Education hub

Learn the patterns. Keep your funds.

The same nine scam patterns appear in 95% of the cases we see. Read them once. Recognize them forever.

The five golden rules

✓Nobody legitimate ever asks for your seed phrase or private key. Ever.
✓If 'support' DMs you first, it is a scam. Always.
✓Verify wallet approvals at revoke.cash every month.
✓Bookmark dApps. Never click search-ad links to log in.
✓Use a hardware wallet for any balance you'd cry to lose.

Nine scam patterns to know cold

🥩 Pig butchering

Long-con romance/investment scams via WhatsApp, Telegram, dating apps. Fake trading platforms designed to look profitable until you try to withdraw.

Red flags

Stranger DMs about crypto profits'Special' platform you've never heard ofProfitable demo tradesPressure to deposit more to 'unlock' withdrawalsSudden 'tax' or 'verification fee' before withdrawal

🩸 Wallet drainers

Malicious dApps trick you into signing approvals that drain tokens. The signature looks innocuous; the effect is total wallet emptying.

Red flags

'Claim airdrop' from unknown linkSigning setApprovalForAll on random sitesUnexpected permit / permit2 promptsMint pages on Discord links you didn't search for

🎭 Fake support agents

Impersonators on Twitter/Discord 'help' you with a wallet issue and walk you straight into giving up your seed phrase.

Red flags

DMs from 'support' you didn't contactRequests for seed phrase / private keyTelegram/Discord links to 'verify wallet'Pressure to act fast 'before funds are locked'

🪤 Rug pulls

Token launches where founders pull liquidity and disappear. Often coordinated with paid influencer hype.

Red flags

Anonymous teamUnaudited contract with mint authorityLiquidity not lockedTrading suddenly halted or fee toggled to 100%

♻️ Recovery scams

Scammers who target prior victims promising to 'get your funds back'. Often the same actors who scammed you first time.

Red flags

Cold-DMs after you posted about a lossUpfront fees in cryptoClaims of 'special hacker tools'No verifiable track record or address

☣️ Address poisoning

Attacker sends 0-value transactions from an address that looks visually similar to one you've used, hoping you copy-paste the wrong one next time.

Red flags

Unexpected 0-value transactions in historyAddresses with matching first/last charactersMismatched mid-section on closer inspection

🏦 Fake exchange withdrawals

Phishing pages cloned from real exchanges. You 'log in', they capture credentials + 2FA, and drain your account.

Red flags

🧊 Ice phishing

You sign a transaction granting an attacker permission to spend your tokens — without realizing approval ≠ transfer.

Red flags

Signing data you don't understandApproval to an EOA (not a contract)Approval to a brand-new contractApproval for unlimited amount

📱 SIM swap attacks

Attacker convinces your carrier to port your number, then resets exchange passwords via SMS 2FA.

Red flags

Phone suddenly loses signalCarrier emails about a portEmail reset notifications you didn't request

Deep-dive guides

Curated reads — written for non-technical victims and pros alike.

First 24 hours after a scam

Exactly what to do — and not do — in the critical window after you realize you've been hit.

8 min read

Reading a transaction before signing

Walkthrough of how to read what a wallet popup actually authorizes, with real examples.

12 min read

Building a defense-in-depth setup

Hardware wallets, dedicated burner browsers, approval hygiene, and recovery seed storage.

15 min read

How recovery scams work

Why scammers target prior victims, the tells to look for, and how to verify any firm before paying.

10 min read

For families: helping a loved one

Talking to a parent or partner caught in a pig-butchering scam without making it worse.

9 min read

Glossary: scam terminology

Drainer, rug, mixer, peeling chain, dust attack — explained without jargon.

6 min read

Suspect you've been scammed?

The first 72 hours are the most important. Don't wait.

Get 24h triage Advisory services