Crypto Scams UK: Fake Platforms, Wallets & Recovery

Crypto scams are ordinary scams running on a payment rail with no undo button. A confirmed on-chain transfer has no cancellation or chargeback mechanism. An exchange may be able to stop a pending withdrawal or restrict an account it controls, but an exchange or wallet provider cannot unilaterally reverse a confirmed transfer to a self-hosted wallet. That single fact explains why criminals ask for crypto — and why almost all the protection in this category happens before you send.

Unsure about a platform, a message or a payment demand? Paste it into our free AI scam checker for an automated second opinion. It is an automated second opinion, not a verdict, and it does not replace checking a firm or a seller for yourself.

Two very different things get called a 'crypto scam'

Crypto as the product. You are sold an investment — a platform, a trading bot, a coin — and the returns are fictional. An FCA consumer survey estimated that 1.5% of UK adults, around 800,000 people, had experienced a pensions-related or investments-related fraud or scam, including cryptocurrency, in the 12 months to May 2024; more context, with the publisher and period for every figure, is in our UK scam statistics.

Crypto as the payment method. Here the story has nothing to do with investing: a tax bill, a fine, a 'safe account', a locked profile. Crypto is simply how the money leaves. Our guide to unexpected demands to pay in cryptocurrency covers that whole class, and the most aggressive version — a caller walking you to a machine to feed cash in — is in why a caller sending you to a Bitcoin ATM is a scam.

Which crypto scam is this?

• You were approached about a platform promising guaranteed or unusually high returns, perhaps with a celebrity endorsement: start with spotting a fake crypto investment platform, or Bitcoin investment scams specifically.
• You deposited on a site that looked like an exchange you know: see how cloned trading platforms work. An early small withdrawal that succeeded is a trust-building tactic, not reassurance.
• You received a security message about an existing exchange account — a suspension, a hold, an unusual login: our guide to fake Binance messages covers the official way to verify one.
• You were asked to connect a wallet and sign an 'approval' or a no-cost 'claim'. Connecting alone usually does not move assets, but it is not proof of safety. Read every approval, signature and transaction; do not accept an unlimited token approval or an unexplained message. Read how wallet drainers and fake mint sites work.
• You have already lost crypto and been told it has been found. An unsolicited or unverifiable claim that lost crypto has been found is a recovery-scam warning. Treat it as hostile until independently verified and never pay an upfront release or recovery fee. The pattern is explained in crypto recovery scams.

What FCA registration does and does not mean for crypto

• It is anti-money-laundering registration, not investment authorisation. An in-scope crypto exchange or custodian-wallet provider carrying on business in the UK must register with the FCA under the Money Laundering Regulations. That is AML and counter-terrorist-financing supervision, not approval of the product or evidence that Financial Ombudsman Service or FSCS protection applies. Separately, crypto promotions to UK consumers must follow the UK financial-promotions regime, including where the promoter is based overseas. Registration is also not an endorsement, and not a guarantee that the firm is currently compliant.
• Absence is a stop signal; presence is not proof of who you are talking to. If the firm cannot be found through the FCA's official checks, stop and do not pay. Absence does not by itself prove fraud, but the FCA says the firm is unlikely to have permission to offer the service it claims. Presence is not proof either, because clones reuse authorised firms' names and reference numbers. Verify the contact details on the Register entry itself at register.fca.org.uk and call back only on the number shown there.
• Two different regimes, two different dates. The Money Laundering Regulations registration described above is the regime in force as checked in July 2026. A separate and much broader UK regulatory regime for cryptoassets is expected to take effect on 25 October 2027. They are not the same check, so read the date on any guidance you find about crypto protections.
• Crypto ATMs. As checked in July 2026, the FCA says there are no legally operated crypto ATMs in the UK — so a machine you are directed to is not a regulated route, whoever is on the phone.

The checks that still work before you send

• Type the address yourself and compare it character by character with the one you know independently.
• Read every approval, signature and transaction request rather than clicking through it. Connecting a wallet usually does not itself move anything, but an approval or signature can authorise transfers or ongoing access to your assets long after you have closed the site — which is a different thing from a one-off payment.
• Never share a seed phrase or private key with anyone, including anyone offering to help you recover funds. No genuine service needs them.
• Be suspicious of any extra payment demanded to release a balance. Legitimate platforms can charge disclosed network or withdrawal fees, and genuine tax liabilities do exist. The scam pattern is narrower and recognisable: an unexpected fee or 'tax', asked for by a platform or a recovery agent you cannot independently verify, before a balance shown on a screen can be withdrawn.
• Treat an unsolicited approach as the warning sign in itself.

If you have already sent crypto

• Copy the transaction IDs and destination wallet addresses now. The on-chain record is one of the few pieces of evidence that survives a platform being switched off, and a reported address is still useful to investigators and exchanges.
• Contact the provider you actually used. A custodial exchange or app may be able to halt a pending withdrawal or restrict an account it controls; it cannot reverse a confirmed payment to a self-hosted wallet, and a non-custodial wallet service may have no account to act on at all.
• If a seed phrase or private key was exposed, treat the wallet itself as lost. Move any remaining assets to a new wallet with a new seed phrase generated on a device you trust, and never re-import the exposed phrase. Changing an exchange password cannot secure a compromised self-custody seed, because anyone holding the phrase can rebuild the wallet elsewhere.
• If you paid by card or bank transfer to buy the crypto or fund a fake platform, tell your bank straight away, then work through our scam recovery checklist.
• Expect a follow-up offer of help. An unsolicited or unverifiable claim that lost crypto has been found is a recovery-scam warning. Treat it as hostile until independently verified and never pay an upfront release or recovery fee. Recovery fraud deliberately targets people already known to have lost crypto: being approached twice reflects how these gangs share and resell victim lists, not anything you did wrong.

How to report a crypto scam in the UK

Report a suspected unauthorised or clone firm to the FCA on 0800 111 6768. Report the fraud — with the wallet address, transaction IDs and how you were contacted — to Report Fraud (formerly Action Fraud) at reportfraud.police.uk or 0300 123 2040 in England, Wales or Northern Ireland, or to Police Scotland on 101 in Scotland. Report the account or platform to the exchange or marketplace too, forward a phishing email to report@phishing.gov.uk, and forward a suspicious text message to 7726 free of charge.

All crypto scams guides

Common questions

Sources checked

• FCA — Cryptoasset firms: who needs to register
• FCA — Cryptoassets: AML/CTF regime (registration is not an endorsement; no FOS or FSCS)
• FCA — Cryptoassets: the UK regulatory regime (FSMA permissions from 25 October 2027)
• FCA — Warning on illegal crypto ATMs operating in the UK
• FCA — Crypto and investment scams
• FCA — Using the Financial Services Register and Firm Checker
• FCA — Financial Lives 2024 survey (investment, pension and crypto fraud prevalence)
• Payment Systems Regulator — APP fraud reimbursement protections
• NCSC — Report a scam email (report@phishing.gov.uk)
• ethereum.org — Security: token approvals, signatures and transaction finality

Last reviewed 2026-07-30. Reporting routes are checked against our verified canon of official UK sources. Read about how Beat the Scam writes guides.

Browse other scam categories

• Text Message Scams (23 guides)
• Email Scams (15 guides)
• Marketplace Scams (15 guides)
• Travel Scams (14 guides)
• Payment Scams (13 guides)
• Phone Scams (13 guides)