Common Cryptocurrency Scams and How to Avoid Them

Cryptocurrency scams have exploded across Canada in recent years, costing victims hundreds of millions of dollars annually. What makes modern Bitcoin fraud especially dangerous is that many scams no longer look suspicious at first glance. Fraudsters now use polished websites, AI-generated videos, fake customer support representatives, dating apps, social media, and even search engine ads to target victims.

Many people assume cryptocurrency scams only affect inexperienced investors, but that’s no longer true. Some of the most successful Bitcoin scams specifically target financially responsible, cautious individuals by slowly building trust over weeks or months before introducing a fraudulent investment opportunity.

Because cryptocurrency transactions are difficult to reverse, prevention matters far more than recovery. Understanding how modern crypto fraud works, what warning signs to watch for, and how to safely use crypto platforms and ATMs can dramatically reduce your risk.

This guide explains the most common cryptocurrency scams affecting Canadians today, how these scams operate, and the practical steps you can take to protect yourself.

Key Takeaways

Cryptocurrency scams are increasingly sophisticated and target people of all ages and experience levels.
Fake investment platforms and trust-based “pig butchering” scams are among the most common forms of crypto fraud.
Legitimate crypto companies will never ask for your recovery phrase, passwords, or private wallet keys.
Pressure, urgency, secrecy, and guaranteed returns are major warning signs of a potential scam.
Always research crypto platforms independently and verify website URLs carefully before sending funds or connecting your wallet.
If you believe you’ve been scammed, report the incident quickly to law enforcement and anti-fraud agencies. This can help protect you from additional fraud attempts and help protect others as well.

Introduction
The Scale of Crypto Fraud in Canada
Common Cryptocurrency Scams
Fake Investment Platforms
Trust-Based “Pig Butchering” Scams
Romance Scams
Phishing Websites
Deepfake and Impersonation Scams
Pump-and-Dump and Rug-Pull Scams
Recovery Scams
How to Avoid Cryptocurrency Fraud
What to Do If You’ve Been Scammed
Crypto ATM Safety Tips
Using a HODL ATM Safely
FAQs

The Scale of Crypto Fraud in Canada

In 2024 alone, Canadians lost over $224 million to cryptocurrency investment scams1. Current numbers are likely to be quite a bit higher. The Better Business Bureau has identified crypto investment scams as the riskiest scam type in Canada, with a median dollar loss of $5,000. More than 87% of people targeted by one of these scams lost money2, indicating that the techniques are highly effective.

The Canadian Investment Regulatory Organization’s 2024 investor survey found that 20% of Canadians had been targeted by an investment fraudster and that 55% of those cases were cryptocurrency-based3. This makes Bitcoin fraud in Canada one of the most common ways investors are being targeted.

As cryptocurrency adoption continues to grow, both regulators and law enforcement agencies across Canada have increased public warnings about organized crypto fraud operations targeting consumers.

The Most Common Bitcoin Scams and Crypto Fraud

These are the most widely reported types of fraud with Bitcoin and other cryptocurrencies:

Fake Investment Platforms

The most prevalent form of crypto fraud involves fake investment platforms that promise unrealistically high returns with little risk. These sites often look very professional, and the scammers behind them sometimes manipulate search engines so that the sites appear at the top of the list when people are looking for legitimate crypto exchanges.

These Bitcoin scams induce people to buy crypto and store it with them in a custodial wallet. They might tell you that you have to leave it invested for a specified period, even showing you that your balance is rising as your investment pays off. They may allow you to withdraw small amounts to gain your confidence, but when it comes time to withdraw a larger sum, they either lock you out or charge exorbitant fees.

Trust-based “Pig Butchering” Scams

A subset of investment scams is “pig butchering,” in which a scammer builds trust with someone over time through social media, a dating app, or WhatsApp. Once they’ve established trust with the victim, they introduce a “can’t miss” investment opportunity. Perpetrators of this kind of Bitcoin fraud often use social pressure to push the victim into investing more and more money. By the time the scam becomes obvious, the money is already gone.

Common signs of fake investment platform scams are:

Someone you barely know starts talking about crypto profits they’ve made.
They tell the victim that returns are guaranteed.
The website/app looks professional but is obscure (there’s no independent discussion about it in online forums, all the reviews are identical, testimonials look AI-generated, etc.)
You can deposit money easily, but withdrawals become “stuck.”
They ask for additional “taxes” or “fees” to release funds.

