ScamLens
极高风险 平均损失: $10,000 持续时间: 1-3 months

Fake ICO/IDO Scams: How to Spot Crypto Investment Fraud

Fake Initial Coin Offering (ICO) and Initial DEX Offering (IDO) scams are among the most profitable fraud schemes targeting cryptocurrency investors. In these scams, criminals create fraudulent cryptocurrency projects with sophisticated websites, whitepapers, and marketing campaigns that mimic legitimate blockchain ventures. The scammer collects millions in cryptocurrency from investors who believe they are purchasing early-stage tokens with growth potential, then vanishes with the funds in what's known as a "rug pull." According to Chainalysis, cryptocurrency scams generated $14.1 billion in illicit transaction volume in 2023, with fake ICO/IDO schemes accounting for approximately 37% of all crypto fraud losses. The typical victim loses between $5,000 and $50,000, though large-scale scams have defrauded individual investors of over $1 million. These scams exploit the legitimate excitement around early cryptocurrency projects, regulatory gaps in the crypto space, and the irreversible nature of blockchain transactions—once funds are sent to a scammer's wallet, recovery is nearly impossible.

常见手法 如何识别 如何保护自己 真实案例 常见问题

常见手法

  • • Creating professional websites with fake whitepapers containing realistic-sounding blockchain technology buzzwords, complex tokenomics models, and roadmaps claiming partnerships with legitimate companies.
  • • Building artificial community hype through fake social media accounts, purchasing Twitter/Telegram followers, and hiring influencers to promote the token without proper disclosures.
  • • Using AI-generated or stolen images for fake team members with professional LinkedIn profiles that appear legitimate but dissolve after the scam concludes.
  • • Offering limited-time bonuses or tiered pricing structures (e.g., '50% bonus for early investors') to create artificial urgency and pressure victims into investing quickly without due diligence.
  • • Implementing lock-up periods or delayed token distribution claims that prevent investors from immediately discovering the token has no liquidity or exchange listing.
  • • Conducting a rug pull by either directly draining the project wallet to personal addresses, or gradually removing liquidity from decentralized exchanges while claiming technical difficulties.

如何识别

  • The project team uses only AI-generated faces, stock photos, or celebrities' images without verified LinkedIn profiles that can be independently confirmed through multiple sources.
  • The whitepaper contains grammatical errors, vague technical explanations, or unrealistic promises like 'guaranteed 1000x returns' that no legitimate blockchain project would claim.
  • Social media followers were purchased in bulk—accounts have thousands of followers but minimal engagement, with most comments coming from bot-like accounts with profile pictures and no post history.
  • The project claims partnerships with major companies but those companies deny knowledge of the project or it's not listed on their official announcements or investor relations pages.
  • The wallet addresses receiving funds show no subsequent legitimate activity—the collected crypto is immediately transferred to multiple wallets or crypto mixers within hours of collection.
  • Token distribution lists do not match claims—investors receive far fewer tokens than promised, or tokens cannot be transferred or sold on any legitimate decentralized exchange.

如何保护自己

  • Research the project team independently by visiting official LinkedIn profiles, checking GitHub contribution history for legitimate projects, and verifying employment at previous companies directly via company websites.
  • Request and review the smart contract code on blockchain explorers like Etherscan—look for 'mint functions' or owner-controlled mechanisms that could allow unlimited token creation or fund theft.
  • Check if the token has liquidity on verified decentralized exchanges like Uniswap v3 with a lock-up period verified on DeFi platforms like Unicrypt or Team Finance, not just promises.
  • Verify project partnerships directly by contacting the partner company through official channels and requesting confirmation that they are aware of and endorsing the cryptocurrency project.
  • Use tools like CoinMarketCap and CoinGecko to check the project's transaction history, trading volume, and holder distribution—legitimate projects show distributed ownership, not concentration in the team's wallets.
  • Never invest more than you can afford to lose, diversify across multiple projects and smaller amounts, and always use hardware wallets rather than exchange wallets to maintain control of your private keys.

