Back to all lessons
Awareness Lessons
5 days ago

AI-Powered Crypto Impersonation Scams Surge 1,400% in 2025

AI tools are dramatically lowering the barrier for cybercriminals to craft highly convincing impersonation scams targeting cryptocurrency users, with incidents rising over 1,400% in 2025. Rather than exploiting technical flaws in protocols, attackers weaponize synthetic voices, deepfake faces, and emotionally manipulative messaging to trick users into surrendering funds or credentials. The shift toward fewer but higher-impact attacks suggests scammers are investing more effort per target, making the threat harder to detect with volume-based defenses. This underscores that the human element remains the most exploitable attack surface in the crypto ecosystem, and that user education and strong authentication controls are now frontline defenses.

Tactical Insight

Immediate actions

  • Train all crypto platform users to independently verify the identity of anyone requesting fund transfers or wallet credentials through a secondary, trusted communication channel.
  • Enable multi-factor authentication (MFA) on all crypto wallets and exchange accounts to reduce the impact of credential theft from impersonation.

Long-term improvements

  • Implement ongoing security awareness programs specifically covering AI-generated deepfake and voice-clone scam tactics and how to recognize emotional manipulation triggers like fear and urgency.
  • Establish clear out-of-band verification protocols (e.g., pre-agreed codewords or callback procedures) for any high-value transactions initiated via digital communication.
  • Work with platform providers to integrate AI-powered scam detection tools that flag anomalous communication patterns before users act on them.

Detection measures

  • Monitor user accounts for unusual withdrawal patterns or rapid fund movements that may indicate a successful social engineering event.
  • Subscribe to threat intelligence feeds focused on emerging crypto scam campaigns to proactively warn users of active impersonation schemes in circulation.

Back this up with a control

All controls and vendors

Training helps people spot this. These controls make the attack fail even on the day someone does not.