears on the FCA warning list. Also notify your exchange — some can flag or freeze addresses linked to known fraud.
Recovery of stolen crypto is rare — the transaction is permanent. Reporting still matters: it helps build the intelligence picture, and it may protect others. Be alert afterward, too — victims are frequently targeted a second time by fake "recovery specialists" who promise to retrieve funds for an upfront fee. No one legitimate operates that way.
What This Means for You
Crypto's underlying technology and opportunity are real — so is the fraud built to exploit hope and inexperience. The single biggest protective habit isn't a specific tool; it's a default scepticism that slows you down whenever someone else is trying to speed you up. Verify before you trust, and treat "why would they lie to me" as the wrong question — ask instead what they gain if you're wrong.
What You Should Do Next
Move meaningful holdings into a hardware wallet — the single biggest security upgrade available
Audit your existing DeFi token approvals at Revoke.cash
Bookmark your exchange and wallet sites directly — never follow a crypto link from an email or DM
Check any platform you're considering against the FCA warning list before depositing
Agree with yourself now: no investment "opportunity" that requires urgency gets your money
Crypto scams succeed by manufacturing urgency and borrowing legitimacy — a fake deadline, a cloned website, a familiar face in a deepfaked video. None of that changes the underlying rule: no legitimate platform guarantees returns, needs your seed phrase, or requires you to move fast. Slow down, verify independently, and remember that on the blockchain, there's no undo button — which makes prevention the only defence that actually works.
FAQ
Can I get my crypto back after being scammed?
In most cases, no — blockchain transactions are irreversible. Still report it to Action Fraud and, where relevant, your exchange; law enforcement has recovered funds in some large-scale cases through cross-border cooperation and blockchain tracing, but this is the exception, not the rule.
Is it safe to keep crypto on an exchange like Coinbase or Kraken?
Reputable, regulated exchanges have strong security practices, but holding large amounts there still carries custodial risk — exchange hacks and insolvency have happened before. For meaningful holdings, pairing an exchange with your own hardware wallet is the safer approach.
How do I know if a DeFi project is legitimate?
Look for an audited smart contract, a publicly identifiable team, locked liquidity, clearly explained tokenomics, and a community with genuine discussion rather than hype. Tools like CertiK and Etherscan's token tracker help verify these before you commit funds.
What's the safest way to store crypto long-term?
A hardware wallet combined with an offline, securely stored seed phrase is the standard. Keep only what you need for active use in a hot wallet, and audit its approvals regularly.
This article is for informational purposes only and does not constitute financial or investment advice. Always conduct your own research and verify any platform against the FCA warning list before investing.
Still with us?
Take the community poll, test yourself with the quiz — or both.
Topic hubs
Browse more articles in these categories and tags.
Marcus A. Ellison is a Personal Finance and Crypto Security writer with over eight years of experience covering digital assets, fraud prevention, and emerging market trends. His work has been referenced by blockchain security firms and personal finance platforms across North America.
125K followers89 articles
Related reading
Related articles
Closely related by shared tags and categories — continue in this topic cluster.
