How to Spot (and Avoid) a Crypto Scam in Australia

The short answer

Crypto scams are now one of the most expensive crimes in Australia. Australians reported over $2.18 billion in total scam losses in 2025, including more than $837 million to investment scams, with crypto featuring heavily, over 14,000 reports involved losses to crypto-related scams. The losses are devastating partly because crypto transactions are irreversible: once funds leave your wallet, there's no bank to call and no chargeback to claim.

The good news is that almost every crypto scam relies on the same handful of tactics, so once you can recognise the pattern, you can avoid the overwhelming majority of them. The universal warning signs:

• Guaranteed or unrealistic returns. Real investing carries risk; "guaranteed" profit is the oldest lie in finance.
• Pressure and urgency. "Act now or miss out" exists to stop you thinking and checking.
• Unsolicited contact. Out-of-the-blue messages, calls, romance, or "investment tips" from strangers.
• Requests to move to a specific platform, app, or wallet they recommend.
• Anyone asking for your seed phrase, remote access to your device, or a fee to "release" your funds.

The core defence is simple and almost always sufficient: stop, check, protect. Stop and resist urgency, independently verify before you send a cent, and act fast if something feels wrong.

Important: This is general information to help you recognise scams, not personal financial or legal advice. If you think you're being scammed, stop all contact and report it (see the end of this guide).

---

Why crypto is a scammer's dream

Three features of crypto make it uniquely attractive to fraudsters, and understanding them explains why the tactics work.

Transactions are irreversible. Unlike a bank transfer that can sometimes be recalled or a card payment that can be disputed, a confirmed blockchain transaction is final. Scammers love finality.

It's fast and borderless. Funds can be moved across the world and through mixing services in minutes, making recovery extremely difficult and putting perpetrators beyond easy reach of local law enforcement.

Hype and complexity provide cover. Crypto is genuinely technical, genuinely volatile, and genuinely capable of large gains, which makes outlandish promises sound plausible to newcomers. "100x," "early access," and "this new token is about to explode" land far more easily here than in traditional markets. Scammers exploit both the fear of missing out and the knowledge gap.

None of this means crypto is a scam, it isn't. It means the environment rewards caution and punishes the impulsive, which is exactly the mindset a good scammer tries to switch off.

---

The major crypto scams in Australia (and how they work)

Fake investment and trading platforms

The most costly category. You're directed to a slick, professional-looking "exchange" or "trading platform", often after seeing an ad, a social media post, or a tip from a new online contact. You deposit funds and watch your balance climb on a convincing dashboard. The numbers are fiction. When you try to withdraw, you're told to pay "tax," "fees," or a "verification deposit" first, more money in, nothing ever out. Eventually the site vanishes or your account is frozen.

The tell: the platform isn't a real, licensed exchange, the returns shown are implausibly smooth, and withdrawals are blocked behind ever-changing fees.

Pig-butchering (romance-investment scams)

A long con that has caused enormous harm. It often begins with a friendly or romantic message, a wrong number, a dating-app match, a new "friend." Over weeks, the scammer builds trust and emotional connection, then introduces a "great investment opportunity," usually a crypto platform they personally use and profit from. Victims are coached to invest more and more, sometimes draining savings, super, or loans. The relationship and the platform are both fake. The name comes from the chilling metaphor of "fattening up" the victim before the slaughter.

The tell: an online relationship that moves toward money, especially crypto investing on a platform they recommend.

Crypto impersonation and phishing

Scammers impersonate trusted brands, your bank, a major exchange, even government agencies. You receive a message warning of "suspicious activity" or "an account problem," with a link to a fake login page that harvests your credentials, or instructions to move your funds to a "safe" wallet they control. Crypto impersonation scams helped drive $19.5 million in phishing losses in 2025, closely mirroring bank-impersonation tactics.

The tell: unsolicited "security" warnings with links or urgent instructions to move funds. Real institutions never ask you to transfer crypto to a "safe wallet."