This is currently one of the largest types of Bitcoin fraud in Canada.

Real-World Example: The “Investment Mentor” Scam

A common version of trust-based crypto fraud starts with a friendly conversation on social media, WhatsApp, or a dating app. The scammer may spend days or weeks building rapport before mentioning cryptocurrency profits they’ve supposedly earned.

Eventually, they introduce the victim to a professional-looking investment platform and encourage them to start with a small deposit. The platform may even allow a small withdrawal to create trust. Once the victim deposits larger amounts, however, withdrawals become delayed, blocked, or tied to unexpected “taxes” and “processing fees.”

These scams are often highly organized and can involve multiple people working together to maintain the illusion of legitimacy.

Romance Scams

In this type of Bitcoin fraud, a scammer forms an emotional relationship online with a victim and then introduces either:

An investment opportunity that “can’t miss” (this is “pig butchering”).
A medical emergency, travel problems, a frozen bank account, or needing help so they can “finally meet” the victim. These emergencies might increase in scale or urgency over time.

Common signs of romance scams include:

Very fast emotional attachment and intense daily communications.
Lots of flattery and future planning.
Excuses for never meeting.
Demands to keep the relationship secret.
Financial requests that escalate over time.

Victims of romance scams often say that the relationship felt very real. This makes this type of Bitcoin scam particularly damaging to victims.

Phishing Websites

Phishing websites are fake websites that imitate legitimate crypto services such as Coinbase or Binance. The unsuspecting person connects their wallet and enters their login details, and the scammer steals their funds.

Common signs of phishing websites are:

Slightly misspelled URLs.
Urgent messages that tell you to verify your wallet.
Sponsored Google ads leading to fake websites.
Requests for your seed phrase.

Note that no legitimate cryptocurrency exchange will ever ask you for your seed phrase (recovery phrase). This should always be a red flag for crypto buyers.

Real-World Example: Fake Exchange Login Pages

Some phishing scams begin with a sponsored Google ad or social media link that appears to lead to a legitimate cryptocurrency exchange. The fake website may look nearly identical to the real platform, including copied logos, branding, and login pages.

Once the victim enters their credentials or recovery phrase, the scammer gains access to the wallet and transfers the cryptocurrency out immediately. Because blockchain transactions are difficult to reverse, victims often realize what happened only after the funds are gone.

Always access exchanges and wallets through bookmarked links or manually typed URLs rather than clicking advertisements or unsolicited messages.

Deepfake Scams

Deepfake videos that feature well-known public figures are one of the newer types of Bitcoin scams. In these videos, a credible person such as a corporate executive, entertainment figure, or YouTube influencer recommends a crypto investment. The prevalence of these videos has risen with the rapid advancement of AI technology.

Impersonation Scams

Fraudsters may impersonate personnel from:

Legitimate crypto companies.
Government agencies.
Postal or courier services.
Utility companies.
The victim’s employer (ex: a superior or the HR department).
A technology company that the victim has purchased from.
A cultural or community group that the victim is associated with.

Typically, the scammer will ask the victim to hand over login information or private keys that give them access to the victim’s existing holdings. They may also ask them to deposit crypto directly into the scammer’s account.

Pump-and-Dump and Rug-Pull Scams

Both pump-and-dump and rug-pull scams hype highly speculative assets and manipulate inexperienced investors into buying them. These scammers typically promote the asset on social media using sophisticated marketing tactics and professional-looking websites.

In a pump-and-dump, the scammers:

Buy a large volume of cheap or obscure cryptocurrency early.
Hype it aggressively online by saying things like “this coin is about to blow up!”
Encourage other people to buy in, which drives the price up.
Sell their own holdings at the inflated price.

When the price crashes, late buyers are left holding heavily devalued coins while the scammers enjoy their ill-gotten gains.

Common signs of a pump-and-dump scam are:

Sudden hype on Discord, Telegram, TikTok, Reddit, or X/Twitter.
Inflated claims about the coin’s potential, like “1000x guaranteed.”
Pressure to buy immediately.
Unknown coins with low trading volumes.

