Recognising Crypto Scams: The Recurring Patterns We’ve Seen

Just this Tuesday, while scrolling through a social feed researching bitcoin transaction time trends, our team was served an ad that stopped us cold. It was a polished video of a well-known UK financial journalist, apparently broadcasting from a studio we recognised, urging viewers to “register for the Bank of England’s new digital pound scheme” before the midnight deadline. The graphics were flawless, the voice sync was perfect, and the link led to a registration page that mirrored the BBC News website down to the pixel. It was, of course, a complete fabrication. The sophistication of UK crypto scams has evolved so rapidly that even the most cautious users are finding themselves second-guessing reality. We’re peeling back the curtain on the most prevalent schemes we’ve tracked, breaking down the psychological engineering that makes them work.

The Impersonation Game: Fake Endorsements and Cloned Platforms

Trust is the most valuable currency in the crypto space, and scammers know it’s easier to steal existing trust than to build their own. We’ve observed a massive pivot toward high-fidelity impersonation, where criminals don’t just steal logos—they clone entire ecosystems. By mimicking the visual language of legitimate exchanges and the faces of trusted public figures, these fraudsters bypass the initial scepticism that usually kicks in when a user is asked to deposit funds. The goal isn’t a complex hack of the blockchain; it’s a simple trick to make you hand over your money willingly to a fake custodian.

Celebrity deepfakes and the Martin Lewis scam ad epidemic

Perhaps no single case defines this era better than the abuse of Martin Lewis’s likeness. The Money Saving Expert founder has repeatedly warned that he never endorses investment products, yet his face remains a staple of fraudulent Facebook and Instagram ads. We’ve seen AI-generated videos where “Martin” pitches a high-frequency trading bot that supposedly guarantees returns on Bitcoin. These aren’t static images anymore; they are deepfakes with lip-synced audio that can fool a casual viewer. Similarly, the names of Sir Richard Branson and Lord Alan Sugar are routinely slapped onto fake articles by scammers hoping the halo of British entrepreneurship will legitimise a dodgy wallet connection request. When a celebrity endorsement seems to appear out of nowhere in your feed, our rule of thumb is simple: it’s a synthetic advertisement, not an investment tip.

Clone websites: Spotting the difference between a real URL and a phishing mirror

We’ve intercepted reports where users lost significant sums, not because they were reckless, but because they clicked a sponsored Google result for a popular exchange. These clone sites operate with a domain that is often a single character off—think “b1ockchain.com” instead of “blockchain.com”, or a “.org” instead of a “.com”. The interface is a functional mirror that captures your login credentials and, critically, your two-factor authentication codes in real time. Before you enter any sensitive data, we always recommend manually typing the URL or checking the FCA’s official Warning List of unregistered crypto firms. If the padlock icon in the browser bar isn’t accompanied by the exact, unbroken legal name of the firm, you’re likely on a phishing mirror designed to drain your deposit instantly.

The Emotional Hook: Romance Scams and Pig Butchering

We’ve noticed a distinct tactical shift away from smash-and-grab theft toward long-term psychological manipulation. The modern crypto scammer is patient, often spending weeks or months building a false relationship before ever mentioning a token. This is a form of social engineering that targets loneliness and the human need for connection, making it particularly devastating. The UK’s National Cyber Security Centre has flagged a sharp rise in these cases, where the initial message arrives on a dating app but the financial crime unfolds on a fake trading platform.

How ‘Pig Butchering’ works: Fattening up the victim’s trust

The term sounds crude, but it accurately describes the method: the victim is the “pig,” fattened with affection and fake profits before the slaughter. The scammer, often operating from a sophisticated compound in Southeast Asia, poses as a successful professional who accidentally texted the wrong number. Over weeks of “friendly” chat on WhatsApp, they casually mention their wealth comes from a specific liquidity mining pool or a proprietary arbitrage bot. They’ll encourage you to start with a small amount, perhaps £200, and even let you withdraw a profit of £50 to prove it’s “real.” The trap springs when you deposit a life-changing sum; the platform freezes, and the new friend vanishes. We cannot stress this enough: a stranger who wants to help you get rich quickly is not a friend; they are a financial predator.

