Crypto is the most permissive financial system ever built. That is exactly why it is the best playground for scams. There is no bank to reverse the transaction. There is no fraud department. If you sign it, you own it. Here are the patterns that account for most losses, and how to avoid every one.
Pattern 1: fake support DMs
You post in a project's Discord asking a question. Someone with an official-looking name DMs you offering help. They eventually ask for your seed phrase or ask you to sign a 'wallet reset' transaction.
Rule: Real support never DMs you first. Ever. Any DM offering help is 99% a scam.
Pattern 2: wallet drainers
A 'free mint' website appears. You connect your wallet. It asks you to sign a transaction that looks technical. What you are actually signing is a permission to transfer all your tokens.
Rule: Read the wallet popup. It shows exactly what the transaction does. If it says 'setApprovalForAll' or 'transferFrom' for tokens you did not buy, reject.
Pattern 3: fake airdrops
Random tokens appear in your wallet. You did not buy them. Trying to sell or interact with them signs a malicious transaction. Some just contain phishing links in the token metadata.
Rule: Ignore tokens you did not buy. Never interact with them. Use a fresh wallet for airdrop hunting.
Pattern 4: impersonation sites
Google 'Uniswap' and the top result might be uniswap-defi.io or uni-swap.app, not uniswap.org. Identical UI. Connect wallet, sign transaction, funds gone.
Rule: Bookmark the official URL directly from the project's Twitter or docs. Never click a Google ad for a crypto site. Always verify the URL letter by letter.
Pattern 5: rug pulls
A new token launches. Price goes up 500% in a day. Influencers pump it. You buy. The team dumps their tokens (or drains the liquidity pool), price collapses to zero, project abandons.
Rule: Never buy a token that launched less than 6 months ago unless you are treating it as a casino bet. Check the token's holder distribution — if 3 wallets hold 80%, it is a rug waiting to happen.
The three rules that stop 95% of losses
The right mindset
If a message feels urgent, it is a scam. Real projects do not need you to sign anything in the next 30 seconds. Real support does not DM. Real airdrops do not appear randomly. The moment your gut feels rushed, close the tab.
What to do if you already got scammed
- Immediately move any remaining funds to a fresh wallet
- Revoke all token approvals from the compromised wallet (revoke.cash)
- Report the scam contract on Chainabuse or Etherscan
- Do not send money to anyone who says they can 'recover' your funds. That is a follow-up scam.
The lost funds are almost never coming back. The lesson is worth learning cheaply. Everyone who sticks around in crypto has been scammed at least once.
Koinlytics