Fall has a way of waking up crypto markets. Trading volume climbs, new tokens launch daily, and social feeds fill with stories of overnight gains. It also has a way of waking up scammers. Every period of heightened activity brings a fresh wave of rug pulls, wallet drainers, and impersonation schemes—and this fall is shaping up to be no different.
The numbers explain why criminals keep showing up. The FTC reported that consumers lost over $1 billion to crypto scams between January 2021 and March 2022. CertiK put losses from crypto scams and hacks at more than $1.3 billion in the first half of 2023 alone. Meanwhile, the FBI found that crypto investment scam losses jumped 183% from 2021 to 2022.
This week's roundup covers the scams doing the most damage right now, the case studies worth knowing, and the practical steps that actually reduce your risk.
A rug pull is straightforward theft dressed up as a project. Developers launch a token, build hype, inflate the price, then abandon the project and disappear with investor funds. The token price collapses to zero, and the team is gone.
Rug pulls are not a fringe problem. Chainalysis found they accounted for 37% of all crypto scam revenue in 2021.
Two cases from that era still serve as useful warnings. In November 2021, the Squid Game token—riding the popularity of the Netflix show—crashed to nearly zero after developers cashed out roughly $3.3 million. Two months later, in January 2022, the creators of the Frosties NFT collection disappeared with about $1.3 million.
Red flags to watch for: - Anonymous teams with no verifiable history - Liquidity that isn't locked, or locks that can be modified - Promises of guaranteed or unrealistic returns - Hype that outpaces any working product
How to protect yourself: Research the team behind any project. Check whether liquidity is locked and for how long. Treat hype-driven investments with suspicion, especially when the pitch is urgency.
Key Takeaway: If you can't identify who is behind a project and can't verify that liquidity is locked, you are not investing—you are gambling on a stranger's honesty.
Drainers don't need your private key. That's the part most people get wrong.
A crypto drainer is a malicious tool that tricks you into signing a transaction granting access to your wallet. Once you approve it, the attacker can move your assets out. Fake airdrops, phishing sites, and malicious smart contracts are the usual delivery methods.
The barrier to entry is low. Drainer kits like Inferno and Venom have been sold on Telegram for as little as $500, putting them within reach of low-level criminals. Inferno alone stole over $80 million from thousands of wallets before shutting down in November 2023.
This is why the common belief that you're safe as long as you never share your private key is so dangerous. Signing a malicious transaction is enough to lose everything in the wallet.
Protection steps: - Use a hardware wallet for significant holdings - Read every transaction before signing—especially approvals - Revoke unnecessary wallet permissions regularly - Treat unsolicited airdrops as hostile until proven otherwise
Key Takeaway: Your private key isn't the only thing that matters. Every transaction you sign is a potential door you're opening.
Fake crypto apps and websites impersonate legitimate platforms to steal login credentials and seed phrases. A fake Crypto.com app, for example, stole user funds by mimicking the real platform closely enough to fool people who didn't check the source.
The tactics are consistent: phishing emails, social media ads, and fake support agents. Impersonation scams on Twitter and Telegram are especially common, with scammers posing as influencers or customer support staff to build trust before striking.
How to verify: - Check official URLs character by character - Download apps only from official app stores - Enable two-factor authentication everywhere - Never share your seed phrase with anyone, including "support"
Key Takeaway: Legitimate platforms will never ask for your seed phrase. Anyone who does is a scammer, no exceptions.
Pig butchering is the scam that takes time. The attacker builds a relationship with the victim—often over weeks or months—before convincing them to invest in a fraudulent platform.
The setups are elaborate and the emotional manipulation is deliberate, which is why detection is so difficult. One documented case involved a victim convinced to invest $50,000 in a fake crypto platform after an extended courtship.
Red flags: - Unsolicited investment advice from a new online contact - Promises of guaranteed returns - Pressure to invest quickly or "before the window closes" - Reluctance to let you verify the platform independently
Protection: Be skeptical of any online relationship that turns toward money. Verify platforms through independent sources, not through links the other person sends you.
Key Takeaway: If someone you met online is steering you toward a specific crypto platform, the relationship is the scam.
Fake tokens mimic legitimate ones, and airdrop scams use them to lure users into connecting wallets to malicious sites. The goal is simple: get you to connect, then drain.
The risks go beyond immediate theft. Smart contract vulnerabilities in these schemes can expose your wallet to further exploitation, and fake tokens can clog your wallet with worthless assets designed to bait you into interacting with them.
Protection: - Never connect your wallet to unknown sites - Verify token contracts before interacting - Use a separate wallet for airdrops and experiments, never your main holdings
Key Takeaway: A free token is often a paid lesson. If you didn't expect it, don't touch it.
The data across sources tells a consistent story:
Why fall specifically? Market volatility, bull runs, and an influx of new users who haven't seen these patterns before. Scammers follow attention, and fall brings plenty of it.
The fundamentals haven't changed, and they still work:
None of this is exotic. It's basic hygiene, applied consistently.
Report it. To local authorities, the FTC, and the FBI's IC3. Notify the platform where the scam occurred. Consider consulting a lawyer if the losses are significant.
The common belief that reporting is pointless because transactions are irreversible is wrong. Reporting helps track scammers, connects cases that might otherwise look isolated, and prevents others from falling victim to the same operation.
What is a rug pull in crypto? An exit scam where developers abandon a project and run with investor funds, usually after artificially inflating the token price.
How do crypto drainers work? They trick users into signing transactions that grant attackers access to their wallets, allowing them to steal all assets.
What are common signs of a crypto scam? Anonymous teams, guaranteed returns, pressure to act fast, unsolicited investment advice, and requests for seed phrases.
How can I protect myself from crypto scams? Use hardware wallets, verify everything, never share your seed phrase, revoke permissions regularly, and research before investing.
What is pig butchering in crypto? A long-term scam where the attacker builds a relationship before convincing the victim to invest in a fraudulent platform.
Are fake crypto apps common? Yes. Fake apps impersonating legitimate platforms are a persistent threat, which is why downloading only from official stores matters.
What should I do if I've been scammed? Report to local authorities, the FTC, and the FBI's IC3. Notify the platform and consider legal counsel.
Why do crypto scams increase in the fall? Market volatility and increased activity bring new users and more attention, which is exactly what scammers follow.
The threats this season are familiar: rug pulls, drainers, fakes, pig butchering, and airdrop scams. What changes is the volume and the polish. Scammers get better at looking legitimate every cycle.
Skepticism and due diligence remain the best defense. Slow down. Verify everything. Protect your keys. And when you spot a scam, report it and tell someone—that's how the next person avoids becoming a statistic.
Stay ahead of scammers this fall. Subscribe to our newsletter for weekly crypto security updates and share this article to help others protect their assets.