真实案例

A project called 'NovaTech' launched in early 2024 with a $5 million hard cap ICO targeting everyday crypto investors. The website displayed a team of 12 experts with backgrounds in blockchain and finance, featuring professional headshots and biographies. The project claimed partnerships with Coinbase and Binance, though both exchanges' official channels never confirmed this. After raising $4.8 million from 3,200 investors over 6 weeks, the website went offline, social media accounts were deleted, and blockchain analysis revealed the collected funds were immediately converted to Monero through privacy mixers. Affected investors received only 2% of promised tokens before the contract's mint function was disabled.

A bogus 'MoonShield' IDO promised 500% returns through an automated yield farming mechanism that existing blockchain projects have already proven unsustainable. The project's Telegram group had 18,000 members, but analysis showed 85% joined within the last 2 weeks and most had no Telegram history. A hired micro-influencer with 200,000 followers posted three promotional videos claiming personal profits of $50,000 in two weeks, but deleted them after 48 hours. When the IDO launched, participants sent $7.2 million in Ethereum; within 3 days, the liquidity pool was drained and the developer wallet contained only scattered tokens worth less than $5 each on open markets.

An elaborate 'CryptoVenture' scheme positioned itself as a next-generation DeFi protocol with AI-powered trading algorithms. The founding team included photos of individuals claiming PhDs from MIT and Stanford, each with fabricated LinkedIn profiles created just 4 months prior with no posting history. The whitepaper detailed a complex token model with claims that early investors would receive 30% quarterly returns guaranteed by smart contract logic, though the contract source code revealed it could only pay returns if new investor deposits exceeded prior distributions. After collecting $12.5 million from 4,100 investors, the team disabled the contract's transfer function, effectively locking all tokens, then dissolved the associated company the following week.

常见问题

How can I verify if a cryptocurrency project is legitimate before investing?
Check the team members' professional history independently through LinkedIn and GitHub, review the smart contract code on blockchain explorers for suspicious functions, and verify any claimed partnerships by contacting the partner company directly via official channels. Legitimate projects also maintain consistent social media presence with authentic engagement, not sudden spikes in followers, and they provide transparent timelines and realistic (not extraordinary) projections about token value.
What is a 'rug pull' and why can't it be reversed?
A rug pull occurs when project developers drain collected funds from the smart contract or liquidity pools to personal wallets, leaving investors with worthless tokens. Cryptocurrency transactions cannot be reversed because blockchain ledgers are immutable—once a transaction is confirmed and blocks are added, changing or canceling it would require consensus from the entire network, which legitimate developers do not have the authority to obtain. This is why crypto theft is particularly devastating compared to traditional fraud.
What should I do if I've already invested in a fake ICO/IDO?
First, document everything including transaction hashes, wallet addresses, emails, and screenshots of all project communications and promises—this becomes evidence for law enforcement and potential civil litigation. Report the scam to the FBI's Internet Crime Complaint Center (IC3), your state's attorney general, the SEC if it occurred in the US, and Chainalysis or TRM Labs for blockchain analysis. Contact your exchange or wallet provider about potential account restrictions, though recovery of sent funds is extremely unlikely unless coordinated law enforcement action seizes the scammer's accounts.
Are there warning signs in the whitepaper that indicate a scam?
Legitimate whitepapers contain detailed technical explanations, realistic tokenomics with clear use cases for the token, and honest discussion of risks and limitations. Scam whitepapers often feature grammatical errors, overuse of industry buzzwords without substance, unrealistic promises ('guaranteed 1000x returns'), and copyright dates that don't match the project's claimed history. Be skeptical of whitepapers that are overly brief, lack citations, or promise returns that contradict basic economic principles.
How do scammers use influencers to promote fake ICO/IDO projects?
Scammers either hire micro-influencers cheaply without requiring disclosure of payments (violating FTC regulations), use bot networks to artificially amplify content, or hack legitimate influencer accounts. They often request that influencers quickly promote the project before it 'sells out,' creating urgency that discourages investigation. Always verify influencer disclosures for paid partnerships, cross-reference their other promotions (legitimate crypto educators don't shill multiple unrelated projects), and check if the influencer's followers engage authentically or appear to be purchased accounts.

怀疑遇到此类诈骗？