27 September 2023

Crypto scams will increase over the holidays

Start the conversation

Ashish Nanda, Jeb Webb, Jongkil Jay Jeong, Mohammad Reza Nosouhi and Syed Wajid Ali Shah* discuss what people should do to ensure they don’t fall victim.


Each year, as the festive season arrives, we must also keep an eye out for potential scammers trying to ruin the fun.

This is because scammers become more active during the holidays, targeting us while we have our guard down.

So far in 2022, Australians have lost around half a billion dollars to scams, which is already significantly more than had been lost by this time last year.

The majority of these losses – around $300 million – have involved investment or cryptocurrency scams.

Researchers from Deakin University’s Centre for Cyber Security Research and Innovation had a opportunity to interview recent victims of these scams.

Here is what we found.

Anyone can fall for a scam

I was shocked and could not accept that this happened to me although I was very careful […] I was numb for a couple of minutes as it was a large amount of money.

– (26-year-old female office manager from South Australia)

These scams have become highly sophisticated and criminals have become less discriminating about whom they target.

This is reflected in recent victim demographics, showing a wide variety of backgrounds, a more even distribution across several age groups, and an almost even split on gender.

So, how can you spot these scams and where can you get help if you have fallen victim?

If it sounds too good to be true, it might just be a scam

I was dumbfounded, to say that ground shattered under my feet would be an understatement, it will take me a very long time to recover from it, financially and mentally.

– (36-year-old female, legal practitioner from Victoria)

Most crypto scams involve getting the victim to buy and send cryptocurrency to the perpetrator’s account for what appears to be a legitimate investment opportunity.

Cryptocurrency is the currency of choice for this type of crime, because it’s unregulated, untraceable and transactions cannot be reversed.

Victims of such scams are targeted using a number of different methods, which include:

Investment scams

Scammers pretend to be investment managers claiming high returns on crypto investments.

They get the victim to transfer over funds and escape with them.

“Pump and dump”

Scammers usually hype up a new cryptocurrency or an NFT project and artificially increase its value.

Once enough victims invest, the scammers sell their stake, leaving the victims with worthless cryptocurrency or NFT.

Romance scams

Involves scammers using dating platforms, social media or direct messaging to engage with you, gain your trust and pitch an amazing investment opportunity promising high returns, or ask for cryptocurrency to cover medical or travel expenses.

Phishing scams

An old but still effective scam involving malicious emails or messages with links to fake websites promising huge returns on investment or just outright stealing credentials to access users’ digital currency wallets.

Ponzi schemes

A type of investment scam where the scammers use cryptocurrency gathered from multiple victims to repay high interest to some of them; when victims invest more funds, the scammers escape with all the investments.

Mining scams

Scammers try and convince victims to buy cryptocurrency to use in mining more of it, while in reality there is no mining happening – the scammers just make transfers that look like returns on the investment.

Over time, the victim invests more, and the scammers keep taking it all.

Although methods evolve and change, the telltale signs of a potential scam remain relatively similar:

  • very high returns with promises of little or no risk
  • proprietary or secretive strategies to gain an advantage
  • lack of liquidity, requiring a minimum accumulation amount before funds are released.

*Ashish Nanda, CyberCRC Research Fellow, Jeb Webb, Senior Research Fellow, Jongkil Jay Jeong, CyberCRC Senior Research Fellow, Mohammad Reza Nosouhi, and Syed Wajid Ali Shah, CSCRC Research Fellow at the Centre for Cyber Security Research and Innovation, Deakin University.

This article first appeared at theconversation.com.

Start the conversation

Be among the first to get all the Public Sector and Defence news and views that matter.

Subscribe now and receive the latest news, delivered free to your inbox.

By submitting your email address you are agreeing to Region Group's terms and conditions and privacy policy.