A stranger texts the wrong number, apologizes, and stays friendly. Ten weeks later you are moving your savings into an app showing a balance you will never be allowed to touch. The scams differ, but they all lean on the same rule underneath the technology.
There Is No Undo Button
Dispute a credit card charge and your bank pulls the money back from the seller. Crypto was built without that button.
A transfer confirmed on a blockchain becomes part of a record every computer in the network agrees on. The network will never put your money back. Money can sometimes be frozen after it lands somewhere else. Exchanges lock accounts, and the firms behind dollar stablecoins can freeze coins in a wallet they control. Courts act on those businesses rather than on the chain, and that is how most recovered money comes back.
So treat every transfer you send as final. A blockchain is a shared ledger nobody can edit later, as the cryptocurrency article explains.
The Long Con That Starts With a Wrong Number
First contact looks like nothing. A wrong-number text, a match on a dating app, a reply under something you posted. The person is warm, in no rush, and money does not come up for weeks.
Then it does, lightly: a trading platform a relative showed them. They never ask you for money. Your first deposit is small, the gains look steady, and a small withdrawal works. That withdrawal buys your trust cheaply, which is why the next deposit is ten times bigger.
The ending never changes. Ask for the large balance and the platform wants a tax first. Pay it and another fee appears. There was never a balance.
Scammers call this pig butchering, from a phrase about fattening an animal before slaughter. The person typing may not be there by choice. The UN human rights office reported in 2023 that at least 120,000 people in Myanmar and roughly 100,000 in Cambodia may be held in compounds that force them to run scams. A follow-up in February 2026 added Laos, the Philippines and the United Arab Emirates.
Rug Pulls, Hard and Soft
A rug pull is a coin or project that raises money and then disappears.
The hard version runs on how a new token trades. Somebody has to fund a pool holding that token on one side and something mainstream on the other, usually a dollar stablecoin or Ether. The team fills the pool, promotes the token, then pulls the mainstream side out. The price collapses in minutes.
Locked liquidity is not proof of safety. A team can hold most of the supply and sell into the pool instead, or write the token so buyers can buy and never sell.
The soft version is quieter: updates stop, the chat goes silent, and the token drifts to nothing over a year. Anyone can create a token in minutes for a few dollars, so its existence proves nothing. Pump and dump schemes have their own article.
Fake Exchanges, Apps and Wallets
Some scams skip the friendship. A cloned site copies a real exchange down to the logo, at an address one character off the genuine one. Your deposit is real and goes straight to the operator, and the balance you see afterwards is a page.
Fake wallet apps clear app store review too. Researchers found 26 counterfeit ones on Apple's App Store in April 2026, some live since the previous autumn, and more than 20 on Google Play during 2025.
What You Sign Is What Moves Your Money
A self-custody wallet is one you hold yourself, usually a browser extension. Using a crypto site means connecting it and signing what it sends you.
Some requests are a one-off payment. Others are permissions. Signing one of those lets a piece of code move a token out of your wallet whenever it likes, usually with no limit on the amount. It stays live until you cancel it, and cancelling costs a network fee. Ordinary apps rely on this. So do drainers.
The bait is a free giveaway, an airdrop, or a warning that your wallet must be migrated now. The pop-up is full of unreadable text, but connecting the wallet is not the dangerous part: that only shares your address. The signature after it is what moves the money. One kind of signature hands the tokens over immediately, with nothing left to cancel. Keep anything valuable in a wallet you never sign with.
Fake Giveaways, Fake Support and the Second Hit
A livestream says a famous person will double any coins you send. The page exists to collect them.
Complain publicly about a stuck transaction and support accounts appear within minutes, styled like the real company. They ask for your recovery phrase, or link to a page that wants it. Exchanges do send real mail, so the rule is what you do next: open the site from your own bookmark and raise a ticket there.
The second hit targets people who have already lost money. Fake recovery firms and law offices claim to have traced your coins and ask for a fee up front. The FBI warned about fake recovery companies in 2023, then about fake law firms in June 2024 and August 2025. No law firm is an authorized partner of a US government agency. Victim lists get sold, so losing money once makes the next approach likely.
Report it yourself instead, free. File at ic3.gov and reportfraud.ftc.gov, and call any exchange involved the same day. What happens after that has its own article.
The Habits That Keep You Out of It
Your recovery phrase, usually twelve or twenty-four words, is the wallet: whoever has it owns every coin in it. It gets typed in one place only: your own wallet app, when you restore a wallet you already own. No exchange, support agent, developer or government office ever needs it, so anyone else asking is a scammer. Keep it on paper, never in a photo or a notes app.
Reach any crypto site by typing the address yourself or from your own bookmark. Search engines do check crypto advertisers, and fakes still get through, so the top of the page is not a safety signal.
Treat an unsolicited investment approach as disqualifying on its own. Not suspicious, disqualifying. How long you have been talking counts for nothing, because those months were paid in advance by someone who expected to earn them back.
