Scam-prevention guide

Warning signs of a cryptocurrency payment scam

A scammer tries to control the timing, information, or destination. Stop when a person rushes you, isolates you from advice, supplies a wallet QR code, or asks for access to your wallet or device.

Pressure and secrecy

Stop when someone says you must pay immediately, stay on the phone throughout the purchase, hide the payment from family or staff, or ignore a warning from a bank, ATM, wallet, or purchase provider.

Time pressure prevents independent checks. A real invoice, account issue, delivery, or government process should give you a way to verify it outside the conversation that started the payment.

Buying crypto to solve an unrelated problem

Common false stories include:

  • moving money to a “safe” wallet because an account was compromised;
  • paying a government office, police officer, court, tax agency, or utility;
  • fixing a computer, bank, exchange, or delivery account;
  • paying a fee before receiving a prize, refund, loan, inheritance, or job;
  • buying cryptocurrency for a supposed employer or client;
  • sending another payment to recover money already lost.

The request may include convincing names, logos, caller ID, documents, or account details. Those details can be copied or fabricated.

Someone else controls the destination

Be suspicious when another person sends a wallet QR code or address and talks you through every screen. Scammers may tell you which answers to choose, ask you to misdescribe the recipient, or claim a provider's fraud warning does not apply.

A QR code is only a way to enter information. It does not prove who controls the receiving wallet or why the payment is legitimate.

Requests for wallet or account access

No legitimate recipient needs your recovery phrase or private key. Support staff should not ask for those details, an account password, an unsolicited one-time code, or remote control of your device.

Treat a person as hostile if they ask you to install remote-access software, share your screen during login or payment, or enter recovery information into a website they supplied.

Changed payment instructions

A compromised email account can send a real-looking invoice with a new wallet address. A social-media account can also be taken over. Verify any new or changed cryptocurrency destination with the recipient through a second trusted channel.

Matching a contact name or profile photo is not enough. Confirm the full currency, network, wallet address, amount, and any destination tag or memo.

A small payment does not prove trust

A scammer may accept or return a small amount to build confidence before requesting more. A successful test transfer proves only that the address can receive cryptocurrency. It does not prove the recipient's identity, story, or intentions.

Official references

The FTC cryptocurrency scam guide describes impersonation, advance-payment, job, and account-protection stories. The CFPB also warns about urgent cryptocurrency demands, requests for access, and fake QR codes.