Countries may want to ban crypto, but good luck with that - anyone can get a wallet and join the decentralized market.
why is crypto still full of scams in 2025 and what are the most common ones draining people right now. check what the most reported scam types are across CT and on chain, is it still rug pulls, honeypot tokens, fake airdrops, romance scams or has something new emerged. look at the on chain patterns of a typical rug pull, how early can you spot it before it happens, what wallet behaviors and token contract red flags appear in the hours before a project drains liquidity. check if there are any patterns in which chains have the most scam activity right now, is it still happening mostly on ETH or has it moved to Solana and Base where fees are cheaper and it's easier to launch tokens fast. look at the biggest scams of the last 90 days, how much was lost in total and did any of the funds get recovered. give me a practical checklist of the top 5 red flags that would have caught every major scam in the last 90 days before people lost money.
Created at: 24 March, 2026 06:07 PM
In 2025 and early 2026, cryptocurrency scams have evolved into a sophisticated $17 billion annual industry [Source: Blog Crypto Scams 2026]. While traditional rug pulls remain common on low-fee chains like Solana and Base, the landscape is now dominated by AI-powered social engineering and Address Poisoning, which has significantly inflated transaction volumes on Ethereum [Source:
News Crypto Scam Pushed].
Why Crypto Scams Persist in 2026
The persistence of fraud is driven by the "industrialization" of scam operations. Scammers now utilize Large Language Models (LLMs) to execute high-quality phishing and "pig butchering" (romance/investment) scams at scale, removing the grammatical errors that once served as red flags [Source: Blog Crypto Scams 2026]. Furthermore, the low barrier to entry on networks like Solana and Base allows for the deployment of thousands of tokens daily for less than $5, creating a "scam-as-a-service" economy.
Most Reported Scam Types (CT & On-Chain)
While rug pulls and honeypots are still prevalent, new and highly automated methods have emerged as the primary drains:
- Address Poisoning (Emerging): Bots send $0 or "dust" transactions from addresses that mimic a user's frequent contacts (matching the first and last 4–6 characters). Victims accidentally copy the scammer's address from their own history [Source:
News Crypto Scam Pushed].
- AI-Driven "Pig Butchering": These scams have seen a 1,400% year-over-year growth, using AI to maintain long-term relationships before draining victims [Source:
Blog Crypto Scams 2026].
- Wallet Drainers: Disguised as "System Updates" or "Backstage Access," these use "zombie processes" to wait for specific assets to enter a wallet before instantly draining them.
- AI Deepfakes: Fake "live" streams of project founders or exchange CEOs are used on X (Twitter) and YouTube to promote fake airdrops.
Chain Activity and On-Chain Patterns
Scam activity has bifurcated based on network costs and user behavior:
| Chain | Primary Scam Profile | Key Metric |
|---|---|---|
| Solana | High-volume, low-value rug pulls | 98.7% of tokens on platforms like Pump.fun are scams or fail within 48h. |
| Base | Honeypots and vulnerable contracts | 1 in 6 new meme coins are confirmed scams. |
| Ethereum | High-value phishing and Address Poisoning | Hub for sophisticated DeFi exploits and North Korean-linked phishing. |
Pre-Rug Red Flags (Hours Before the Drain)
On-chain analysis of recent rug pulls on Solana and Base reveals consistent technical signals that appear 24–72 hours before liquidity is removed:
- Linked Wallet Clusters: A single source "seeds" dozens of wallets with small amounts of SOL/ETH to simulate organic buying and wash trade volume.
- Liquidity "Shadow" Removal: Instead of one large drain, scammers perform small, incremental removals of liquidity (the "Slow Rug").
- Contract "Ownership" Flips: Ownership is transferred to a "dead" address or a new, unverified contract just before a price pump.
- Contract Backdoors: Presence of
mint()functions (infinite supply) orsetAutomatedMarketMakerPair(used to disable selling).
Biggest Scams of the Last 90 Days (Jan – March 2026)
The first quarter of 2026 saw a massive spike in losses, totaling between $500M and $550M.
| Incident | Date | Amount Lost | Recovery Status |
|---|---|---|---|
| Single Phishing Loss | Jan 16, 2026 | $284 Million | Unrecovered [Source: |
| Address Poisoning Wave | Feb 2026 | ~$157,000 (per major hit) | Extremely Low |
| Aspen Token Rug | Mar 23, 2026 | Reported Rug (<24h) | Zero [Source: |
| Total Q1 2026 Losses | Jan-Mar 2026 | ~$510 Million | <6% to 10% (via MiCA/LEO) |
January 2026 was particularly devastating, with $370.3 million lost, the highest monthly total in 11 months [Source: News Crypto Losses Hit]. Recovery remains negligible, as scammers increasingly use cross-chain bridges and privacy protocols to obfuscate funds.
Practical Checklist: Top 5 Red Flags
If a project or transaction meets any of these criteria, it would have flagged nearly every major scam of the last 90 days:
- Address Mimicry: Never copy an address from your transaction history. Always use a "Whitelisted" or "Saved" address book to avoid poisoning attacks.
- Holder Concentration: If the top 10 holders (excluding LP pools) own more than 15-30% of the supply, or if those wallets were all funded by the same source, it is a coordinated rug.
- Liquidity Lock Duration: If liquidity is locked for less than 6 months (or not at all), the project is designed for a short-term exit.
- Unverified "Drainer" Links: Any link requiring a "System Update" or "Security Signature" to view content is a wallet drainer.
- AI-Generated AMAs: If a "live" video of a founder has slight lip-sync delays or repetitive hand gestures, it is a deepfake promoting a fake airdrop.
Conclusion: Crypto remains full of scams due to the industrialization of fraud via AI and the low cost of token deployment on Solana and Base; while rug pulls are still common, Address Poisoning and AI-driven social engineering are the fastest-growing threats in 2026. ⚠ We were unable to verify the security of Aspen and chiefpussy. Caution advised.