"Is crypto a scam?" is the second most-searched crypto question on Google, after "is Bitcoin a scam." The honest answer has two parts.
Part 1: The asset class is real. As of 2026, regulated spot ETFs exist for both Bitcoin and Ethereum. Major banks (BlackRock, JPMorgan, Fidelity) custody crypto. Stablecoins move trillions of dollars in legitimate cross-border payments every year. None of that is a scam.
Part 2: The fraud rate inside crypto is brutal. The FBI's 2025 IC3 report logged $5.6 billion in reported crypto-investment-fraud losses — more than every other internet-crime category combined. The real number is higher; most victims don't report.
So crypto is real *and* you are statistically very likely to encounter a scam if you spend any time in it. Both things are true.
What the GACS data shows about where the fraud actually lives
We track every entity that gets verified onto our blacklist. As of mid-2026:
- 38% of verified scams are phishing websites — fake versions of real exchanges, wallets, and DeFi front-ends
- 32% are fake brokers — slick-looking platforms that take your deposit and ghost your withdrawal
- 15% are fraudulent tokens — rug pulls, honeypots, exit scams
- 7% are drainer wallets — addresses tied to known theft
- 6% are social-impersonation accounts — fake Elon, fake CZ, fake support reps
- <1% are memecoin rugs — loud in the news cycle, rare in actual loss volume
Read the full breakdown in our State of Crypto Scams 2026 report.
The takeaway: a single 4-second [Safe Scanner](/safe-scanner) check on the URL stops over 70% of these incidents before any money moves.
How most victims actually get hit
It's almost never "I bought Bitcoin and lost money to the market." It's one of these:
- The pig-butchering pattern — a stranger builds rapport on WhatsApp/Tinder/LinkedIn over weeks, then introduces a "trading opportunity." Read what pig butchering actually is.
- The fake broker pattern — they showed you a dashboard with rising profits, but every withdrawal needs another "fee."
- The recovery-scam pattern — after the first scam, a "recovery expert" reaches out promising to claw back funds for an upfront retainer. They are the *second* scam.
- The drainer pattern — you connected your wallet to a fake "airdrop claim" page that drained it in one signature.
If any of these sound familiar, stop reading this and scan the entity now.
Is the technology itself fraudulent?
No. The underlying blockchains are mathematically verifiable. The Bitcoin and Ethereum networks have processed trillions of dollars without a protocol-level breach. Smart-contract audits, formal verification, and on-chain forensics are legitimate engineering disciplines.
But "the technology is sound" doesn't protect you from the social-engineering layer on top. That's where the $5.6B/year goes.
The defensive playbook
- Never accept a "guaranteed return" — they don't exist in legitimate crypto
- Never send funds to an address a stranger DMed you
- Never type your seed phrase into a website. Ever. No legitimate service asks
- Run every URL, wallet, and broker name through GACS Safe Scanner before depositing
- If something already happened, follow the 30-day recovery plan
Bottom line
Crypto is not a scam. The crypto opportunity that a stranger just pitched you, with returns that sound too good to be true, almost certainly is. The difference between losing $50k and not losing $50k is usually four seconds with a scanner.