XDRIPACADEMY
Sign in

Lessons·Threats·8 min·Beginner

The scams everyone falls for

Most crypto scams are not new. They are old confidence tricks dressed in technical language. Here are the ones that catch smart people, why they work, and how to recognize them on the way in.


Crypto did not invent the scam. It just gave existing scams a new costume.

Every confidence trick that works in crypto has an ancestor in a real-world equivalent. Pump and dump was around when telephones were new. Pig butchering was a long con before chat apps existed. Romance scams predate the internet by centuries. Ponzi schemes are named after a man born in 1882. The format is old. The vocabulary is new. People keep falling for them because human nature is older than every defense.

This lesson is the field guide to the scams that catch otherwise careful crypto holders. Not because you are gullible, but because the patterns are well-engineered to bypass the parts of your judgment that usually hold.

Why smart people fall for these

Three reasons compound, and most successful scams use all three.

  1. The story arrives before the skepticism. You are emotionally engaged before your analytical brain catches up. Once engaged, you are looking for reasons it is real, not reasons it is fake.
  2. The cost of disbelief feels asymmetric. Missing a real opportunity feels worse, in the moment, than falling for a fake one. The scam exploits that asymmetry.
  3. Social proof is manufactured. Other people seem to believe it. Reviews, screenshots, comments, "friends" who have already participated. The signal that "everyone is in on this" is the easiest signal to fake and the hardest one to ignore.

If you ever find yourself thinking "this is too good to ignore" or "I will look stupid if I miss this," the script is running. That is the moment to slow down, not the moment to act.

Key takeaway

Scams work because they engage emotion before analysis, exploit the fear of missing out, and manufacture fake social proof. Knowing the mechanism does not make you immune. Building the habit of pausing whenever the story is unusually compelling is what makes you immune.

The scams, by category

We will not list every scam. We will list the categories, with one representative example each, so you have the shape rather than a memorized list. New variants appear constantly. The shapes do not change.

1. Send-first-to-receive-more. Any scheme where you send funds first and are promised a larger amount in return. The classic crypto version is the "send 1 ETH to this address and you will receive 2 ETH back" giveaway scam, often run from compromised influencer accounts or fake project handles. There is never a legitimate version of this. The pattern fails the simplest test: a generous person can simply send you funds; they cannot be made more generous by you sending them funds first.

2. The investment platform with screenshots. A "platform" with a polished interface, a chart that goes up, daily withdrawals that work for small amounts, and increasing pressure to deposit more. Eventually the withdrawals stop or fees appear. By that point, deposits have grown. This pattern is the modern home of pig-butchering scams, often introduced through a long romantic or social conversation that has nothing to do with crypto until it does. Test withdrawal first means almost nothing here, because the platform is designed to honor small ones to build trust before the larger ones disappear.

3. The token launch you have to act on right now. A presale, fair-launch, or whitelist with a closing window. Often involves connecting your wallet to a site that will then prompt you to sign something you do not understand. Sometimes the token is real but worthless. Sometimes the connection itself is the scam. The defining feature is the urgency: there is no time to think, no time to verify, no time to research. Real launches survive a slow review. Fake ones do not.

4. The fake support agent. Covered in the phishing lesson. Worth listing here because the scam is older than crypto. "Support" reaching out, in DM or email or phone call, to "help with your account." The end of the conversation is always one of the three phishing destinations: your seed, a malicious signature, or remote access. Real support waits for you to come to them, in their channel, on their terms.

5. The recovery scam. Specific to crypto and uniquely cruel. After someone loses funds to one of the scams above, a "recovery service" or "blockchain forensics" team contacts them offering to recover the stolen funds for a fee. The fee is paid. Nothing is recovered. The service was the same network of scammers, harvesting the victim a second time. Lost crypto is almost never recoverable. Anyone selling recovery is selling the second half of the scam.

6. The friend with a system. Someone you know, in real life, who has been making consistent returns through a method they will not fully explain. They want to bring you in. The friend is usually a victim themselves, in an early phase where they have made some money on small movements while the structure is still recruiting. By the time they realize, your money is in too. This is how Ponzi schemes recruit. The chain version is more efficient than the wire-transfer version, which is the only modern thing about it.

7. The romance long con. Not exclusively crypto, but increasingly using crypto as the extraction layer. Weeks or months of relationship-building, slowly transitioning to "let me show you how I have been doing well in this market," ending in deposits to a platform you would have laughed at on day one. The careful pace is the entire point. Anything that walks you slowly toward a financial ask, especially through a channel that has been emotionally rewarding, is operating on this template.

8. Address poisoning, clipboard hijacking, signing exploits. Covered in their own lessons. Listed here because they are scams in the broader sense, even though they read more like attacks. The line between "scam" and "attack" blurs in crypto. If the result is funds you authorized leaving your control, the category is the same.

Watch out

The two compounding signals that almost always indicate a scam: unusual urgency, and information asymmetry. If something is moving faster than you have time to verify, and the other side knows or claims something you cannot independently check, you are in the script. Not always. But often enough that the rule is worth more than its occasional false positive.

The defensive habits

There are not many of these, and they work across every variant.

  1. Slow down whenever the story compels you. The fifteen-minute pause from the phishing lesson is the single most useful habit in this entire pillar.
  2. Verify out of band. If a real friend or a real platform appears to be contacting you about something important, leave the channel and verify through another channel you trust. A phone call. A different app. A direct visit to the real website typed by hand.
  3. Refuse send-first asks, every time. No exceptions. Even if it looks legitimate, even if the giveaway looks real, even if the friend says they did it and it worked. The pattern is poisoned at the root.
  4. Treat unverifiable returns as fictional. Any platform showing you returns that nobody else has independently verified is showing you a screen, not a fact. The chain provides the only evidence that matters. If you cannot follow the funds on chain, you cannot trust the dashboard.
  5. Tell someone. Most scams are conversations the victim has alone. The simple act of telling one trusted person what you are about to do, before you do it, breaks the spell most of the time. Build a habit of mentioning unusual financial moves to a trusted partner. That conversation is a defense.

What to do if you have already been hit

A short, honest detour. If you have lost funds to one of these patterns, three things are worth knowing.

First, stop talking to anyone offering recovery. The recovery services are the second half of the scam. Authentic recovery, when it happens at all, comes through law enforcement and qualified blockchain analytics firms, not through a Telegram contact.

Second, document everything. Wallet addresses, transaction hashes, screenshots of the conversation, dates, amounts. The chain does not forget, and a clean record is the foundation of any law-enforcement or analytics work that may help.

Third, take care of yourself. Falling for a scam is one of the most isolating experiences a person can have. The shame is heavy. The shame is also exactly what keeps people from telling anyone, which is exactly what keeps the scam working on the next person. Talking about it is part of how the pattern gets weaker.

Key takeaway

Scams are old patterns in new packaging: send-first, fake platforms, urgency-driven launches, fake support, recovery double-dips, friend-with-a-system, romance long cons. The defensive habits are the same across all of them: slow down when the story is compelling, verify out of band, refuse send-first asks, treat unverifiable returns as fictional, and tell someone before you act. Smart people fall for these. Slow people do not.

Track your progress

Create a free account to mark lessons complete and unlock pillar discounts.