How to Identify and Report Cryptocurrency Scammers

If you think a crypto scam is underway, stop sending money and stop communicating with the suspected scammer. Then secure any wallet, exchange account, email account or device they may have accessed. Report the incident to the platform involved and the appropriate authority where you live. Act quickly, but do not let anyone rush you into paying a fee or sharing a secret recovery phrase.

Start with this checklist:

1. Stop payments and contact. Do not send more crypto, including a supposed tax, verification deposit or withdrawal fee.
2. Secure accounts. Change passwords from a device you trust, enable multifactor authentication and contact your exchange if an account may be exposed.
3. Save evidence. Keep messages, payment records, wallet addresses and transaction hashes before blocking or deleting anything.
4. Report through official channels. Contact the platform or exchange, then your local police or national cybercrime reporting body. In the United States, you can also report internet crime to the FBI’s Internet Crime Complaint Center and fraud to the Federal Trade Commission.

A report can help authorities and platforms spot patterns, but it does not guarantee an investigation or repayment. Confirm local reporting options through official government channels.

Look for pressure, secrecy and claims that sound too certain. Scammers may promise guaranteed profits, unusually high returns or a risk-free way to earn from crypto. They may insist you act immediately, keep the opportunity secret, pay a fee before withdrawing, or move a conversation away from a trusted platform.

Common warning signs include:

• An unsolicited message from someone claiming to be an exchange, wallet provider, celebrity or government official.
• A trading site or app that displays profits but demands more deposits to release them.
• A romantic or friendly contact who gradually steers you toward an investment platform they control.
• A giveaway or airdrop that asks you to send crypto first, connect a wallet to an unfamiliar site or reveal your recovery phrase.
• A job or task offer that requires you to deposit crypto to unlock earnings.
• A support agent who asks for your password, private key, seed phrase or remote access to your computer.

A polished website, convincing profile or apparent balance is not proof that a service is legitimate. Verify the organization independently using contact details from its official app or website, not a number or link supplied in the message. Treat requests for secrecy or urgent payment as a reason to pause and check.

If you shared a password, change it from a trusted device and change it anywhere else you reused it. Secure the email account linked to your exchange first: an attacker with email access may reset other passwords. Turn on multifactor authentication where available, review recent sign-ins and contact the exchange’s fraud or security team if someone accessed your account.

If you connected a wallet to a suspicious site, disconnecting the site alone may not cancel permissions you already granted. Check and revoke unfamiliar token approvals using a trusted wallet feature or a well-established approval-management tool. Be careful: a malicious site can imitate a wallet or approval tool, and revoking an approval does not recover assets already taken.

If you believe someone has your seed phrase or private key, treat that wallet as compromised. If you can safely access remaining funds, move them to a newly created wallet whose recovery phrase has never been shared, using a clean device. Never enter the new phrase into the suspicious site or send it to a person offering help. If you cannot confidently secure the funds, contact your wallet provider or a qualified security professional through independently verified channels before acting.

Preserve the original evidence before blocking accounts or removing apps. Take screenshots that show the full conversation, profile name, date and context. Keep emails with their sender details and original files; do not open unexpected attachments just to gather proof. Save transaction records from your wallet or exchange, including the transaction hash, sending and receiving addresses, network, amount and approximate time.

Also record:

• The platform, app, social account, phone number or email used by the suspected scammer.
• The website or app name and how you found it; do not revisit a suspicious site on a device you think is infected.
• Any bank, card, payment service or exchange account involved, plus its case or reference number.
• What you were told to do, what you did, and when each event occurred.

Keep a copy in a secure location that the suspected scammer cannot access. Do not edit screenshots in a way that removes context; make a separate redacted copy if you need to share evidence publicly. Avoid posting private details, account credentials or identity documents on social media. Give originals to the relevant platform or authority through its official reporting process.

Report the scam to the service where it happened: the exchange, wallet provider, social network, messaging app, website host or app store. Use its in-app reporting option or contact details you find independently. If money moved through a bank, card, wire transfer or payment app, contact its fraud team immediately and ask whether it can stop, recall or dispute the payment. Do not assume a crypto transfer can be reversed.

Make a report to the police or cybercrime agency in your country. Reporting bodies differ by location; use an official government website or phone number to find the right route. In the United States, the FBI’s Internet Crime Complaint Center accepts reports about internet-enabled crime, and the Federal Trade Commission accepts consumer fraud reports. If you are unsure which agency applies, local police can advise you.

If the scam involved an investment product, broker or firm claiming to be regulated, you can also notify the financial regulator in your jurisdiction. Give each organization the same clear timeline and evidence, and keep a record of submission dates and reference numbers. Filing a report through an official authority is generally free. Anyone claiming they can guarantee a refund in exchange for an upfront payment is a warning sign, not an official recovery channel.

Write a short, factual account that lets a reviewer understand what happened without guessing. State when the contact began, what the person or service promised, what actions you took, and when you realized something was wrong. Say whether you sent money, connected a wallet, shared account details or installed software. Clearly label anything you do not know as unconfirmed.

Include the cryptocurrency, amount and network for each transfer, along with wallet addresses and transaction hashes. Add the exchange or payment service involved, relevant account identifiers, scammer usernames and contact details, and the evidence you saved. If you have an exchange or police case number, include it when contacting another service about the same incident.

Do not send a password, private key or seed phrase as evidence. A legitimate investigator or support agent does not need your wallet recovery phrase to review a transaction. Share identity documents only through a verified official process when required, and ask how they will be handled. After submitting, save a copy of your report and note any instructions or deadlines. Reply to follow-up requests using the same official channel, not a new contact who suddenly offers to help.

Scammers often target victims again with promises to trace, freeze or return stolen crypto. They may pretend to be law enforcement, a lawyer, an exchange employee or a blockchain investigator. Be wary of anyone who guarantees recovery, demands an advance fee, asks you to pay in crypto, or wants your seed phrase, password or remote access. Real authorities and legitimate services do not need your recovery phrase to investigate a transaction.

Avoid these other common mistakes:

• Sending more to unlock a withdrawal. A tax, insurance or verification payment demanded by an unverified platform may be another part of the scam.
• Deleting messages too soon. Save relevant evidence before blocking the account or uninstalling an app.
• Trusting search ads or direct messages as proof. Find support channels independently and check the organization’s identity.
• Paying for a promised investigation without checking credentials. Ask what work will be done, what it costs and whether the provider is properly qualified; do not treat payment as a guarantee of recovery.
• Posting sensitive evidence publicly. Public wallet addresses may be useful, but private account details and identity documents can create new risks.

If you already paid a supposed recovery service, stop further payments and report that contact as a separate incident.

After reporting, monitor the email, exchange and financial accounts connected to the incident. Watch for password-reset alerts, unfamiliar sign-ins, new withdrawal addresses or transactions you did not approve. If you shared identity documents or personal information, ask the relevant bank or government identity service what protective steps are available in your country. Keep your devices and security software updated, and remove software you installed at the scammer’s direction only after preserving evidence and checking for further account access.

Keep your report reference numbers and update the authorities or platforms if you find new evidence. Do not expect routine updates or a quick resolution: investigations and platform reviews take time, and a report does not guarantee that funds will be recovered. If you receive a request for more information, verify it through the organization’s official channel before replying.

For future crypto activity, independently verify addresses and network details before sending, check what a wallet connection or approval allows, and ignore unsolicited investment pitches. Use a unique password and multifactor authentication for important accounts. A pause to verify a claim is safer than trying to recover funds after an irreversible transfer.