DM ▸
fake win ▸
deposit ▸
fees ▸
gone
That friendly DM — curious about your portfolio, “sharing a win” — ended with a pitch: an automated trader making “15–20% a day, zero risk.”
Not a person. A pipeline — and it’s industrial now. Here’s the machine, step by step:
The 5-Step Scam Pipeline
| Step | What they show you | What’s really happening |
|---|---|---|
| DM or group invite — big returns, no risk, “AI” or “arbitrage” | Casting a wide net | |
| You go small — and a tiny withdrawal actually lands | That payout came from another victim’s deposit, not trading | |
| Dashboard shows your balance climbing on a timer | It’s just a number in a database — your crypto hit the operator’s wallet the moment it arrived | |
| Withdraw blocked; a “tax”, “verification fee” or “gas fee” is demanded | Paying fees to unlock money that no longer exists | |
| You stop paying — bot and channel deleted | Operators move straight to the next batch |
The Scale (Chainalysis 2026 Crypto Crime Report · FBI IC3 2025)
Scams with an automated, AI-powered pitch earn 4.5× more — averaging $3.2M per operation
AI-enabled fraud +1,210% in 2025; 60% of scam-wallet deposits now flow to AI-assisted operations
FBI logged 22,364 complaints with losses near $893M; total crypto fraud hit $17B, impersonation scams +1,400% YoY
The SEC sued AI trading-bot operations in Sept 2026 — $15M+ allegedly drained from retail investors
The nastier variant: fake “verification” bots
You join a group and a bot named something like OfficiaISafeguardBot (capital I swapped for lowercase l) tells you to “verify you’re human” by pasting a command into your computer’s Run box or terminal.
That command installs wallet-stealing malware. ![]()
Real verification bots only ask you to tap a button or solve a puzzle inside Telegram — never to paste anything into your computer.
Three tests that separate real tools from scams
Custody — does any of your money ever move to the bot or its operators? A legit tool never holds your funds.
Record — can you download the complete history, losses included? Screenshots don’t count.
Permissions — does it use an exchange API key with withdrawals disabled? That’s the entire trust model.
The one rule that never changes
No real project admin, moderator, or support agent will ever DM you first about your wallet, your recovery phrase, or an opportunity. If they do — that’s the scam.
Stay sharp out there. ![]()
!