Red flags in direct messages: The Tinder-to-WhatsApp pipeline

The pipeline is almost always the same. A match on Tinder or Hinge suggests moving the conversation to WhatsApp or Telegram because they “aren’t on this app much.” Within a few days, the conversation drifts from personal hobbies to “Ethereum explained” in a way that feels oddly rehearsed. We’ve seen victims receive screenshots of lavish lifestyles—designer watches, first-class flights—all designed to create a sense of FOMO. If an online connection refuses to video chat, claims to have a “secret” edge in the market, or sends you a link to a trading platform you’ve never heard of, block them immediately. The City of London Police’s Action Fraud reporting centre receives thousands of these reports annually, and the emotional damage often outweighs the financial loss.

Pump and Dump: The Coordinated Social Media Assault

While romance scams are intimate, pump-and-dump schemes are a spectacle of mass manipulation. We’ve sat in Telegram groups with tens of thousands of members, watching as admins orchestrate the artificial inflation of a low-cap token. The energy is electric, the language is militaristic, and the pressure to buy immediately is immense. These groups exploit the herd mentality, promising a “moonshot” that will make everyone rich—but the reality is that only the insiders who bought before the signal ever profit.

Anatomy of a Telegram pump signal

It usually starts with a countdown. The admins post a blurred-out chart and a timer, building anticipation. When the clock hits zero, the name of the token is revealed, often a meme coin with a market cap under £50,000. The group floods the order book, causing a vertical price spike that can look like a 500% gain in minutes. The admins post screenshots of their paper gains, goading members to “hold the line.” But within three to five minutes, the insiders begin dumping their bags on the latecomers. The chart collapses into a red candle, leaving the majority of the group holding worthless tokens. We’ve specifically noted UK warnings regarding meme coins endorsed by reality TV stars, where fans were left nursing heavy losses after a coordinated dump erased the token’s value overnight.

Why a sudden ‘FOMO’ spike almost always precedes a crash

Healthy price discovery takes time; a vertical line on a chart is a sign of manipulation, not organic growth. When you see a token spiking on a platform like DexScreener without any fundamental news or development update, you are likely witnessing a pump in progress. The FOMO (Fear Of Missing Out) is a chemical reaction in the brain, not a trading signal. We always remind our readers that if you didn’t buy the token before the Telegram notification went out, you are the exit liquidity. You are the product being sold to the insiders.

The Authority Trap: When Scammers Pose as the FCA

If impersonating a celebrity creates trust, impersonating a government body creates fear. We’ve tracked a disturbing rise in cold-call schemes where fraudsters weaponise the reputation of the Financial Conduct Authority (FCA) and HM Revenue & Customs (HMRC). These scams are designed to trigger panic, bypassing the logical part of your brain by threatening legal action or tax penalties unless you “secure” your assets in a criminal-controlled wallet.

The FCA’s public warning list and how to use it

The FCA maintains a constantly updated Warning List of unregistered crypto firms and clone entities. Before engaging with any platform, especially one that contacts you first, you should search the FCA register. But scammers are clever; they often spoof the phone numbers of legitimate firms. If you receive a call from someone claiming to be from the FCA telling you that your crypto wallet is “under investigation” and that you must move your funds to a “secure government node,” hang up. We recommend calling the firm back on a number you find independently on the official FCA website, not a number provided by the caller.

Why government bodies will never request Bitcoin payments over the phone

This is a hard rule we wish every UK resident would internalise. HMRC will never text you asking for a tax debt to be settled via a Bitcoin ATM. The FCA will never call you to offer a “guaranteed recovery” of lost crypto assets for a fee. These are irreversible transactions by design. Once you send Bitcoin to a scammer’s address, there is no central authority that can reverse the payment. The moment a caller demands payment in cryptocurrency, the conversation is over. It is a scam, one hundred percent of the time.

