How crypto scams trap Indians: what I've learned from losses

The Bangalore Lesson

Last year, I met a man named Rajesh at a coffee shop in Whitefield. He'd lost ₹12 lakhs in Bitcoin. Not in a hack. Not through negligence. Through something much slower and more deliberate: a relationship.

Rajesh is a software engineer. Smart. Suspicious of most things. But six months earlier, he'd connected with someone on LinkedIn — another engineer, based in Gurgaon, with a legitimate-looking profile, decent projects listed, mutual connections that checked out. They chatted about React. About market movements. Then, casually, about a "private crypto opportunity".

The scammer never asked for money directly. Instead, he invited Rajesh to a WhatsApp group. "Just 40 people," the message said. "We're getting early access to a token launch." Rajesh watched for two weeks as the group filled with what looked like real people sharing screenshots of gains. ₹2,000 one day. ₹8,000 the next. The pattern was intoxicating — not life-changing money, but consistent, visible, real-looking.

On day 15, Rajesh invested ₹50,000.

Within 48 hours, the token "launched" on an exchange that looked professional but was entirely fabricated. His ₹50,000 had become ₹2.8 lakhs on paper. He reinvested. His girlfriend reinvested. His mother reinvested. The total: ₹12 lakhs across three accounts.

Then the group went silent. The exchange stopped loading. The LinkedIn profile vanished. Rajesh spent two weeks refreshing the page, checking WhatsApp for any sign of movement. The money was gone.

When I asked him why he hadn't pulled out earlier, he said something that stays with me: "I wasn't greedy. I just believed I had found something real. There were too many witnesses."

Why Crypto Scams Are Different

This is not your father's fraud. In UPI scams, the attacker needs your OTP. In phishing, they need you to click a link. But crypto scams operate on a different principle entirely: they exploit the absence of friction.

Once money moves to a blockchain address, it is gone. Not frozen. Not recoverable. The design of crypto — the very feature that makes it attractive — makes it irreversible. A bank can reverse a UPI transfer. RBI can mandate a freeze. But a Bitcoin address? The moment your funds move there, they are outside Indian jurisdiction, outside banking safeguards, outside the reach of any helpline.

And the scammers know this.

That's why they don't rush. They build ecosystems: fake exchanges, fake apps, fake trading platforms. They create community. They generate FOMO through visible (fake) gains. They use LinkedIn to appear legitimate. They use WhatsApp to feel personal. By the time the victim realizes something is wrong, they've often invested multiple times, talked themselves into holding, rationalized the risk.

Rajesh had told his mother: "If this were a scam, would there be 40 people in the group seeing the same numbers?" The answer is yes. All 40 were scammers, or bots, or other victims still in denial.

The India-Specific Reality

Here's what keeps me up: India has no unified crypto regulation. The RBI has said Indians should not trade crypto. But it hasn't banned it. Tax authorities treat it as income. Some states treat exchanges as illegal. Others permit them. The result is a regulatory vacuum — and vacuums attract predators.

When Rajesh filed a complaint with the Bengaluru cyber cell, the officer was sympathetic but blunt: "Sir, it's on the blockchain. We cannot do anything. If he'd sent money to a bank account, we could freeze it. But this? We do not have the tools."

That is the bitter truth. India's cyber-crime infrastructure — sophisticated in UPI fraud detection, reactive to phishing — is nearly helpless against crypto scams. The blockchain is immutable by design. The scammers operate from servers across three continents. By the time a case is registered, the crypto has been moved to exchanges in Singapore or swapped for other tokens or moved to cold wallets that leave no trace.

And yes, CERT-In has issued advisories. Yes, the RBI has published warnings. But these reach the cautious, not the desperate or the hopeful.

How the Scams Disguise Themselves

I've catalogued the patterns over the last two years. They are not random:

The Pump-and-Dump Token Launch: A team announces a new token on a fake or compromised exchange. They "seed" the pump with bot trades and screenshots of gains. Real people FOMO in. The token pumps. The insiders dump. The token crashes to ₹0.00000001. The exchange disappears.

