Phishing, exploits & privacy
Online deception: the recurring scam patterns
An early MASTR guide to online deception, impersonation and the techniques used to win a victim’s trust.
Original publication · 14 Sep 2024. Figures, claims and opinions reflect the original publication date.
The original publications are in English. Navigation is available in seven languages.

Originally published as “Scam Alarm: A Dive into the Dark Side of Online Deception!”
The cryptocurrency space continues to grow at a rapid pace, but with this growth comes a darker side—an increasing number of scams aimed at defrauding investors. While some scams are widely known, others fly under the radar, catching even seasoned investors off guard. To stay safe, it’s essential to recognize the breadth of schemes operating in the crypto world. Here are additional scams that are causing havoc in the market.
1. Rug Pulls
Rug pulls have become a notorious method for scammers to rob investors. In this scheme, developers create a new cryptocurrency project, often promising innovative technology, high yields, or groundbreaking use cases. Once they have amassed a significant amount of investor capital, they suddenly "pull the rug" by draining all funds from the project’s liquidity pool, abandoning the project, and disappearing.
This scam is particularly prevalent in decentralized finance (DeFi), where projects rely on smart contracts. In some cases, developers will use code that allows them to withdraw all liquidity from a token pool, leaving investors with worthless tokens. Rug pulls have resulted in losses of millions of dollars, with some high-profile cases including:
AnubisDAO: A project that raised nearly $60 million before its anonymous developers drained the funds and vanished.
SushiSwap: Although the project survived, its founder Chef Nomi suddenly withdrew $14 million from the development fund, sparking panic before eventually returning the funds.
2. ICO Scams (Initial Coin Offering Scams)
Initial Coin Offerings (ICOs) were a popular fundraising method during the crypto boom of 2017, where new projects sold tokens to investors in exchange for established cryptocurrencies like Bitcoin or Ethereum. While many legitimate projects used ICOs to raise capital, scammers quickly took advantage of the trend by launching fake ICOs.
In ICO scams, fraudsters promote a new cryptocurrency or blockchain project with enticing promises but have no intention of delivering a functioning product. Once they collect enough investor funds, they disappear, leaving token buyers with nothing. Some notable ICO scams include:
Pincoin: A Vietnamese ICO that defrauded investors of $660 million by promising both high returns and a legitimate business model before vanishing.
Plexcoin: Promised huge returns but was a scam that led to a legal crackdown by the U.S. SEC, with over $15 million in investor losses.
3. Ponzi and Pyramid Schemes
Ponzi and pyramid schemes are classic scams that have found fertile ground in the crypto space. In a Ponzi scheme, investors are promised high returns, but instead of generating profits through legitimate investments, the scammers pay early investors with funds from newer investors. The scheme continues until the flow of new investors dries up, at which point the fraud collapses, and most investors lose their money.
One of the most infamous crypto Ponzi schemes was Bitconnect, which promised extraordinary returns on Bitcoin investments. At its peak, Bitconnect had a market cap of over $2.5 billion, but it was eventually exposed as a Ponzi scheme, leading to massive investor losses and regulatory intervention.
In pyramid schemes, participants earn commissions by recruiting new investors rather than through legitimate investments. These schemes rely on continuous recruitment and collapse once the recruitment dries up, leaving later investors with nothing.
4. Phishing Scams
Phishing scams in the cryptocurrency world can take many forms, all with the aim of stealing users’ private keys, passwords, or personal information to gain access to their funds. These scams often involve:
Fake Websites: Fraudsters create websites that mimic legitimate crypto exchanges or wallet providers. Unsuspecting users input their login credentials, which are then used to drain their accounts.
Email Phishing: Scammers send emails pretending to be from legitimate exchanges, asking users to click on links or input private keys. These emails often look highly professional, making them difficult to distinguish from the real thing.
In one of the most famous phishing cases, the Ethereum-based wallet MyEtherWallet saw users redirected to a fake site where their private keys were stolen, leading to significant losses for users.
