Crypto Scam Statistics 2026: How to Protect Your Money

Losing money to a cryptocurrency scam is now one of the most common ways people in the UK and Ireland are defrauded. Global losses reached an estimated $17 billion in 2025, according to blockchain analytics firm Chainalysis, and UK investment fraud figures published by City of London Police show losses of nearly £880 million last year, much of it tied to digital assets. Scammers have also changed tactics: instead of relying only on fake exchanges, many now use artificial intelligence to run convincing romance and investment schemes, or trick people into signing away wallet permissions rather than stealing a password outright.

This guide sets out the current statistics behind cryptocurrency fraud, explains how the main scam types work, and covers what protection actually exists for UK and Ireland investors. It also looks at the warning signs to watch for, what to do if you have already sent money, and why so-called “recovery agents” who promise to reverse a transaction are usually running a second scam of their own.

The Scale of Cryptocurrency Scams in 2025 and 2026

Fraud figures rarely tell a simple story, and cryptocurrency scam data is no exception, since agencies count losses differently and revise totals as new wallets are identified. What the numbers agree on is direction: losses are rising steeply, and the methods are becoming more industrial.

Global Losses Are Rising Sharply

Chainalysis estimates that cryptocurrency scams and fraud took in at least $17 billion worldwide in 2025, up from a revised $12 billion in 2024. The firm’s 2026 Crypto Crime Report also found that impersonation scams, where a criminal poses as a bank, regulator, or well-known figure, grew by roughly 1,400% year on year, and that scams using AI tools were around four and a half times more profitable than those that did not. The average payment made by a single victim rose 253% year on year to reach $2,764, suggesting that once someone starts paying, they tend to keep paying.

UK Losses Are Just as Concerning

The UK picture mirrors the global trend. City of London Police, the national lead force for fraud, reported that investment fraud, a category dominated by cryptocurrency, cost UK victims £879.8 million in 2025, working out to roughly £2.4 million every day. Some 34,673 reports were made to Report Fraud, the service that replaced Action Fraud in December 2025, a 31% rise on the year before. Separately, UK Finance’s annual fraud report put crypto and alternative asset investment scam losses at £221.5 million for 2025, up 40% year on year, with close to 15,000 cases reported through UK banks. Average losses per victim in the City of London Police data stood at £25,612, frequently drawn from pensions or long-term savings.

How a Cryptocurrency Scam Actually Works

Understanding the mechanics behind a cryptocurrency scam makes the warning signs much easier to spot later on, because most fraud follows one of a small number of well-worn patterns rather than anything truly novel.

Pig Butchering and Romance Investment Fraud

The most damaging cryptocurrency scam pattern currently active is often called “pig butchering”, a translation of a Chinese term describing how a victim is fattened up before the loss. It typically starts with an unsolicited message on a dating app, WhatsApp, or social media, followed by weeks of friendly conversation designed to build trust. The scammer then introduces a “trading opportunity” and encourages small test withdrawals to prove the platform works, before the deposits grow. Once a large sum is committed, withdrawals stop, and the victim is often told they must pay a fake tax or release fee before they can access their own funds.

Fake Exchanges and Cloned Trading Platforms

Some scams skip the relationship building and go straight for a convincing fake platform. Criminals build websites and apps that closely mimic real exchanges, complete with fabricated balances and price charts that move independently of real markets. Deposits go into a wallet the scammer controls, and the “gains” shown on screen never correspond to anything real. These sites are often promoted through paid social media adverts or fake celebrity endorsements, which is one reason the Financial Conduct Authority now requires UK-facing crypto promotions to carry clear risk warnings.

Wallet Approvals and Smart Contract Drainers

A newer and more technical cryptocurrency scam involves tricking a victim into signing a wallet permission rather than handing over a password. When someone connects a wallet to a website and approves a transaction, they may be granting that contract ongoing access to move tokens, a mechanism sometimes called a Permit or Permit2 approval. Malicious sites disguise this as a routine step, such as claiming an NFT or verifying a wallet, and use the signed approval to drain funds later.

