Crypto Scams That Target Muslims, and How They Work

We Muslims trust each other. When a brother from the masjid says he's found something halal, we believe him. When a respected uncle in the family WhatsApp group says a scheme has paid him every month, we listen. That trust is one of the most beautiful things about our Ummah.

And scammers know it.

The crypto scams that hurt Muslims most aren't clever hacks. They're built on our trust in each other, on our wish to keep our money halal, and on our hope of finding something better for our families than the riba system. They look religious, they quote a hadith, and they show you a Shariah certificate.

The numbers are huge. In 2025 Americans alone reported losing $11.37 billion to crypto fraud, more than to any other kind of internet crime in the FBI's annual report, and crypto investment scams took $7.2 billion of that. Those are only the people who filed a complaint, in one country.

Here are the ones that catch Muslims most often, how each one actually works, and the single question that stops most of them.

The halal certificate

OneCoin was one of the biggest frauds in crypto's history. Its founder, Ruja Ignatova, vanished in 2017 and is still on the FBI's most-wanted list. One of its tools for selling to Muslims was a Shariah certificate from the Al-Huda Centre of Islamic Banking and Economics in Pakistan.

Al-Huda had certified one product, called CoinSafe, and nothing else. OneCoin presented it as approval of the whole scheme. Al-Huda withdrew even that certificate in November 2016 and said publicly that it had never certified OneCoin. In Bradford, Mufti Amjad Mohammed examined the certificate, found no research behind it, and issued a fatwa telling Muslims not to invest. By then families in Pakistan and Britain had already recruited each other in.

The certificate did its job. It switched off the part of the buyer's mind that would have asked questions.

Read what a certificate actually covers, who issued it and when. Then look at the coin itself: our screening list shows the reasoning behind every verdict, so you can check it rather than trust it. A coin sold to you mainly on the word "halal" deserves more suspicion, not less, and that goes double for presales.

The brother in the group

It usually starts in a WhatsApp or Telegram group. Someone respected, often someone you know from the masjid, has found a trading program or a "halal investment pool". It pays a fixed 5% or 10% a month. He's been in for three months and he's been paid every time.

He's probably telling the truth. Early investors in a Ponzi scheme do get paid, with the money of whoever joins after them. That's how the scheme recruits.

Two things should stop you before you look at a single detail. A guaranteed monthly return on money you hand over is the shape of riba, whatever name the scheme gives it; a real halal investment shares profit and loss and can't promise you a number. And ask where the profit comes from. If the answer is "trading", "arbitrage", "mining" or "AI", and nobody can show you the trades, you have your answer.

The new friend with the trading app

This is the one the FBI counts in billions. A stranger messages you, often by "wrong number" or through a dating or social app. Weeks of friendly chat follow. Eventually they mention how well they're doing on a platform, and show you. You try it with a little and the balance grows. You add more. When you try to withdraw, there's a "tax" or "release fee" to pay first.

The platform was never real. The numbers on the screen were typed by the scammer.

Any investment introduced to you by someone you've never met in person is a scam until proven otherwise. And you won't be able to prove otherwise.

Fake support, fake apps, fake devices

Real support will never ask for your seed phrase. Not Ledger, not Trezor, not Binance, not us. Anyone who asks is stealing.

It comes in many costumes: a "support agent" who replies to your complaint on X within minutes; a pop-up saying your wallet needs "validating"; a fake wallet app in the store with glowing reviews; a letter in the post, on official-looking paper, saying your device must be replaced. That last one is real. In 2021, after Ledger's customer list leaked, fake Ledger devices were posted to customers' homes.

In October 2026 it reached the device itself. Ledger confirmed that some units sold through a reseller carried a hidden chip that read the recovery words during setup and sent them to the thieves. Buy from the maker. If the box contains words already printed on a card, it's a theft in progress. Safe setup, step by step, is in How to Self-Custody Bitcoin.

The poisoned address

You send to the same address often, so you copy it from your transaction history. The scammer has already sent you a tiny worthless payment from an address that starts and ends with the same characters as the one you use. You copy the wrong one.

In May 2024 one person sent $68 million in wrapped Bitcoin this way. They got almost all of it back after the thief, under public pressure, returned it. That almost never happens.

Check the whole address, not just the first and last four characters. Better still, keep your own saved copy of addresses you use regularly and never copy from history.

The approval you didn't read

On Ethereum and similar networks, a website can ask you to "approve" a token so it can move it for you. Drainer kits dress this up as a mint, an airdrop claim or a simple login. You sign, and the site empties every token you approved.

Bitcoin doesn't work this way, which is one quiet advantage of keeping your savings in it. Everywhere else, read each signature request, and if you can't tell what it does, don't sign.

The recovery scam

This is the cruellest one, because it only targets people who've already been robbed. You post about your loss. Within hours someone offers to get it back: a "blockchain investigator", a "white-hat hacker", sometimes a fake law firm or a fake police unit. They need a fee first.

Nobody can reverse a Bitcoin transaction. Real investigators and real police don't cold-message victims asking for money. Whoever does is running the second scam.

The giveaway, the famous face, the cloud miner

Send 0.1 BTC, get 0.2 back. It has run since 2018 with Elon Musk's face on it, and now with AI-generated video of almost anyone, including well-known scholars and preachers. The FBI's 2025 report logged more than 22,000 complaints involving AI, with losses above $893 million.

Cloud mining sells you a share of machines you'll never see, paying "daily returns". We cover whether cloud mining is halal separately; most contracts fail on gharar long before they're exposed as frauds. And the paid signal group with a perfect record? Here's why signals fail, even the honest ones.

The scam that comes to your door

Physical attacks on crypto holders hit a record in 2025: 72 verified cases worldwide, up 75% on the year before, 19 of them in France. Most began with someone knowing what the victim owned.

The Islamic instinct to keep your wealth to yourself is good security here. Don't post your holdings. Don't wear your profits. And don't tell the group how much you made last cycle.

One question stops most crypto scams

Before you send anything to anyone, ask: if this person vanished tomorrow, would I get my money back?

If the honest answer is no, and they came to you rather than you finding them, and there's any pressure to act today, stop. Every scam above needs at least two of those three.

If it's already happened: stop sending, report it (in the US at ic3.gov, elsewhere to your police and to the exchange the money passed through), and ignore everyone who offers to recover it. Being robbed is a test, not a sin. The sin belongs to the one who took it.