Crypto scams in Mauritius do not always take the form of a spectacular hack. Some begin with a promise of returns, a private tips group, a fake romantic relationship or an alleged adviser claiming they can unlock a withdrawal. The common thread is often the same: convincing the victim to transfer funds, install a tool, share a secret or pay again to recover money that has already been lost.
The Bank of Mauritius and the Financial Services Commission have issued a warning about unregulated investment opportunities. They urge the public to be wary of unrealistic returns, unusual payment methods and solicitations that create pressure. Before any transaction, verify the company, its role, any relevant authorization and its official contact channel.
In brief
- A guaranteed return, artificial urgency or a request for secrecy are red flags.
- Check the alleged legal name and license through the regulator’s sources, not through the promoter.
- If you have paid, contact your bank quickly and preserve the evidence without paying additional fees.
Four red flags to spot before sending funds
First red flag: a high return presented as certain For more local context, also consult BrefCrypto’s pillar guide to crypto in Mauritius.
Bitcoin, altcoins and stablecoins do not generate guaranteed returns on their own. An offer promising a fixed percentage every day, doubling your deposit or providing risk-free income contradicts the way a market exposed to volatility, liquidity and counterparty risks works. References to “AI,” “automated arbitrage,” “guaranteed mining” or “institutional strategy” do not replace documents explaining the actual business. For more local context, also consult BrefCrypto’s pillar guide to crypto in Mauritius.
Ask how the company generates revenue, which product it uses, what risks could lead to a loss and which entity holds the assets. If the answers rely solely on screenshots or testimonials, do not treat them as independent evidence. An interface can display fictitious profits and allow small initial withdrawals to persuade users to increase their deposits.
Recruitment bonuses deserve additional scrutiny. An offer may reward members who invite new people and present that growth as proof of profitability. The question remains: do the funds come from a verifiable business activity or mainly from new deposits? Do not forward a financial invitation to people close to you if you cannot explain it, because you could spread the harm without being the organizer.
Professional language offers no guarantee. Fraudsters use contracts, charts, fictitious executives and fake regulatory logos. Check every element against separate sources: the official register, legal documents, the company’s identity and its institutional contact details. Do not click the link a promoter provides to “prove” that it is licensed; open the regulator’s website yourself.
Second red flag: urgency and isolating the victim
Fraudsters often try to cut short the time available for reflection. “The market closes tonight,” “your withdrawal expires,” “the spot is reserved for only ten minutes” or “your account will be frozen if you do not pay now” are statements designed to limit verification. A legitimate company should be able to explain its product without asking an individual to send money quickly to a stranger.
A contact may ask you not to speak to anyone, to keep a transaction secret or to ignore people around you who “do not understand the technology.” This tactic isolates the victim and prevents an outside perspective from recognizing the warning signs. Show the offer to someone you trust before depositing, without sharing your login details or keys.
Fake advisers may also arrange a video call, share their screen or display a stolen identity. A convincing conversation does not confirm control of the company. Check the email address, domain and phone number using the official website, then call the organization back through its public switchboard. A badge on a messaging service or social profile does not prove that the person represents the provider.
If you are told to convert your savings, take out a loan or sell an asset quickly, end the conversation. A major financial decision should not depend on pressure from a stranger. Consult the FSC Mauritius page on checking licenses and activities, then verify the company in the Commission’s public register.
Third red flag: requests for a secret phrase or remote access
A recovery phrase, private key or authentication code provides critical access to an account or wallet. Never share this information in a chat, an unexpected form or over the phone. Genuine support may ask for a ticket reference or the first public characters of a transaction, but it should not request the information needed to sign a transaction.
Someone claiming to be support may ask you to install a remote-control application, share your screen or click a “synchronization” link. This can allow the fraudster to view data, hijack a session and sometimes get a transfer confirmed. Refuse the request unless it comes through a verified procedure. A professional should never ask you to unlock a wallet and hand over its keys.
Fake apps and cloned wallets pose another risk. Download a wallet from its developer’s website or the official app store, then check the developer’s name. An application can imitate a legitimate service’s logo and send the recovery phrase to the fraudster. BrefCrypto’s guide to crypto wallets, private keys and security practices explains the distinctions needed to reduce this risk.
Fourth red flag: the money is going to an unexpected person or address
Before making a bank transfer, check the beneficiary’s name and whether it matches the platform’s contractual instructions. A seller may legitimately operate under an entity different from its brand, but the discrepancy must be explained and verifiable. A payment to an “agent’s” personal account, a company with no documented connection or a wallet provided in a private message requires an immediate pause.
In P2P transactions, the platform may lock the crypto asset in an escrow system during the exchange. Keep the transaction within the official interface and follow the dispute process. Do not mark a transaction as paid until you have actually made the transfer; do not release the asset solely on the basis of a screenshot sent by the alleged buyer. Check the beneficiary account through your own bank or wallet.