Screen Sharing and Remote Access Fraud

A less discussed but common route into a cryptocurrency scam starts with an ordinary bank account rather than a wallet. A caller posing as technical support or a bank fraud team persuades the victim to install remote access software such as AnyDesk or TeamViewer, claiming it is needed to “secure” their account. The scammer then watches the victim log into online banking, guides them through moving funds into a crypto exchange, and takes control once the coins have been purchased. Because the victim technically approved each step, banks can be slower to flag the activity as fraud.

Common Cryptocurrency Scam Types at a Glance

Scam type	How it typically works	Key warning sign
Pig butchering/romance investment	Long term relationship building before a fake trading platform is introduced	New online contact quickly steers conversation towards a specific trading app
Fake exchange or cloned platform	Website mimics a real exchange with fabricated balances	Cannot withdraw without paying an extra fee or tax first
Wallet drainer / malicious approval	Victim signs a permission that lets a contract move tokens later	Site asks you to connect a wallet to claim something free
Screen sharing bank fraud	Remote access software used to move money from a bank account into crypto	Unsolicited call asking you to install AnyDesk or TeamViewer
Recovery scam	Second fraud targeting people who already lost money	Unsolicited contact claiming they can reverse a blockchain transaction

The Secondary Threat: Cryptocurrency Recovery Scams

Losing money once is bad enough, but a growing number of victims are targeted a second time by people offering to get it back, a pattern that deserves its own section because it catches out people who are already distressed and less likely to check credentials carefully.

How a Recovery Scam Operates

Recovery scammers monitor consumer complaint forums, social media groups, and review sites such as Trustpilot for people describing crypto losses, then make contact posing as an “ethical hacker”, forensic investigator, or even a police affiliated recovery unit. They usually request an upfront fee, described as covering legal costs, software licences, or blockchain tracing tools, and sometimes ask for remote access to the victim’s device or further wallet details, which can expose the victim to a third round of theft.

Why a Blockchain Transaction Cannot Be Reversed

It helps to understand the underlying technology here. A confirmed transaction on a public blockchain is final once it has enough confirmations, because reversing it would require control of the recipient’s private key, not simply technical skill or a court order. Nobody, however senior their job title sounds, can unilaterally claw back coins that have already moved to another wallet. Genuine recovery, where it happens at all, comes through law enforcement freezing funds at a regulated exchange before they are cashed out, not through a private individual “hacking” the blockchain after the fact.

Warning Signs of a Cryptocurrency Scam

Most fraud shares a handful of common features, and learning to recognise them is more useful than trying to memorise every scam variant currently in circulation.

Guaranteed or unusually high returns with little or no explained risk are a strong indicator, since no legitimate investment can promise a fixed profit. Pressure to act immediately, often paired with a countdown timer or claim that an offer expires within hours, is designed to stop you from doing basic checks. Requests to pay an additional fee, tax, or “release cost” before you can withdraw your own money should be treated as confirmation of fraud rather than a hurdle to clear.

Unsolicited contact through Telegram, WhatsApp, or a dating app that quickly moves towards a specific trading platform is a classic pig butchering opening. Finally, being asked to install remote access software, share a screen, or approve a wallet connection to “verify” your account are all steps a legitimate firm has no reason to request.

A Pre-Investment Due Diligence Checklist

None of the checks below take more than a few minutes, and running through them before transferring any money is the single most effective way to avoid becoming another cryptocurrency scam statistic.

• Search the firm’s name on the FCA Financial Services Register and the FCA Warning List, and for Irish residents, check the ESMA register of MiCA-authorised providers.
• Look up the website’s domain age through a WHOIS lookup. Genuine platforms are rarely only a few weeks old.
• Check whether the smart contract address, if one is involved, has been verified on a block explorer such as Etherscan, and read any audit reports linked from the project.
• Search the company name alongside the words “review” and “scam” to see whether other people have already reported problems.
• Confirm that any UK-registered company mentioned actually exists on Companies House and matches the details given.
• Be suspicious of any platform that only accepts deposits in cryptocurrency or stablecoins and refuses standard bank transfers, since this removes a layer of traceability that criminals prefer to avoid.

