Crypto fraud stole ₹1,800+ crore from Indians in 2024 — and 70% of victims never recover anything

Cryptocurrency Scams in India: Bitcoin Fraud, Fake Exchanges & the Tricks Stealing Crores Every Month

The dashboard shows profits. The support team says one more fee will unlock your withdrawal. The influencer looks exactly like the real one. And the exchange URL is almost identical to the original. Crypto fraud is sophisticated, fast-moving, and almost always irreversible once funds are transferred. Here's exactly how every variant works — and what stops each one.

₹1,800 Cr+Crypto fraud losses in India (2024)
27,000+Crypto-linked FIR cases in 2024
70%Victims who recover nothing
1930Cyber Crime Helpline
See All Scam Types
Why It's So Hard to Recover From

Why Crypto Fraud Is the Hardest Form of Financial Crime to Reverse

Most financial fraud — UPI, bank transfer, credit card — benefits from chargeback mechanisms, freezeable bank accounts, and a domestic regulatory structure that can intervene. Cryptocurrency removes most of these protections by design.

On-chain transfers are final within minutes. Scammers route funds through crypto mixers (tumbling services that break the transaction trail), convert to multiple other coins (chain-hopping), and cash out through unregulated peer-to-peer exchanges in jurisdictions that share no data with Indian authorities. The technical irreversibility is the scam's primary advantage over other fraud types.

Additionally, crypto's association with complexity and volatility creates a psychological cover — victims sometimes blame market movements rather than fraud, delaying the report that might have enabled recovery. India's 30% crypto tax and TDS framework also means many victims are reluctant to report because they never declared the original holdings.

The Rules That Never Change in Crypto

  • No legitimate exchange, platform, or person can double your Bitcoin. 'Send BTC, get 2x back' is always a scam — with no exceptions.
  • Legitimate exchanges never charge a 'tax clearance fee' or 'KYC hold fee' before allowing withdrawals. Withdrawal fees (gas, network fees) are deducted automatically — never charged in advance.
  • No real crypto investment guarantees fixed daily or weekly returns. Guaranteed returns in crypto are the defining signature of a scam.
  • FIU-IND registration is publicly verifiable. Before using any Indian crypto exchange, check the FIU-IND registered entity list at fiuindia.gov.in.
  • Always access exchanges by typing the exact URL yourself or from a bookmarked link — never from a URL in a Telegram, WhatsApp, or SMS message.
Every Variant

8 Types of Cryptocurrency Scams Targeting Indians Right Now

From polished exchange spoofs to anonymous Telegram pump-and-dump rooms — each uses a different entry point to reach the same outcome.

Fake Crypto Exchange Websites

Domain-spoofing sites that clone the UI of WazirX, CoinDCX, Binance, or Coinbase. Users deposit funds which are credited as balance on the fake dashboard — but withdrawal is always blocked by a 'tax fee', 'verification hold', or 'network upgrade'. The funds were never on a real blockchain.

Rug Pull — New Token Exit Scam

Developers launch a new token with aggressive Telegram/WhatsApp promotion, often with a compelling 'use case' story. Once enough retail investors buy in and the price pumps, the developers drain the liquidity pool and vanish. The token crashes to zero within minutes.

Bitcoin / Crypto Doubling Scam

'Send 0.1 BTC, receive 0.2 BTC back within 24 hours.' Uses fake celebrity endorsements (Elon Musk deepfakes, Ratan Tata lookalikes, popular crypto YouTubers) and fabricated live transaction feeds. The test repayment trick: small first amounts are returned to build trust before the large transfer that is never returned.

Pump-and-Dump Telegram Groups

Paid Telegram 'alpha' groups hype low-cap altcoins to their members. The organisers have pre-bought cheap tokens and sell at the peak of the manufactured excitement, leaving late buyers with worthless holdings. Victims are told the group 'insiders' have market intelligence.

Fake Crypto Wallet Apps

Malicious apps on third-party stores or sideloaded via Telegram mimic MetaMask, Trust Wallet, or hardware wallet apps. When you enter your seed phrase during 'setup', the app transmits it to the scammer who drains your real wallet immediately.

Pig Butchering — Crypto Investment Romance

A romantic connection (via WhatsApp, Hinge, or LinkedIn) introduces a 'personal trading tip' — a fake exchange whose dashboard shows extraordinary daily returns. The victim deposits more and more. Withdrawal is always blocked by a new fee. Full account draining follows.

Celebrity Deepfake Crypto Promotions

AI-generated videos of Elon Musk, Narayana Murthy, or Indian crypto influencers promote a 'limited access' investment platform. Deepfake quality is now high enough that casual viewers cannot distinguish them from authentic videos. QR codes and URLs overlaid on the video lead to scam sites.

