Scam-proofing yourself
Most crypto losses aren't hacks of blockchains — they're hacks of people.
Explorer · 10 min · Updated 2026-11-08
💡 The friendly stranger at the ATM
A polite stranger at an ATM offers to "help" you with the machine. They are kind, confident and in a hurry for you. Crypto scams work the same way: urgency, authority and helpfulness are the tools. The machine (the blockchain) is secure — the scam targets the person pressing the buttons.
The scale of the problem
Blockchain analytics firm Chainalysis estimated that around $17 billion was stolen through crypto scams and fraud in 2025, with impersonation scams growing roughly 1,400% year-on-year and AI tools making fake messages more convincing. Separately, about $3.4 billion was stolen in hacks of crypto services.
The big seven scam patterns
| Scam | How it looks | Red flag |
|---|---|---|
| Impersonation | "Exchange security team" calls or DMs you | They contact you first; urgency; ask for codes/phrase |
| Pig-butchering / romance | A new online friend introduces a "trading platform" | Small early "profits", then fees to withdraw |
| Fake airdrop / claim site | "You're eligible for 2,500 tokens — connect wallet" | Lookalike URL; asks you to sign an approval |
| Drainer approvals | A signature request that looks harmless | "setApprovalForAll" or unlimited allowance |
| Giveaway / doubling | "Send 1 ETH, get 2 back" from a celebrity account | Nobody doubles money |
| Fake job / task scams | Paid tasks that later require crypto deposits | Paying to get paid |
| Address poisoning | A tiny transfer from an address that looks like yours | Copying addresses from history |
The 5-second safety check
- Who contacted whom? If they reached out first, assume scam.
- Is there urgency? "Act in 10 minutes" is a manipulation tactic.
- Are they asking for secrets or approvals? Seed phrase, 2FA codes, remote access, or wallet signatures = stop.
- Is the URL exact? Type it yourself or use a bookmark.
- Is it too good to be true? Guaranteed returns do not exist.
🧮 Practical example: the "security alert"
Key takeaways
- Most losses come from social engineering, not broken cryptography.
- Unsolicited contact + urgency + secrets = scam.
- Read every wallet signature; beware unlimited approvals.
- Transactions are usually irreversible — verify first.
Education only — not financial advice.