Crypto fraud often succeeds because it creates urgency before verification. This guide gives you a reusable checklist to use before you send funds, connect a wallet, install an app, or trust an investment pitch. It is designed for practical due diligence: how to assess a wallet, exchange, token, project, website, social media account, and outreach message without relying on hype, screenshots, or promises of quick returns.
Overview
If you are trying to avoid a crypto investment scam, the safest habit is simple: treat every transfer as final until proven otherwise. In crypto, scams do not always look dramatic. Many look polished, patient, and familiar. A fake crypto platform may copy the design of a real exchange. A scammer may impersonate a founder, support agent, recruiter, influencer, or trader. A project may have a convincing website, active social accounts, and a persuasive story, but still fail the most basic verification checks.
This article focuses on fake detection, not investment advice. The question is not whether a token will go up. The question is whether the entity asking for your trust is real, authorized, and consistent across its public footprint.
Before you send funds, use this baseline checklist:
- Verify the URL manually. Do not trust links from DMs, replies, ads, or QR codes.
- Verify the account independently. Check whether the social profile, app listing, or support handle is linked from an official website.
- Verify the payment path. Confirm the wallet address, network, and destination through more than one trusted channel.
- Verify the claim. If someone promises guaranteed returns, exclusive access, urgent recovery, or insider timing, slow down.
- Verify the pressure tactic. Scarcity, countdowns, private groups, and “act now” prompts are often part of the scam.
- Verify what happens after payment. If the process depends on more deposits, unlocking fees, tax payments, or support upgrades, assume high risk.
For broader link-safety habits, see How to Check a Link Safely Before You Click. Many crypto scams begin with the same phishing patterns seen in fake login pages and cloned websites.
Checklist by scenario
Use the scenario that matches what you are about to do. If more than one applies, use the stricter standard.
1) Before sending funds to a wallet address
- Ask why payment must be made in crypto. Scammers prefer irreversible transfers and often discourage safer payment methods.
- Confirm who controls the destination address. A screenshot, forwarded message, or pasted address is not enough.
- Check the context of the request. Is it an investment, a recovery service, a presale, an OTC deal, or a “verification deposit”? Each deserves skepticism.
- Watch for address switching. Compare the first and last characters carefully and confirm the full address in a trusted source.
- Send a small test amount first only if you have already established legitimacy. A test transaction does not make a fake deal real.
- Be cautious if the sender insists on one network only. Confusion over chains and wrapped assets is often used to rush people into mistakes.
2) Before using an exchange or trading platform
- Start from a known, official domain. Do not rely on search ads, affiliate posts, or private links.
- Inspect the website carefully. Spelling issues, awkward copy, missing legal pages, broken help links, and generic contact forms can indicate a fake crypto platform.
- Check the support flow. Real services generally do not solve account issues through random Telegram or WhatsApp contacts.
- Review the withdrawal process before depositing. Scam platforms often make deposits easy and withdrawals conditional.
- Be wary of dashboards showing profits before you can test a withdrawal. Numbers on screen are not proof of a real balance.
- Question any demand for release fees, tax prepayments, or account activation deposits. These are common investment fraud crypto patterns.
If the site itself feels off, some of the same review habits apply as in Fake Online Store Checker: 17 Red Flags Before You Buy: domain trust signals, copy quality, contact transparency, and checkout behavior all matter.
3) Before connecting your wallet to a website or app
- Confirm the exact site address. Wallet drainers often use lookalike domains with a single altered character.
- Understand why the site needs wallet access. If the requested permissions are unclear, stop.
- Be skeptical of surprise airdrops, NFT claims, and urgent reward windows. These are classic lures.
- Review prompts slowly. A signature request can still be risky, even when no payment appears on screen.
- Use a separate wallet for experiments. Keep high-value assets isolated from casual interactions.
- Avoid installing browser extensions from links in chats. Fake wallet extensions and fake app warnings often begin this way.
4) Before downloading a wallet or crypto app
- Download only from the provider’s official website or verified app store listing.
- Cross-check the app name, developer name, and links. Copycat apps often mimic branding but differ in small details.
- Read recent reviews carefully. Look for patterns rather than star counts alone.
- Watch for requests that do not fit the app’s purpose. Excessive permissions can be a warning sign.
- Never import your seed phrase because a support agent asked you to. Legitimate support should not need it.
5) Before trusting a token, project, or presale
- Identify the official website and social accounts first. Then check whether they reference each other consistently.
- Read the project materials critically. Vague language, recycled roadmaps, and inflated partnership claims deserve caution.
- Distinguish community excitement from verifiable information. Busy chats can be manufactured.
- Check whether the project explains utility, governance, and custody clearly. Confusion benefits scammers.
- Be cautious with countdowns, private allocations, and invite-only sales. Pressure is often part of the design.
- Ask what proof exists beyond marketing. A whitepaper, logo wall, or polished trailer does not confirm legitimacy.
6) Before acting on outreach from social media, email, or messaging apps
- Assume direct messages are untrusted by default. Many crypto scam warning cases begin with “helpful” outreach.
- Check whether the account is linked from an official website. Follower counts and verification marks are not enough on their own.
