Crypto trading attracts offers that sound like shortcuts: a paid channel that posts winning calls, a bot that “uses AI” to trade for you, a friendly support agent who appears in your messages minutes after you ask a question in public. Some of these are simply poor products. Others are built to take money or wallet access. The checks below do not depend on spotting one perfect clue. They ask what a claim would need to show if it were true, and they treat any request for secrets or signatures as a hard stop.
How the pitches usually look
Most offers fall into four patterns, and they often appear together.
- Paid signal groups. A channel shares screenshots of profitable trades and sells access to “VIP” calls. The visible history is curated by the seller.
- “AI” trading bots. A service claims an algorithm trades automatically with high returns, sometimes with a dashboard showing a growing balance.
- Fake support. Someone messages you directly, claiming to represent a wallet, exchange or project, and offers to fix a problem.
- Wallet-connection traps. A link asks you to connect a wallet and approve a transaction to “claim”, “verify” or “sync” something.
The general guide to recognizing pressure and manufactured trust explains why scams usually combine urgency, secrecy and borrowed credibility rather than relying on a single trick.
What the CFTC warnings actually say
The CFTC’s customer advisory on AI trading bots says fraudsters use interest in artificial intelligence to promote trading bots and signal services that promise unrealistic or guaranteed returns, and stresses that AI cannot predict the future or sudden market changes. It describes claims of near-perfect win rates and enormous returns, and lists warning signs including promises that no trading experience is needed, referral bonuses for recruiting others, and fake account balances, such as demo accounts presented as real. It also describes a case in which a scheme promising a fixed monthly return operated as a Ponzi scheme, paying earlier participants with newer participants’ money.
Its suggested steps are practical: research the company and the people behind it, use a reverse image search on photos of key personnel, check how long the website’s domain has been registered, get a second opinion from someone you trust, account for fees, spreads and subscription costs, and report suspected fraud to the CFTC.
A separate investor alert on fraudulent digital asset trading websites describes sites that claim to invest customer money in proprietary crypto trading or mining with high returns and little risk. Its red flags include “guaranteed” or “risk-free” returns, jargon about secret technology, unregistered sellers, unsolicited contact, pressure to act immediately and offers that sound too good to be true. It also describes a pattern in which a customer who tries to withdraw is told to pay extra fees, such as purported taxes, first; the alert identifies this as an advance-fee fraud. Requests for a “release fee” before a withdrawal deserve particular suspicion. The romance and investment scam guide covers how fake balances and withdrawal fees are used when the contact begins as a personal relationship.
Fake support and seed-phrase requests
No legitimate support process needs your recovery phrase or private key. Anyone who has those words can control the wallet, so a request for them is a request for the funds. Fake support often arrives by direct message, from an account with a convincing name and logo, sometimes after you posted a question in a public group. A bookmark habit for reaching real support avoids trusting the message at all: go to the provider through a saved address and use its documented support route.
If you need help, you can describe the problem, the network and a transaction signature without sharing anything that authorizes funds. The guide on describing a wallet problem safely shows what to include and what to keep private.
Wallet connections and approval drains
Connecting a wallet to a site is not the same as signing a transaction, but the signature that follows can grant broad permissions. A token approval may let a program or contract move a token from your account later, and disconnecting the website does not necessarily remove that permission. Read what an approval actually authorizes before signing anything a signal group or “support agent” sends you. If you already signed something you do not understand, the steps after a suspected compromise separate a harmless connection, a harmful approval and an exposed key, because each needs a different response.
What verifiable evidence would look like
A screenshot of a winning trade proves only that someone produced a screenshot. A track record worth considering would include every call, published with a timestamp before the outcome, in a place the seller cannot quietly edit. Each entry would state the instrument, direction, entry rule, exit rule and size. Losing trades, skipped calls and deleted posts would remain visible. Results would include fees, spreads, funding where relevant and the subscription price, and would be compared with a simple benchmark.
Win rate alone can mislead. Consider a fictional channel advertising an 87% win rate:
| Fictional record | Calls | Average result per call | Sum |
|---|---|---|---|
| Winners | 26 | +1.5% | +39.0% |
| Losers | 4 | −12.0% | −48.0% |
| Assumed costs (0.1% per round trip) | 30 | −0.1% | −3.0% |
| Total (simple sum, no compounding) | 30 | −12.0% |
The headline is accurate and the record still loses money in this example. The same sorting logic sits behind the SuperQuant guide to verifying AI-generated trading claims: identify the type of claim, find the source that could support it, check it independently, and accept it only within that source’s scope. The questions in the copy-trading track record review apply to signal sellers as well.
A red-flag checklist to run first
Stop and check before paying, connecting or replying if any of these appear:
- Guaranteed, “risk-free” or unusually high fixed returns.
- Win-rate or profit screenshots without a complete, timestamped record.
- Claims of secret AI or proprietary technology with no testable detail.
- Unsolicited contact, especially a direct message after a public question.
- Any request for a recovery phrase, private key or remote access to your device.
- A link that asks for a wallet connection and approval to “verify”, “sync” or “claim”.
- Fees, taxes or deposits demanded before a withdrawal can be released.
- Referral payments for recruiting other people.
- Pressure to act now, or to keep the opportunity secret.
Urgency is the common thread. If a missed call or a fast-moving chart is pushing you toward a decision, the pause-and-review routine is a reasonable place to start. SuperQuant is a research tool: its included examples use synthetic hourly data, it does not place live orders, and its outputs are not a verified trading record or a signal service.
Keep learning
The security topic hub gathers the phishing, approval and recovery guides in one place. For a disciplined way to check any bot alert before acting on it, see the SuperQuant signal-bot planning workflow. This is educational research context, not investment advice.