How to Report a Cryptocurrency Scam: Exchanges, Authorities, and Evidence

How to report a cryptocurrency scam comes down to three actions you should take at the same time: alert the exchange or platform, file reports with law enforcement and regulators, and preserve clean evidence. Do not wait for the scammer to explain a withdrawal delay, tax fee, or account verification charge. That is usually the next stage of the fraud.

Crypto transfers are usually irreversible, but reporting still matters. Centralized exchanges may be able to freeze accounts before funds are cashed out. The FBI Internet Crime Complaint Center, known as IC3, asks the public to report crypto scam attempts even when no money was lost, because transaction details help investigators connect cases across victims, wallets, and platforms.

Who Should You Report a Crypto Scam To?

No single authority handles every part of a crypto scam. Treat reporting as parallel work, not a queue. You need criminal reporting, consumer or market reporting, and platform reporting.

1. Report to law enforcement

In the United States, start with the FBI IC3. Its complaint form asks for wallet addresses, transaction hashes, asset types, amounts, dates, times, platforms used, and details about how you met the scammer. Give them the blockchain data, not just a story.

Also file a report with your local police department or sheriff's office. Even if the scammer is overseas, a local report creates an official record. You may need that report for insurance, business controls, tax documentation, or a later bank review.

If the victim is aged 60 or older in the US, the National Elder Fraud Hotline can help with fraud reporting. This matters because romance scams and long-form investment scams often target older adults.

2. Report to regulators

Use the Federal Trade Commission fraud reporting portal for consumer fraud. If the scam involved a token sale, pooled investment, trading platform, staking product, or promised returns, consider filing with the Securities and Exchange Commission. If derivatives, futures, leveraged commodity products, or commodity-style crypto fraud are involved, the Commodity Futures Trading Commission may be relevant.

State regulators can also matter. California's Department of Financial Protection and Innovation maintains a crypto scam tracker and complaint process for suspected unlawful or deceptive digital financial practices. Other states and countries have their own portals.

3. Report to exchanges, custodians, banks, and payment providers

Contact every platform that touched the funds. That includes the exchange you used to buy crypto, the wallet provider, a custodian, a bank, a card issuer, or a payment processor. Ask them to:

• Freeze or restrict affected accounts if their policy and the law allow it.
• Flag receiving wallet addresses, usernames, domains, or accounts.
• Preserve account logs, IP records, KYC records, withdrawal history, and support tickets.
• Give you a case ID or fraud reference number.

Be realistic. A centralized exchange usually cannot reverse an on-chain transfer after confirmation. But if funds land at an exchange-controlled account, the platform may be able to block a withdrawal or cooperate with law enforcement.

What to Do in the First Hour

Speed matters. Evidence matters more. Do both.

1. Stop sending funds. Do not pay unlock fees, tax deposits, wallet activation charges, or recovery charges.
2. Secure accounts. Change passwords for email, exchange accounts, cloud storage, and messaging apps. Enable app-based multi-factor authentication.
3. Revoke suspicious approvals. If you signed token permissions from a Web3 wallet, check approvals on the relevant chain using trusted tools such as the Etherscan Token Approval Checker for Ethereum.
4. Contact platforms. Open official support tickets through the exchange website or app, not links sent by the scammer.
5. Start an evidence folder. Save screenshots, exports, transaction hashes, and all case numbers.

A practitioner tip: do not confuse an exchange withdrawal ID with an on-chain transaction hash. Investigators need the hash that appears on a block explorer. On Ethereum, if you paste the wrong value into Etherscan, you may see the message Sorry, We are unable to locate this TxnHash. That often means you copied an internal platform reference, used the wrong network, or the transaction has not been broadcast yet.

How to Build a Strong Crypto Scam Evidence Package

A good evidence package is short, structured, and verifiable. Think like an investigator who has never seen your Telegram chat or exchange account.

