- Thread starter
- #1
The conversation felt real. The person on the other end sent good morning messages, asked about your day, shared details about their life. The group chat was full of people discussing trades, celebrating wins, sharing screenshots of profits. The Discord server had hundreds of members, all talking about the same investment opportunity.
And every single one of them was fake.
Messaging apps have become the primary hunting ground for crypto scammers. Not because they are insecure. Because they are intimate. They bypass the email filters and spam protections that catch other fraud attempts. They deliver the scammer directly into your pocket, into your daily life, into the space where you talk to the people you trust.
The FBI's Internet Crime Complaint Center and the Commodity Futures Trading Commission have both issued warnings about this shift. Scammers are moving to platforms like Telegram, WhatsApp, Discord, and Signal because these apps provide privacy protections that legitimate users value and criminals exploit.
The good news is that the scam leaves traces. Not always on the messaging platform itself. But on the blockchain. And with the right investigative approach, those traces can be followed.
Why Scammers Choose Messaging Apps
The CFTC's consumer advisory on messaging apps is blunt: fraudsters use these platforms because they allow anyone with your phone number to contact you directly. By default, many apps allow unknown users to add you to group chats or send you messages. You might see a notification that you have been added to a group, followed by messages about trading crypto futures, "cooperative trading projects," or promises of 100, 500, or 1,000 percent profits.
The group chat is the lure. It is filled with what appear to be other investors sharing testimonials, celebrating wins, encouraging you to join. Every one of them is part of the scam. Some are bots. Some are paid actors. Some are victims who have not yet realized they have been defrauded and are being used to recruit others.
Telegram is particularly favored for large-scale operations. The ICC FraudNet Global Annual Report on encrypted messaging notes that organized fraud groups exploit Telegram's client-side open-source structure to create expansive private groups promoting fraudulent investment opportunities. The platform's architecture makes it easy to scale operations across thousands of victims simultaneously.
WhatsApp is used differently. The report describes WhatsApp as the platform of choice for intensive, one-on-one engagement, particularly in "pig butchering" romance scams. Victims are groomed over weeks or months through personal, targeted conversation. The intimacy of the platform mirrors the intimacy of the relationship being fabricated.
Discord serves a different purpose. Crypto-focused Discord servers attract people who are already interested in digital assets. Scammers infiltrate these communities, build credibility as helpful members, and then direct victims to fake investment platforms or malicious links. The NCC Group's research on social engineering campaigns found that messaging platforms including Discord are increasingly used to deliver phishing links, malicious attachments, and fake invitations while bypassing traditional email controls.
The Scam Lifecycle on Messaging Apps
The pattern repeats across platforms and across victims.
Contact. You receive a message from someone you do not know. Sometimes it is a "wrong number" text. Sometimes it is a friendly stranger in a group you do not remember joining. Sometimes it is a professional contact on LinkedIn who wants to discuss an investment opportunity. The first message is designed to feel harmless.
Relationship building. The scammer engages you in conversation. They are attentive. They remember details. They share things about themselves. Over days or weeks, they build a rapport that feels genuine. The CFTC notes that scammers use "love bombing," a technique where victims are showered with praise and attention to create feelings of trust and intimacy before their guard is exploited.
The group. You are added to a group chat or invited to a Discord server. The group is active and vibrant. Members discuss trades, share profits, congratulate each other. Some members may claim to have made life-changing returns. The atmosphere is one of excitement and opportunity. The group creates social proof.
And every single one of them was fake.
Messaging apps have become the primary hunting ground for crypto scammers. Not because they are insecure. Because they are intimate. They bypass the email filters and spam protections that catch other fraud attempts. They deliver the scammer directly into your pocket, into your daily life, into the space where you talk to the people you trust.
The FBI's Internet Crime Complaint Center and the Commodity Futures Trading Commission have both issued warnings about this shift. Scammers are moving to platforms like Telegram, WhatsApp, Discord, and Signal because these apps provide privacy protections that legitimate users value and criminals exploit.
The good news is that the scam leaves traces. Not always on the messaging platform itself. But on the blockchain. And with the right investigative approach, those traces can be followed.
Why Scammers Choose Messaging Apps
The CFTC's consumer advisory on messaging apps is blunt: fraudsters use these platforms because they allow anyone with your phone number to contact you directly. By default, many apps allow unknown users to add you to group chats or send you messages. You might see a notification that you have been added to a group, followed by messages about trading crypto futures, "cooperative trading projects," or promises of 100, 500, or 1,000 percent profits.
The group chat is the lure. It is filled with what appear to be other investors sharing testimonials, celebrating wins, encouraging you to join. Every one of them is part of the scam. Some are bots. Some are paid actors. Some are victims who have not yet realized they have been defrauded and are being used to recruit others.
Telegram is particularly favored for large-scale operations. The ICC FraudNet Global Annual Report on encrypted messaging notes that organized fraud groups exploit Telegram's client-side open-source structure to create expansive private groups promoting fraudulent investment opportunities. The platform's architecture makes it easy to scale operations across thousands of victims simultaneously.
WhatsApp is used differently. The report describes WhatsApp as the platform of choice for intensive, one-on-one engagement, particularly in "pig butchering" romance scams. Victims are groomed over weeks or months through personal, targeted conversation. The intimacy of the platform mirrors the intimacy of the relationship being fabricated.
Discord serves a different purpose. Crypto-focused Discord servers attract people who are already interested in digital assets. Scammers infiltrate these communities, build credibility as helpful members, and then direct victims to fake investment platforms or malicious links. The NCC Group's research on social engineering campaigns found that messaging platforms including Discord are increasingly used to deliver phishing links, malicious attachments, and fake invitations while bypassing traditional email controls.
The Scam Lifecycle on Messaging Apps
The pattern repeats across platforms and across victims.
Contact. You receive a message from someone you do not know. Sometimes it is a "wrong number" text. Sometimes it is a friendly stranger in a group you do not remember joining. Sometimes it is a professional contact on LinkedIn who wants to discuss an investment opportunity. The first message is designed to feel harmless.
Relationship building. The scammer engages you in conversation. They are attentive. They remember details. They share things about themselves. Over days or weeks, they build a rapport that feels genuine. The CFTC notes that scammers use "love bombing," a technique where victims are showered with praise and attention to create feelings of trust and intimacy before their guard is exploited.
The group. You are added to a group chat or invited to a Discord server. The group is active and vibrant. Members discuss trades, share profits, congratulate each other. Some members may claim to have made life-changing returns. The atmosphere is one of excitement and opportunity. The group creates social proof.