Daily briefing
A short, practical note each day for people who have lost cryptocurrency to fraud, or who are trying not to. Every briefing is read and approved by our investigations team before it appears here.
Browse by topic
Prefer it week by week? Read the weekly summary.
Latest
Short, practical notes on how cryptocurrency frauds unfold and what to preserve as evidence.
If an online romantic contact persuaded you to transfer money into a cryptocurrency platform that is now inaccessible, cease all communication and do not send further funds. Secure your accounts immediately and report the fraud to your bank and UK authorities.
Read the briefingIf you transferred funds through a cloned broker, stop sending money immediately and report the firm to your bank and the authorities. Legitimate regulated firms never request top-up payments to release your capital, and onchain tracing can identify the genuine destination of your assets.
Read the briefingIf a fraudster accessed your computer to purchase cryptocurrency, disconnect the machine from the internet immediately, alert your bank, and change passwords from another device. Reporting the crime and tracing the outward transactions can identify where the funds were transferred.
Read the briefingIf an online romantic contact persuaded you to transfer money into a cryptocurrency platform that is now inaccessible, cease all communication and do not send further funds. Secure your accounts immediately and report the fraud to your bank and UK authorities.
Read the briefingIf you transferred funds through a cloned broker, stop sending money immediately and report the firm to your bank and the authorities. Legitimate regulated firms never request top-up payments to release your capital, and onchain tracing can identify the genuine destination of your assets.
Read the briefingIf a fraudster accessed your computer to purchase cryptocurrency, disconnect the machine from the internet immediately, alert your bank, and change passwords from another device. Reporting the crime and tracing the outward transactions can identify where the funds were transferred.
Read the briefingIf you sent digital assets to a purported giveaway promising doubled returns, stop sending funds immediately, as genuine organisations never distribute currency in exchange for an upfront payment. Preserving transfer records and reporting the theft will help document the fraud.
Read the briefingIf you contacted a fraudulent helpline and lost cryptocurrency, immediately disconnect any active sessions, secure your genuine accounts with fresh credentials, and alert your bank. Legitimate wallet providers and exchanges never operate phone lines that ask you to transfer funds or reveal passphrases.
Read the briefingIf your crypto wallet has been drained unexpectedly, immediately transfer any remaining balances to a completely fresh wallet created on a clean device. Document the outgoing transaction hashes and report the theft to Action Fraud and your bank.
Read the briefingIf you have lost funds to a fraudulent liquidity pool, stop interacting with the site, disconnect your wallet permissions, and preserve your transaction records. Report the theft to Action Fraud and your bank immediately so the movement of your assets across onchain ledgers can be formally investigated.
Read the briefingLegitimate trading platforms never demand an upfront tax payment or clearance fee before allowing you to withdraw your own cryptocurrency. Any demand to send separate funds to unlock an account is an advance-fee fraud, and sending more money will not release your balance.
Read the briefingIf you have lost funds to a cryptocurrency task scam, stop depositing further money immediately, secure all communication logs and transaction details, and notify your bank and Action Fraud. Fraudulent platforms will continually invent fees rather than allow you to withdraw your balance.
Read the briefingFake crypto investment groups typically operate on messaging apps where administrators and apparent members work together to fabricate trading profits and pressure you into sending funds. If you are added without consent, assume the claims are fraudulent and avoid transferring any money.
Read the briefingIf a platform or wallet prevents you from selling a newly purchased crypto token, you have likely bought a malicious honeypot asset designed only to take deposits. You must stop putting more money into the contract and secure your remaining assets immediately.
Read the briefingIf someone you met online encourages you to invest in cryptocurrency, stop sending funds and break off contact immediately. These schemes use manufactured personal relationships to guide victims onto fraudulent platforms where deposited funds cannot be recovered.
Read the briefingNo legitimate bank, police officer, or genuine financial organisation will ever instruct you to transfer your money into a cryptocurrency wallet to protect it. If you are told to convert funds to crypto to safeguard them, stop all contact immediately because it is an impersonation fraud.
Read the briefingDisconnect your device from the internet immediately, alert your bank, and run a full security sweep before changing credentials. Remote access scammers manipulate screen-sharing tools to take control of your accounts and transfer funds out directly.
Read the briefingIf you transferred digital assets to a giveaway promising to double your funds, stop sending payments immediately, as legitimate organisations never distribute currency this way. Preserve all transaction records and report the theft to UK authorities and your banking provider straight away.
