Telegram crypto scams: the five setups that take Indian traders

Telegram is not the problem — a great deal of legitimate crypto conversation happens there. The problem is that it is a chat app being used as a settlement layer, and a chat app has no order, no locked asset, no counterparty verification and nothing to dispute.

Every setup below exists to get you from somewhere with those protections to somewhere without them.

1. The better rate, off-platform

Someone approaches you — often inside a genuine trading group, sometimes immediately after you post a real order — and offers a rate noticeably better than the market. The condition is always the same: cancel the order and settle directly.

The tell: the premium is the payment for removing the protections. Nobody pays above market for the privilege of being recorded. Either you send first and receive nothing, or you receive money that is stolen and your account catches a lien weeks later.

2. The support impersonator

You post about a stuck order or a delayed withdrawal in a public group. Within minutes an account with the platform's logo and a near-identical username messages you first, offering to help.

The tell: real support does not DM you first, and never asks for a seed phrase, a password, an OTP or a 'verification deposit' to release funds. Every request of that shape is theft, regardless of how the account is dressed.

3. The managed trading group

A group with a mentor posting daily wins, screenshots of profits, and members thanking them. You deposit into a platform they recommend, the dashboard shows your balance growing, and the numbers are real-looking and completely fabricated.

The tell: the withdrawal. It works for a small amount — that is the hook that funds the story — and then a larger one requires a tax, a fee, or a 'compliance deposit' first. Any system that needs money in before it will let money out is not a system, it is the exit.

4. The task job

Simple paid tasks: rate a hotel, like a video, complete an order. Small payouts arrive promptly. Then the tasks require you to fund a 'merchant order' first, with the promise of the amount plus commission. The funded amounts climb, and one of them does not come back.

The tell: you paying to work. Also worth knowing — some versions of this route money through your own account, which makes you part of the chain. See mule accounts.

5. The impersonated merchant

Someone claims to be a high-volume merchant from a platform you use, shows screenshots of their trade history and completion rate, and asks you to deal with them directly for a better spread.

The tell: a reputation only means something inside the system that recorded it. Screenshots of a rating are not the rating. If the person is genuinely a merchant, they can trade with you inside the platform, where the reputation is real and enforceable.

The single rule underneath all five

What to do if it has already happened

1. 1Report immediately on 1930 or the National Cyber Crime Reporting Portal. If crypto has left an exchange, speed is the only lever you have.
2. 2Preserve everything before you leave the group — usernames, chat exports, wallet addresses, transaction hashes, UPI IDs, phone numbers. People delete the conversation out of embarrassment and destroy their own case.
3. 3Give the platform the addresses. A withdrawal address and hash can sometimes be flagged with exchanges downstream.
4. 4Do not engage a 'recovery agent'. The follow-up approach offering to recover your funds for an upfront fee is the same operation, or one that bought the list.
5. 5Report the accounts to Telegram and through Chakshu on Sanchar Saathi.

The broader catalogue of how these are run against Indian traders is in P2P crypto scams and how they work, and the habits that prevent most of them are in the safe trading checklist.