Crypto scams are dangerous because they rarely look unfamiliar at first. They are often wrapped in normal-looking situations: exchange support, trading groups, quant bots, withdrawal reviews, tax notices, or even "recovery services" after someone has already lost money.
As of 2026-05-23, Taiwan's virtual asset oversight is still developing quickly. The Executive Yuan has approved the direction of a draft Virtual Asset Services Act, with emphasis on VASP supervision, client asset protection, stablecoin rules, and market integrity. The FSC has also connected virtual asset flow monitoring with anti-fraud and AML controls. The practical takeaway is simple: crypto is not automatically unsafe, but you must verify whether the platform is real before you transfer funds.
This guide gives you a pre-transfer checklist, not a promise that every scam can be detected.
One Rule First: If You Cannot Withdraw Freely, It Is Not Really Your Asset
A real exchange may pause activity because of KYC, risk control, or AML checks, but it should have official channels, account records, public terms, and a clear support process. Scam platforms usually behave differently:
- Deposits are easy, but withdrawals suddenly become complicated.
- Your account shows large profits, but only inside the platform screen.
- You must pay tax, a guarantee deposit, verification fee, or unlock fee before withdrawal.
- Support only replies through LINE, Telegram, WhatsApp, or a strange website.
- You are pressured to send more funds immediately or your account will be frozen.
If a platform asks you to pay more money before you can recover your existing money, stop. That is one of the most common withdrawal traps.
12 High-Risk Red Flags
One red flag does not prove fraud. Two or three together are enough reason to pause.
- Someone contacts you first with an investment opportunity, especially through dating apps, social groups, random texts, or fake support accounts.
- The offer promises guaranteed returns, principal protection, or unusually high short-term profits.
- The domain looks like a famous exchange but has extra letters, missing characters, or odd subdomains.
- The app is installed through an APK, TestFlight, enterprise certificate, or private link instead of an official app store.
- Support asks you to send USDT to a personal wallet address instead of a deposit address inside your own exchange account.
- You are not allowed to test a small withdrawal, or a small withdrawal works only before they push you to deposit more.
- Withdrawals require tax, margin, identity fees, risk-control release fees, or AML deposits.
- The platform lacks clear company information, regulatory status, fee tables, risk disclosures, and official support email.
- A group chat is filled with profit screenshots, but you cannot verify whether the members are real.
- Someone asks for remote desktop access, exchange passwords, seed phrases, private keys, or 2FA codes.
- Searches on anti-fraud sites, social platforms, or search engines show similar warnings.
- When you hesitate, the other party uses emotion, threats, time pressure, or "one last chance" language.
A 5-Minute Verification Flow Before Sending Funds
Before transferring USDT, BTC, or ETH, run these checks. They will not remove every risk, but they catch many low-cost scam funnels.
1. Type the Official URL Yourself
Do not enter from a private message, ad, or group announcement. Type the exchange URL yourself or use a saved official bookmark.
If someone claims to represent BitoPro, Binance, Crypto.com, Kraken, or OKX, enter only through the official website or official app. Do not use a "special deposit page" sent by support.
2. Check the Company and Regulatory Footprint
Taiwan users should look for a clear company name, terms of service, fee schedule, custody explanation, and support channels. Taiwan's VASP AML registration and disclosure requirements are designed to make the service provider identifiable.
If a platform has no company details, or only says "global license" without a verifiable source, treat it as high risk.
3. Search the Name With Negative Keywords
Search combinations such as:
- Platform name + scam
- Platform name + withdrawal
- Platform name + unable to withdraw
- Platform name + fraud
- Platform URL + scam
If search results are mostly the platform's own SEO pages, fake reviews, or repeated promotional articles, be careful.
4. Test a Small Withdrawal First
If you still decide to try a new platform, do not start with a large deposit. A safer sequence is:
- Make a small deposit.
- Execute a small trade.
- Withdraw a small amount back to your own wallet or bank flow.
- Wait until it arrives before considering any larger amount.
