How to spot a crypto scam: 7 red flags

Red flag 1: The promise of guaranteed returns

Any project promising specific, guaranteed returns is a scam. Period. There are no exceptions.

This sounds obvious, but the way scams present this varies. They rarely say "guaranteed returns" in those words. Instead they say:

• "Up to 30% APY on stablecoins"
• "Triple your investment in 30 days"
• "Our algorithm has a 95% win rate"
• "Risk-free yield through arbitrage"
• "Backed by [some confusing technical mechanism] that eliminates downside"

Legitimate yields exist in crypto. USDC on Coinbase pays around 4-5% APY. DeFi protocols pay higher rates but with corresponding risk that's usually disclosed. Anything offering substantially above market rates is either taking on hidden risk you can't see, or running a Ponzi scheme that pays early users with money from later users until it collapses.

The pattern that should always trigger suspicion: the higher the promised yield, the more confident the marketing tone, the more obscure the "mechanism" generating the yield. Real yield comes from understandable sources (lending, staking, trading fees, real-world revenue). Fake yield comes from "proprietary algorithms" and "advanced arbitrage strategies" that conveniently aren't audited.

Red flag 2: Pressure to act quickly

Real investment opportunities don't disappear in the next 24 hours. Scams create artificial urgency to prevent you from doing the research that would expose them.

Watch for:

• "Presale ends in 48 hours"
• "Whitelist closes tonight"
• "Only 100 spots available, first come first served"
• "You're missing out on the next 100x"
• "By the time the price reflects this, you'll be too late"

This pressure works because it short-circuits the part of your brain that asks careful questions. You start thinking about what you might lose by not acting, rather than what you might lose by acting wrong.

The defense is simple: if something requires you to act fast, you don't act on it. Real opportunities can wait the day or two it takes to research them properly. Anything that can't survive a delay isn't worth your money.

I've lost money buying into projects under exactly this kind of pressure. The "limited time presale" usually means the team needs your money to fund their exit, not your future returns.

Red flag 3: Unverifiable team or anonymous team

Legitimate projects have public, verifiable teams. The founders have LinkedIn profiles, prior work, public conference appearances, code commits to other open-source projects, and so on. You can verify they exist and have a track record.

Scam projects have anonymous teams or teams whose identities can't be verified. The website shows photos and names, but those photos are stock images and those names don't exist anywhere else online. Or the team is "anonymous for safety reasons" or "doxxed to investors only."

There are legitimate reasons for a crypto project to have an anonymous founder (some jurisdictions are hostile, some founders have privacy preferences). But the absence of verifiable team information shifts all the risk to you. If something goes wrong, there's no one to hold accountable. If the team disappears with the money, there's no way to identify or pursue them.

A safer rule: for any project where you'd put more than $100, the team should have at least one publicly identified person with a verifiable professional history. If they don't, the answer isn't necessarily "don't invest." The answer is "treat this as gambling, not investing, and only commit money you'd be okay losing."

Red flag 4: The website looks legitimate but won't tell you what the project actually does

A surprising number of scam projects have well-designed websites with attractive graphics and confident copy that, when you read it carefully, never actually explains what the project does.

The pattern: lots of words about "revolutionary," "decentralized," "next-generation," "ecosystem," "synergy." Maybe a roadmap with vague milestones. Token utility described in terms that sound technical but don't resolve to anything specific. A whitepaper that's mostly marketing.

The test: can you explain what this project does, what problem it solves, and how it makes money, in two sentences? If you can't, and the website didn't make it clear, the project might be intentionally vague because there's nothing actually there.

Legitimate projects are usually trying to solve a specific problem. They can tell you what that problem is, who the customers are, what the revenue model is, and how the token (if there is one) participates in the value flow.

Red flag 5: Social media is mostly bots and influencer hype, not organic discussion

Check the project's X, Telegram, and Discord. Look at the quality of discussion.

Healthy communities have: - Real users asking specific technical questions - Substantive critiques and pushback alongside positive sentiment - Discussions of competitor projects - Some content not directly about the price

Scam communities have: - Endless "wen moon," "bullish," "diamond hands" repetition - Aggressive moderation that bans anyone asking critical questions - Highly synchronized posting (suggesting bot activity) - Paid influencers shilling without disclosing the paid relationship - Promotion focused entirely on price and getting in early

The pattern to watch for: a project with massive social media presence but no actual discussion of what the project does. All hype, no substance.

Influencer-driven projects are a particular trap. Many scams pay popular crypto influencers significant sums to promote tokens to their followers. The FTC requires disclosure of paid promotions, but enforcement in crypto is spotty, and many influencers don't disclose.