Read the briefingIf you signed an approval on an untrusted website, revoke the allowance immediately using a reputable token approval tool or your wallet settings. Disconnecting your wallet alone does not stop spending permissions, so revoking the onchain allowance is necessary to protect any remaining assets.
Read the briefingIf unauthorized transactions drain assets from your crypto wallet, revoke all active smart contract permissions immediately and move any remaining holdings to a newly generated wallet. Professional tracing can follow the movement of stolen funds across the network to identify where they eventually land.
Read the briefingLegitimate cryptocurrency platforms will never contact you first via direct message, nor will they ask you to transfer funds to external wallets to resolve technical issues. If you suspect an impersonator has contacted you, sever communication immediately and secure your accounts on official platforms.
Read the briefingLegitimate platforms never demand upfront personal tax payments or clearance fees before allowing you to withdraw funds. If a platform insists you must pay extra money to unlock your balance, the platform is fraudulent and paying more will only increase your financial losses.
Read the briefingFake crypto job scams recruit victims through messaging apps to complete simple online tasks, paying small initial sums before demanding escalating cryptocurrency deposits to unlock supposed earnings. If an employer asks you to send your own digital currency to continue working, stop all payments immediately.
Read the briefingPeer-to-peer cryptocurrency trades carry substantial fraud risks, particularly when counterparties use compromised bank accounts or request settlement outside platform escrow. Verifying payer identities and refusing off-platform arrangements protects participants from irreversible asset loss.
Read the briefingFraudulent platforms often deploy proprietary web interfaces showing fictitious trading gains to encourage larger deposits. Verifying underlying transaction hashes on public explorers reveals whether actual market trading or asset custody exists.
Read the briefingFraudsters frequently broadcast negligible transfers from custom addresses resembling familiar contacts to trick users into copying false recipient details. Verifying complete destination characters prevents capital misdirection.
Read the briefingPerpetrators increasingly cultivate personal or romantic relationships over weeks to manipulate victims into depositing funds onto fraudulent investment portals. Recognising early behavioural indicators and preserving communication records enables faster reporting to UK law enforcement and financial institutions.
Read the briefingUnauthorised remote desktop access allows fraudsters to manipulate digital wallets, harvest sensitive credentials, and initiate irreversibly routed asset transfers directly from victim hardware. Prompt intervention helps secure compromised systems and preserve relevant diagnostic evidence.
Read the briefingUnauthorised entities frequently impersonate legitimate UK-regulated firms to entice prospective cryptocurrency investors into fraudulent arrangements. Conducting independent regulatory checks and cross-referencing published contact details are vital measures to safeguard your capital before initiating transactions.
Read the briefingSecuring comprehensive records immediately after an incident is critical for tracing stolen funds and assisting formal investigations. Victims should systematically preserve transaction identifiers, communication histories, and exchange account records before digital evidence is altered or deleted.
Read the briefingDecentralised applications often request broad token permissions that remain active indefinitely unless manually revoked. Monitoring and terminating these open allowances prevents unauthorised automated withdrawals if an underlying protocol or external contract is compromised.
Read the briefingFraudulent adverts placed atop search engine results frequently direct users to cloned interfaces designed to intercept credentials. Verifying domain names and relying on curated bookmarks prevents the compromise of exchange accounts and software wallets.
Read the briefingFraudulent platforms frequently demand upfront payments under the guise of taxes, legal compliance, or liquidity release before processing withdrawals. Legitimate trading venues deduct operational fees directly from account balances and never require external deposits to release capital.
Read the briefingFraudsters frequently deposit unsolicited tokens directly into private wallets to entice recipients into visiting credential-harvesting claim portals. Understanding how to handle these unwanted assets safely prevents unauthorised wallet drainage.
Read the briefingPeer-to-peer digital asset trades carry severe risks when counterparties settle payments using compromised or third-party bank accounts. Victims often face frozen bank accounts or complicity accusations alongside the loss of transferred assets.
Read the briefingMobile telecommunications hijacking remains a primary vector used by fraudsters to bypass standard two-factor authentication on exchange accounts. Implementing hardware security keys and time-based authenticator applications significantly reduces the likelihood of unauthorised account access and subsequent onchain asset transfers.
