Crypto cashout scams: 6 tricks aimed at sellers, the tell for each, and what to do after (2026)

Six patterns cause most of the damage around a cashout. Two hit sellers directly, two catch people mid-order, and two arrive before or after the sale.

In a peer-to-peer sale, you hand over crypto and a stranger pays you by bank transfer, PayPal or an app. Your side can't be undone. Theirs often can, and that gap is the whole scam.

Binance's own P2P team lists the main versions. Three matter most to sellers:

1. Step 1Day 1: the trade looks fine

   Money arrives from an unfamiliar name. You release the USDT.

2. Step 2Days later: the dispute

   The real account owner tells their bank the transfer wasn't theirs.

3. Step 3The clawback

   The bank takes the money back. Your account may be frozen while it checks.

4. Step 4The result

   The coins are gone for good, and so is the money that paid for them.

PayPalnow

Payment of $1,000.00 pendingFunds will be released once the seller sends the crypto.

A payout service turns the direction around. You send crypto to an order, and the company named on that order pays you, so there's no stranger on the other end with a payment of their own to dispute. Our cashout guide compares the routes side by side.

An overpayment scammer pays you more than the agreed price, then asks for the extra back. The original payment later bounces or reverses, and you've lost the coins plus the "refund".

It works because money can show in your account before it has really cleared. The FTC warns that "it can take weeks" for a bank to discover a bad check, and by then you're the one who owes it.

Fake support desks wait for the moment you need help, such as an order that seems slow. They write first, sound helpful and ask for exactly the thing that empties your wallet.

Zilligo's support is on Telegram, reached from our contact page. Support never writes to you first. Zilligo support never asks for your seed phrase, your wallet or exchange passwords, your 4-word sign-in key, your recovery code or a look at your screen.

A fake site either copies a real cashout service to catch your deposit, or shows invented profits to draw in more. Read the address bar, and treat any fee to withdraw as proof of fraud.

Fake trading platforms are bigger and slower. Investment fraud was the largest crypto-linked crime type in the FBI's 2025 data, and its end stage nearly always looks the same:

A crypto ATM turns cash into crypto in a few minutes and sends it wherever a QR code points. That makes it the fastest way for an impersonator to get your savings out of the banking system.

The script is usually a fake government office, a fake bank fraud team or fake tech support. The caller says your account is compromised or you owe a fine, then stays on the phone while you feed cash into the machine.

The FTC puts it in six words: "Only scammers demand payment in cryptocurrency." No agency, court or bank needs your money turned into crypto to keep it safe.

1. Step 1End the call

   Whatever they say about arrests, fines or frozen accounts.

2. Step 2Call back on a number you find

   The one on your bank card or the agency's official website, never one they gave you.

3. Step 3Don't scan their QR code

   It points to their wallet. Once the machine sends, the coins are theirs.

4. Step 4Already paid? Report it today

   Keep the kiosk receipt; it has the address and the transaction details.

The same callers often ask for gift cards instead, and the answer is the same. Using a kiosk to sell your own coins is a different matter, covered in Bitcoin ATM vs payment service vs OTC desk.

Recovery scammers target people who were already robbed. They promise to trace and return the coins, then charge fees until the victim stops paying, so one loss becomes two.

The FBI's August 2025 warning describes fake law firms that copy real firms' letterheads, invent regulators and even claim to work with the IC3 itself. Its red flags:

• Fees asked for in crypto or gift cards, or sent to a third party.
• A claim that you appear on an official list of scam victims.
• A referral to a "crypto recovery law firm" you never contacted.
• Documents that borrow a real firm's name, or a regulator that doesn't exist.
• A guarantee of getting the money back.

Stop paying, lock down what's left, save the evidence and report it the same day. A crypto transfer rarely comes back, but speed can still freeze coins at an exchange and protect the rest of your money.

If a Zilligo order is part of the story, contact support from the site with the order reference. Zilligo can't pull back crypto you sent to someone else, but every order is reviewed by a team member, and the AML policy refuses orders linked to fraud, scams or stolen funds. More on how orders are protected is on the security page.

Now it is your turn

Six scams, one move in common: a stranger sets the pace and asks you to act before you can check.

So take the pace back. Start every contact yourself, count only money you can see in your own account, and never pay to get paid.

Which of the six had you not heard of before today?

Frequently asked questions