14 May 2025

Popular crypto scams on Telegram

Sadly, scammers have flooded numerous Telegram groups and continue to use fictitious accounts to try to snare gullible cryptocurrency enthusiasts. They employ various constantly-improving schemes. In light of this, we decided to discuss the most typical of them.

On this page

Telegram scammers use convincing scripts to gain the trust of potential victims and obtain as much information and, if they're lucky, crypto assets as they can. They disguise their true motives as “customer-oriented” or “valuable” services, assuring the potential victim that they are here to assist.

Scheme # 1: A phony customer service agent of a crypto exchange or trading platform

In this scheme, a fraudster pretending to be a customer and using a fake account similar to the real one keeps a close eye on customer requests in the official Telegram chat room of any major cryptocurrency exchange or trading platform. Users of the exchange usually begin to solve their problems through such a chat: they report the failure of certain functionality, the inability to withdraw assets from the wallet, or a significant delay during the execution of some transaction, transfer, etc. Typically, the group administrator promises to sort it out, requests that a ticket be created in the support service and a ticket number be provided, and then moves on to other members.

The scammer is waiting for this opportunity, and in a private message, he or she starts offering quicker solutions than a ticket in the queue (which is typically low priority, so you will have to wait a long time to solve the problem). The attacker is contacting from an account with the exchange or platform's logo, and the name is very similar to the official name of the Telegram chat where the conversation with the administrator took place, but with one letter or number added at the end. A user who is desperately trying to find a way out of a difficult situation — most often a financial one — might mistake a fraudster for an official member of the organization who is trying to assist him. 

During the conversation, the attacker informs the victim that there is an alternative solution to the problem and provides a link to a phishing site where, in addition to personal information, the address of the wallet's owner and the seed phrase must be entered. When asked, “Why enter such information?” the scammer usually responds that it will help solve the problem or speed up the transfer or withdrawal of assets, and that there is no need to worry because everything will be safe, etc.

At this point, an experienced trader realizes he is dealing with an attacker who, through phishing, is attempting to seize assets from a non-custodial wallet used for transactions on DEXs or decentralized trading platforms. A novice or inexperienced trader, however, can fall into this trap under psychological pressure, provide all the information, and lose assets in a matter of minutes.

Scheme #2: Fake survey of VIP clients

This time, the scam targets VIP users of cryptocurrency exchanges or trading platforms who have sizable crypto asset balances. It is not difficult to build a client base of VIPs by well “motivating” one of the exchange's employees, who, through insider fraud or access to client registers, obtains all the necessary information and passes it on to criminals. Another option is to gain access to the Telegram group where VIP clients are served in any way (for example, through an invitation from one of the administrators) and then compile a list of its members.

Crypto exchanges typically charge a fee, particularly for transactions involving the withdrawal of assets from wallets. This is a significant expense for investment funds or large traders. Fraudsters use this topic to find victims and steal assets, playing on greed.

Scammers who are well-versed in the cryptocurrency industry select another potential victim from the list and invite them to a newly created Telegram channel for “VIP customer service,” which is branded and decorated as the exchange's official chat. The customer accepts the invitation and goes to the group after being persuaded by the offer to increase limits or decrease commissions. There, they are politely asked to leave a review (which, of course, is “very important”) about the commission differences between the largest cryptocurrency exchanges, with the option of reading an Excel file containing a comparative table with data.

Downloading and opening a file with embedded macros titled “OKX Binance & Huobi VIP fee comparision.xls” activates an XOR-encrypted backdoor virus on the VIP client's computer that extracts certain DLLs and grants attackers remote access to the “infected” device. Then, as IT experts say, it's just a matter of technique. Attackers scan all hard disk partitions for logins, passwords, seed phrases, install a keyboard spy, and control the victim's crypto exchange verification and authentication procedures. Once they have received all the necessary information, they withdraw the assets.

The most recent instance of such an attack, dubbed DEV-0139, was discovered by Microsoft in October 2022 and described on the company blog. 

Scheme #3: Telegram groups for organizing a Pump&Dump attack

The scam is not brand-new and was widely used on the crypto market in 2017–2019, but it is still relevant today.

The masterminds behind this fraudulent scheme establish a separate group on Telegram, make a group of “pumpers,” and then add novice traders or beginners who were seduced by the promise of quick and easy profit. They use targeted advertising and other cryptocurrency-related Telegram groups or chat rooms to find potential victims. Typically, illiquid or little-known cryptocurrencies that have been listed on at least one cryptocurrency exchange are chosen for pumping.