A reasonable rule: if you first heard about a project from a paid influencer post, treat it as a marketing exposure, not a recommendation. Do independent research before considering any commitment.

Red flag 6: The smart contract or token has dangerous properties

This one requires a bit more technical knowledge, but the patterns are worth learning.

For any token you're considering buying, check on a block explorer (Etherscan for Ethereum-based tokens, similar tools for other chains):

Is the contract verified and the source code public? If not, the developers can do anything with your money and you have no way to know.

Does the contract have a "mint" function that can create unlimited new tokens? This means the developers can dilute your holdings to zero.

Is the contract proxy-upgradeable? This means the developers can change the contract behavior whenever they want, including after you've bought in.

Are large amounts of tokens held by a small number of wallets? If the top 10 wallets hold 80% of supply, those wallets can crash the price by selling at any time.

Is liquidity locked? "Liquidity" refers to the pool of tokens available for trading. If the developers control the liquidity and haven't locked it, they can withdraw it at any time, leaving holders unable to sell. This is the classic "rug pull" mechanic.

Are there transaction taxes or sell restrictions? Some scam contracts work fine for buying but charge huge fees or block sales entirely.

Tools like Token Sniffer and DexCheck can automate a lot of this analysis. They're not perfect, but they catch the obvious red flags.

For most casual crypto users, the simpler version of this rule is: stick to major established tokens (Bitcoin, Ethereum, Solana, major stablecoins, large-cap L1s) where the contract risks have been heavily scrutinized by many people. The deeper you go into smaller, newer tokens, the more this kind of analysis matters.

Red flag 7: It found you, not the other way around

This is the meta-pattern that captures most of the others.

Legitimate investment opportunities don't generally chase you. You don't get DMs from strangers on X about amazing investment opportunities. You don't get emails from "Coinbase support" asking for your password. You don't get Telegram messages from "the development team" offering you a special whitelist spot.

The pattern: anything that reaches out to you, unprompted, with an opportunity, is almost always a scam.

The specific patterns:

Romance scams. Someone contacts you on a dating app, builds rapport over weeks or months, then introduces you to an "amazing investment opportunity" their cousin runs. Always a scam. These have a name: "pig butchering," because the victims are fattened up over time before the slaughter.

Tech support scams. You get a popup or call saying your Coinbase account is at risk and you need to "verify" your seed phrase. Always a scam. Real support doesn't work this way.

Customer service impersonation. You post a question in a public crypto channel about a problem you're having. Someone DMs you offering to help. Always a scam. The real customer support never DMs you first.

Job offers requiring crypto deposits. "We'd love to hire you, just need a small refundable deposit in USDC first." Always a scam.

Investment club invites. Random invitations to "exclusive" trading groups or signal channels. Almost always a scam, either pump-and-dump schemes or worse.

The unifying principle: if you didn't seek it out, it's not for you. Don't engage. Don't reply. Don't even consider whether it might be legitimate. The rare exceptions aren't worth the time spent evaluating.

The losses I've actually taken

Most of my crypto losses didn't come from being scammed in the way most tutorials describe. They came from:

Buying into projects that looked legitimate at the time but turned out to be rugs. The development team disappeared after raising funds. The "decentralized" project was actually controlled by founders who pulled liquidity. The treasury "for development" was the founders' wallet.

Buying near the top of news cycles. Crypto media gets excited when prices are already high. I learned the hard way that "the news is bullish" usually means "the price has already moved." The time to buy is when nobody is talking about something, not when everyone is.

Not taking profits when they were available. This isn't a scam, it's a psychological failure. Holdings that were up 5x became holdings that were back to break-even because I didn't take any profits along the way. The discipline of selling some during gains is harder than people make it sound.

Trusting "smart" people. A few investments I made based on what well-known crypto people said in podcasts or on X. Some of those well-known people turned out to be paid promoters. Some were just wrong. Now I default to my own research and treat everyone else's recommendations as inputs, not conclusions.

These aren't traditional scams in the legal sense, but the result is the same: money I had, money I no longer have, lessons that cost more than they should have.

Three habits that protect you

If I could go back and give myself one set of rules, it would be these:

Slow everything down. Any investment decision should be made over days, not minutes. The urgency you feel is usually manufactured.

Independent verification. Whatever someone told you, verify yourself. If they're recommending a project, check the team, the contract, the community, the actual problem being solved. Trust nothing without seeing the evidence.

Position sizing. No single position should be more than you can lose without changing your life. The discipline of small positions saves you from large mistakes.