The Trading Signals Group: A WhatsApp group offers daily crypto trading "signals" (predictions). The admin has a friendly personality, maybe an accent that sounds educated. For two weeks, the signals are right. (They're not — the admin is a scammer who waits for your first loss signal, then pitches a "premium course" or a "managed account.")

The DeFi Farming Scam: "Stake your crypto here and earn 15% weekly." This one is old, but it thrives in India because it sounds like a bank recurring deposit. The early withdrawals work. The later ones don't.

The Fake Exchange App: Indistinguishable from Binance or Coinbase. Your funds appear to grow. But they never leave the fake exchange. The moment you try to withdraw, the app crashes or a "verification delay" stretches on for weeks.

The Job Recruitment Angle: A recruiter on LinkedIn says: "Join our crypto trading team. We'll provide capital. You keep 30% of profits." (This one particularly targets young people in Tier 2 cities.)

Each of these has infected hundreds of Indians. And each one exploits the same lever: the belief that someone else has figured it out, and if you just follow them, you will too.

The Silence That Follows

What haunts me most is the aftermath. Victims don't come forward because they're ashamed. They tell themselves it was a learning fee. They tell themselves they should have known better. Some spend months trying to "trace" their money on block explorers, refreshing wallet addresses, clinging to the 0.0001% chance that the money comes back.

Rajesh didn't tell his family for three weeks. His mother eventually found the transactions in the bank statement. His girlfriend didn't speak to him for a month. He took up running at 5 a.m. to burn through the shame.

That's the true cost. Not just the ₹12 lakhs. The trust that frays when you realize someone who looked so real was completely fabricated.

What This Teaches Us

Crypto scams succeed not because Indians are stupid. They succeed because crypto is real (Bitcoin has genuine value) and so it feels like a real investment ecosystem. The scammers don't need to trick you into clicking a malicious link. They just need to let you trick yourself into believing you've found an edge.

And they need you to believe it alone, in your phone, at 11 p.m., when doubt is easy to silence.

Practical Steps to Avoid This

1. Never invest in anything advertised through personal messages or WhatsApp groups, no matter who the referrer is or how legitimate the community looks. If it's a real opportunity, it will exist on regulated exchanges (like Binance or Coinbase, which operate with Indian verification) and won't require a group to explain it to you.

2. Check the exchange registration. If it claims to be an Indian exchange, verify it on MEITY's list of registered intermediaries. If it's a global exchange, check its regulatory status in that country. Fake apps often mimic real app names — download directly from the Play Store or App Store, not from links shared in groups.

3. Recognize the pump-and-dump pattern. If you see consistent daily gains of 5-10%, it is not real. Crypto markets move violently and unpredictably. Anything that shows mechanical, regular growth is almost certainly fabricated data on a fake exchange.

4. Never share your recovery phrase or private keys with anyone, ever. If a trading platform asks for this, it is a scam. Your exchange should never need this. Not even in a support chat. Not even to "verify your account."

5. If something seems too good to be true, close the app and wait 24 hours. When Rajesh's group showed 15% weekly returns, he felt urgency. That urgency was manufactured. Real investments can wait a day. Scams cannot.

6. Report suspected scams to your state cyber cell and CERT-In, even if you think nothing will happen. The RBI and MEITY track complaints. Patterns matter. Your report might prevent someone else from losing more.

7. If you've lost money, tell someone immediately. Not just family. A friend. A colleague. The shame will fade, but silence will not. And you might catch the scammer's next move before they erase their tracks entirely.

Rajesh did file an FIR. Nothing came of it. The Linux Foundation would not provide metadata on the user. The Gurgaon address was fake. But in filing it, he at least stopped spinning in private agony. He told his story to three other people. One of them recognized a similar pitch his nephew had received.

That's not justice. But it's something.