The organizers then begin to disseminate “exclusive” information “from verified sources” (often “insiders”) that some coin's value will soon rise due to a partnership with a well-known company or a planned listing on a top exchange. Information about crypto is shared via Telegram channels, social network profile groups, and paid YouTube vloggers.

The advertising campaign is accompanied by continuous purchases of the chosen cryptocurrency, and, of course, the artificially created demand contributes to the asset's rate gradually rising. Participants in the specially created chat receive the command to “buy” while also participating in the process of “pumping” the asset.

If the advertising campaign was successful and targeted the right audience, the speed of the “pumping” of cryptocurrency increases in direct proportion to the number of participants who believed the information and sought to become wealthy quickly. All of this causes the coin to become increasingly expensive, as more and more victims of fraudsters begin to purchase it, driving up the price.

This “game” always has a sudden and unexpected result for the participants. Scammers synchronously “dump” cryptocurrency at the highest price (the second part of the Dump scheme), and its value drops quickly (sometimes in less than a minute). Most of the time, it is even lower than it was before “pumping.”

Some Telegram group members knew they were taking part in the planned Pump&Dump scheme from the start, but they had the mistaken belief that they would be able to sell their coins in good time because the organizers had promised to notify them of the date and time of the sale “on highs.” However, the signal to “sell” typically arrives either too late (after the coin's price has already fallen noticeably) or not at all. As a result, the vast majority of participants in the Pump&Dump Telegram group are out of pocket, while the organizers profit handsomely.

Conclusion

The conclusion is self-evident. Never use wallet passwords or seed phrases on incomprehensible websites (and don't enter the address, either). Do not open unknown files on your computer, even if you have a powerful antivirus package with up-to-date databases (criminals create new viruses that are not yet recognized). Pump&Dump schemes should also be avoided because they will have unfortunate results for everyone who participates, excluding the organizers. Verify the identity of any “representative” of an exchange or trading platform before providing or receiving information from them.

By following these recommendations, you can reduce your chances of falling victim to fraud and protect your assets.

The content on The Coinomist is for informational purposes only and should not be interpreted as financial advice. While we strive to provide accurate and up-to-date information, we do not guarantee the accuracy, completeness, or reliability of any content. Neither we accept liability for any errors or omissions in the information provided or for any financial losses incurred as a result of relying on this information. Actions based on this content are at your own risk. Always do your own research and consult a professional. See our Terms, Privacy Policy, and Disclaimers for more details.

Articles by this author
U.S.SEC Delays Grayscale’s Solana and Litecoin ETFs, Opens Public Comment for BlackRock and Dogecoin Proposals

U.S.SEC Delays Grayscale’s Solana and Litecoin ETFs, Opens Public Comment for BlackRock and Dogecoin Proposals

The SEC delays its decision on Grayscale’s Solana and Litecoin ETFs while opening public comment periods for proposed changes to BlackRock’s Bitcoin ETF and 21Shares’ Dogecoin ETF filing.

Vlad Vovk
Cynthia Lummis and Bernie Moreno Urge US Treasury to Review Crypto Tax Policy

Cynthia Lummis and Bernie Moreno Urge US Treasury to Review Crypto Tax Policy

U.S. Senators Cynthia Lummis and Bernie Moreno urged the Treasury to relieve the tax burden on corporations investing in digital assets, thereby promoting innovation in the country.

Anahit Avetisyan
TRON Goes Wall Street: Canary Proposes Staked TRX ETF on Cboe

TRON Goes Wall Street: Canary Proposes Staked TRX ETF on Cboe

Cboe has filed for the first TRX ETF with integrated staking. Launched by ETF issuer Canary Capital, the fund aims to deliver regulated yield from TRON’s PoS asset.

Vlad Vovk
U.S. Seeks 2-Year Sentence for Hacker Behind SEC X Account Breach

U.S. Seeks 2-Year Sentence for Hacker Behind SEC X Account Breach

U.S. prosecutors are seeking a two-year sentence and financial penalties for the hacker who compromised the SEC’s X account. The fake post he published briefly sent Bitcoin’s price higher.

