Impersonation Scams on Social Media and Telegram

Crypto impersonation scams copy founders, admins, exchanges and even police on social media and Telegram. Learn to verify an account and what to do if fooled.

Who crypto scammers impersonate

An impersonation scam borrows someone else’s trust. The scammer copies a name, a photo and a tone of voice, then uses them to ask for something the real person never would. In crypto, the most common disguises look like this:

The scale keeps growing. People told the FTC they lost $2.1 billion to scams that started on social media in 2025, about eight times the $261 million reported in 2020, and nearly 30% of people who reported losing money said the scam began there.

Impersonation of businesses and agencies was already costly before that: in 2023, people filed more than 330,000 business impersonation reports and nearly 160,000 government impersonation reports with the FTC, with losses topping $1.1 billion. Official disguises remain especially expensive. From January 2025 to July 2026, the FBI received nearly 61,000 complaints about scammers posing as law enforcement and government officials, with over $1.6 billion in losses, more than $26,000 per complaint on average.

How impersonators make a copy look real

Copied display names. On messaging apps such as Telegram, anyone can set the same display name and profile photo as a real admin. Only the username is unique, and scammers pick lookalikes with a swapped letter or an extra underscore.

Cloned groups. A fake group copies the real group’s name, pinned messages and rules. A “verification bot” then asks new members to connect a wallet or paste a recovery phrase to prove they are human.

Hacked real accounts. When a friend’s or a project’s account is taken over, the history is genuine and only the person is fake. The FBI notes criminals gain direct access to developers’ accounts or create almost identical ones, then post urgent, “surprise” opportunities.

Borrowed authority. Fake officials use spoofed numbers, urgent tones and threats of arrest. The FBI has even warned of scammers impersonating its own IC3 complaint center, including fake websites and deepfake videos of FBI officials.

What the first message usually looks like

Impersonation scams tend to open with a small number of scripts. Each one has a tell you can spot before you reply:

The FBI’s rule for the third script applies broadly: “Law enforcement and government authorities will never contact members of the public by telephone or text message to demand any form of payment or to request personal or sensitive information.”

How to verify an account in two minutes

Use one decision rule: find the account through the official website, never the website through the account. Then run through these checks:

1. Start from a typed address. Open the project’s or company’s website yourself and follow its links to its social accounts and groups.
2. Compare the handle character by character. The FBI also advises checking spelling, history, screen name, followers and creation date.
3. Check the group’s own admin list. If the person messaging you isn’t on it, or differs by one character, it isn’t them.
4. Confirm through a second channel. Call a friend on a number you already have. For an agency, use the contact details on its official website, not the ones the caller gives you.
5. Treat any request as the answer. A request for a recovery phrase, login codes, payment or a wallet connection proves the impersonation. Never share your recovery phrase with anyone.

Common mistakes that make impersonation work

• Trusting a badge. On several platforms, verification marks can be bought, and a hacked account keeps its badge.
• Trusting follower counts. Followers can be purchased, and a hijacked account keeps its audience.
• Asking for help in public. A public question about a stuck withdrawal is a signal that fake “support” accounts watch for, and replies arrive within minutes.
• Moving to another app on request. Leaving the official channel removes the moderation, logs and reporting tools that protect you.

Celebrity disguises usually lead to crypto giveaway scams, while a trusted contact who slowly steers you toward a trading platform is the pattern behind pig butchering scams.

What to do if an impersonator fooled you

1. Stop replying and don’t pay to fix it. Fees to “unfreeze,” “verify” or “release” anything are part of the scam.
2. Secure what you exposed. If you shared a recovery phrase, follow our steps for a compromised crypto wallet and move remaining funds to a new wallet. If you shared login codes, reset your password and two-factor authentication from the official app.
3. Recover your own account if it was used. Use the platform’s official recovery process, then warn your contacts that messages sent in your name were fake.
4. Report the account and the loss. Report the impersonating profile to the platform. In the US, file with the FBI at ic3.gov and the FTC at ReportFraud.ftc.gov; the IC3 says it will never contact you directly or charge a fee to recover funds. Our guide on how to report a crypto scam covers the UK, EU and other regions.

The bottom line

Impersonators can copy a name, a photo and even a face, but they can’t copy an account’s place on the official website or its history. Verify every account from the official source outward, and treat any unprompted message asking for your phrase, codes, money or a wallet connection as fake. For the full set of warning signs, see how to spot a crypto scam.

This content is for education only and is not financial, investment, tax or legal advice. Crypto assets are volatile and you can lose money. Examples use hypothetical numbers. See our disclaimer and editorial policy.