Crypto scams rarely sell a simple token. More often, they sell urgency, the promise of returns or the certainty that an “expert” can recover lost money. In Egypt, these tactics intersect with a strict regulatory framework: the Central Bank has warned against platforms claiming to invest the public’s money in cryptocurrencies and has highlighted the risk of fraud.
The best response is to slow down before sending money or sharing data. A blockchain address, an available application or a verified social media account proves neither an interlocutor’s identity nor their legal status. This guide helps readers recognize warning signs, protect their accounts and document an incident without promising recovery.
In brief
- Guaranteed returns, urgent requests, fake receipts and demands for a recovery phrase indicate a high risk of fraud.
- A confirmed blockchain transfer generally cannot be reversed like a bank transfer; speed of response and evidence matter.
- In Egypt, the CBE’s official warning and Article 206 of Law 194/2020 call for additional legal caution.
Return promises often conceal the real mechanism
A fraudulent offer may present itself as a trading bot, investment group, guaranteed fund, airdrop or mining program. The complete guide to crypto in Egypt outlines the regulatory context that makes claims about local services particularly important to verify. Scammers may display screenshots of profits, fake dashboards and testimonials from paid participants. A balance shown in an interface created by the scammer is not proof that funds are held on a genuine platform.
Promises of “fixed,” “risk-free” or “guaranteed daily” returns do not reflect how a volatile asset works. A legitimate operator should explain the risks, fees, strategy, custody arrangements and limitations. An offer that blocks withdrawals until the user pays a tax, commission or additional deposit indicates a lock-in scheme, not a normal recovery process.
A pyramid scheme may pay early participants with money from new ones. Organizers use word of mouth to make the system appear credible, then encourage each member to recruit friends and family. Initial payments do not prove that the activity creates value or that funds remain available. Users should verify the flows, company, product and relevant authorities rather than relying on private recommendations.
The Central Bank of Egypt published an official warning about fraudulent crypto platforms. At the time, it referred to a platform that claimed to invest funds in crypto activities and highlighted the risk of fraud. The statement is dated March 8, 2023. It documents the CBE’s warning and position at that time, but does not replace a review of more recent official announcements.
Article 206 of Law 194/2020 establishes a licensing framework for several crypto-related activities. A company that claims to “work with a bank” or be “registered abroad” should provide verifiable evidence and clarify the scope of its authorizations. The existence of a website or local group is not enough to certify an operator.
Fake support, fake airdrops and identity theft
After an initial loss, victims can become targets of a second scam. A fake agent claims to know the case, promises to recover the assets or says they represent an on-chain analytics firm. They then request an upfront payment, recovery phrase, private key or installation of a remote-control tool. No legitimate service can safely recover a secret key that a user hands over.
Fake airdrops sometimes ask users to connect a wallet to a site resembling a well-known brand. A signature may authorize a spend or expose assets. A credible giveaway should never require the sharing of a recovery phrase. Check the exact domain, announcements on official channels and the permissions requested by the wallet before interacting.
Social media accounts can be copied or compromised. A verification badge, a high follower count or a video screenshot does not prove that the person writing actually controls the brand. Scammers imitate known profiles, add a letter to a domain name and reproduce the same colors. Find the website address and official contact details yourself instead of clicking the link in the message.
A fake adviser may request an identity document to “unlock an account.” Collecting such documents creates a long-term risk: the scammer may reuse them to open an account, steal an identity or persuade another victim. BrefCrypto’s guide to KYC and personal data explains how to verify the entity collecting the information, its purpose and its secure channel.
Scammers also exploit notifications. They send an SMS impersonating a bank, platform or mobile operator and request a one-time code. That code may allow them to log in, reset a password or authorize a transaction. Official support should never ask users to share a confidential code through chat.
P2P creates payment and identity-related fraud risks
On a peer-to-peer marketplace, the buyer and seller may use a bank payment outside the blockchain. Triangulation risk arises when a scammer uses a victim’s account to pay a seller, then receives the cryptoassets at another address. The seller may be left with a disputed transfer while the assets have been sent to someone else.
A fake receipt or transfer screenshot may persuade a seller to release an asset before the payment has actually cleared. The payer’s account name may not match the profile identity. A request to refund money to a third party may also conceal fraud. Keep the original references and contact the bank rather than trusting a message forwarded by the counterparty.