Rug pulls and fake tokens

In a rug pull, developers create and promote a new token, attract buyers, then drain the liquidity and disappear, leaving holders with a worthless, unsellable coin. Variants include tokens coded so that buyers can purchase but never sell ("honeypots"), and fake versions of legitimate tokens.

The tell: anonymous teams, frantic hype, promises of guaranteed gains, no real product, and pressure to buy a brand-new token right now.

Giveaway and fake-endorsement scams

"Send 1 ETH and we'll send 2 back." Celebrity and company names and likenesses (often deepfaked) are used to lend credibility to fake giveaways or investment schemes. No legitimate giveaway ever requires you to send crypto first.

The tell: any "send crypto to receive more crypto" offer is a scam, 100% of the time.

Crypto ATM scams

A fast-growing Australian problem. Criminals, often impersonating government, police, or a business, or running a romance or investment con, instruct victims to feed cash into a crypto ATM and send it to the scammer's wallet. AUSTRAC found these machines grew from 23 in 2019 to over 1,800 in 2025, with around $275 million flowing through them annually and a large share suspected to be scam-related. Regulators have imposed a $5,000 cash cap and mandatory on-screen scam warnings in response.

The tell: anyone instructing you to deposit cash into a crypto ATM is scamming you. There is no legitimate reason a government agency, business, or love interest needs you to do this.

"Recovery" scams, the second hit

After a loss, victims are targeted again by fraudsters posing as recovery agents, lawyers, or even officials who claim they can retrieve the stolen funds, for an upfront fee. They take the fee and vanish. Sometimes the same criminals who ran the first scam return under a new identity.

The tell: no one can reverse a blockchain transaction. Any unsolicited offer to recover lost crypto for a fee is a scam.

Fake jobs and task scams

You're offered easy remote "work", liking videos, completing "tasks," boosting products, that pays small amounts at first, then requires you to deposit your own crypto to "unlock" higher earnings or commissions. The deposits are the scam.

The tell: a "job" that asks you to pay money in to earn money out.

---

The universal red flags

Strip away the specifics and scams share a common DNA. Treat any of these as a reason to stop:

• Guaranteed, fixed, or "risk-free" returns, or returns that sound too good to be true.
• Urgency and pressure, limited-time offers, countdowns, "act now."
• Unsolicited contact of any kind, calls, texts, DMs, emails, romance, "tips."
• Being steered to a specific platform, app, or wallet the other party recommends.
• Withdrawals blocked behind fees ("tax," "verification," "release fee").
• Requests for your seed phrase, passwords, or remote access to your computer or phone.
• Requests to pay via crypto ATM, gift cards, or unusual methods.
• Anonymous teams, vague whitepapers, and "trust me" instead of verifiable facts.
• Pressure to keep it secret from family, your bank, or your adviser.

That last one matters more than it seems: scammers isolate victims because an outside perspective breaks the spell. If someone is telling you not to discuss an "opportunity" with anyone, that alone is reason enough to walk away.

---

How to verify before you invest a cent

Australia gives you free, official tools to check legitimacy. Use them before sending money, not after.

• Check AUSTRAC registration. Legitimate Australian crypto exchanges are registered with AUSTRAC as digital currency exchange providers. You can check the register. No registration is a serious warning sign.
• Check ASIC and Moneysmart. ASIC's Moneysmart website maintains guidance and warnings on investment scams, and ASIC publishes lists of companies and websites to be wary of. If a platform or "adviser" claims to be licensed, you can verify that claim with ASIC rather than taking their word.
• Search Scamwatch. The National Anti-Scam Centre's Scamwatch service publishes current scam types and warnings. If you've been approached, search the platform name and tactic, others have often reported it.
• Scrutinise the website and contact. Check the exact URL character by character (scammers use lookalike domains), look for an Australian business presence and real contact details, and be suspicious of brand-new domains and pressure to act fast.
• Verify independently, through your own channels. If "your bank" or "your exchange" contacts you, hang up and call them back on the number from their official website or the back of your card, never a number or link the caller provides.
• Talk to someone. Run the opportunity past a trusted friend, family member, or a registered, licensed adviser. Scammers rely on isolation; a second opinion is one of the most effective defences there is.