Core evidence for individuals

• Timeline: List when contact began, when funds were sent, when withdrawal problems started, and when you realized it was a scam.
• Scammer identifiers: Save usernames, email addresses, phone numbers, social handles, websites, app names, referral codes, and wallet addresses.
• Transaction data: Record sending address, receiving address, transaction hash, date, time zone, asset type, amount, and estimated fiat value at the time.
• Network details: Specify Bitcoin, Ethereum mainnet, BNB Smart Chain, Polygon, Tron, Arbitrum, or another network. USDT on Tron is not the same as USDT on Ethereum.
• Platform records: Include exchange account IDs, withdrawal confirmations, deposit pages, order history, and support tickets.
• Communications: Export chats where possible. Screenshots are useful, but original emails with headers and downloadable chat files are better.
• Compromise details: Note if your email, phone, Discord, Telegram, browser wallet, or device was accessed by someone else.

Keep original files. Do not edit screenshots beyond redacting unrelated private data for a copy. If you are reporting to law enforcement, preserve the unedited version too.

Extra evidence for businesses

Companies should add operational and governance detail. Include who approved the transfer, which internal control failed, whether customers or treasury assets were affected, and which vendors or counterparties were involved. For invoice fraud, attach the original invoice, altered payment instructions, email headers, bank rails if any, wallet addresses, and approval logs.

Record every case ID: local police report number, IC3 submission ID, exchange ticket number, bank fraud reference, and regulator complaint number. Put them in one incident document. It sounds basic, but it prevents a messy response when counsel, insurers, auditors, or investigators ask for the timeline.

Reporting Paths for Common Crypto Scams

Investment or pig-butchering scam

You meet someone on a dating app, WhatsApp, LinkedIn, or Telegram. They slowly build trust, show fake profits, and push you toward a trading site or mobile app. Withdrawals later fail unless you pay taxes or fees.

Report to IC3, the FTC, local police, and the exchange used to fund the wallet. If the scheme looked like an investment contract or trading platform, submit to the SEC or CFTC as appropriate. Save the full chat history. In these scams, the conversation often proves intent and pressure tactics.

Fake exchange support or recovery scam

Someone claims they can recover stolen crypto for an upfront fee or remote access to your device. Be blunt: most upfront-fee recovery offers are scams. Report the impersonation to IC3 and the FTC, then alert the real exchange so it can warn users or take down fake domains.

Business vendor-payment scam

A company receives what looks like a legitimate vendor invoice, but the wallet address has been changed. Report immediately to law enforcement, the affected exchange or custodian, and any regulator relevant to your sector. Your internal incident review should also cover email compromise, vendor verification, and payment approval controls.

International Reporting Options

If you are outside the US, report through your national cybercrime or fraud portal. In Canada, the Canadian Anti-Fraud Centre accepts reports through channels connected with the Royal Canadian Mounted Police. In the United Kingdom, Action Fraud is the national fraud and cybercrime reporting center. In the European Union, Europol provides links to national cybercrime reporting bodies.

Cross-border scams are normal in crypto. Do not let that stop you from filing locally. Local reports often become the entry point for international cooperation.

Tax, Legal, and Whistleblower Considerations

US taxpayers should speak with a qualified tax professional before claiming any crypto scam loss. Some losses may be treated as theft losses only if specific conditions are met, including a for-profit motive, illegal conduct under applicable law, no reasonable prospect of recovery, and reasonable reporting steps such as local police and IC3 filings.

If you are not a victim but an insider at a platform, issuer, fund, or financial institution, consider whistleblower channels. The SEC and CFTC accept tips about digital asset misconduct, including unregistered offerings, misuse of customer funds, market manipulation, and false statements. Evidence should be original, non-privileged, and specific: internal messages, account records, offering documents, compliance reports, wallet flows, or customer fund movements.

Practical Skills That Reduce Crypto Scam Risk

If you work in compliance, cybersecurity, development, or digital asset operations, you need more than surface knowledge. Learn how wallets, transactions, custody, smart contracts, and blockchain explorers actually work. Blockchain Council's Certified Cryptocurrency Expert™ (CCE) gives professionals structured crypto knowledge for exactly this kind of work. For teams dealing with wallet infrastructure, smart contracts, or transaction monitoring, the Certified Blockchain Expert™ and security-focused blockchain training are useful next steps.

Your next action is simple: create a one-page incident template before you need it. Include fields for wallet addresses, transaction hashes, network, platform case IDs, police report numbers, screenshots, and timeline notes. If a scam happens, you will not be starting from panic. You will be starting from a process.