Rug-pull scams are carried out by the people who create the token or the DeFi project. These developers:

Launch the project (create the coin or initiate the DeFi project).
Create a liquidity pool using their own holdings, but keep the tools to withdraw those holdings in an unlocked wallet.
Hype the project on social media to convince people to invest.
Abandon the project after cashing out.

There are a few different methods shady developers might use to take their profits, such as freezing selling so only they can cash out, draining the liquidity from the pool, and simply taking the money they raised and deleting the website and social media accounts.

Common signs of a rug-pull are:

Anonymous developers who refuse to reveal their real identities
Liquidity that’s not properly secured in locked wallets.
Unusual wallet restrictions, like a lock on selling.
Unrealistic promises about profitability.
No independent audit of the project’s smart contracts.

Key things to watch for with these scams are heavy online promotion and skyrocketing prices. When these are attached to an obscure coin that appears out of nowhere, investors should be very cautious.

Recovery Scams

Recovery scams prey on victims who have already been defrauded once. After the victim has lost money on a Bitcoin scam, a second scammer contacts them, claiming they can recover the stolen funds for a fee. In 2025 alone, Canadians paid over $22 million to fake recovery scammers3.

Common signs of recovery Bitcoin scams are:

Claims of being “blockchain investigators” or something similar.
Upfront request for payment.
Claims of government connections or working for a government agency.
Guarantees that the funds will be recovered.

How to Avoid Bitcoin Scams and Other Cryptocurrency Fraud

Cryptocurrency scams have become increasingly sophisticated in recent years. While many of them target inexperienced investors, people who have been actively trading crypto for years have also been taken in. Speed, anonymity, and the irreversible nature of crypto transactions make it that much easier for scammers to defraud people, and that much harder to identify and prosecute them.

Unfortunately, this means that the onus is on the investor to exercise an appropriate amount of caution when doing any kind of crypto transaction. Understanding how these scams work and what to watch for is key to protecting yourself.

Remain Skeptical

The most important way to avoid Bitcoin scams is to look at every opportunity with skepticism. Take the time to look into the claims, assuming they are untrue until you can verify that they have solid, independent backing. Be particularly leery of investments that claim to be “risk-free,” as every investment entails some level of risk.

Refuse to Be Rushed

Scammers often take advantage of excitement, urgency, and the fear of missing out to pressure people into making quick decisions. If there is a claim of a time-limited opportunity, a limited supply, or a “VIP exclusive,” be suspicious. Scammers might also use social proof to convince you that others just like you are getting in on the deal. Real-time notifications that other people are buying the coin or investing in the project are common social proof tricks.

If you feel rushed or the fraudster starts acting impatient, cut the interaction short. If it’s a legitimate opportunity, it will still be there the next day.

Do Thorough Research

Before you use a cryptocurrency exchange, wallet app, or investment platform, investigate the company independently (i.e. using sources that are not linked to the site, service, or company). A legitimate crypto business should have verifiable public presence, including reviews that sound authentic, media coverage, regulatory information, and real user discussions online. A platform that looks very polished but has no independent mentions outside its own website or social media is probably a Bitcoin scam or other crypto-based fraud.

Verify Website Legitimacy

The fake websites used in Bitcoin scams often closely resemble legitimate ones, sometimes differing from the real one by a single letter or minor spelling variation in the URL. To protect yourself, always type in the website address carefully, bookmark official sites that you use regularly, and never click on crypto-related links in emails, text messages, or social media ads.

Also, be careful about downloading wallet software, browser extensions, or mobile apps. Only download software from official app stores and trusted company websites. You should also verify wallet addresses carefully before sending cryptocurrency to someone else.

Protect Your Wallet Credentials

Crypto wallets are secured using private keys (or recovery phrases). They should never be revealed to anyone or stored in a place where they can be found. Legitimate companies, exchanges, and support staff will never ask for a user’s recovery phrase, just as a bank employee would never ask for your ATM PIN. If anyone does ask you for it, end the transaction immediately.

Use strong account security just like you do for online bank accounts. Create unique passwords for every cryptocurrency-related account and enable two-factor authentication wherever possible.

Social engineering targets the emotions rather than using technology to defraud people. These Bitcoin scams work by appealing to the victim’s need to be wanted and accepted, or to avoid conflict or rejection. Social engineering doesn’t always take the form of egregious romance scams; it’s often much more subtle and can be highly effective even on people who are confident, secure, intelligent, and successful.