The unifying principle: legitimacy survives scrutiny; scams collapse under it. Anything that punishes you for checking, with urgency, guilt, or pressure, is telling you what it is.

---

What to do if you've been scammed

If it's already happened, act quickly and methodically. Speed can occasionally help, and reporting protects others even when recovery isn't possible.

1. Stop all contact and stop all payments immediately. Don't send another cent, and don't engage further, no matter what they threaten or promise.
2. Contact your bank or the exchange straight away. If you sent funds via a bank transfer or card, your bank may be able to act if you're fast. If through an exchange, report it to the platform.
3. Report it. Lodge a report with Scamwatch (run by the National Anti-Scam Centre), and consider ReportCyber (the national cybercrime reporting platform). Reports feed intelligence used to disrupt scammers, in recent reporting periods, authorities have disrupted hundreds of scammer crypto wallets and taken down tens of thousands of scam accounts and websites.
4. Get support from IDCARE if your identity or personal information was compromised, it's Australia's national identity and cyber support service.
5. Preserve evidence. Keep messages, transaction IDs, wallet addresses, screenshots, and any platform details. These help investigators and any future action.
6. Refuse all "recovery" offers. This is critical. Anyone who contacts you promising to recover your funds for a fee is running a second scam. No one can reverse a blockchain transaction.
7. Be kind to yourself, and tell people. Scams are engineered by professionals to defeat smart, careful people, older Australians and vulnerable communities are disproportionately targeted, but no one is immune. Sharing what happened helps break the shame that keeps others silent and helps warn your circle.

---

Frequently asked questions

How can I tell if a crypto platform is a scam? Check whether it's registered with AUSTRAC and whether any licensing claims hold up with ASIC, scrutinise the exact website address for lookalike tricks, and look for the classic red flags: guaranteed returns, pressure to act fast, unsolicited contact, and withdrawals blocked behind fees. A genuine platform withstands scrutiny; a scam relies on stopping you from checking.

What is a pig-butchering scam? It's a long-running romance-investment scam where a fraudster builds a personal or romantic relationship over weeks, then lures the victim into a fake crypto investment platform they recommend. Victims are coached to invest more and more before the platform and the relationship both disappear. Any online relationship that steers toward crypto investing is a major warning sign.

Someone says they can recover my stolen crypto, is that real? Almost certainly not. Blockchain transactions can't be reversed, and unsolicited "recovery agents" who ask for an upfront fee are running a second scam, often targeting people who were already victimised. Legitimate help comes from your bank, Scamwatch, ReportCyber, and IDCARE, none of which charge a fee to "release" your funds.

Why do scammers want me to use a crypto ATM? Because cash fed into a crypto ATM and sent to their wallet is fast, hard to trace, and irreversible. Crypto ATM scams have surged in Australia, prompting regulators to cap cash deposits and add mandatory scam warnings. If anyone, a "government agency," a business, or a love interest, tells you to deposit cash into a crypto ATM, it is a scam.

I think I've been scammed. What should I do first? Stop all payments and contact immediately, then contact your bank or exchange straight away in case they can act. Report it to Scamwatch and ReportCyber, get identity support from IDCARE if your details were exposed, preserve all evidence, and refuse any "recovery" offers. Acting fast gives you the best chance, and reporting helps protect others.

Is investing in crypto itself a scam? No. Crypto is a legitimate asset class, but its irreversibility, speed, and hype make it a favourite vehicle for fraudsters. The risk isn't owning crypto through reputable, registered platforms, it's the scams layered around it. Learning to recognise the tactics lets you participate while avoiding the traps.

Why are scams getting more sophisticated? Criminals now use professional-looking websites, AI-generated images and deepfakes, and well-rehearsed psychological tactics, and they reach people at scale through social media and messaging. That's why relying on "it looked legit" is dangerous, appearances are easy to fake. Verification through official channels, and resisting urgency, are far more reliable defences than gut feel.