Rug Pulls and Exit Scams: Spotting the Siren Song of New Projects

Decentralised finance (DeFi) promises a world without intermediaries, but it also removes the safety nets. A rug pull is the crypto equivalent of a founder setting fire to the building and collecting the insurance money. We’ve seen developers whip up hype around a new token, often tied to a viral trend, only to drain the liquidity pool and disappear once the price peaks. The growing regulatory oversight by UK authorities is trying to intercept these tools, but the anonymous nature of blockchain code makes prosecution slow.

Locked liquidity vs. unlockable developer wallets

In a legitimate project, the liquidity provider (LP) tokens are often “burned” or locked in a time-locked smart contract, preventing the developers from pulling the trading pool. In a rug pull, the smart contract contains a hidden backdoor or a function that allows the developer to mint unlimited tokens or drain the pool. We always look for an audit from a reputable firm like CertiK or Hacken, but even an audit isn’t a guarantee. The high-profile rug pull involving the Squid Game token remains a textbook example. The token rocketed in value based on the show’s popularity, but investors soon discovered they couldn’t sell. The anonymous developers made off with an estimated $3.3 million, leaving a trail of worthless digital coins. The “sell” function simply didn’t work for anyone but the deployer.

The anonymous team: When a faceless project is a deal-breaker

In the early days of crypto, pseudonymous founders like Satoshi Nakamoto were the norm. Today, if a project is soliciting millions in investment and the team is completely anonymous, we treat it as a deal-breaker. A team that hides behind cartoon ape avatars has no legal liability. If the project fails or steals funds, there is no one to sue. We’ve seen credible projects with doxxed founders who have a history in tech and finance; we’ve rarely seen a faceless project survive a market downturn without the founders vanishing. If you are a beginner in crypto, stick to projects where the team is visible and verified.

Technology will continue to evolve, and the scams will get slicker, but the weak link remains the same: human psychology. Greed, fear, and the desire for connection are the levers these criminals pull. The only shield that works across every scenario—whether it’s a deepfake Martin Lewis or a fake FCA caller—is independent verification. Stop, think, and check every link, every message, and every promise against a trusted source. If it’s too urgent to verify, it’s a scam.

Frequently Asked Questions

What is the first thing I should do if I suspect I’ve been scammed in the UK?

You should immediately stop all communication with the suspected scammer and contact your bank or crypto exchange to report the breach. Then, file a detailed report with the City of London Police’s Action Fraud reporting centre. They are the UK’s national reporting centre for fraud and cybercrime, and they can provide a police crime reference number.

How can I check if a crypto firm is actually registered with the FCA?

You can search the Financial Services Register on the FCA’s official website. Crucially, you should also check the FCA’s official Warning List of unregistered crypto firms. Be aware that scammers clone the details of registered firms, so always use the contact details listed on the FCA register, not the details provided in an email or on a suspicious website.

Are all anonymous crypto projects a scam?

Not necessarily, but they carry a significantly higher risk. A faceless team has no legal accountability. If you are a beginner, it is safer to avoid projects where the core developers are completely anonymous. We’ve seen too many instances where an anonymous team was simply a setup for a rug pull, as was the case with the infamous Squid Game token.

Why do romance scammers always want to move the chat to WhatsApp?

Moving the conversation off a dating app like Tinder or Hinge removes the paper trail. Dating platforms have moderation systems that can flag and ban accounts for suspicious financial talk. By moving to an encrypted messaging app like WhatsApp, the scammer can operate without oversight and more easily send malicious links to fake crypto platforms.

Can the FCA help me get my Bitcoin back?

No. The FCA is a regulator, not a recovery service. If you are contacted by someone claiming to be from the FCA who says they can recover your lost crypto for a fee, it is a recovery room scam. Government bodies will never request Bitcoin payments over the phone, and due to the irreversible nature of blockchain transactions, recovering stolen crypto is extremely difficult.