If a platform fails more than one of these checks, treat it as a cryptocurrency scam until you have solid evidence otherwise, rather than assuming good faith.

Regulatory Protection in the UK and Ireland

Investor protection rules differ sharply between traditional investments and cryptocurrency, and UK and Ireland residents are often surprised by how little safety net exists once money has been sent.

The FCA Register, Warning List and Financial Promotions Rules

Since October 2023, any firm marketing crypto services to UK consumers, including firms based overseas, falls under the FCA’s financial promotions regime and must include prominent risk warnings. Before investing, it is worth checking the FCA’s Financial Services Register to confirm a firm is authorised, and cross-referencing the FCA Warning List, which the regulator updates continually as it identifies unauthorised or clone firms. The FCA has taken action against multiple exchanges for illegal promotion, including blocking apps from UK app stores and requesting social platforms remove associated accounts.

Why the FSCS and Financial Ombudsman Service Will Not Help

This is worth stating plainly because so many people assume otherwise: cryptocurrency held directly is not a “specified investment” under UK rules, so the Financial Services Compensation Scheme does not cover losses if an exchange fails or a scam takes place, and the Financial Ombudsman Service generally cannot investigate complaints about an unregulated crypto firm’s core services. Some crypto derivatives, such as regulated CFDs, sit under a different regime and may carry protection, but spot crypto bought directly through an exchange or wallet almost never does.

Ireland, MiCA and the Central Bank of Ireland

Ireland regulates crypto through the EU’s Markets in Crypto Assets Regulation, known as MiCA, with the Central Bank of Ireland acting as the national supervisor. Transitional arrangements for firms operating under the old regime ended on 1 July 2026, and the Central Bank has since warned consumers holding assets with unauthorised providers that they do not benefit from MiCA safeguards and should consider moving funds to an authorised provider or a self-hosted wallet. As in the UK, authorisation confirms a firm meets conduct and anti-money laundering standards, not that consumers are protected against investment losses or fraud.

What to Do If You Have Fallen for a Cryptocurrency Scam

Speed matters more than almost anything else once you suspect a cryptocurrency scam, because funds can move through several wallets within minutes and become far harder to trace with each hop.

If you have connected a wallet to a suspicious site, revoke its permissions immediately using a tool such as revoke.cash before doing anything else, since this closes off any standing approval before it can be used again. Move any remaining uncompromised funds to a new wallet you control, ideally a hardware device kept offline. Contact your bank straight away if fiat currency was involved, as they may be able to freeze a transfer that has not yet settled.

Save every piece of evidence, including wallet addresses, transaction hashes, screenshots and messages, before reporting the matter to Report Fraud at reportfraud.police.uk, which replaced Action Fraud in December 2025 and covers England, Wales and Northern Ireland, or to the Garda National Economic Crime Bureau if you are reporting from the Republic of Ireland. Report Scotland is handled separately through Police Scotland on 101. Be wary of anyone who contacts you afterwards offering to recover the funds for a fee, since this is very often a second scam rather than genuine help.

If you manage online safety for a family member who trades or holds crypto, our guide to identity theft protection services covers the practical steps for locking down accounts after any kind of fraud, and our article on social engineering attacks explains the psychological tactics scammers rely on in far more detail. For a wider look at how phishing feeds into schemes like these, our piece on phishing attack trends is worth reading alongside this guide.

A cryptocurrency scam depends on urgency and secrecy to work, so the single most protective habit is simply slowing down and talking to someone you trust before you send anything. Check the FCA register, refuse to install remote access software for anyone who calls you unprompted, and treat any request for an upfront fee to “release” your own money as the clearest sign of fraud there is.

Frequently Asked Questions