You are reading an excerpt from our free but shortened abridged report! While still packed with incredible research and data, for just $20/month you can upgrade to our FULL library of 50+ reports (including this one) and complete industry-leading analysis on the top crypto assets. 

Becoming a Premium member means enjoying all the perks of a Basic membership PLUS:

• Full-length CORE Reports: More technical, in-depth research, actionable insights, and potential market alpha for serious crypto users
• Early access to future CORE ratings: Being early is sometimes just as important as being right!
• Premium Member CORE+ Reports: Coverage on the top issues pertaining to crypto users like bridge security, layer two solutions, DeFi plays, and more
• CORE report Audio playback: Don’t want to read? No problem! Listen on the go.

Types of Scams

Understanding the common types of cryptocurrency scams and the red flags to watch for is crucial to safeguard your investments in this volatile and decentralized financial landscape. Scammers in the crypto world typically employ one of two strategies. The first involves gaining unauthorized access to a victim's digital wallet and private security credentials, which often involves the use of sophisticated phishing techniques. By sending emails with malicious links to fraudulent websites, scammers deceive victims into revealing their private keys, allowing the scammers access to the victim's crypto holdings.

The second strategy is more direct but no less deceitful. In this case, victims transfer their cryptocurrency directly to the scammer. This can occur in numerous ways, including fake cryptocurrency exchanges, Ponzi schemes, and rug pull scams. For instance, the Securities and Exchange Commission recently charged 11 individuals related to a cryptocurrency pyramid scheme worth an alleged $300 million. The scam involved paying 'returns' to existing investors using money from new investors, a classic Ponzi methodology.

Furthermore, with the rise in popularity of Non-Fungible Tokens (NFTs), new scam opportunities have emerged. Scammers have begun selling fake NFTs, which are digital assets typically bought and sold using cryptocurrency. In these cases, counterfeit NFTs are sold as valuable collectibles, exploiting the victim's lack of knowledge or discernment about this new asset class.

Online promotions are another breeding ground for scams. Investors are promised opportunities to double or even triple their investments, often with a misleading representation of the associated risks.

When it comes to infected files, cryptocurrency wallets like Metamask and numerous hot wallets secure the private key in an encrypted form on the device. An infected file, if opened, installs a virus that transfers this encrypted file to the intruder. The hacker then only has to guess or steal the password, to gain access to your crypto. Often, these criminals will target users of certain operating systems due to their vulnerabilities, such as the ability to masquerade harmful files as benign ones.

In addition, the threat of 'blind signing' looms large. While a standard transaction presents all the relevant information, in a blind signing scenario, a user unwittingly authorizes a transaction whose details are deliberately obscured by hackers. This renders the user unable to discern that they are inadvertently transferring their assets to the scammer.

Browser extensions have also become a conduit for illicit activity, with hackers introducing custom code unbeknownst to the user. For instance, an extension could manipulate your clipboard—what you copy with the control+C function—to alter an address you intend to copy. In the event of haste, a user may overlook this modification, underscoring the importance of verifying addresses on Etherscan and using Ethereum Name Service (ENS).

Fake websites, too, pose a significant hazard. Often indistinguishable from their official counterparts, these sites may feature a prominent "Mint" or "Claim Airdrop" button. A user may unwittingly execute a blind transaction intended to pilfer their assets when they interact with these buttons.

Not all threats, however, are technical in nature. Some scammers resort to 'social engineering', the art of exploiting human errors and behaviors, rather than technical hacking skills. This involves impersonating a legitimate institution, person, or even a familiar contact on various platforms—a tactic commonly called 'phishing'. Upon gaining the victim's trust, the attacker can disseminate harmful files or direct the user to a deceptive website.

Similarly, cybercriminals may hijack legitimate accounts to conduct their activities, further muddying the waters of trust in online interactions. This underscores the need for the “don’t trust, verify” principle; whether dealing with friends, family, or celebrities, we must always maintain a healthy skepticism.

Another threat vector is the use of bots to impersonate customer support services. These bots proactively search for individuals seeking assistance on platforms like Twitter or Discord, responding with malicious links or phishing attempts. Furthermore, these scammers have been known to exploit video calls, suggesting victims change the language settings on their devices, all the while guiding them to disclose sensitive information and empty their wallets.

In conclusion, the crypto space, while rife with opportunities, is also fraught with a myriad of security risks. As users and investors, we must equip ourselves with knowledge, adopt best practices, and exercise due diligence to safeguard our assets.