Important: some scam platforms intentionally allow the first small withdrawal to build trust. A successful small withdrawal lowers risk, but it does not prove the platform is safe.
5. Copy Deposit Addresses Only From the Official Interface
Do not use addresses posted by support, group members, or an investment coach. Copy the address only from the official deposit page after logging in yourself, then verify:
- The asset is correct, such as USDT.
- The network is correct, such as TRC-20, ERC-20, or BEP-20.
- The first and last characters match the official page.
- The first transfer is small.
If you are unsure about networks, read: Wrong Network Transfer? ERC-20 vs TRC-20 vs BEP-20 Explained.
Common Scam Scripts
Fake Exchanges
These sites imitate exchange login pages, charts, balances, and support systems. After you deposit, the dashboard may show profit, but the numbers are internal. The actual assets are often already gone.
Verification focus: domain, app source, withdrawal flow, company details, and independent reputation.
Fake Investment Groups
The group shows daily profit screenshots, a teacher gives signals, and assistants push deposits. You are watching a staged trust funnel. Once your balance is large enough, withdrawal taxes, deposits, or account exceptions appear.
Verification focus: real traders do not need to guarantee your profits, and they should not ask you to move funds to a strange platform.
Fake Support and Fake Airdrops
Scammers impersonate exchanges, wallets, or project support. They may say your account has an issue, your wallet must be synchronized, you can claim an airdrop, or risk control must be lifted. If you reveal a seed phrase or sign a malicious approval, your wallet can be drained quickly.
Verification focus: official support will never ask for your seed phrase, private key, or 2FA code.
Recovery Scams
After a loss, someone may claim they can recover your funds if you first pay an investigation fee, legal fee, or blockchain tracing fee. The FBI has warned that fake law firms and recovery services target existing victims.
Verification focus: recovery is never guaranteed. Do not give a second stranger more money because you are desperate to fix the first loss.
What To Do If You Already Transferred Funds
Do not send more. Scammers often use "just one final payment" to extend the loss.
Take these steps:
- Save screenshots of chats, URLs, transaction records, wallet addresses, TxIDs, and bank transfer details.
- Stop shared operations immediately. Do not open remote desktop access or provide verification codes.
- If funds left from an exchange, contact exchange support quickly with the TxID and destination address.
- If a bank transfer was involved, contact the bank and explain the suspected fraud.
- In Taiwan, call the 165 anti-fraud hotline and follow police instructions.
- Check whether your exchange account, email, phone number, and 2FA have been compromised.
If your issue is exchange risk control rather than a clear scam, read: Exchange Account Frozen by Risk Control? Causes and Appeal Process.
Safety Rules for Taiwan Investors
You do not need to understand every platform. You do need three hard rules:
- Do not use trading platforms sent by strangers.
- Do not trust guaranteed-return or managed-trading offers.
- Do not pay more money just to withdraw your own money.
Real crypto learning should begin with small amounts, verifiable platforms, working withdrawals, and traceable records. If you are still new, start here: How to Buy Bitcoin for the First Time: A Beginner's Guide.
FAQ
Q: The platform says I must pay tax before withdrawing. Is that real?
A: Treat it as highly suspicious. Real tax obligations are not normally collected by a stranger through a private USDT address before withdrawal. Stop sending funds and verify through official channels.
Q: Does a successful small withdrawal prove the platform is safe?
A: No. Some fake platforms allow a small withdrawal to build trust, then pressure users into larger deposits. Small withdrawal testing is useful, but it does not replace company, domain, regulatory, and reputation checks.
Q: I already sent USDT. Can I recover it?
A: It depends. Blockchain transfers are usually irreversible, but you should still preserve the TxID, destination address, and chat records, then contact the exchange, bank, and local anti-fraud channels as quickly as possible.
Q: Will official support ever ask for my seed phrase or private key?
A: No. Anyone asking for your seed phrase, private key, or 2FA code should be treated as high risk. Those credentials can give an attacker direct control over your assets.
Read Chinese Version: 繁體中文版本