5. Cloud Mining Scams
Cloud mining allows users to rent computing power to mine cryptocurrencies without owning physical mining hardware. However, scammers have exploited the demand for mining by setting up fake cloud mining operations. Investors are promised a share of the mining profits in exchange for an upfront payment or ongoing subscription fees. In reality, the mining operation either doesn’t exist or produces negligible returns, and the scammers run off with the investors' money.
One notorious case is MiningMax, a cloud mining service that defrauded over $250 million from investors before its operators were prosecuted. Many other similar services continue to operate, preying on individuals hoping to profit from mining without the technical expertise required.
6. Flash Loan Attacks
Flash loans, a relatively new concept in decentralized finance (DeFi), allow users to borrow large amounts of cryptocurrency without collateral, as long as they repay the loan within the same transaction. While flash loans have legitimate use cases, they have also become a tool for attackers to manipulate markets and steal funds.
In a flash loan attack, hackers use a series of complex transactions to artificially manipulate the price of a cryptocurrency or a DeFi protocol. By the time the transaction is complete, the hacker has made off with significant profits, leaving the protocol or other users with heavy losses. One high-profile example is the bZx protocol, which lost millions in a series of flash loan attacks.
7. Ponzi Wallets and Investment Apps
Many fraudulent cryptocurrency wallet and investment apps promise high returns on deposits or "staking" of cryptocurrency. These apps often appear professional and legitimate but are designed to collect deposits with no intention of returning them. Once enough users have deposited funds, the app operators either disable withdrawals or disappear entirely. PlusToken is one of the biggest examples, where over $2 billion was lost after the operators scammed millions of users by promising high returns on their deposits.
8. Token Manipulation
Some scammers create tokens that appear legitimate but are coded to prevent investors from selling their holdings. These tokens might be promoted on social media by influencers or as part of pump-and-dump schemes. Once a large number of investors have bought in, they realize that they cannot sell or transfer their tokens. The scammer, meanwhile, has already sold their holdings at an inflated price, profiting off the artificial demand they created.
🚨Protecting Yourself in a Sea of Scams🚨
Given the scale and diversity of scams in the crypto space, it’s critical to remain vigilant. Here are additional steps to protect yourself:
Use Reputable Platforms: Stick to exchanges and wallets with established reputations. Avoid using platforms that lack a track record or have dubious reviews.
Verify Token Contracts: For new or obscure tokens, always verify the smart contract code to ensure there are no malicious clauses preventing you from selling or transferring tokens.
Double-Check URLs and Email Addresses: When accessing crypto platforms or wallets, always double-check the URL and email sources to avoid falling victim to phishing.
Avoid FOMO (Fear of Missing Out): Scammers prey on the fear of missing out, creating urgency to push you into hasty decisions. Take your time to research and avoid rushing into any investment based on hype or promises of quick gains.
Use Cold Wallets: For long-term storage of your crypto assets, use hardware wallets (cold wallets) that are offline and less susceptible to hacks or phishing attacks.
Conclusion
The cryptocurrency world offers incredible opportunities for wealth creation, but it’s also rife with scams and fraudulent activity. By staying informed and taking necessary precautions, you can reduce the risk of falling victim to scams and protect your investments. As the saying goes, "If it sounds too good to be true, it probably is."
For ongoing updates, education, and safety tips, follow $MASTR at https://linktr.ee/askmastr.xyz.
Thank you for your like and follow! Together, and with a strong community, we can help reduce the impact of scams.
Stay safe, stay informed, and protect your financial future.
#ScamAlert #OnlineFraud #InternetScam #DarkSideOfScams #CyberCrime #FraudAwareness #PhishingScam #DigitalFraud #ScammerAlert #CyberSecurity #ProtectYourself #InternetSafety #FraudPrevention #ScamWatch #OnlineThreats #FakeAccounts #HackerWarning #CyberProtection #StaySafeOnline #CyberSecurityTips #BewareScammers #Solana #Bitcoin #Wallet #scam #Ethereum $SOL $ETH #BTC $MASTR