Social engineering scams are effective because they manipulate emotion instead of attacking technology. Fraudsters often create urgency, emotional attachment, fear, or excitement to stop people from slowing down and thinking critically.

Warning signs can include pressure to act quickly, requests for secrecy, attempts to move conversations onto private messaging apps like Telegram or WhatsApp, or emotional manipulation designed to create trust unusually fast. Some scammers use constant attention, flattery, or friendship to lower a victim’s guard before introducing a financial request or investment opportunity.

If someone discourages you from researching independently or pressures you to “just trust them,” treat it as a serious warning sign.

Ultimately, the best protection against Bitcoin scams and other crypto fraud is a combination of caution, research, patience, and strong digital security. Slow down anytime you feel rushed, verify information independently, and remain skeptical of anything that seems too good to be true.

It’s important to recognize that many modern crypto scams are run by organized criminal groups that have plenty of experience figuring out what does and doesn’t work. It’s common for people who have been scammed to feel embarrassed or ashamed, but it happens to plenty of highly intelligent, sophisticated people.

What to Do If You Think You’ve Been Scammed

If you think you’ve been the victim of a Bitcoin scam or other crypto fraud, act quickly. Although it’s difficult to recover cryptocurrency once it’s been transferred, the sooner you report the issue, the better your chances will be. Having a police report on file is also critical to protecting yourself if your information winds up on the dark web: repeated fraud attempts against the same victim are common because their information is spread among criminal networks.

Even if recovery isn’t possible, the data will help the police:

Understand the scope and scale of the problem so that they can direct resources toward it.
Collect data on criminal activity and groups.
Warn the public about ongoing threats.
Steer policy that protects the public and helps track down fraudsters.

Report the activity to your local police and to the Canadian Anti-Fraud Centre in Canada (https://antifraudcentre-centreantifraude.ca/index-eng.htm). In the US, contact your local FBI field office and the FTC’s Fraud Division (https://reportfraud.ftc.gov/). You may feel embarrassed at having been the victim of a scam, but it’s extremely common and happens to the best and brightest among us. Reporting it will help other people to avoid Bitcoin scams in the future.

Avoiding Scams When Using a Crypto ATM

Crypto ATMs are very popular in Canada, but they’ve been widely used in Bitcoin scams. These machines are attractive to scammers because funds can be transferred quickly, no bank account is required, most transactions only require a phone number for smaller deposits, and there’s no human intermediary to detect the fraud.

It’s important to recognize that it’s not the machines themselves that are responsible for the scams, but the same fraudsters who also use other means. The fraud playbook is the same: a victim gets an urgent call or message from someone claiming to be from a government agency, a utility company, a family member who needs urgent funds, and so on. The victim is directed to a crypto ATM and given instructions on how to transfer crypto to the scammer’s wallet.

Real-World Example: The “Government Agency” Crypto ATM Scam

One increasingly common fraud involves a victim receiving a phone call claiming to be from the CRA, law enforcement, or a financial institution. The caller creates panic by claiming there is unpaid debt, suspicious activity, or legal trouble requiring immediate action.

The victim is then instructed to visit a crypto ATM and transfer Bitcoin to a wallet address supposedly connected to the investigation or payment process.

Legitimate government agencies, banks, and police services will never request payment through cryptocurrency or direct someone to use a Bitcoin ATM.

Why Legitimate Crypto Operators Matter

One of the safest ways to reduce the risk of cryptocurrency fraud is to use established, transparent operators that follow Canadian regulatory requirements and clearly communicate anti-fraud practices to customers.

Legitimate cryptocurrency ATM operators should clearly identify who operates the machines, provide accessible customer support, display anti-fraud messaging, maintain transparent transaction procedures, and comply with Canadian money services business regulations. Reputable operators should also make it easy for customers to independently verify machine locations and company information before completing a transaction. If a crypto platform or ATM operator appears difficult to verify independently, proceed cautiously before completing any transaction.

