Recognize impersonation, fake returns, address substitution and recovery fraud before money moves. The checks below separate control of keys, backup design, and promises made by a service.
- No legitimate support agent needs your seed phrase.
- Guaranteed returns and withdrawal fees are major red flags.
- Verify requests through an independent channel.
Urgency is a tool
Scammers manufacture deadlines, authority and secrecy to prevent verification. Stop whenever a message demands immediate crypto, remote access, a seed phrase or a deposit to unlock a larger balance.
Transactions are hard to unwind
A confirmed transfer generally has no chargeback desk. Verify identities using a second channel, inspect the full destination address and distrust investment dashboards that only permit deposits.
Name who controls the key. A wallet interface, an exchange account, and a recovery backup can expose different people to different failures.
Recovery scams target victims twice
Anyone promising guaranteed recovery for an upfront fee or asking for keys is likely extending the fraud. Preserve records, contact relevant platforms and law enforcement through independently verified channels, and do not send more money.
How the common schemes work
Investment scams show you a dashboard where a deposit grows for weeks, let you withdraw a little to build trust, then invent a tax, a fee or a verification step that must be paid before the rest can be released; it never is.
Impersonation scams pose as exchange support, a wallet maker or a public figure and ask you to 'validate' or 'sync' your wallet by entering the recovery phrase — the phrase is the wallet, and they now have it. Romance-led schemes combine both over months. Fake apps in official stores harvest phrases at setup.
Address-poisoning sends dust from an address that resembles one you use, hoping you copy it later from your history.
Checks that take a minute
Before sending: verify the address on the recipient's own website or a second channel, not from a message. Before depositing with a platform: search the regulator's register in your country, check the company's age and address, and try a small withdrawal first. Before entering a phrase anywhere: stop, because there is no legitimate reason to.
Before believing a return: anything guaranteed, fixed or above single digits a year is a scheme. Before trusting a public figure's giveaway: they are not doubling your bitcoin. The FTC and the FBI's IC3 publish current patterns; a few minutes reading them inoculates against most.
If it has already happened
Move any remaining funds from a compromised wallet to a new one immediately; a stolen phrase is still being watched. Report to your national fraud authority and to the exchange you used, which can sometimes freeze funds that land on its platform. Save every message, address and transaction ID.
Be very wary of 'recovery services' that contact you afterwards — a second scam that targets victims of the first. Confirmed transactions cannot be reversed by anyone, and honest advice is that recovery is rare, but reports feed the pattern analysis that shuts these operations down.
Turn this into a recovery check
Write down who can authorize a spend, what must be backed up, and how recovery will be tested without exposing a seed phrase. Start with a small amount before relying on a new custody setup.
Common questions
What are the most common Bitcoin scams?
Impersonation of support staff or public figures, fake investment platforms that show growing balances and then block withdrawals, phishing pages that ask for a recovery phrase, counterfeit wallet apps, and romance-led schemes. The FTC and FBI both publish current patterns and loss figures.
Can a Bitcoin payment be reversed if I was scammed?
No. Confirmed transactions are final and there is no issuer to appeal to. Report the case to your national fraud authority and the exchange you used, which can sometimes freeze funds at their end, but recovery is rare.
How can I tell whether a platform is legitimate?
Check the regulator's register in your country, look for an established domain and company, and be wary of guaranteed returns, urgency and unsolicited contact. Never share a recovery phrase — no legitimate service needs it — and test withdrawals with a small amount first.
Sources and further reading
Primary documents this guide draws on. Links open the original publisher.
- What to know about cryptocurrency and scams U.S. Federal Trade Commission
- Internet Crime Complaint Center U.S. Federal Bureau of Investigation
- Crypto assets U.S. Securities and Exchange Commission, Investor.gov
- Securing your wallet bitcoin.org