Crypto Recovery / Refund Scam

Targets people who have already been scammed. A 'blockchain recovery specialist' or 'crypto legal firm' offers to trace and recover lost crypto — for an upfront fee. After the fee is paid (often demanded in crypto), the 'firm' disappears. Victims are scammed twice.

The Full Playbook

How a Fake Crypto Exchange Scam Works — Phase by Phase

The same five-phase cycle repeats across hundreds of fake exchanges simultaneously.

01

Spoofed Domain Launched

The site looks pixel-perfect: WazirX's exact layout, logos, and colour scheme. The URL is 'wazirx-pro.com' or 'wazirxindia.net' — close enough to miss on mobile. SSL certificate is present (the padlock means nothing about legitimacy).

02

Victim Is Directed Here

Via a Telegram group, a WhatsApp message, a romantic partner, a Google Ad (scammers buy paid search ads for 'buy bitcoin india'), or a YouTube comment. Many victims arrive believing they are accessing the real exchange.

03

Deposit Credited, Fake Profits Shown

The first deposit appears in the dashboard and may even show profitable trades — the numbers are fabricated. Occasionally a small withdrawal succeeds to build confidence. The victim deposits larger amounts.

04

Withdrawal Blocked

TRAP ACTIVATED

When the victim attempts to withdraw, a new requirement appears: 'Tax clearance fee (30% of holdings)', 'KYC verification deposit', 'Anti-money laundering hold', 'Network upgrade pause'. Each payment unlocks a new block.

05

Total Loss

TRAP ACTIVATED

After exhausting savings paying fees, support goes silent. The domain may still work for new victims for weeks. The original deposits, 'profits', and fee payments are all gone. Nothing was on a real blockchain.

A Real Account

"The Dashboard Showed ₹9 Lakh in Profit. Then They Asked for ₹1.8 Lakh in Tax." — A Real Account

Rahul (name changed), a 33-year-old IT engineer from Pune, joined a Telegram group in November 2024 called 'Crypto India Alpha Signals'. The group had 12,000 members, regular price-call posts, and testimonials from people claiming large gains. After following some free signals that appeared to be accurate, Rahul trusted the group.

A group admin privately messaged him about a 'private exchange with institutional pricing — not available to the public'. The site looked exactly like a major international exchange and had an SSL certificate. Rahul deposited ₹2 lakh in USDT (converted from INR via a domestic exchange and transferred out). The dashboard immediately showed trading activity and profits.

Over six weeks, following the admin's 'exclusive signals', Rahul's dashboard balance grew to ₹11 lakh. He deposited an additional ₹3 lakh impressed by the returns. When he attempted his first withdrawal — ₹50,000 — he was told a 30% 'profit tax clearance' of ₹3.3 lakh was required before any withdrawal could be processed under 'Indian PMLA compliance'.

He paid ₹1.8 lakh from savings, expecting the full balance to be released. The withdrawal was then blocked pending 'anti-money laundering verification' — requiring another ₹2 lakh deposit. At this point Rahul typed the exchange name into Google directly and found the real exchange's domain — it was entirely different from the URL he had been using. The site he had used had been registered 49 days earlier.

Total money deposited and lost: ₹6.8 lakh. Reported to 1930 — a freeze was placed on one domestic account linked to the initial INR transfer but the funds had already moved. Cybercrime.gov.in complaint filed; investigation ongoing. The Telegram group vanished within 12 hours of Rahul's report.

The Check That Would Have Protected ₹6.8 Lakh:

The exchange domain's WHOIS registration date (49 days old) and the exact URL mismatch with the real platform would have been visible in under 60 seconds. Any platform shared via a Telegram private message should be independently verified against the official URL before a single rupee is deposited.

Spotting Fake Exchanges

How to Tell a Fake Crypto Exchange from a Real One — Verified Checks

Fake exchanges invest heavily in visual cloning — the layout, fonts, colours, and even the API-linked price tickers are copied precisely. What they cannot fake is the domain registration date, the FIU-IND entry, and their own behaviour under independent scrutiny.

These checks take 3–5 minutes and are the most reliable protection against fake exchange fraud. Run them before any first deposit, regardless of who referred you to the platform.

1

Check domain WHOIS registration date

Go to who.is or whois.domaintools.com and enter the exchange URL. Legitimate exchanges like WazirX, CoinDCX, and ZebPay have registration dates from 2017–2019. Any 'established exchange' registered within the last 6–12 months is a red flag.