Escrow mechanisms protect part of a transaction, but they do not guarantee finality for fiat payments. A platform may resolve an internal dispute without controlling the bank’s decision. A high rating or identity verification does not guarantee the origin of funds or local legal compliance. Our guide to platforms and their criteria in Africa explains these differences.
In Egypt, a payment through a bank network or mobile wallet does not mean that a crypto activity has been authorized by the CBE. The Central Bank’s warning and Article 206 must be considered separately from the technical mechanisms of a marketplace. For specific compliance questions, users should seek advice from a local lawyer rather than rely on a seller’s assurances.
Do not share more data than necessary. A buyer does not need to know a wallet’s recovery phrase. A seller should not ask for a video of a bank account or secret codes. Finally, a document sent through private messaging can be downloaded, altered and republished.
Protect accounts before an attack succeeds
Use unique passwords and enable two-factor authentication where available. A physical security key limits some phishing attacks, while an authenticator app avoids part of the risk associated with SMS. Users should nevertheless keep recovery codes offline, in a place that remains accessible if their phone fails.
Check links in the address bar. A fake domain may differ by one character, add a subdomain or use similar-looking characters. Open a site by typing its official address or using a bookmark created earlier. Avoid links shared in public groups, especially when they promise to double a deposit or recover a transaction.
Personal wallets require careful backups. A recovery phrase stored in the cloud, in a photo or in an email remains exposed if the account is compromised. Our wallet security guide explains the difference between self-custody and custody by a platform. No solution eliminates every risk: the first requires responsibility for backups, while the second requires trust in the operator.
Separate devices and accounts when significant sums are involved. A computer where pirated software circulates, a shared phone or a browser loaded with unknown extensions increases the attack surface. Install applications from official stores or domains, keep the system up to date and remove extensions whose origin you do not know.
Caution also applies to smart contracts. Before signing one, check the requested permissions and revoke outdated approvals through reliable tools. A signature is not merely a “login”: it may authorize a transaction or access to assets. Do not sign an unreadable message simply because an adviser demands it.
Document an incident without destroying useful evidence
If fraud appears to be underway, stop communicating and do not pay additional fees. Keep messages, full URLs, account names, email addresses, phone numbers, receipts, transfer references and blockchain addresses. Record dates and time zones. Take screenshots without altering the originals and save the files in a secure location.
Separate facts from interpretations. A blockchain address shows movements associated with that address; it does not automatically identify the person controlling it. A social media account may be impersonated. A name displayed on a receipt may not match the bank account holder. Evidence should be described along with its limitations so that a bank, platform or authority can assess it correctly.
Contact the financial institution that processed the payment promptly through its application or official phone number. Ask about reporting procedures, dispute options and a case number. If a crypto account has been compromised, use the platform’s official support and change credentials from a clean device. Never send private keys or authentication codes to support staff.
Scams that may violate the law should be reported to the competent authorities in Egypt. Check procedures through government websites or with a local lawyer, as contact details and forms may change. Do not send documents to an account found in a conversation, and do not pay a “private investigator” who guarantees recovery.
If a secret key has been disclosed, consider the corresponding assets exposed. Do not enter the same phrase into an unknown tool. Seek independent assistance and verify each step against a reliable source. Changing a password does not protect a wallet whose key has already left the device.
Assess a platform and its promises before making a deposit
A serious operator identifies its contracting entity, terms, fees, custody arrangements, limits and complaint procedures. It explains the risks without promising returns. Users should be able to find these details on the official domain, dated recently, and compare them with information published by regulators.
A company’s status abroad does not prove that it is authorized in every country. A corporate registry is not a crypto exchange license. A code audit does not prove solvency, the team’s identity or the existence of legal recourse in Egypt. Affiliate advertising may pay the person publishing it; it should not be the sole source of verification.
An application may operate normally and then suspend a feature. The terms of a centralized service may provide for checks, temporary freezes or document requests. Self-custody provides technical control, but it does not give users the power to recover a fiat payment or bypass the law. Users must know which entity is responsible at each stage.
Readers should check the law, provider, payment, custody and avenues of recourse as five separate issues. This does not guarantee the absence of fraud, but it makes unverifiable promises easier to identify. In Egypt, the Central Bank’s warning calls for heightened caution; no advertisement should erase that context.
When a loss occurs, acting quickly, preserving evidence and contacting official providers is more useful than paying a stranger for miraculous recovery. The blockchain documents certain movements, but it does not replace authorities, legal assistance or the protections of a payment system. The first line of defense remains never sharing the secrets that provide access to assets.
