For most of crypto's history, the big losses came from hacks - someone broke into a platform. In 2026 that has flipped. Chainalysis's 2026 Crypto Crime Report estimates $17 billion was stolen in crypto scams and fraud in 2025, and the fastest-growing method is not malware. It is convincing you to send the coins yourself.
The shift: scams now beat hacks
- Impersonation scams grew roughly 1,400% year on year, as fraudsters pose as wallets, exchanges, "support" agents and even your own bank.
- The engine is cheap AI: cloned logos, fluent messages, fake security alerts, and near-perfect voice and video.
- The script is always the same and always urgent: your wallet is compromised, connect it here to protect it, approve this one transaction.
The three AI-era formats you will actually see
- Fake support and "security" agents. A reply to your public post, or a message from a cloned company account, offering to secure your wallet. The real company never does this.
- Wallet drainers and malicious approvals. You are walked through "verifying" or "migrating" your wallet; a single signature empties it. The approval looks routine because it is a normal-looking transaction.
- AI-generated investment theatre. A deepfake endorsement or a slick app showing invented profits - the crypto cousin of pig butchering and fake trading platforms.
Why careful people still fall for it
Because the tell has moved. Typos and clumsy design used to be the warning; AI has erased them. What still gives it away is behaviour: anyone asking you to move coins, share a seed phrase, or sign a transaction you did not start. A genuine exchange, wallet or bank will never ask for any of those things - not on chat, not on a video call, not ever.
If your crypto is gone, what actually works
- Revoke any unknown token approvals and stop signing new transactions immediately - a drainer often waits for one more signature.
- Save every address and transaction hash. The blockchain is your evidence and it cannot be edited. The evidence checklist shows what to keep.
- Trace it. Forensic tracing clusters the destination wallets and shows the moment funds reach a regulated exchange - the point where a freeze becomes possible. Our deeper guide: how crypto recovery actually works.
- Move fast. Funds at a compliant exchange can sometimes be frozen within hours; once they reach a mixer or a non-cooperative wallet, the window slams shut.
- Report and watch for claims. File with Action Fraud (UK) or IC3 (US), and track large seizures - victims are increasingly paid. See claiming government-seized crypto.
The recovery-room warning
Losing crypto marks you as a target. The follow-up scammer offers to "hack it back" or "reverse" the transaction - impossible, and a second crime aimed at your desperation. Blockchain transactions cannot be undone; real recovery runs on tracing, exchange freezes and legal process. Read the recovery-room red flags and why victims get scammed twice.
Not investment, legal or financial advice. The loss figures are Chainalysis estimates for 2025 published in its 2026 Crypto Crime Report; techniques and exchange policies change quickly.
Had crypto taken by a fake support agent, a drainer or a cloned app? Send us the wallet addresses - a forensic investigator will assess, free of charge, whether there is still a live trail worth pursuing.
