what it is
Someone you don't really know convinces you to put crypto into a website that looks like a real trading platform. The site is theirs. The dashboard numbers are theirs. The "support" agents are theirs. There is no broker, no liquidity pool, no real trading.
The moment your deposit confirms on the blockchain, the operator sweeps it to a wallet you'll never see, then edits the dashboard to make it look like your balance went up. Everything after that is theater designed to get more out of you.
how they reach you
The "successful trader" approach can come from almost anywhere. Crypto-investment scams overlap heavily with pig butchering, and the same operators run both. Common openers:
- An X / Twitter DM after you post about, like, or follow crypto content. The classic line is a humblebrag about recent trades.
- A follow-for-follow on X, Instagram, or Threads. You follow back, they DM days later.
- An Instagram or TikTok DM after you engage with a finance / "passive income" / day-trading post.
- A Telegram or Discord invite to a "signals", "alpha", or "trading group". The group has dozens of "members" pumping the same platform; almost all are bots.
- A Reddit DM after you post in r/CryptoCurrency, r/Bitcoin, r/wallstreetbets, r/forex, or any retail-investor subreddit.
- A LinkedIn message from a "fund manager", "hedge analyst", or "asset advisor". The job title is the cover; the script is the same.
- A dating-app pivot. The match is real-looking, the conversation is real-looking, and somewhere around week two they mention they trade.
- An "influencer" giveaway that requires you to deposit on a platform to "qualify".
- A YouTube comment, TikTok comment, or email about a "course" or "mentorship" that funnels you to a specific exchange.
- WhatsApp groups added without your consent by a stranger, hyping a platform.
What they have in common: the first message is never the ask. It's a hook to start a conversation. They're patient, they're paid by the hour, and they're working you in parallel with hundreds of others.
how it works after the opener
- Rapport. A few days to a few weeks of normal conversation. Light flirting, work talk, hobbies. They're investing in you because you're going to invest more in them.
- The humblebrag. Eventually they mention how well they're doing, usually a specific dollar figure, usually huge ("$700K last quarter", "$60k a week").
- The platform pitch. They recommend the site. Sometimes they say a relative or coach turned them onto it. They never sell hard. They wait for you to ask.
- The off-platform move. They suggest WhatsApp / Telegram / Signal "so we can talk easier". (See off-platform pivot below, this is a hard signal, not a friendly suggestion.)
- You deposit. Usually crypto, usually Bitcoin or USDT. The site shows your balance. You make a "trade". You "win". The dashboard climbs fast.
- You try to withdraw. This is where the script breaks down. The site asks for a withdrawal fee, a tax, a verification deposit, a higher-tier account. The amount always exceeds what they'd have to send you.
- Pressure to deposit more. They reframe the fee as an investment. They suggest loans. They imply you'll lose what you've already "made" if you don't pay.
- Ghost or escalation. Eventually the platform freezes your account, the contact stops responding, or a fake "compliance officer" demands more. The money was never yours.
the off-platform pivot
Almost every crypto-investment scam includes a step where the recommender pushes the conversation off the platform you met on. X DM → Telegram. Instagram DM → WhatsApp. LinkedIn → Signal. Dating app → WhatsApp.
The reason is operational, not personal:
- The original platform can't see the actual scam. X, Instagram, LinkedIn, Bumble all have automated moderation that flags suspicious financial pitches. Once the conversation moves, the platform is blind.
- Reports lose their teeth. When you eventually realize and report the account back, the worst messages live on Telegram. The platform sees a clean DM history and a phone-number swap. They often don't ban.
- The operator survives longer. Pig-butchering and crypto-investment kits are run as businesses. Each persona that stays unbanned for another week is more revenue. Off-platform conversations protect their inventory.
- Multiple aliases stay unlinked. The same operator runs many personas. Encrypted apps make it harder for the original platform, or law enforcement, to connect the dots.
A real new contact has no operational reason to insist. If a stranger pushes hard to move you to WhatsApp / Telegram / Signal early, treat that single move as a strong red flag on its own.
red flags
- A new contact pushes you toward a specific platform you've never heard of.
- The site is a
.io,.live,.pro, or.orgyou can't find in any reputable broker list. - The dashboard looks too clean and the gains are too consistent.
- Withdrawals require more deposits (fees, taxes, "verification").
- They want to move the conversation off the original platform to WhatsApp / Telegram / Signal early. This is one of the strongest single signals (see off-platform pivot above).
- "Support" is only on Telegram, WhatsApp, or in-platform chat, never a phone number you can call back.
- The recommender never deposits with you, never invests "alongside" you, never shows their own withdrawal.
- Urgency: "the signal is closing", "the bot is about to start the run", "if you don't deposit by EOD you lose your slot".
why the dashboard lies
This part trips up almost every victim. The website is just a database the scammer controls. When you "make a trade", a number in their database goes up. That number has nothing to do with markets, exchanges, or your wallet. It's a video game scoreboard.
Your real money, the crypto you sent, is already in the operator's wallet within minutes of confirmation. By the time the dashboard shows you up 4x, the actual coins have been swept through three or four hops on-chain and are sitting in a sweep wallet getting ready to cash out at an exchange.
what to do if you're in one
- Stop depositing. Every dollar from here forward is gone. The "fees to release" are the scam continuing.
- Save everything. Screenshots of the dashboard, the chat history, the receiver wallet addresses, the platform URL, the recommender's profile.
- Report it.
- U.S., IC3 (FBI) for the case file. Your local FBI field office for anything over five figures.
- Crypto, Chainabuse so the receiving wallets get tagged at exchanges.
- Hosting / domain, registrar abuse and host abuse.
- Social, report the recommender on the platform that introduced them.
- Do not pay "recovery experts". A second layer of scammers preys on the first. If they DM you offering to recover crypto for an upfront fee, they're stealing from you twice.
the bottom line
If a person you only know online points you at a platform you've never heard of, the platform is the scam. The person introducing you to it is in on it.