Scam Detection Guide
Practical strategies and proven techniques for identifying cryptocurrency scams before you lose money. Learn to spot red flags and verify legitimacy.
Detection techniques
Verify regulatory status
Check SEC, FINRA, and FinCEN databases for registration. Legitimate exchanges appear in regulatory filings. Be skeptical of services claiming "regulatory exemptions."
Research team members
Google Images search team photos—many scams reuse stolen images. Verify LinkedIn profiles, employment history, and previous projects independently.
Analyze website infrastructure
Check domain registration details (WHOIS), SSL certificate issuer, hosting provider, and creation date. Newly created domains with anonymous registration are suspicious.
Review smart contract code
Legitimate projects publish audited code. Search Etherscan or ask for Certik/Trail of Bits audits. Hidden or obfuscated code indicates potential backdoors.
Examine community authenticity
Scams fill communities with fake accounts and bot activity. Analyze Discord/Telegram member activity patterns and message authentication timestamps.
Financial analysis
Request audited financial statements. Verify token economics models. Check if promised returns exceed market benchmarks by extreme margins.
Due diligence checklist
Before investing, verify:
- Regulatory registration and compliance certifications
- Team member credentials and verifiable employment history
- Website authenticity and domain registration legitimacy
- Smart contract code audits by reputable firms
- Community size and engagement authenticity
- Token mechanics and sustainability analysis
- Insurance or customer protection policies
- Professional media coverage and third-party reviews
- Legal disclaimers and risk disclosures
- Historical track record and user testimonials verification
Warning sign matrix
Critical warnings (withdraw immediately)
- Regulatory warning letters or enforcement actions
- Inability to withdraw funds despite balances shown
- Team members unresponsive to legitimate inquiries
Elevated warnings (proceed with extreme caution)
- Promises of guaranteed returns exceeding market averages
- Pressure to invest immediately or lose opportunity
- Complex structures designed to obscure actual operations
- Anonymous team members with unverifiable credentials
Minor concerns (investigate further)
- New projects (less than 6 months established history)
- Limited transparency or unclear business model
- Poor website design or unprofessional communication
- No third-party security audits available
Verification resources
Recommended tools and services
- Etherscan: Verify smart contract source code and audit reports
- Certik: Check for legitimate security audit certifications
- DeFi Safety: Review DeFi protocol safety scores and analysis
- CoinGecko: Verify token legitimacy and market data authenticity
- Rug Pull Finder: Check if project appears in known scam databases
- Twitter/Reddit Communities: Search for independent user discussions and complaints
If you suspect a scam
Report immediately to: FBI (IC3.gov), SEC, FinCEN, state attorney general, and the exchange where the scammer operates. Document all communications and preserve evidence.
Contact CyberProRecovery for forensic analysis and recovery assistance. Early intervention dramatically improves recovery probability.