Crypto safety center
Most crypto losses come from scams and simple mistakes, not from someone breaking the blockchain. These guides explain how each attack works, step by step, with real dated cases from the FBI, FTC and other regulators, and what to do if it already happened.
Stop sending money, don't share your seed phrase with anyone offering help, and follow the steps in order. Open the emergency checklist.
Interactive safety checklists
Tick through them before you act. Your progress is saved only on this device, and each one prints.
Wallet or account compromised
Emergency steps, in order, for the first hour.
Before sending crypto
Address, network, amount and pressure checks.
Before connecting a wallet
Stop drainers before you sign anything.
Before buying a new token
Rug pulls, honeypots and pump-and-dumps.
Before using a DEX
Fake tokens, slippage and approvals.
Storing a recovery phrase
Write, test, store and pass it on safely.
Check something now
Scams that persuade you to pay
Most crypto losses happen because someone talks the owner into sending the money.
Attacks on your wallet and accounts
Tricks that get your signature, your address or your phone number.
Keeping crypto safe
Where to hold it, how to back it up, and how your family can reach it.
Mistakes and how to avoid them
Crypto payments rarely come back. A minute of checking prevents most errors.
The scale of the problem
From the FBI's 2025 Internet Crime Report, published April 2026. Many losses are never reported.
$11.4 billion
Crypto-related fraud losses reported to the FBI in 2025, out of $20.9 billion for all internet crime.
$7.2 billion
Lost to cryptocurrency investment fraud, which includes pig-butchering scams, in 2025.
$389 million
Lost through crypto ATMs and kiosks in 2025, up 58% in a year.
Report fraud (US)
Reporting is free. Anyone who charges you to file a report or "recover" funds is running a scam.
Legitimate support will never ask for your seed phrase or private key: not an exchange, a wallet maker, a lawyer, the police or the FBI. This site will never ask for it either.