Anton Kryshtal
Monica Long: How Ripple’s Quiet Force Is Redrawing Crypto’s Map

Monica Long: How Ripple’s Quiet Force Is Redrawing Crypto’s Map

Ripple’s Monica Long isn’t chasing headlines—she’s quietly building crypto’s future. From payments to tokenization, here’s how she’s reshaping finance from the inside.

Elina Moskovchuk
Top Crypto Tweets Today: Zerebro Dev Reveals He Faked His Suicide

Top Crypto Tweets Today: Zerebro Dev Reveals He Faked His Suicide

The biggest mystery in today’s Twitter/X recap is Zerebro dev Jeffy Yu, who claimed to take his life on a Pump.fun stream – but later said he faked the video to stop harassment.

Anahit Avetisyan
Top Crypto Tweets Today: Samourai Case, Curve X Hack & More

Top Crypto Tweets Today: Samourai Case, Curve X Hack & More

DOJ prosecutors reportedly suppressed key evidence in the Samourai Wallet case. Crypto lawyer Zack Shapiro shared the defense team’s hearing request on X.

Anahit Avetisyan
The Rise and Fall of Web3 Darlings: A Guide to Crypto Longevity

The Rise and Fall of Web3 Darlings: A Guide to Crypto Longevity

Most Web3 projects don’t collapse—they just stop being talked about. What makes one protocol a star and another a ghost? And why, in crypto, silence might signal transformation rather than failure?

Vlad Vovk
Beyond Profits: Understanding the Spiritual Side of Trading

Beyond Profits: Understanding the Spiritual Side of Trading

Are spiritual habits the missing link in trading psychology? For many, mindfulness and reflection offer a buffer against stress, reduce snap decisions, and aid in staying grounded through market volatility.

Vlad Vovk
How Cryptocurrency and Its Owners Are Tracked

How Cryptocurrency and Its Owners Are Tracked

Think blockchain is private? Wallets have no names and transfers seem untraceable — but that’s misleading. Discover how experts uncover wallet owners and link identities to transactions.

Vlad Vovk
The State of Crypto Regulation in 2025: Where the World Stands

The State of Crypto Regulation in 2025: Where the World Stands

A wave of regulation is sweeping the crypto world in 2025. From Washington to Brussels to Singapore, governments are setting new ground rules. What’s at stake for crypto’s next chapter?

Daryna Nesterenko
Blockchain-Based Distribution Platforms: Taking Control of Your Film’s Future

Blockchain-Based Distribution Platforms: Taking Control of Your Film’s Future

Blockchain lets filmmakers skip middlemen, control distribution, and get paid fairly. Director Markus Müller-Hahnefeld shares how it works.

Sebastian Scheplitz
Kaia: What Happens When LINE and Kakao Merge into One Blockchain

Kaia: What Happens When LINE and Kakao Merge into One Blockchain

In just half a year, Kaia has quietly racked up 20 million transactions and drawn in over 400,000 active wallets. Built directly into Asia’s most ubiquitous messaging apps, its reach now extends to nearly 300 million users—a bold blueprint for Web3 adoption.

Vlad Vovk
Correction or Pause? Bitcoin Steadies Above $100K After Overheating

Correction or Pause? Bitcoin Steadies Above $100K After Overheating

BTC has pulled back from $105,000 but still holds above $100,000. Profit-taking, liquidations, and declining leverage weigh on prices, while record ETF inflows and Coinbase’s addition to the S&P 500 offer support.

Vlad Vovk
Volatility Rattles Crypto Markets Ahead of U.S. Inflation Report

Volatility Rattles Crypto Markets Ahead of U.S. Inflation Report

Retail investors have sustained steep losses since the recent local top, as institutions stay cautious and await upcoming U.S. inflation data to recalibrate risk strategies.

Anton Kryshtal
MORE
Earning by Habit: How Crypto Weaves into Everyday Actions

Earning by Habit: How Crypto Weaves into Everyday Actions

You can now earn crypto tokens for your most routine daily habits — shopping, working out, or grabbing breakfast at a café. But how does it actually work?

Yara Zornell
Valletta: How Blockchain Became a Growth Engine for the Island of the Hospitallers

Valletta: How Blockchain Became a Growth Engine for the Island of the Hospitallers

Malta attracts crypto companies from around the world — flexible regulation, low taxes, and a prestigious European jurisdiction have turned the small city of Valletta into a land of opportunity.

Iaroslava Kramarenko
MORE