Some crypto investment scams begin with a wrong-number message, a dating profile, a professional networking request, or a new online friend. The investment pitch arrives only after trust has been built. The victim is directed to a convincing website or app that displays fabricated profits, allows a small early withdrawal, and later demands more money to release the account.
Quick answer: stop sending money, do not pay a “tax” or “unlock fee,” preserve every message and transaction record, contact the sending platform and law enforcement quickly, and secure your accounts. Anyone promising guaranteed recovery for an upfront fee may be running a second scam.
How relationship-based crypto scams develop
The approach varies, but the structure is often consistent:
- Contact: a stranger starts a friendly, romantic, or professional conversation.
- Trust: the person communicates frequently, shares a detailed life story, and avoids an immediate financial request.
- Authority: they claim investment success or access to a relative, mentor, analyst, mining operation, or special trading signal.
- Migration: the conversation moves to an encrypted messenger, and the victim is sent to a specific platform.
- Small test: the site may accept a modest deposit and allow a withdrawal to build confidence.
- Escalation: the scammer encourages larger deposits, borrowing, or transfers from retirement or business funds.
- Trap: withdrawals are blocked unless the victim pays supposed taxes, verification deposits, liquidity fees, penalties, or insurance.
- Recovery scam: another person offers to trace or recover the funds for an upfront payment or wallet credentials.
The balance shown on the fake platform may be only a database entry controlled by the scammer. A profitable chart does not prove that assets were traded or held for the user.
Red flags before money is sent
- An online contact introduces investing after building an emotional relationship.
- Returns are described as guaranteed, low-risk, or consistently profitable.
- You are told to use one obscure website or install an app outside an official store.
- The platform has no verifiable legal entity, regulator record, or physical contact details.
- The person coaches you through buying crypto and screen-sharing your account.
- You must act before a private opportunity closes.
- Customer support exists only through the same messaging contacts.
- Deposits go to changing personal wallet addresses.
- The domain is new, misspelled, or imitates a known exchange.
- You are discouraged from discussing the opportunity with family, a bank, or an independent adviser.
Professional design is not evidence. Scam platforms can copy logos, price feeds, identity checks, and support chats from real services.
Withdrawal traps
A legitimate tax authority generally does not require a taxpayer to send crypto to an exchange wallet to unlock a private account. A real platform may conduct compliance checks or charge disclosed fees, but repeated demands for new deposits before any withdrawal are a severe warning sign.
Common labels include:
- advance tax or capital-gains payment;
- security or verification deposit;
- anti-money-laundering release fee;
- minimum turnover requirement;
- credit-score repair;
- liquidity certificate or blockchain insurance; and
- penalty for contacting a regulator.
Paying one demand usually leads to another. Do not send more money in an attempt to protect the amount already lost.
What to do immediately
1. Stop contact and payments
Do not confront the scammer with investigative details or tell them which accounts you are securing. Do not click new links or install remote-access software. If safety or coercion is a concern, contact local emergency or victim-support services.
2. Preserve evidence
Save:
- usernames, profile links, phone numbers, and email addresses;
- full chat exports and voice messages;
- website URLs, app names, and screenshots;
- wallet addresses and transaction hashes;
- bank, card, and exchange statements;
- dates, amounts, assets, and networks;
- fake invoices, tax notices, and support tickets; and
- the route by which you first met the person.
Keep original files and make a read-only backup. Do not edit screenshots in a way that removes timestamps or context.
3. Contact financial providers through official channels
Notify the bank, card issuer, or crypto exchange that sent the funds. Provide transaction details and the law-enforcement report number when available. A provider may be able to flag a recipient account, preserve records, or stop a pending fiat transfer. Confirmed blockchain transactions are generally difficult to reverse, so speed matters without guaranteeing recovery.
4. Report to law enforcement and regulators
Report in the country where you live and to any national cybercrime or financial-fraud portal. In the United States, the FBI directs victims to the Internet Crime Complaint Center (IC3). Users elsewhere should use their national police and cybercrime channels. If an impersonated exchange or regulator is involved, report the fake site to the real organization through its official domain.
5. Secure accounts and devices
- Change email and financial-account passwords from a clean device.
- Enable phishing-resistant multi-factor authentication where supported.
- Remove remote-access tools and unknown browser extensions.
- Revoke active sessions and API keys.
- If a seed phrase or private key was exposed, use a clean device to create a fresh wallet and move remaining assets promptly. Never disclose the old or new seed phrase; if help is needed, use independently verified support that does not ask for secret keys.
- Review token approvals if you connected a wallet to the site.
Our guide explains how to revoke token approvals. A revocation cannot return stolen assets, but it can remove a permission that has not yet been used.
Beware of recovery scams
Victim details circulate. After reporting a loss publicly, you may receive messages from “hackers,” law firms, blockchain investigators, government agents, or exchange insiders. Warning signs include:
- guaranteed recovery;
- an upfront crypto fee;
- a demand for the seed phrase or remote access;
- a claim that funds have already been frozen without verifiable case details;
- a request to pay “gas” into a recovery wallet; or
- pressure to keep the recovery secret from police or family.
Blockchain analytics can trace flows, but tracing does not give a private company authority to seize assets. Recovery normally requires cooperation from exchanges, banks, courts, and law enforcement. Verify any professional’s identity, license, written scope, and fee terms independently.
How to check a platform before depositing
- Find the exact legal entity in the terms.
- Verify authorization in the relevant official regulator register.
- Type the domain independently and check its history and spelling.
- Search official warning lists and credible news for the entity and domain.
- Read withdrawal terms before depositing.
- Never rely on a small successful withdrawal as proof that a platform is genuine.
- Ask an independent person to review the situation, especially when a relationship is part of the pitch.
EU users can follow our dated guide to checking MiCA authorization. Authorization does not eliminate investment risk, but a fabricated regulatory claim is a clear reason to stop.
Scale of the problem
The FBI’s Operation Level Up identifies potential victims of cryptocurrency investment fraud and contacts them before losses grow. Its public page reported that, by December 2026, 8,103 victims had been notified and 77% did not know they were being scammed when contacted. The figures illustrate why victims should not feel ashamed: these operations are organized to manipulate trust.
Frequently asked questions
Can a scam platform require tax before withdrawal?
A platform may have legitimate tax or compliance obligations, but sending more crypto to unlock a fabricated profit is a common scam pattern. Verify any claim directly with the relevant tax authority and a qualified adviser.
Can blockchain transactions be reversed?
Usually not by the sender after confirmation. Recovery may still be possible in limited cases when funds reach a cooperative centralized service or law enforcement obtains legal authority, but no one can guarantee it.
Should I delete the messages?
No. Preserve them as evidence, then block contact after you have saved what investigators and providers may need.
Am I responsible if I shared identity documents?
You are a victim. Report the exposure, monitor financial accounts, and follow national identity-theft guidance. The documents may be used to target you again.
This article provides general safety information, not legal advice or a guarantee of recovery. Contact verified local authorities and financial providers.