2

Verify FIU-IND registration

Go to fiuindia.gov.in and check the list of registered Virtual Digital Asset Service Providers under PMLA. Every legitimate Indian crypto exchange must appear here. If the exchange you're evaluating does not appear, do not use it.

3

Cross-check the exact URL character by character

On a desktop browser, examine the full URL: 'wazirx.com' vs 'wazirx-pro.com' vs 'waz1rx.com'. Scammers exploit mobile screen limitations where only the first part of the URL is visible. Always use desktop for URL verification.

4

Test the withdrawal process with a trivial amount first

Before depositing any significant amount, test if you can withdraw a small amount (₹100 equivalent) without being asked to pay a fee. Any exchange that demands upfront fees before processing a withdrawal is fraudulent.

Real ExchangeReal DomainCommon Fake Domains Used by Scammers
WazirXwazirx.comwazirx-pro.com / waz1rx.com / wazirxindia.net
CoinDCXcoindcx.comcoindcx-pro.in / coin-dcx.com / coindcxindia.net
Binancebinance.combinance-india.net / binancepro.in / binance-global.co
ZebPayzebpay.comzebpay-india.com / zeb-pay.in / zebpayindia.net
CoinSwitchcoinswitch.cocoinswitch-pro.com / coin-switch.in / coinswitchindia.net

These fake domains are documented scam examples — never use them.

Warning Signs

10 Red Flags of a Cryptocurrency Scam

Any single one of these warrants full stop and independent verification before proceeding.

01

Exchange URL doesn't exactly match the real domain — check letter by letter on desktop, not mobile

02

Platform was shared via Telegram, WhatsApp, a romantic contact, or an unsolicited message — not found via your own search

03

Profits appear within hours of depositing — real trading always involves risk and volatility, not guaranteed daily gains

04

Withdrawal triggers a new 'fee', 'tax clearance', or 'verification requirement' every time it's attempted

05

Customer 'support' is only on Telegram — no verifiable phone number, registered address, or official email domain

06

Token or project is promoted exclusively by paid influencers or anonymous 'insiders' — no verifiable team or whitepaper audited by a third party

07

You're being offered a 'guaranteed return' on crypto — crypto has no guaranteed returns by its nature

08

The investment tip came from someone you met romantically online and they refuse to video call

09

You're asked to pay recovery fees to get back funds already lost — this is the second scam

10

The platform app was downloaded from a link, not from the official App Store or Google Play

Myth Busting

Crypto Scam Myths vs. Reality

Myth

The site has a padlock (HTTPS), so it must be safe.

Reality

HTTPS only encrypts the connection between your browser and the server — it says nothing about who owns that server or whether the site is fraudulent. As of 2024, over 80% of phishing and scam sites use HTTPS. A padlock on a fake exchange URL is standard, not reassuring.

Myth

I can verify a real exchange by seeing my balance grow on the dashboard.

Reality

Dashboard balances on fake exchanges are entirely fabricated numbers. The deposits you made went directly to the scammer the moment you transferred them. The 'balance' and 'profits' are a user interface designed to keep you depositing more.

Myth

Crypto transactions are traceable, so authorities can always recover stolen funds.

Reality

While blockchain transactions are publicly visible, tracing them requires expertise, and scammers use mixers, chain-hopping, and immediate conversion to fiat through unregulated exchanges in jurisdictions that don't cooperate with Indian authorities. Recovery is possible in a minority of domestic cases but rare for international operations.

Myth

Only technically naive people get scammed on crypto — I understand the technology.

Reality

Technical understanding of how Bitcoin works does not protect against social engineering, domain spoofing, or a fake trading platform with a professional UI. Many documented Indian crypto fraud victims are software engineers and IT professionals. The scam targets human psychology, not technical ignorance.

What To Do Now

Think You've Been Scammed? Do This in the Next 60 Minutes.

Speed matters more in crypto fraud than almost any other financial crime. Every step below should be taken as fast as possible.

01

Stop all further transfers immediately

DO FIRST

Do not pay any 'tax clearance', 'withdrawal unlock', or 'verification fee'. Every additional payment is additional money lost. The original funds will not be released regardless of what fees are paid.

02

Document everything before the site vanishes

DO FIRST

Screenshot the exchange URL, your dashboard, all transaction confirmations, every communication with 'support', and any profile that directed you there. Fake sites frequently disappear within days of complaints.

03

Call 1930 immediately

If Indian bank accounts or UPI were used to fund the crypto purchase, the Cyber Crime Financial Helpline can attempt to freeze those accounts. Speed is critical — the window for effective intervention closes quickly.

