Crypto Scam Report

A rug pull is one of the most common exit scams in the crypto space. Developers create a token, generate hype through social media and influencer promotions, and attract liquidity into a trading pool. Once the price has been pumped sufficiently, the team withdraws all liquidity — or exploits a hidden backdoor in the contract — causing the token price to collapse to near zero within minutes.

Rug pulls range from 'soft rugs' (team quietly abandons the project and stops communicating) to 'hard rugs' (immediate, malicious contract exploits that drain funds in a single transaction). Hard rugs are often enabled by hidden mint functions, ownership backdoors, or trading restrictions that only the team can bypass.

The defining feature of a rug pull is speed: by the time most investors realize what happened, the team has already converted stolen funds to ETH or BNB and moved them through a mixer. Anonymous teams make recovery practically impossible.

Crypto Ponzi schemes follow the same logic as traditional financial fraud: promise high, consistent returns to attract capital, then use incoming investor funds to pay earlier participants. The illusion of profitability holds as long as new money keeps flowing in. When recruitment slows and withdrawals exceed deposits, the scheme collapses.

In crypto, Ponzi mechanics are often disguised as 'yield farming,' 'staking rewards,' or 'lending protocols.' The key question is always: where does the yield actually come from? Legitimate yield sources include protocol fees, loan interest, or liquidity provision rewards. Ponzi yield is circular — it is funded by the next person to deposit.

The collapse is always inevitable. Ponzi schemes in crypto have caused some of the largest investor losses in history, frequently targeting retail investors who are newer to the space and less equipped to evaluate yield claims critically.

Pump and dump schemes are among the oldest forms of market manipulation, transplanted from penny stocks into crypto with devastating efficiency. A coordinated group — sometimes organized in private Telegram or Discord channels — accumulates a low-liquidity token quietly, then simultaneously promotes it to a wider audience to drive the price up. Once retail buyers flood in and the price peaks, the organizers sell their entire position at the top.

In crypto, influencers and celebrities have been paid to promote tokens without disclosing compensation, accelerating pumps to massive audiences. The difference between organic hype and an orchestrated pump can be nearly impossible to detect in real time, which is precisely what makes it effective.

Retail investors who buy during the hype phase are left holding tokens that can lose 80–95% of their value within hours of the dump. Low-cap tokens with thin liquidity are the most vulnerable targets, as even small coordinated buys can produce dramatic price moves.

Fake ICOs (Initial Coin Offerings) and IDOs (Initial DEX Offerings) involve creating the appearance of a legitimate fundraise — complete with a whitepaper, website, advisory board, and roadmap — while having no intention of building the promised product. Funds are collected from investors during a token sale, then the team disappears or delivers nothing of substance.

The sophistication of these scams varies widely. Some are crude, disappearing within days of the raise. Others maintain the pretense of development for months or years, releasing periodic but meaningless updates while slowly draining funds. Celebrity associations — even fabricated ones — have been used to lend false credibility to fraudulent offerings.

The regulatory environment for ICOs has tightened significantly since 2017–2018, but fake fundraises continue to evolve in form, including through presales, private rounds, and NFT-based fundraising structures that obscure the underlying mechanics.

Phishing and social engineering attacks in crypto target the weakest link in any security system: the human. Unlike smart contract exploits, these attacks don't require technical sophistication — they require only that a victim clicks a malicious link, connects their wallet to a fake site, or hands over a seed phrase after being manipulated into trusting the attacker.

Common vectors include fake airdrop announcements mimicking legitimate protocols, malicious wallet approval transactions disguised as routine interactions, impersonation of support staff in Discord or Telegram, and cloned websites with slightly altered URLs. 'Wallet drainer' kits have lowered the technical barrier for attackers to near zero, enabling mass phishing campaigns with minimal expertise.

No legitimate project, support team, or airdrop will ever ask for a seed phrase or private key. Wallet approvals should always be inspected carefully — a single approval of an unlimited token allowance to a malicious contract can empty an entire wallet.

Pig butchering (sha zhu pan) is a long-form social engineering scam that originated in Southeast Asia and has expanded globally at alarming scale. The name refers to the practice of 'fattening the pig before slaughter' — attackers invest weeks or months building a genuine-feeling relationship with a victim before introducing a fraudulent investment opportunity.

The scam typically begins with an unsolicited contact via WhatsApp, Instagram, LinkedIn, or dating apps. The attacker builds trust through daily conversation, often posing as a successful investor or business professional. When the moment is right, they introduce a 'can't miss' crypto investment platform — one that shows fake profits and allows small initial withdrawals to build confidence. Victims are encouraged to deposit increasingly large sums. When they try to withdraw, they are told to pay taxes, fees, or verification deposits that never end.

These operations are frequently run by criminal organizations using trafficked workers in compounds across Myanmar, Cambodia, and the Philippines. The FBI's 2023 Internet Crime Report identified pig butchering as the largest and fastest-growing category of crypto fraud, accounting for billions in annual losses.