Cryptoassets can appear in different kinds of fraud: they may be presented as the investment, requested as the payment method, or used as a way to move value between accounts. The use of a blockchain does not make an offer legitimate or make the identity behind a wallet address obvious.
How crypto fraud may work
Someone may direct you to a trading website or app that displays apparent gains but does not provide access to a real investment. Another person may impersonate an exchange, public figure, company or official service and ask you to send crypto. A person you met online might build trust before recommending a platform or offering to teach you how to invest.
Some victims are then told that a new payment is required to release a withdrawal or recover earlier transfers. A request for a private key or wallet recovery phrase is also a serious security concern: those details can give someone control of the wallet.
Warning signs to consider
- Someone promises quick, certain or unusually high profits from crypto.
- A website shows a growing balance but blocks a withdrawal or adds new conditions.
- You are asked to move crypto to a wallet controlled by someone else to “protect” it or unlock an account.
- A new online contact offers investment advice and urges you to use their platform.
- A caller or message claims to represent an exchange but asks for your recovery phrase, password or one-time code.
- You are asked to pay a separate recovery, tax or release charge to receive funds.
Check the exact website and contact details independently. A familiar logo, a public transaction record or a professional-looking dashboard does not establish who controls an account or whether an investment exists.
If you have already sent crypto
Contact the exchange or service you used, using its official app or a website address you enter yourself. Explain what happened and ask whether it can take any protective action. If a bank or card was also involved, contact that provider too. Do not send more funds to test a recovery promise.
Preserve the transaction hash, wallet addresses, date and time, amount and asset, exchange records, messages, email headers where available, and website addresses. Never share a private key, recovery phrase or one-time authentication code. Avoid moving assets in response to unsolicited “security” instructions.
What blockchain analysis can and cannot show
Public blockchain data can show transactions between addresses on supported networks. An address is not automatically a named person or company, and a transaction path alone does not prove who controlled an address, why a transfer happened or whether funds can be recovered. Any analysis depends on the available evidence, technical limits and agreed scope.
For offers built around a trading platform, also read Investment fraud. If the contact began through a relationship or dating app, see Romance investment fraud.
Further reading
- What to know about cryptocurrency and scams — US Federal Trade Commission consumer guidance.
- FCA Warning List — UK readers can check whether a firm appears on the FCA’s list of unauthorised firms.
- FCA Firm Checker — independently check UK authorisation details when a firm claims to be FCA-authorised.