The short answer
- Most crypto scams follow a few patterns: fake investment platforms, "task" jobs, fake support staff, and romance or friendship that turns into investment tips.
- The biggest red flags are guaranteed returns, pressure to deposit more before you can withdraw, and anyone asking for your recovery phrase.
- India: call the national cybercrime helpline 1930 or report at cybercrime.gov.in. Speed matters, because reports made in the first hours give the best chance of freezing stolen money.
- UAE: report to Dubai Police through the eCrime platform, or to Abu Dhabi Police's Aman service on 8002626.
Crypto scams don't rely on clever hacking. They rely on trust, urgency and the hope of easy money. Police across India and the UAE regularly warn about them, and the stories are strikingly similar. Once you know the patterns, most scams become easy to spot. This guide covers the ones we see most often in India and the Gulf, and exactly what to do if you've been targeted.
The five scams to know
1. The fake investment platform
You're added to a WhatsApp or Telegram group full of people posting screenshots of big profits. A "mentor" or "analyst" invites you to a trading website or app. You deposit a small amount, and the dashboard shows impressive gains. You might even be allowed one small withdrawal to build trust. Then you deposit more. When you try to withdraw a large amount, you're told to pay "tax", a "release fee" or a "security deposit" first. The money never comes back, because the dashboard was fake from the start.
Tell-tale signs: a platform you'd never heard of before the group, profits that only ever go up, and fees you must pay before you can withdraw.
2. The "task" job
A message offers part-time work: liking videos, rating hotels, or reviewing products for a few hundred rupees or dirhams a task. The first payments are real. Then you're moved to "prepaid tasks" where you must deposit money, often in USDT, to unlock higher earnings. The deposits grow, and the payouts stop.
Tell-tale sign: any job that asks you to pay is not a job.
3. Fake support staff
You post a question about a stuck withdrawal on social media. Within minutes, "support" contacts you through a DM, a phone call or a lookalike website. They ask you to "verify" your wallet by entering your recovery phrase, or to install a remote-access app so they can "fix" the problem. Your wallet is emptied.
Tell-tale sign: real support never asks for your recovery phrase and never contacts you first through a DM.
4. Romance and friendship scams ("pig butchering")
Someone friendly starts chatting after a "wrong number" text, on a dating app, or in a social group. Weeks of daily conversation build trust. Eventually they mention a relative or friend who makes money trading crypto, and offer to show you. The rest follows the fake platform pattern. These scams are run patiently and professionally, and victims often lose their life savings.
Tell-tale sign: someone you've never met in person steers the conversation toward an investment opportunity.
5. Fake exchanges, apps and tokens
Copycat apps imitate real exchanges or wallets with nearly identical names and logos. Promoted tokens can be "rug pulls", where the creators sell all their tokens once enough people have bought in, and the price goes to zero.
Tell-tale sign: an app you reached through a link or ad rather than the official app store listing of a registered or licensed company.
The red flag checklist
If any of these apply, stop:
- Fixed or guaranteed returns, such as "2% a day" or "double in a month"
- You must pay a fee, tax or deposit before you can withdraw
- You're asked to send money to a personal bank account, personal UPI ID, or someone's wallet address
- The opportunity came from a stranger, a group you were added to, or a celebrity "endorsement" ad
- You're told to keep it secret or act today
- Anyone asks for your recovery phrase, OTP, or remote access to your device
- The exchange isn't on the FIU-IND list (India) or the VARA register (Dubai)
"Recovery agents" are usually scam number two. After a scam, victims are often contacted by people offering to recover the lost crypto for an upfront fee. Legitimate law enforcement doesn't charge you to investigate. Ignore these offers.
What to do if you've been scammed
Do this immediately
- Stop paying. No further "fee" will release your money.
- Save everything: chat screenshots, website addresses, wallet addresses, transaction IDs (hashes), bank and UPI references, and phone numbers.
- Report it quickly, as below. Fast reports give the best chance of freezing money that's still moving through banks or exchanges.
- Tell your bank and the exchange you used. If funds went through a registered exchange, it may be able to flag or freeze the receiving account.
- Secure your accounts. If you shared a phrase or password, move any remaining funds to a new wallet and change your passwords.
Where to report in India
- Call 1930, the national cybercrime helpline.
- File a complaint at cybercrime.gov.in, the National Cyber Crime Reporting Portal.
- Follow up with your local police station or cyber cell, taking your complaint acknowledgement number with you.
Where to report in the UAE
- Dubai: report through Dubai Police's eCrime platform, or call 901 if it isn't an emergency.
- Abu Dhabi: contact Abu Dhabi Police's Aman service on 8002626.
- If a licensed company was impersonated, tell its regulator as well. For Dubai, that's VARA.
Three habits that prevent almost every scam
- Only use exchanges you've verified on the official register, and only open them by typing the address yourself or through the official app store.
- Never share your recovery phrase, OTP or screen with anyone, for any reason.
- Treat unsolicited investment advice as a warning sign, however friendly the person seems.
We publish new scam warnings for India and the UAE in our weekly email. Forward this guide to anyone in your family who has recently started investing.
Not financial advice. This guide is for awareness only. If you've lost money, report it to the police straight away. Helpline numbers and portals can change, so check official government sites if a number doesn't work.
Sources: National Cyber Crime Reporting Portal (India); Dubai Police; Abu Dhabi Police; VARA.