Bitcoin scams to avoid, and how to spot them in seconds

Bitcoin payments can't be reversed. There's no bank to call and no chargeback. That's why scammers love it, and why the best protection is spotting the trick before you act.

The good news: almost every scam uses the same few tricks. Learn them once and you'll recognise them everywhere.

We will never ask for your recovery words, your backup or your password. Nobody genuine ever will.

The three golden rules

  1. Never share your recovery words. Not with support, not with a friend, not with a website. No genuine company needs them, ever.
  2. Nobody gives free Bitcoin. If someone promises to double, multiply or "release" your coins, it's a scam.
  3. Pressure means stop. "Act now", "your account will be frozen", "last chance": slow down and check through a channel you found yourself.

If you remember only this section, you'll avoid most scams.

The most common scams

1. Fake support

You post a question online, or search for help, and someone "from support" contacts you. They're friendly and quick. Sooner or later they ask for your recovery words, ask you to "sync" or "validate" your wallet on a website, or to install a remote-access app.

How to spot it: genuine support never contacts you first in comments or private messages, and never asks for your words. What to do: only use support links on the company's official website, typed in yourself.

2. "Recovery" services

After a hack or a lost wallet, people offer to get your Bitcoin back for a fee. Some even claim to be lawyers, investigators or police.

How to spot it: they ask for money upfront, or for your words. Nobody can reverse a Bitcoin payment. What to do: ignore them. Report real losses to the police yourself (see below).

3. Giveaways and "doubling"

"Send 0.1 BTC, get 0.2 BTC back." Often with a fake video or account of a famous person.

How to spot it: you have to send first. What to do: never send. Report the account to the platform.

4. Fake apps, websites and ads

A wallet app or exchange site that looks real but isn't. They often sit at the top of search results as ads, or arrive as links in emails and messages.

How to spot it: the address is slightly wrong, the app has few reviews or a different developer name, or it asks for your recovery words on first use. What to do: type addresses yourself, bookmark them, and install wallets only from the official app store or the maker's site.

5. Phishing emails and texts

"Unusual login detected", "verify your wallet", "your withdrawal is on hold". The link leads to a copy of a real login page.

How to spot it: urgency plus a link. What to do: don't click. Open the app or type the website address yourself and check there.

6. Swapped addresses

Malware on your computer quietly changes a Bitcoin address you copy for the thief's. Another trick sends you tiny payments from an address that looks almost like one you've used, hoping you copy it from your history later.

How to spot it: compare the first 6 and last 6 characters every time, and on a hardware wallet, check the address on the device screen. What to do: never copy addresses from your transaction history. Get a fresh one from the recipient's wallet each time.

7. Investment and romance scams

A new online friend, or a "mentor" in a group, shows you an amazing trading platform. Your balance grows on screen, so you invest more. When you try to withdraw, there are "taxes" or "fees" to pay first. The money was never really there.

How to spot it: guaranteed returns, a platform you've never heard of, and someone you've only met online guiding you. What to do: stop sending money. Talk to someone you trust offline before going further.

8. Tampered or second-hand hardware wallets

A device bought from a marketplace, or one that arrives already set up, or with a recovery card already filled in.

How to spot it: broken seals, a device that doesn't ask you to create new keys, or words provided in the box. What to do: buy only from the maker or an authorised seller. Always create new keys yourself on first use.

Warning signs they all share

One sign is enough to stop and check.

If something has already gone wrong

  1. Stop sending money, whatever they say about fees, taxes or unlocking.
  2. If your recovery words may have been seen, move any remaining Bitcoin at once to a new wallet with new words.
  3. Change passwords on your exchange and email, and turn on two-factor authentication with an app rather than SMS.
  4. Write down everything: addresses, transaction IDs, usernames, websites, messages and dates.
  5. Report it to your local police (in Ireland, An Garda Síochána), to your exchange, and to the platform where you met the scammer.
  6. Ignore anyone who offers to recover your funds. That's the next scam.

Being scammed is not stupid. These people do it full time and are very good at it. Reporting helps stop the next victim.

Quick checklist

This guide is general information about keeping your own Bitcoin safe. It is not financial, legal or investment advice, and we don't tell anyone whether to buy or sell.