Warning Signs of a Cryptocurrency Investment Scam

    3 min read · Last updated

    Fraudulent investment platforms are built from a small set of repeated components. Recognising the structure is more reliable than judging the presentation, which is usually professional.

    The indicators below are drawn from recurring patterns observed in cryptocurrency fraud investigations.

    Anatomy of a fraudulent platform
    1. 1
      Contact
    2. 2
      Trust building
    3. 3
      Small deposit
    4. 4
      Displayed profit
    5. 5
      Escalated deposits
    6. 6
      Withdrawal blocked

    The withdrawal wall

    The defining signal is a withdrawal that cannot complete. Requests are met with new conditions: a tax payment, a liquidity fee, a compliance deposit or an account upgrade.

    A legitimate venue never requires an inbound payment to release your own balance.

    Displayed balances are not custody

    A dashboard number is a database entry controlled by the operator. Verify instead that assets exist on-chain and that withdrawals settle to an address you control.

    • No verifiable on-chain proof of holdings
    • Deposit addresses that change per user and per session
    • Profit curves with implausibly low volatility

    Relationship-led onboarding

    Contact typically begins socially — a messaging app, a professional network, a dating platform — and moves to investment only after rapport is established. The financial pitch arrives late and appears to come from a trusted individual.

    Infrastructure signals

    Investigation frequently shows recently registered domains, cloned interfaces reused across brand names, fabricated regulatory registration numbers and shared hosting between supposedly unrelated platforms.

    Fabricated regulation

    Licence numbers are often copied from unrelated regulated entities. Verify each number directly with the regulator's own register rather than the platform's documentation.

    If you recognise the pattern

    Stop all further payments, preserve every page and message, and record all transaction hashes before access is revoked. Preserved evidence is what makes later investigation viable.

    Case intake is confidential and handled by email at cybersec@securida.info.

    Frequently asked questions

    Is a professional-looking website a sign of legitimacy?
    No. Interfaces are cloned and reused across many fraudulent brands at negligible cost. Structure and verifiability matter, appearance does not.
    Should a requested 'release fee' ever be paid?
    No. Escalating fee demands are a continuation of the fraud, not a route to withdrawal.
    Author
    SEQRIA Research Team emblem
    SEQRIA Research TeamInvestigative research unit, SEQRIA
    • Cyber Intelligence
    • Blockchain Investigations
    • Digital Forensics

    The SEQRIA Research Team is the investigative research unit of SEQRIA, specialising in cyber intelligence, blockchain investigations and digital forensics.

    Its work focuses on digital asset investigations, blockchain transaction analysis, cyber incident investigations and technical evidence collection. Published material is reviewed internally before release.

    About the research team

    Related briefings

    Request Confidential Consultation

    SEQRIA provides technical investigation, forensic analysis and recovery assistance. Outcomes are never guaranteed. Case intake is confidential and handled by email.

    cybersec@securida.info

    Blockchain Intelligence & Digital Asset Investigations

    Intelligence Center