What to do If someone messages you about crypto: a practical checklist

Many people have received messages about “great investment opportunities” on social media or messaging apps. But some scams are far more calculated. GetBlock AML Research outlines a common fraud model known in English as “pig butchering.”

The Core Idea

• The Hook: It starts with a random message — “Hi, is this Daniel?” — or a match on a dating app. The conversation slowly turns friendly. No one asks for money. They wait.
• The Bait: At some point, the person casually mentions they invest in crypto and make impressive profits on a specific platform (which is fake).
• The Trap: The victim invests a small amount. They see profits. They may even withdraw them. Trust is established.
• The Slaughter: The victim invests serious money. The platform suddenly freezes withdrawals. A “tax” or “verification fee” is required. The money disappears.
• Reality: There is no recovery. Anyone claiming they can “hack the funds back” is running the next scam.
• Congratulations — you’re the “pig.”

How It Usually Starts

It might look like this. February. You feel lonely. Or just bored. A message pops up on WhatsApp or Telegram:

“Hi, are we still on for coffee tomorrow?”

You reply: “Wrong number.” They answer:

“Oh, I’m so sorry! You’re very polite. I’m [attractive generic name], I run a fashion business in [city]. Nice to meet you.”

If the conversation continues, the grooming begins. On the other side is a well-organized operation, often run from closed compounds in Southeast Asia. They’re not after $500. They’re after retirement savings, home equity, and your confidence.

And smart people fall for it every day.

Why? Because no one asks for your seed phrase. No one demands money upfront. At first, they give you money.

Phase 1: “Fattening” (Love Bombing)

The scammer does not ask for money right away. In fact, they may refuse if you offer.

“We’re friends. Let’s not mix money yet.”

This stage can last weeks or even months. They ask about your day. They send photos (usually stolen). They complain about “strict parents” or “exhausting business trips.”

Meanwhile, they are building a psychological profile.

If you’re lonely — they become romantic. If you’re ambitious — they become a mentor. If you’re bored — they bring excitement.

Other Common Conversation Starters

Scammers use tested scripts designed to trigger empathy:

• Assistant mistake: “Is this the flower shop? My assistant saved the wrong number. I’m stressed — my mom has surgery tomorrow.”
• Shared hobby: “Are we still on for tennis at 10? Oh, wrong number? You seem nice — do you play?”
• Fate angle: “I don’t believe in coincidences. Maybe fate connected us.”

If you receive something like this, the safest move is to block the number immediately.

The Deepfake Upgrade

In the past, refusing a video call was a red flag. In 2026, that rule no longer works. Advanced groups now use AI face-swap tools in real time.

You may see an attractive man or woman moving naturally and even holding up a paper with your name.

One test: ask them to quickly turn their head or wave a hand across their face. AI filters often glitch during sudden movements. If the video lags at that exact moment, end the call.

Deepfake image distortion when turning head

The “Soft Sell”

Once trust is built, they don’t push. They wait for you to ask.

During a normal conversation, they send a screenshot:

“Just made $5,000 while having lunch. The market is crazy today.”

You ask how. The answer is always vague:

• “My uncle has insider access.”
• “It’s an AI trading platform.”
• “I can show you, but be careful.”

Fake screenshot showing profits on a crypto exchange

This is where the trap closes.

Phase 2: The Fake Exchange

You agree to try. They don’t directly ask for money. Instead, they send a link or suggest downloading a “special app.”

“It’s a decentralized mining platform.” “It’s a VIP Binance portal.”

The website looks legitimate: coinbase-vip.top or defi-mining-eth.net. It has charts, support chat, even invitation codes.

Red Flags

• Domain age: Check Whois. Often registered weeks ago.
• Wallet connection requests: Never connect your wallet. Malicious scripts can drain funds.
• MetaTrader trick: You install a real app, but connect to a fake broker server fully controlled by scammers. Prices can be manipulated at will.

The Trust Deposit

You send $500 USDT. The balance appears instantly. A day later, you see $100 profit. You withdraw $600 successfully.

That $100 was bait. It was the price of your trust.

Then comes the real deposit — savings, loans, retirement funds. The screen shows huge gains. In reality, your money was moved and laundered the moment you sent it.

Phase 3: The Freeze

When you try to withdraw:

ERROR: Account frozen. AML review (Code 2026).

Support says you must pay 20% of your balance as a “tax.” Your online “friend” confirms:

“It happened to me too. Just a formality.”

The numbers on the screen are fake entries in a database. But they convince you to send more.

Then more fees appear. Until nothing is left. The site disappears. The contact vanishes.

Why Smart People Pay

The sunk cost fallacy. Admitting loss hurts. Sending more money feels like a chance to fix it.

But the money is already gone.

The “Recovery” Scam

After public warnings, new “fund recovery experts” appear. They promise hacking services or blockchain reversal.

That’s another scam.

Blockchain transactions are irreversible. That’s the point.

The Hard Truth

Crypto transactions cannot be reversed. Paying upfront for “recovery services” means being scammed twice.

What You Can Actually Do

• Report the crime to law enforcement.
• Trace funds through legitimate blockchain analytics — without paying random “helpers.”
• Accept the loss and move forward. The money is gone. Your life is not.