Most crypto scams don't break encryption. They break your concentration. A message arrives while you're busy, it borrows the logo of a company you trust, and it asks for something that only sounds reasonable because you're in a hurry. The scripts are recycled because they keep working. Below are the patterns worth memorizing, plus the specific moment in each one where you can stop it.
The impersonation play: when "Binance support" messages you first
Legitimate exchanges don't cold-call you. Binance, like most major platforms, publishes warnings that it will never ask for your password, your two-factor codes, or a transfer to a "verification wallet." Scammers know this and still flood Telegram, WhatsApp, and email with lookalike accounts wearing the real logo.
How the script runs
You get a message about a "suspicious login" or a "withdrawal pending." A link takes you to a cloned login page with the correct branding and a URL that's off by one letter. You type your credentials. Now they have your session, and the two-factor prompt you approve a minute later is actually them draining your account.
What gives it away
Real support never initiates contact about a security issue and then asks you to log in through a link they sent. Close the message. Open the app yourself. That single habit defeats the entire category.
Guaranteed-return schemes and the fake trading dashboard
No legitimate platform promises a fixed daily percentage. If someone offers "1.5% per day, guaranteed," they're describing a Ponzi structure, not a strategy. The tell isn't just the number. It's the dashboard.
Scammers build polished portals showing your "balance" climbing in real time. Consider a scenario worth memorizing. A victim deposits $2,000 USDT into a site a "mentor" recommended. The dashboard shows $6,400 within three weeks. When they try to withdraw $500, support says they must first pay a 15% "tax" or "liquidity fee" — about $960 — to release funds. They pay it. The dashboard keeps glowing. The money was never invested; the numbers are pixels.
- The red flag: a fee required before you can withdraw your own money.
- The second flag: returns that never dip. Real markets move both ways.
- The third: pressure to recruit others for bonus tiers.
Romance and relationship scams that end in a wallet request
These take weeks. The con starts on a dating app or social platform, moves to a private chat, and builds genuine rapport before crypto appears at all. Then comes a story: a sick relative, a locked account, an "investment opportunity" only insiders can access.
Why smart people fall for it
Isolation does the work. The scammer discourages you from discussing the "opportunity" with friends or family, framing it as private or exclusive. That's not romance. That's a control tactic.
The exit test
Suggest a video call, or ask to meet in person. Watch what happens. Excuses stack up fast when there's no real person behind the profile.
Phishing links, fake airdrops, and wallet-drainer approvals
Some scams don't need your password at all. They need one click. A fake airdrop page connects to your wallet and asks you to "approve" a contract. That approval can grant permission to move tokens out of your wallet — sometimes everything.
| Pattern | What they want | Your defense |
|---|---|---|
| Fake airdrop | Wallet approval signature | Never approve contracts from unsolicited links |
| Cloned exchange login | Credentials and 2FA | Type the URL yourself, always |
| "Support" DM | Remote access or seed phrase | Real support never DMs first |
| Pig-butchering "mentor" | Deposits to a fake platform | No fee to withdraw, ever |
Get in the habit of checking your wallet's connected apps and token approvals periodically. Revoke anything you don't recognize. It takes two minutes and closes a door scammers rely on staying open.
The pressure tactics underneath every pattern
Strip away the costumes and the same engine runs underneath. Urgency. Secrecy. A trusted brand name doing the convincing. When all three show up in one conversation, you're not being helped. You're being worked.
Slow down. Verify through a channel you chose, not one they handed you. Ask a friend. Sleep on it. Scammers count on you never doing any of those things.
Frequently asked questions
Can a scammer drain my wallet without my seed phrase?
Yes, through malicious contract approvals. If you sign an approval on a wallet-drainer site, the attacker can move approved tokens without ever seeing your seed phrase. That's why unsolicited airdrops and "claim" pages deserve suspicion, and why reviewing and revoking approvals regularly matters.
Does Binance ever ask for my password or 2FA code?
No legitimate exchange asks for your password or two-factor codes through messages, email, or phone calls. Binance publishes guidance warning users about impersonation attempts. Treat any request for those details as fraud, no matter how official the sender looks.
How do I check if a trading platform is real?
Start with withdrawal terms. A platform that demands a fee, tax, or deposit before releasing your funds is a red flag regardless of how polished it looks. Cross-check the domain against official sources you navigate to yourself, and be wary of any site recommended only through a private chat.
Pick one habit today: never click a crypto link from a message. Open the app or type the address yourself. That alone kills most of these scams before they start.