Using a HODL ATM Safely

HODL Digital Services operates a network of crypto ATMs across Canada as a registered money services business. Just like online exchanges, it’s important to ensure that you’re using the machines safely. These are the things to watch out for:

Check in with yourself that you’re the one initiating the transaction. If another party has influenced you to use the ATM, don’t proceed with the transaction.
Verify that it’s a legitimate machine: Use the ATM locator on the HODL website to confirm the machine’s location before you go. If someone has told you to go to a specific machine, that’s a red flag.
Check the machine before you proceed. HODL machines are clearly marked. Reputable cryptocurrency ATM operators such as HODL also display anti-fraud warnings on their machines. Read them over, even if you’ve read them many times before.
Never share your wallet credentials with anyone, including HODL support staff.
Only use machines in well-lit locations that you’re already familiar with, like your local convenience store or gas station.

Legitimate organizations such as the CRA, the police, and your bank will never ask you to use a crypto ATM. If you get this kind of request, call the organization directly using the number from their website and report the incident to the police.

Cryptocurrency scams continue to evolve, and fraudsters are becoming increasingly sophisticated in how they target victims. The safest approach is to slow down, verify everything independently, and remain cautious anytime money, urgency, or emotional pressure are involved.

Whether you’re using a crypto exchange, investing in digital assets, or visiting a crypto ATM, taking a few extra minutes to verify information can prevent devastating financial losses later. In cryptocurrency, caution is not paranoia. It’s good security practice.

FAQs

How do most Bitcoin scams work?

Most cryptocurrency scams rely on either fake investment opportunities or social engineering. Fraudsters often build trust first, then pressure victims into sending cryptocurrency that cannot easily be recovered.

Can someone steal cryptocurrency through WhatsApp or Telegram?

Yes. Many modern cryptocurrency scams begin through messaging apps like WhatsApp or Telegram, where scammers build trust before promoting fraudulent investment platforms or requesting payments.

Can crypto ATM transactions be reversed?

In most cases, cryptocurrency ATM transactions cannot be reversed once the funds are sent. This is why scammers frequently use crypto payments in fraud schemes.

Why do scammers prefer cryptocurrency?

Cryptocurrency transactions are fast, difficult to reverse, and can be transferred globally without traditional banking oversight. These features make crypto attractive to fraudsters.

What is the most common type of Bitcoin scam and other cryptocurrency fraud?

One of the most common crypto scams is the fake investment platform scam. These scams use professional-looking websites and promises of high returns to convince people to deposit funds. Victims may even see fake profits on their account before eventually being blocked from withdrawing their money.

How can I tell if a crypto website is fake?

Fake crypto websites often use URLs that closely resemble legitimate exchanges but contain small spelling changes or unusual domain names. They may also pressure users to “verify” their wallet or enter recovery phrases. A lack of independent reviews, authentic online discussions, or regulatory information is another major warning sign.

Will a legitimate crypto company ever ask for my recovery phrase?

No. Legitimate cryptocurrency exchanges and wallet providers will never ask for your seed phrase or private keys. Anyone requesting this information is almost certainly attempting fraud and should not be trusted.

What is a “pig butchering” scam?

A pig butchering scam is a long-term trust-based fraud in which scammers build emotional relationships with victims online before introducing a fake investment opportunity. These scams often take place through dating apps, WhatsApp, or social media platforms and can continue for weeks or months before the fraud becomes obvious.

Can cryptocurrency transactions be reversed if I’m defrauded in a Bitcoin scam?

In most cases, cryptocurrency transactions cannot be reversed once they are completed. This is one reason scammers prefer crypto payments. If you believe you’ve been targeted, report the incident immediately to the exchange involved, local law enforcement, and anti-fraud agencies.

Are crypto ATMs themselves scams?

No. Legitimate crypto ATMs are legal financial services operated by registered businesses. However, scammers sometimes direct victims to use crypto ATMs because transactions are fast and difficult to reverse. People should be cautious anytime another person instructs them to use a crypto ATM to send funds.

Social engineering scams manipulate emotions such as fear, excitement, loneliness, or urgency rather than relying on technical hacking. Because these scams target human psychology, they can affect intelligent and experienced individuals just as easily as beginners.

References

1 https://www.moneysense.ca/save/investing/crypto/common-crypto-scams/

2 https://bbbmarketplacetrust.org/canadariskreport/

3 https://www.ciro.ca/crypto-recovery-scams-rise