Understand the basics
Crypto is digital money with no middleman. Grasp the mental model — wallets, keys, transactions — and the scams stop being scary and start being obvious.
A plain-language primer on how crypto actually works, the risks nobody warns you about, and the red flags that separate real projects from traps. No jargon, no hype — just what you need to stay safe.
Educational content only — not investment advice.
Three things make the difference between exploring crypto safely and losing money to avoidable mistakes.
Crypto is digital money with no middleman. Grasp the mental model — wallets, keys, transactions — and the scams stop being scary and start being obvious.
Nearly every crypto scam recycles the same handful of scripts. Learn them once and you’ll recognise them in seconds, wherever they hide.
Most theft happens through small habits — reusing passwords, trusting a DM, skipping two-factor authentication. Fix the habits and you close most of the risk.
Four short cards. Read them in order — each one builds on the last.
One mental model is enough to start: a blockchain is a public ledger maintained by many computers, and “crypto” is digital money that lives on it.
Crypto isn’t inherently dangerous — unmanaged risk is. Know these four realities before you buy anything.
Almost every crypto scam is one of six shapes. Learn the shape — the props change, but the script doesn’t.
A “moderator” or “support agent” contacts you first to “help” or “verify” your account. Legitimate platforms never message you first to ask for money or codes.
You search an exchange’s name and open the sponsored copycat site that quietly steals your login. Always type the official URL yourself and bookmark it.
“Send 1 BTC, get 2 back” or “claim your airdrop” by connecting your wallet. Free-money offers exist to take yours — never connect your wallet to a stranger’s site.
“Your account is locked — log in now.” Every link leads to a lookalike page that harvests your password and two-factor codes. When in doubt, open the app yourself.
A charming stranger builds trust over weeks, then introduces a “great investment platform” that shows fake profits and never lets you withdraw. Real platforms don’t arrive via Tinder.
A token is hyped on social media by insiders, who sell at the top and leave the price to collapse. If the “community” is pushing hard, you may be the exit liquidity.
Thinking about a message, offer or site right now? Tap anything below that rings true.
Do these and you’ll be ahead of most people online. Each rule closes a real, common attack.
A one-page printable checklist you can keep next to your phone. Walk through it before you buy, connect a wallet, or reply to a message.
Free · No account · Unsubscribe anytime
Check your inbox for a copy, and grab the instant download below:
Download the Scam-Spotter Checklist (PDF)The download also stays available here on this device, so you can come back any time.
Plain answers to the concerns that come up most — in the US, Europe and the Gulf.
In most Western countries (US, UK, EU) owning and trading crypto is legal and regulated. In the Gulf, states including the UAE and Saudi Arabia have built regulated frameworks, while others restrict or discourage it. Rules change — check your own financial regulator before you start.
Crypto payments are irreversible, so honest answer: recovery is often impossible. Act fast, in this order — 1) report to the platform and your police cybercrime unit, 2) report to your national centre (US: ic3.gov, UK: Action Fraud, EU: your national authority), 3) secure everything else. Then ignore anyone who DMs you offering “recovery for a fee” — that is a second scam.
A cold (hardware) wallet keeps your private keys on a device that never touches the internet. If you’re holding more than you’d be upset to lose in a hack, move it there. For small starter amounts, a reputable exchange with two-factor auth is acceptable.
We don’t give investment advice. The honest version: crypto is volatile and many projects fail. Only ever use money you can afford to lose — and treat any promise of easy returns as a warning sign, not a reason to buy.
Check the exact domain (type it yourself), confirm the company is licensed by a real financial regulator, read independent reviews — not ones linked from the site — and make a tiny test deposit first. If it isn’t on the official app stores, treat that as a red flag.
Because crypto transfers are permanent and hard to trace. That is exactly why you should never pay a stranger in crypto — or in gift cards — “to unlock”, “to verify”, or “to recover” anything.
Your seed phrase (a list of 12 or 24 words) is the master key to your wallet. Anyone who holds it controls your funds — including “support staff”, “helpers” or recovery sites. There is no legitimate reason to type it anywhere online, ever.
Start small and paper-first: read the four cards above, open an account only on a regulated exchange, practise with a tiny amount you can afford to lose, and keep your seed phrase on paper in a safe place. Education before money.
If you’re in trouble, these are the official channels. Never pay a “recovery service” you found through social media.
A real regulator’s page always lives on an official government domain. Scammers fake “regulator” sites too — double-check before you trust one.