- Look for impersonation signs. Slight username changes, copied bios, and reposted content are common.
- Never move to a private app just because someone requests it. Telegram, Discord, and WhatsApp are frequent scam channels.
- Treat screenshots of profits, testimonials, and withdrawals as marketing, not evidence.
- Be highly skeptical of romance, mentorship, and “I can teach you” narratives tied to trading. Emotional trust is often weaponized.
Related reading may help if the contact began on messaging or social platforms: Telegram Scam Tracker, Instagram Impersonation, and Romance Scam Signs.
What to double-check
When something seems legitimate at first glance, this is the section to revisit. Scams often survive the first check and fail the second.
Domain and link integrity
Type the domain yourself when possible. Check for extra words, hyphens, unusual endings, and lookalike spellings. If a social account, email, or QR code sends you somewhere, compare that link to the platform’s official website. A phishing scam warning in crypto is often just a standard fake-login trap adapted to a wallet or exchange audience.
If a QR code is involved at an event, in a video, or on printed material, use the same caution you would use with any unknown link. See QR Code Scam Warning Signs: How to Verify Before You Scan.
Identity consistency
Check whether the same brand identity appears consistently across the website, documentation, app listing, and support channels. Inconsistency is often more revealing than any one red flag. Ask:
- Does the website link to the same social accounts that are contacting you?
- Do the app store listing and website point to each other?
- Does support operate only through channels listed on the official site?
- Do names, logos, and contact details match exactly?
Withdrawal reality
Many fake investment platforms are built around a simple trick: simulated gains that cannot be withdrawn. Before depositing meaningful funds, check what the platform says about withdrawals, delays, identity checks, fees, and account reviews. If you cannot understand the process before depositing, that is itself a warning sign.
Recovery claims
After a loss, people are especially vulnerable to follow-up scams. Be cautious with anyone promising guaranteed fund recovery, special blockchain tracing access, or rapid reversal in exchange for an upfront payment. A second scam often targets people already caught in the first.
Communication style
Scammers adapt quickly, but their communication often still reveals pressure. Watch for:
- Urgency tied to price moves or listing windows
- Claims that support can only help in private chat
- Instructions to keep the deal confidential
- Repeated reassurance instead of direct answers
- Demands for identity documents before basic legitimacy is established
For examples of manipulative message patterns, see Phishing Email Examples That Still Fool People. The same persuasion methods show up in crypto outreach.
Common mistakes
Most people do not fall for crypto scams because they ignored every warning. More often, they trusted one familiar signal too early. These are the mistakes worth avoiding.
- Mistaking polish for proof. A clean app, slick site, or professional deck does not confirm legitimacy.
- Trusting social proof without source checks. Comments, testimonials, and screenshots can be bought, copied, or staged.
- Confusing account verification with business verification. A badge or large following is not the same as confirmed authority.
- Skipping independent navigation. If you always arrive through someone else’s link, you lose control of verification.
- Treating a small successful step as full proof. A small withdrawal or responsive chat can be part of the setup.
- Ignoring emotional pressure. Excitement, fear of missing out, and embarrassment all reduce skepticism.
- Combining storage, experimentation, and trading in one wallet. Convenience increases blast radius.
- Sharing too much too early. Identity documents, wallet balances, email access, and screen sharing create additional risks.
- Believing recovery requires more payments. Demands for taxes, unlocks, gas top-ups, or verification deposits are a common trap.
If a crypto opportunity arrives through a side channel such as a fake recruiter, a marketplace interaction, or an unrelated delivery text, do not dismiss the connection. Scammers cross over between formats. Related guides on fakes.info include Job Offer Scam Checklist, Facebook Marketplace Scam List, and Parcel Delivery Scams.
When to revisit
The best time to use this checklist is not after you feel uneasy. It is before each meaningful action. Revisit this guide whenever one of these changes:
- You are about to send funds to a new address.
- You are considering a new exchange, wallet, app, or browser extension.
- A project changes its website, token sale path, or support channel.
- You receive a message that moves the conversation to a private app.
- You are asked to scan a QR code, connect a wallet, or sign a message.
- You are under time pressure because of a market move, launch window, or “limited” access claim.
- You are planning content, sponsorships, partnerships, or public mentions involving crypto brands.
For creators, publishers, and community managers, this matters twice: once for your own safety and once for your audience. Before you post a referral link, mention a platform, or amplify a project, do the same checks you would want readers to perform. That includes verifying the official domain, identity consistency, support channels, and whether ordinary users can understand the withdrawal and custody model.
Here is a practical final routine you can save and reuse:
- Pause. No transfers from DMs, comments, or surprise messages.
- Navigate independently. Find the official site yourself.
- Cross-check identity. Match website, socials, app listing, and support channels.
- Inspect the payment path. Address, network, permissions, and purpose.
- Challenge the claim. Ask what evidence exists beyond screenshots and promises.
- Test your exit. Understand withdrawal and support before depositing meaningful funds.
- Separate wallets and devices where possible. Reduce the impact of a bad interaction.
- Walk away if pressured. Legitimate opportunities usually survive a verification delay.
If you need one sentence to remember, use this: in crypto, confidence is not evidence. Verification is.