Read the briefingAddress poisoning involves attackers sending negligible token transfers from lookalike addresses to mimic regular counterparties in wallet histories. Verifying full destination addresses before transferring funds prevents misdirection to fraudulent accounts.
Read the briefingUnauthorised account draining frequently occurs when investors grant excessive application programming interface permissions to automated trading software. Ensuring withdrawal rights remain disabled and monitoring account activity helps protect exchange-held digital assets.
Read the briefingRelationship-led investment fraud relies on building artificial personal trust across weeks or months before introducing speculative cryptocurrency opportunities. Victims are systematically guided to purchase assets through legitimate UK platforms before transferring them to hostile onchain destinations.
Read the briefingFraudulent investment platforms often deploy simulated client portals that present fictitious balances and rapid returns to entice larger deposits. Verifying underlying transaction hashes on public explorers exposes whether capital was truly allocated or diverted directly into illicit wallets.
Read the briefingAccurate record-keeping immediately after an incident provides investigators and authorities with the vital data needed to trace misappropriated funds. Capturing immutable transaction details, communications, and platform records assists subsequent formal reports to UK enforcement bodies and financial institutions.
Read the briefingAuthorising unlimited token allowances or signing unverified permissions can expose entire digital asset balances to automated theft. Regularly auditing and revoking active permissions reduces vulnerabilities and preserves control over custody.
Read the briefingRemote access tools are frequently weaponised by fraudsters seeking direct control of personal computers to initiate unauthorised cryptocurrency transfers. Recognising the risks of third-party remote assistance is essential for protecting self-custody wallets and online exchange accounts.
Read the briefingDeceptive platforms frequently block customer withdrawals by demanding upfront payments disguised as taxes, regulatory levies, or administrative clearance fees. Legitimate financial institutions and regulatory bodies never require direct digital asset payments to release retained capital.
Read the briefingFraudulent search results and spoofed web portals frequently trick users into entering sensitive credentials or connecting active wallets to predatory software. Verifying domain integrity and maintaining segregated browsing environments significantly reduces exposure to credential theft and asset loss.
Read the briefingPeer-to-peer transactions frequently expose participants to third-party bank payments, identity mismatches, and sudden account freezes. Strict verification of bank account names against platform profile details prevents inadvertent involvement in illicit transfer networks.
Read the briefingFraudsters frequently impersonate government departments, law enforcement officers, or domestic banks to pressure individuals into converting fiat savings into cryptocurrency. Recognising these coercive tactics helps safeguard personal capital and prevents irreversible transfers to illicit recipient wallets.
Read the briefingDeceptive actors frequently generate spoofed wallet addresses to mimic legitimate counterparties and manipulate transaction records. Checking every character of a recipient address before signing prevents misdirected transfers to fraudulent destinations.
Read the briefingFraudulent token deployments often embed restrictive code that prevents buyers from selling their holdings after purchase. Scrutinising smart contract permissions and independent onchain liquidity before transacting protects capital against untradeable assets.
Read the briefingUnsolicited messages on social platforms often direct targets towards fraudulent schemes disguised as exclusive investment clubs or automated trading. Understanding these manipulation techniques helps prospective investors identify high-risk proposals before committing funds.
Read the briefingUnauthorised entities frequently clone legitimate financial institutions to persuade investors to transfer digital assets into private custody. Verifying firm credentials independently and examining recipient addresses helps individuals detect deception before capital is committed.
Read the briefingFraudulent platforms frequently display fabricated profits within simulated web interfaces to persuade victims to transfer further capital. Understanding how to distinguish between genuine onchain balances and controlled dashboards is essential for recognising unrecoverable exposure early.
Read the briefingFraudulent decentralised platforms often trick users into signing over unlimited spending permissions, allowing perpetrators to quietly drain wallet balances. Reviewing active allowances and severing compromised token connections is vital to securing remaining assets.
Read the briefingFraudulent investment platforms frequently display fabricated profits whilst withholding capital through artificial clearance charges, fabricated tax liabilities, or locked liquidity pools. Understanding these extraction mechanisms allows victims to cease further payments and preserve technical records for formal tracing.
Read the briefingEarly documentation of transaction hashes and rapid formal reporting remain vital when digital assets are misappropriated. Establishing an accurate audit trail assists both banking institutions and specialist investigators in tracing the movement of illicit capital.
Read the briefingLost funds to a scam?
We scope at intake and tell you honestly whether the onchain data supports a traceable case.