Common crypto scams and how to avoid them
Phishing, fake support, giveaway and investment scams: the warning signs and simple rules that protect you.
Most crypto losses do not come from hacked blockchains — they come from people being tricked into sending funds or revealing secrets. Scammers rely on urgency, greed and trust.
Phishing
A fake website or email that looks like a real service asks you to sign in or "verify" your account. It steals your password and codes.
- Always check the address in the browser bar.
- Open important sites from your own bookmark, not from links in messages.
- Be suspicious of messages that create urgency: "your account will be blocked in 24 hours".
Fake support
Someone contacts you in a messenger or social network, claims to be support and asks for your password, codes, seed phrase or a "verification payment". Real support never does this.
Giveaway and doubling scams
"Send 1 coin and receive 2 back" — always a scam, even when it uses the name or photo of a famous person.
Investment and "signal" schemes
Promises of guaranteed or very high returns, "secret trading bots" or "insider signals" are classic signs of fraud. Pump-and-dump groups push unknown coins so that organisers can sell to newcomers at high prices.
Fake apps and extensions
Download wallets only from the official site or official app stores, and check the developer name.
Address tricks
Some malware replaces a copied address with the attacker's address. Always compare the first and last characters of an address after pasting it.
If something happened
Change your passwords immediately, turn on two-factor authentication, secure your email account and contact the service's official support. On XFasil, create a request in the Support Center (category "Security & 2FA").
University materials are for education only and are not investment, legal or tax advice.