04

File at cybercrime.gov.in

Submit your complaint with transaction hashes (if on-chain), wallet addresses funds were sent to, exchange URLs, screenshots of all communications, and bank transaction references. A complaint number is issued immediately.

05

Report to FIU-IND and SEBI if applicable

If the exchange claimed to be SEBI-registered or FIU-IND compliant without being so, report this specifically to FIU-IND (fiuindia.gov.in) and SEBI's SCORES portal for potential legal action against fraudulent claims.

06

Report the domain and wallet addresses

Report the fake exchange domain to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish/) and the fraudulent wallet addresses to Chainabuse (chainabuse.com). This protects future victims and assists global law enforcement tracking.

Report Crypto Fraud — Official Channels

Where to report and how to verify exchange legitimacy

National Cyber Crime Portal

cybercrime.gov.in

File your complaint with wallet addresses, exchange URLs, transaction hashes, and communication screenshots

Cyber Crime Helpline

1930

Call immediately if INR was transferred via bank or UPI to fund a crypto purchase — account freeze window is 30–60 minutes

FIU-IND — Registered Exchanges List

fiuindia.gov.in

Verify any Indian crypto exchange is PMLA-registered before depositing funds

SEBI SCORES Portal

scores.sebi.gov.in

Report if the platform falsely claimed SEBI registration or offered regulated securities as part of crypto fraud

Chainabuse

chainabuse.com

Report fraudulent wallet addresses — used by global law enforcement and blockchain analytics firms

Google Safe Browsing Report

safebrowsing.google.com/safebrowsing/report_phish

Report fake exchange domains to trigger browser warnings for future users who visit the same URL

Frequently Asked Questions

Honest answers to the most common questions about cryptocurrency fraud in India.

What are the most common cryptocurrency scams in India?
The most common crypto scams in India are: fake exchange websites that look like Binance or WazirX clones, rug pull schemes where developers abandon a project after raising funds, Bitcoin doubling scams ('send 1 BTC, receive 2 BTC'), pump-and-dump groups on Telegram, fake wallet apps on third-party app stores, and romance-linked pig butchering scams that route victims into fake trading platforms.
Is it safe to buy Bitcoin in India?
Buying Bitcoin through SEBI-aware, India-registered exchanges like CoinDCX, WazirX, or ZebPay is generally considered safe for the exchange custody risk. The risks are: phishing sites spoofing these exchanges, fake mobile apps posing as these exchanges, and unsolicited investment advice that routes you to fraudulent platforms. Always access exchanges directly through official URLs bookmarked by you — never URLs shared in messages.
What is a rug pull in cryptocurrency?
A rug pull is a crypto exit scam where developers launch a new token, attract investors (often through social media hype and influencer promotion), pump the price, then suddenly withdraw all the liquidity from the trading pool and abandon the project. The token price collapses to near zero, and the developers disappear with the collected funds. Rug pulls are common with small-cap altcoins promoted aggressively in Telegram and WhatsApp groups.
How do I verify if a crypto exchange is legitimate?
Check if the exchange is registered with the Financial Intelligence Unit (FIU-IND) under India's PMLA framework — all Indian crypto exchanges must register with FIU-IND. Verify the exact domain spelling (fraudsters use lookalike domains like 'waz1rx.com' or 'binance-india.net'). Check if they have a verifiable physical address in India, a listed management team, and regulatory disclosures. Never use an exchange recommended solely via WhatsApp, Telegram, or unsolicited messages.
Can I recover crypto stolen from a fake exchange?
Crypto transactions are largely irreversible on-chain — once sent to a scammer's wallet, direct recovery is extremely difficult. However, report immediately to 1930 and cybercrime.gov.in, as Indian cyber cells have in some cases coordinated with exchanges to freeze accounts if the funds went to a KYC-linked Indian account. Blockchain analysis firms have also traced stolen funds in documented cases. The faster you report, the better the chance of any intervention.
What is the cryptocurrency doubling scam?
The Bitcoin or crypto doubling scam claims that sending any amount of cryptocurrency to a given wallet address will return double the amount. It often uses fabricated celebrity endorsements — Elon Musk, Ratan Tata, or popular crypto YouTubers — and fake on-screen 'live transaction' feeds showing money being doubled. Nothing is ever returned. In a variant, a small test amount is returned once to build trust before the victim sends a large amount that is never returned.
Free Phone Number & Website Verification

Suspicious Exchange or Crypto Tip?Check It Before You Transfer.

Check any website or phone number on RakshaAI before trusting it with your crypto. Or report a crypto scam to protect the next investor from the same platform.

Check an Exchange URL

🇮🇳 Protecting 2M+ Indians from cyber fraud · 100% Free · No registration required