Here's the uncomfortable truth. Most people who lose money in crypto don't get hacked by a genius. They get talked into it. A friendly DM, a too-good return, a fake support agent, and they hand over access themselves. The good news is that almost all of these scams wave the same flags before they take your money.
Learn the flags and you dodge the large majority of them. Here's the routine.
The five checks before you trust anything
- Guaranteed returns? Walk away. No real investment promises fixed profits. 'Double your ETH in 24 hours' is a theft, not an opportunity.
- Are they rushing you? Urgency is the scammer's favorite tool. 'Offer ends tonight' exists to stop you thinking. Real chances don't evaporate in an hour.
- Did they message you first? Unsolicited DMs offering help, jobs, or profit are almost always traps, even from accounts that look official.
- Are they asking for your seed phrase? Nobody legitimate ever needs it. Not support, not a developer, not an airdrop. Anyone who asks is stealing.
- Did you verify the link yourself? Type addresses in manually or use a bookmark. Never trust a link from the message pushing you to act.
The scams that catch beginners most
Fake support is a big one. You post a problem publicly, and a 'support agent' DMs you within minutes. Real support doesn't slide into your DMs first. Then there's the giveaway scam, send 1 ETH, get 2 back, which is just theft with a countdown. And romance or friendship scams, where someone builds trust for weeks before mentioning a can't-miss investment.
Your one habit
Slow down. Almost every one of these relies on you acting fast and feeling something, excitement or fear. The scammer needs speed. So your defense is a pause. When something pushes you to act right now, that pressure itself is the red flag. Close the app, breathe, verify. The opportunity that can't survive ten minutes of checking was never real.