Key Takeaways
- • The FTC reported consumers lost more than $12.5 billion to fraud in 2024, with investment scams accounting for $5.7 billion, while the FBI documented 181,565 cryptocurrency-related complaints in 2025 totaling over $11 billion in consumer losses.
- • Rug-pull scams represent a primary threat, wherein token creators hype projects, attract buyers, then drain liquidity or abandon the project entirely, leaving investors with worthless holdings; SafeMoon is cited as a recent example.
- • Crypto's inherent features—fast transactions, cross-border movement, and irreversible transfers—make it structurally attractive to fraudsters, while widespread investor knowledge gaps regarding wallets, exchanges, blockchain mechanics, and token promotions are routinely exploited through hype and false urgency.
- • Eight distinct crypto scam categories have been identified, including pump-and-dump schemes, impersonation fraud, fake exchanges, and advance-fee schemes, each leveraging technical jargon and social engineering to obscure illegitimate offerings.
- • Institutional investors and high-net-worth individuals must recognize that scam operators deliberately target knowledge gaps and exploit the irreversibility of cryptocurrency transactions to maximize success rates and minimize recovery likelihood.
Summary
Cryptocurrency fraud has emerged as a significant loss vector for institutional and retail investors alike. According to RBC Wealth Management's analysis, the Federal Trade Commission reported that U.S. consumers lost more than $12.5 billion to fraud in 2024, with investment scams alone accounting for $5.7 billion of that total. More recent data from the FBI indicates 181,565 cryptocurrency-related complaints filed in 2025, representing over $11 billion in documented consumer losses. These figures underscore the scale of the problem and the sophistication of modern fraud operations targeting crypto investors.
Criminals prioritize cryptocurrency as a fraud vehicle for structural reasons. Transactions execute rapidly, route effortlessly across international jurisdictions, and once initiated, prove extremely difficult or impossible to reverse. This irreversibility fundamentally differs from traditional payment systems, removing the fraud recovery mechanisms available in banking and credit card transactions. Combined with the emerging nature of crypto markets, these attributes create an asymmetric risk environment where bad actors retain advantages.
Rug-pull scams represent one of the most prevalent attack vectors. In this scheme, project creators generate hype around a token or NFT initiative, attract investor capital, then either dump their holdings or abandon the project entirely, draining liquidity pools. SafeMoon has been identified as a recent example of this pattern. A closely related variant—the pump-and-dump scheme—involves insiders artificially inflating token prices, selling into the spike, then exiting while retail investors absorb losses. These tactics are particularly common in meme coins, NFT projects, and obscure tokens lacking rigorous governance or disclosure standards.
Beyond rug pulls, RBC identifies seven additional scam categories spanning impersonation fraud, fake crypto exchanges, Bitcoin ATM schemes, pig butchering scams (relationship-based fraud), fake ICOs, advance-fee schemes, and charity donation fraud. Con artists exploit investor knowledge gaps by deploying technical jargon, fabricated urgency, and sleek marketing to manufacture legitimacy around illegitimate offerings. The knowledge differential—where many investors lack functional understanding of wallet mechanics, blockchain transactions, and token economics—creates a consistent exploitation surface.
Institutional investors and family offices managing crypto allocations should implement multi-layer due diligence protocols: verify project provenance through on-chain analysis, scrutinize liquidity depth and lock-up periods, validate team credentials through independent research, and avoid unsolicited communications from purported investment managers or exchanges. No legitimate financial institution requests payments via cryptocurrency or solicits capital through social media channels.
Criminals prioritize cryptocurrency as a fraud vehicle for structural reasons. Transactions execute rapidly, route effortlessly across international jurisdictions, and once initiated, prove extremely difficult or impossible to reverse. This irreversibility fundamentally differs from traditional payment systems, removing the fraud recovery mechanisms available in banking and credit card transactions. Combined with the emerging nature of crypto markets, these attributes create an asymmetric risk environment where bad actors retain advantages.
Rug-pull scams represent one of the most prevalent attack vectors. In this scheme, project creators generate hype around a token or NFT initiative, attract investor capital, then either dump their holdings or abandon the project entirely, draining liquidity pools. SafeMoon has been identified as a recent example of this pattern. A closely related variant—the pump-and-dump scheme—involves insiders artificially inflating token prices, selling into the spike, then exiting while retail investors absorb losses. These tactics are particularly common in meme coins, NFT projects, and obscure tokens lacking rigorous governance or disclosure standards.
Beyond rug pulls, RBC identifies seven additional scam categories spanning impersonation fraud, fake crypto exchanges, Bitcoin ATM schemes, pig butchering scams (relationship-based fraud), fake ICOs, advance-fee schemes, and charity donation fraud. Con artists exploit investor knowledge gaps by deploying technical jargon, fabricated urgency, and sleek marketing to manufacture legitimacy around illegitimate offerings. The knowledge differential—where many investors lack functional understanding of wallet mechanics, blockchain transactions, and token economics—creates a consistent exploitation surface.
Institutional investors and family offices managing crypto allocations should implement multi-layer due diligence protocols: verify project provenance through on-chain analysis, scrutinize liquidity depth and lock-up periods, validate team credentials through independent research, and avoid unsolicited communications from purported investment managers or exchanges. No legitimate financial institution requests payments via cryptocurrency or solicits capital through social media channels.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.