Eight crypto scams that defined a decade
Roughly $10 billion disappeared into eight schemes we've documented on the Kunch blacklist. The technology in each story changes; the psychology never does. Learn the patterns once and you'll spot every descendant instantly.

Scams in crypto aren't clever so much as they are repetitive. Regulators' press releases read like form letters because the underlying cons are form letters. Below are the eight operations that shaped the last decade's fraud landscape, all documented with sources on our blacklist page. Study them as case studies, not horror stories — every one of them was invisible to nobody; people simply didn't know what to look at.
BitConnect — the lending bot that didn't exist
BitConnect promised roughly 1% daily returns from a "volatility trading bot", paid in its own BCC token, and structured referrals like an MLM. Early payouts came entirely from later deposits — textbook Ponzi mechanics — and when US states started issuing cease-and-desist orders in late 2017, the exchange shut down within weeks, erasing about $2.4 billion in token value. Promoter Glenn Arcaro later paid $24 million to settle with the SEC; founder Satish Kumbhani was indicted. The lesson survives in every "AI trading yield" pitch today: a return schedule that smooth is not trading, it's a payment order.
OneCoin — the coin with no blockchain
OneCoin sold itself as "the Bitcoin killer" through multi-level marketing networks across 175 countries. There was just one missing ingredient: a blockchain. Balances lived in an internal database that the operators controlled entirely, which is why the "coin" was never tradable anywhere else. The scheme took in an estimated €4 billion before collapsing, and founder Ruja Ignatova — the "Cryptoqueen" — vanished in 2017 and now sits on the FBI's Ten Most Wanted list. When you can't deposit, withdraw, or trade an asset on any independent venue, you don't own an asset. You own a database row, and databases get edited.
PlusToken — the wallet that paid you to park coins
PlusToken was a mobile wallet offering 10–30% annual "smart-contract" returns. Over two million people parked more than $2 billion in crypto with it. Withdrawals froze in June 2019 and operators fled; Chinese courts eventually sentenced 27 members to prison. PlusToken matters because it was the first mega-Ponzi disguised as infrastructure — not a coin, not an exchange, but the wallet itself. The modern descendants are "staking" apps promising fixed yields with no disclosed strategy, and custodial wallets that pay you to hold.
Forsage — the pyramid wearing source code
Forsage deployed a smart contract to Ethereum and Tron and called itself "the first decentralized program". The contract's slot matrices paid members entirely from new members' buy-ins — decentralization changed nothing about the arithmetic. The SEC charged eleven promoters in August 2022 and the DOJ indicted the four founders, estimating over $340 million collected from millions of retail investors. Code being on-chain doesn't sanitize its economics. If the money in equals the money out plus a recruiting graph, the blockchain is just an auditable Ponzi ledger.
MTI — fake trading, real billions
South Africa's Mirror Trading International claimed to automatically mirror professional bitcoin traders. The CFTC alleged there was no genuine trading at all — at least 29,421 bitcoin (about $1.7 billion at the time) from 23,000+ members went into an unregistered pool run by CEO Cornelius Johannes Steynberg, who was arrested in Brazil in 2022. MTI is the cleanest modern example of the "managed account" con: unverifiable performance screenshots, effortless monthly returns, and a withdrawal window that quietly becomes a queue.
Squid & AnubisDAO — the rug pull era
By 2021 the exit had industrialized. The Squid Game token rose thousands of percent on a Netflix brand it had no license to use, hardcoded so holders could buy but never sell; developers drained roughly $3.3 million and vanished (the BBC documented the collapse). Weeks earlier, AnubisDAO had raised about $58–60 million for an NFT project that never produced a product — the funds left the treasury within hours of the sale, the second-biggest rug pull of the year per Chainalysis. Both cases share the same fingerprint: anonymous teams, liquidity you can't verify, and mechanics that treat your deposit as theirs.
The fake-bot hydra — Bitcoin Loophole & friends
Bitcoin Loophole, Immediate Edge, Bitcoin Evolution — a rotating family of "guaranteed profit" trading-bot sites with fake celebrity endorsements, including deepfaked videos, and a $250 deposit that funnels to unregulated brokers. Regulators like the UK's FCA maintain standing warning lists because the domains multiply weekly: shut one down and three appear. The brand is the scam; the URL is disposable. Any platform promising guaranteed returns with zero risk, fronted by a billionaire who has never mentioned crypto, is this family — whatever the current domain says.
The five tricks they all share
Across eight schemes and a decade, the machinery repeats with remarkable discipline:
- Guaranteed or implausibly smooth returns. Real markets draw down; Ponzis pay on schedule — until they don't pay at all.
- Opaque mechanics. A "proprietary bot", a database instead of a blockchain, screenshots instead of audited accounts. Complexity as a place to hide.
- Recruiting as income. Referral ladders convert victims into salespeople, which is both the growth engine and the psychological lock-in.
- Withdrawal theater. Small withdrawals work early (your money, returned as "profits"); large ones stall, trigger "fees", or freeze entirely.
- Authority cosplay. Fake endorsements, fabricated licenses, logos borrowed from real regulators. Check the register, not the footer.
None of this requires technical sophistication to detect — only the habit of asking where returns actually come from. We maintain the blacklist so you can check a specific name in seconds, and the Kunch API so platforms can check it automatically. If you're verifying a website you've never used before, pair those with the inspection routine in how to spot a fake crypto website.
Every one of these schemes was "working" right up until the day it wasn't. The tell was never the returns — it was that nobody could explain where the returns came from.
All eight operations, with sources from regulators and newsrooms, live on the Kunch blacklist. Found something new? Report it — every report gets reviewed by a researcher.