Withdrawals are one of the most vulnerable points for crypto users. Scammers know that once they trick you into sending funds out of an exchange or wallet, the money is gone forever. Crypto transactions are irreversible, so there’s no chargeback and no customer support to call.
Withdrawal scams come in many forms, but they all have the same goal: tricking you into sending your crypto to the scammer’s address. In this guide, we break down the most common withdrawal scams and exactly how to protect yourself.
For related account and wallet safeguards, read Common Crypto Phishing Scams: How to Spot Fake Sites, Messages, and Fake Support Teams and Crypto 2FA Guide: Authenticator Apps, Hardware Keys, and Common Authentication Mistakes.
The Most Common Withdrawal Scams
1. Fake Support Scams
This is the most common withdrawal scam. Scammers pretend to be exchange support staff on Twitter, Discord, Telegram, or email. They reach out saying your account has a problem, is frozen, or is at risk.
They’ll tell you to fix it you need to withdraw your funds to a “secure wallet” or “validation address.” Of course, the address belongs to them. Once you send it, it’s gone.
How to spot it:
- Support will never DM you first.
- No legitimate support will ever ask you to withdraw funds to a different address for security reasons.
- Real support only communicates through official channels on the platform’s website or app.
2. Phishing Withdrawal Confirmation Emails
You get an official-looking email saying a withdrawal has been initiated from your account. It says if you didn’t make it, click a link to cancel it.
The link goes to a fake login page that looks exactly like your exchange. If you enter your credentials, the scammer steals them and then withdraws all your funds.
How to spot it:
- Never click links in emails about withdrawals.
- Always go directly to the exchange yourself to check.
3. Address Poisoning Scams
This is a newer, more sophisticated scam. Scammers watch the blockchain for transactions from your address. Then they send you a tiny amount of crypto from an address that looks almost identical to an address you regularly send to.
The fake address shows up in your recent transactions list. If you copy it for your next withdrawal, you send your money to the scammer.
How to spot it:
- Always double-check full wallet addresses, not just the first and last few characters.
- Never copy addresses from your transaction history.
- Save addresses in your address book and verify them carefully when you add them.
4. Fake Airdrop and “Verify” Scams
You get a message saying you’re eligible for a free airdrop or token claim. To claim it, you need to withdraw or send a small amount to “verify” your wallet.
It’s always a scam. You’ll never need to send money to receive an airdrop.
How to Protect Yourself From Withdrawal Scams
1. Enable Withdrawal Whitelists
This is the single most effective protection. If your exchange offers withdrawal whitelisting, turn it on. Once enabled, funds can only go to addresses you’ve pre-approved.
Even if someone steals your login credentials, they can’t send money anywhere else.
2. Always Verify Addresses Twice
Every time you withdraw to a new address:
- Paste the address and check every character.
- Cross-verify the address from a second source.
- Send a tiny test amount first, wait for it to arrive, then send the rest.
3. Use Official Channels Only
- Only use support from within the exchange’s official website or app.
- Never click links in emails, DMs, or social media messages.
- Ignore anyone who messages you first offering support.
4. Take Your Time
Scammers always pressure you to act immediately. They say your account is at risk, or the offer expires in 5 minutes. They want you to act before you think.
If anyone is pressuring you to withdraw or send crypto immediately, it’s 100% a scam. Stop, take a breath, and verify.
Platform Security Features Help
Good exchanges build security features directly into the platform to prevent withdrawal fraud. This includes things like withdrawal whitelists, email confirmations, device verification, and fraud detection algorithms.
Leading platforms continuously improve these systems as part of broader security and service upgrades. For instance, DEXORIN’s 2026 service system enhancements include upgraded fraud monitoring and withdrawal security controls to better protect users.
Final Thoughts
Withdrawal scams work because they exploit urgency, trust, and inattention. But they’re almost entirely preventable with basic habits and security tools.
The most important rule: if something feels off, stop. Don’t rush. Double-check everything. Take your time. That caution alone will prevent 99% of withdrawal scams.