Social engineering
Social engineering is a con where the scammer does not hack a system but persuades you to hand over access, money or data yourself, playing on trust, fear or greed.
How it works
Breaking into a well-set-up wallet is nearly impossible, so scammers go after the person. They pose as exchange support, a friend, a bank employee, a project developer or even the police. The goal is for you to share a code or seed phrase, sign a transaction or send money yourself.
These schemes run on emotion. Urgency: "your account will be locked in 15 minutes." Fear: "money is being withdrawn from your account." Greed: "we will double your deposit." Authority: "I am from the security team." When you are rushed and anxious, you stop checking.
Phishing, SIM swaps and romance scams are all forms of social engineering. In crypto it is especially dangerous because transfers are final and a support agent in a messenger can look very convincing. The best defence is a few hard rules you never break, whatever the story.
A "support manager" with the exchange's logo messages you on Telegram: "Your account received a complaint. To verify, send 1,000 USDT to a secure address and we will return it in an hour." Real support never asks you to move funds and does not DM you first. You close the chat and log in to the exchange yourself by typing the address.
The most common mistake is thinking "this won't happen to me" and engaging to figure things out. Scammers are skilled at steering conversations. Keep simple rules: never share your seed phrase or codes, never send money "for verification", never install software at a stranger's request, and check any story through an official channel you found yourself.
Questions and answers
What is social engineering in simple terms?
It is being tricked into handing over money or access yourself. The target is your trust, not your computer.
What are common social engineering scams in crypto?
Fake support in messengers, giveaways from famous people, phishing sites, romance contacts pushing investments, and calls supposedly from a bank or the police.
How can I spot social engineering?
Warning signs: you are rushed, scared or promised easy profit, and asked for codes, your seed phrase, remote access or a transfer to a "safe account". At that moment, stop and verify everything yourself.
Related terms
Read next
Six settings that close the most common ways exchange accounts get taken over. It takes about half an hour.
Read →How to store your seed phrase and keys: a simple schemeYour seed phrase gives full access to a wallet. Where to keep it and what never to do.
Read →Token approvalA token approval is a transaction that lets a smart contract spend your tokens. Until you revoke it, the contract can…
Updated: 2026-10-19