In this article, we examine the primary types of crypto scams and the psychological tactics fraudsters use to exploit victim trust. You will learn how to spot potential traps early and protect your assets from fraud.
Main Types of Scams
Address spoofing
This is a form of fraud in which attackers monitor crypto wallets with high transaction activity. Using specialized software, they generate a fake address whose first and last characters match those of the potential victim's address exactly.
The scammers then regularly send micro-amounts (for example, 0.01 USDT) to this wallet. They rely on the likelihood that, during a subsequent transfer, an inattentive user will copy the visually similar fake address from their transaction history instead of their actual one.
How to protect yourself:
Carefully check every single character of the address before sending funds, not just the first and last characters.
Use the address book of your crypto wallet or exchange to save and quickly select verified addresses.
Please note: Blockchain transactions are irreversible. If you send funds to someone else's address, it will be impossible to recover them.
Fraudulent websites
Attackers disguise themselves as legitimate organizations, including well-known crypto exchanges. Their goal is to gain access to your confidential data (passwords, API keys, seed phrases) or to persuade you to voluntarily transfer digital assets to fraudulent accounts.
To protect yourself against counterfeits, you can verify any communication channel on the dedicated "Check Channels and Communities" page. A full list of all our official social media channels is also available there.
Social media scams and the use of AI
One of the most widespread methods of deception involves hacking the official pages of well-known crypto projects or creating exact replicas of them. Attackers leverage brand reputations to disseminate misinformation or phishing links to malicious resources.
For example, in late April 2022, hackers breached the Instagram account of a major project. The perpetrators published a link to a fake website where users were invited to connect their wallets to receive a free NFT airdrop. As a result, investors unknowingly granted the attackers access to their wallets, incurring total losses of approximately $3 million.
A dangerous emerging trend is AI-driven scams (Deepfakes). Scammers create realistic video or audio deepfakes of public figures. During fake "live streams" on YouTube or Telegram, these digital clones urge viewers to transfer cryptocurrency to a specified wallet, promising to double the sent amount instantly.
Additionally, high levels of spam-bot activity and the creation of fake influencer profiles remain a pervasive issue across social media platforms (especially X/Twitter).
How to protect yourself:
Always verify information regarding large-scale giveaways, promotions, or token airdrops through the project's other official sources before clicking on any links.
Critically evaluate any calls for "free coin giveaways" or "doubling your capital" from public figures during streams - in 100% of cases, these are deepfakes.
Do not rush to connect your wallet to new or unverified platforms.
Shitcoins and manipulative schemes
Another popular scam tool in the crypto industry is the creation of so-called shitcoins. A shitcoin is a slang term denoting cryptocurrencies that lack real value, underlying technology, or practical utility, and are unlikely ever to acquire them. Such coins may visually copy well-known meme coins but, unlike them, lack the backing of an active community or prominent influencers.
In this segment, scammers most frequently employ two mechanisms:
Rug Pull: Developers create a new token, artificially inflate (pump) its price through marketing, and once a substantial number of investors have contributed, the developers abruptly withdraw all liquidity from the pool. The project shuts down, leaving investors with worthless tokens that cannot be swapped back.
Honeypot: Scammers deploy a deceptive smart contract for the token. Technically, the code is structured so that a regular user can easily purchase the coin, but the selling function is blocked for everyone except the project creators. Observing the chart rise rapidly, new victims continue to buy the asset, unaware that they will never be able to realize their profits.
Some shitcoins carry explicitly provocative names, such as ASS or POO. However, there are also unique cases: for example, a coin with the explicit name SCAM, which was created without fraudulent intent (as an experiment or joke), temporarily reached a market capitalization of $70 million.
Scams involving shitcoins are typically targeted at beginners who have only a superficial understanding of the market and do not conduct their own research (DYOR). Such users frequently invest in obscure and low-cost assets (compared to BTC or ETH) in the hope of rapid enrichment.
Fake support services
In the event of any difficulties or technical issues, users must contact the support service of the respective platform (exchange, wallet, or other service). However, it is critically important to do so exclusively through the official website. Reliable companies offer clients dedicated feedback forms, in-platform live chats, or official email addresses.
If a user attempts to resolve an issue through third-party social networks or messaging apps, they risk encountering a scammer posing as a company representative. Such pseudo-consultants initiate private messages and, under various pretexts, attempt to extract wallet credentials, logins, passwords, or other confidential information.
On our platform, several secure methods of reaching technical support are available:
Email: Send an official request to support@whitebit.com.
Online Chat: Contact us directly on the website or in the mobile app by clicking the designated button in the bottom right corner of the screen.
"Help" Section:
Select "Create a Ticket" or navigate directly to: https://help.whitebit.com/hc/ua/requests/new.
Select "Requests" to review the status of your previously submitted inquiries.
Click "Chat on WhatsApp" to initiate an official, secure dialogue in the WhatsApp messenger.
Always verify communication channels before providing any personal or technical details.
How to recognize that you are being scammed
Under the influence of bold promises and the prospect of rapid wealth, investors can find it difficult to stop in time. However, it is essential to remember that cold calculation and critical thinking are the primary safeguards for preserving capital in the crypto market.
There are clear red flags that indicate a scam project and signal the need to immediately close the website, leave the platform, and safeguard your assets:
Aggressive Marketing: Scammers aim to collect as much money as possible in the shortest time, relying heavily on intrusive advertising. If you are being aggressively pressured to invest, promised colossal returns with a 100% guarantee, and rushed into making a decision without time for reflection - this is a clear sign of fraud.
Promises of Excessive Profits: Projects declaring returns that significantly exceed market averages generally have no intention of paying out funds. If startup representatives cannot provide a logical and reasoned explanation for the source of such returns, it is best to decline the investment.
Lack of Transparency: An investor must clearly understand how their capital will be utilized. If a project's economic model is vague, convoluted, or lacks specifics, it is a manifest indicator of a scam.
Team Anonymity: For any investor, knowing who is managing their capital is critical. If the founders and developers conceal their identities, real names, or use obvious pseudonyms without valid technological justifications, this is a serious cause for concern.
Withdrawal Issues: Users must have unhindered access to their assets. If a platform creates artificial obstacles, demands additional fees, or requires further verifications to withdraw already accrued funds, this marks the final stage of a scam scheme.
Lack of Responsiveness: If project support ignores your requests, provides boilerplate excuses, or deletes chat channels altogether, you should immediately record all transaction data and report the matter to law enforcement agencies.
FAQ
How can I verify the legitimacy of a project or communication channel?
To protect yourself against phishing and impersonation, you can instantly verify any link, username, or media resource on the dedicated "Check Channels and Communities" page. If the address or channel is official, the system will confirm its authenticity.
What should I do if I spot a scam or become a victim?
If you identify a fraudulent resource or have suffered losses due to malicious actors, we recommend contacting our support team immediately at support@whitebit.com or via live chat. Provide a comprehensive description of the situation, including relevant transaction hashes (TxID) and screenshots.
Can an exchange support employee ask for my seed phrase or password?
No, under no circumstances. Official representatives of WhiteBIT or any other legitimate service will never, under any circumstances, ask for your password, two-factor authentication (2FA) codes, or wallet private keys/seed phrases. If an individual demands this information in private messages for "verification" or "account unlocking," they are 100% a scammer.