For an on-chain transaction, the address is not the beneficiary’s legal name. An explorer shows public activity, not the certain identity of the person controlling the address. A fake invoice can replace the genuine supplier’s QR code with its own. Confirm the address through a channel you already know and make a small test transfer when the amounts and fees justify it. Confirmed transfers are generally very difficult to reverse.
Terms such as “unlocking fee,” “recovery tax” or “compliance deposit,” used after a withdrawal has been blocked, are major warning signs. Do not transfer another amount to recover the first one without independent written evidence and regulatory verification. Recovery scams often target victims who have already been identified as having lost funds.
How to verify a Mauritian provider without confusing registration with a guarantee
First identify the legal entity named in the product’s terms and conditions. Record its exact name, registration number, registered office and the services it offers. If the company claims to conduct a regulated activity in Mauritius, search for its legal name in the FSC’s official register. Compare the license class and authorized activities, not just the name.
The VAITOS Act covers various virtual asset service provider activities and Initial Token Offering issuers. The FSC explains its licensing and supervision framework. A company registered as a business is not automatically authorized to sell, custody or manage crypto assets for the public. Conversely, the absence of a brand from a register does not by itself establish the status of a different subsidiary or an overseas service: verify the exact entity and seek advice if the situation remains unclear.
Registration in another country does not amount to Mauritian authorization. An app’s availability in an app store proves neither an FSC license nor access to all functions. To compare the points to check before sending rupees, consult the guide on choosing a crypto platform in Mauritius.
Review the contact details for complaints, the withdrawal policy and the refund rules before depositing. A service page that provides no legal name, no verifiable contact address or no complaints procedure does not offer enough information to commit your savings. Be wary of copies of certificates with no link to the authority that allegedly issued them.
Stablecoins and the false sense of security
A stablecoin such as USDT aims to track a reference value, but the token does not become a bank deposit. Its price can move away from parity; users depend on the issuer, network, wallet, exchange and exit liquidity. A scammer may exploit the phrase “digital dollar” to suggest that no loss is possible.
When assessing a stablecoin, distinguish the token on the blockchain from a USD bank account. The provider selling it may not be the issuer, and direct redemption may be subject to conditions that do not apply to exchange users. The guide to USDT in Mauritius outlines the risks linked to the network, issuer and conversion into rupees.
A promise of returns on a stablecoin adds other risks. The service may lend out deposits, place them in a protocol, use them as collateral or depend on a third-party company. Ask where the return comes from and whether the assets are segregated, lent out or locked. If the documents do not answer these questions, do not assume from the token’s stability that the yield-bearing product is also stable.
If you have already sent money
Act quickly, without promising to pay more. Contact your bank or payment provider through the official details on its card or website and ask what measures may still be available. A settled bank transfer or confirmed blockchain transaction cannot always be recalled, but reporting the incident quickly can help document the situation and prevent further payments.
Keep the messages, phone numbers, website addresses, receipts, transfer references, transaction IDs and account names. Export conversations if the platform allows it. Record the timeline factually: initial contact, promise, amount, destination, date and responses received. Do not alter the original files. Do not post your identity documents or bank statements on social media.
Report the offer to the authority responsible for its activity. The joint warning from the Bank of Mauritius and the FSC provides their official contact channels for suspicious investment offers. If the incident involves fraud or impersonation, also contact the relevant police services. An institution may not be able to recover the assets, but reporting documents the scheme and may help prevent further victims.
Ignore unsolicited recovery messages claiming to come from investigators, ethical hackers or exchange employees. Ask how they obtained your contact details and verify any organization through its official website. Do not share a private key or code and do not pay upfront. A service that guarantees the recovery of crypto assets without examining the evidence cannot credibly deliver on that promise.
A simple checklist before every transaction
Before paying, allow at least enough time to verify the legal name, status, recipient, cost, exit liquidity and withdrawal terms. Ask someone close to you to review the offer. If the seller refuses these checks or maintains the urgency, end the transaction. The official warnings from the BoM and FSC stress that unrealistic returns and unusual payments should prompt caution.
Use a modest amount to test a new process, without treating it as complete proof of reliability. Some scams allow an initial small withdrawal to encourage a larger deposit. A successful test only confirms that this transaction went through; it does not show that the company is honest, solvent or authorized.
Keep essential savings separate from funds exposed to risk. Do not finance a position with a loan or money needed for everyday expenses. Enable two-factor authentication, secure your email account and keep backups offline. No measure eliminates every risk, but this preparation often prevents a scam from becoming a larger loss.
The most effective protection begins before the transfer: verify the entity and claimed license, understand the product and know how to exit. As soon as someone demands secrecy, immediate payment or an additional fee to release funds, the right response is to suspend the transaction and contact an institution through a verified channel.
The guide to platforms and their statuses and the feature on exchanges can help you assess the intermediary before making any transfer.
