Home › Knowledge Hub › Telegram and WhatsApp scams
Telegram and WhatsApp crypto scams
Telegram and WhatsApp are used heavily for crypto fraud because accounts are created in seconds, conversations move out of any monitored environment, and social proof can be manufactured with bots and fake members. A group with thousands of members proves nothing, membership can be bought, objections deleted, and testimonials fabricated.
Why these apps
Not because the apps are badly built, but because of what they permit.
Accounts are created quickly and disposed of just as fast. Conversations move private, away from any platform doing fraud monitoring. Groups and channels manufacture social proof cheaply. Bots automate contact at scale, and AI-generated messages make each one read as though it were written for you. And an admin can delete objections, so a channel full of enthusiasm may be a channel where every doubt was removed.
A large member count proves nothing. Members can be purchased. So can comments, testimonials and profit screenshots.
The common schemes
- Signal groups promising trading calls, often free at first and then paid
- Investment mentors offering to manage or teach, usually with screenshots of returns
- Romance approaches that migrate from a dating app and later introduce a platform
- Impersonated support for an exchange or wallet, responding to a public post asking for help
- Airdrop and claim links, leading to a page that requests a signature or a seed phrase
- Copy-trading offers requiring a deposit to an address they control
- Job scams paid in crypto, frequently involving "task" or "review" work with a deposit requirement
- Recovery agents who appear after a previous loss
That last one deserves emphasis. If you have posted about a loss anywhere public, expect an approach on these apps specifically.
The signal group pattern
Worth describing because it is so consistent.
You join a free channel. The calls appear accurate, sometimes because they are posted after the move, sometimes because losses are quietly deleted, sometimes because different subgroups get opposite calls so one always looks right.
Members post profits. Admins are responsive and generous. After a period, there is an upgrade: a VIP tier, a specific platform to trade on, a managed account, or a deposit to unlock better calls.
The platform is the point. Everything before it was the demonstration.
Verification habits
The defences here are behavioural rather than technical.
Treat unsolicited contact as hostile. Anyone who messages you first about crypto starts from a position of suspicion, whether they offer an opportunity, a group, support, or a recovery service regardless of how helpful they seem.
Never move a support conversation into a private message. Real support does not monitor social media for people to DM. If you need help with an exchange or wallet, open a ticket through the company's own website.
Verify identity independently. Look up the company, the project, or the person through official channels. Type the URL yourself rather than following a link you were given. Usernames are trivially imitated, and a display name can be changed in seconds.
Ignore group consensus. It is manufactured. The enthusiasm you can see is not evidence about the thing being discussed.
Do not click claim links, and never enter a seed phrase. No legitimate airdrop, wallet or support process requires your recovery phrase. Ever, for any reason.
Do not send crypto to prove anything. Not eligibility, not good faith, not identity. There is no legitimate version of this request.
Adjust your privacy settings
Both apps let you limit who can add you to groups and who can message you. Worth doing now:
- Telegram: Settings → Privacy and Security → restrict who can add you to groups and channels
- WhatsApp: Settings → Privacy → Groups → set to "My contacts"
This will not stop a determined approach, but it removes the automated bulk contact that starts most of these.
If you have already sent funds
Do not send more, whatever justification is offered: a fee, a tax, an unlock, a verification deposit.
Export the full conversation before you block anyone. Both apps have an export function. Screenshots lose timestamps and sequence; an export preserves both, and it is the record that shows how you were persuaded.
Save profile URLs, usernames, phone numbers, group and channel names, and invite links. Capture the platform they directed you to, including screenshots of any balance shown. Collect the transaction hashes for everything you sent.
Then secure your accounts starting with email, and file with the reporting channel in your country. The first 48 hours guide covers the full sequence.
Report the accounts to Telegram or WhatsApp as well. It will not recover your funds, but it can slow the same setup being used on someone else.
Expect an approach afterwards
Recovery scammers work these apps heavily, precisely because the original fraud happened there. They may reference details of your case, which feels like proof and is not.
Read how to spot a recovery scam before replying to anyone.
Frequently asked questions
The group had 40,000 members and lots of profit screenshots. Wasn't that evidence?
No. Members can be bought in bulk, screenshots are trivial to fabricate, and admins delete anything sceptical. A channel showing only enthusiasm may be one where every doubt was removed. Group size and sentiment are among the least reliable signals available.
Someone from exchange support messaged me on Telegram. Is that normal?
No. Exchanges do not initiate private messages to customers about account problems, and support agents do not work through Telegram or WhatsApp. Anyone doing so is impersonating the company. Open a ticket through the exchange's own website instead.
The trading signals were accurate at first. How?
Several common methods: posting calls after the move, deleting the losing ones, or splitting subscribers into subgroups given opposite calls so one group always sees a win. The accuracy is manufactured, and its purpose is to justify the deposit that follows.
Can Telegram or WhatsApp recover my money?
No. They can suspend accounts and may respond to law enforcement requests, but they have no involvement in your transaction and cannot reverse it. Report the accounts anyway, it helps disrupt reuse of the same setup.
I was offered a crypto-paid job with a deposit requirement. Is that a scam?
A legitimate employer never requires you to deposit money to begin work. Task-based and review-based job scams paid in crypto follow the same pattern as fake platforms: small early payouts, then a deposit demand that escalates.
Should I stay in the group to gather evidence?
Export what you have and leave. There is nothing further to learn, the pattern is well documented, and remaining exposes you to more pressure. Do not announce that you have realised, because admins remove and block members who do, taking the record with them.
Already sent funds?
Ten questions showing which documentation and reporting steps are available in your case.
Recovery pathway assessment