Guide · Updated
The "Admin Will DM You" Scam in Crypto Telegram Groups
How fake admins and fake support accounts pick targets in crypto Telegram groups, what they ask for, and how to check a real admin's username in seconds.
You post a question in a big crypto group: “My withdrawal has been pending for two hours, anyone else?” Within a minute or two you get a private message. The sender has the group admin’s name and profile photo. They’re polite, they know the exchange’s terminology, and they’d like to help.
They’re not the admin. This is one of the most common scams on crypto Telegram, and it works because it arrives at exactly the moment you want help. This guide breaks down how it works and how to shut it down. It’s part of our guide to finding good crypto Telegram channels.
How the scam works, step by step
1. They watch public groups. Big exchange communities, wallet support chats and project groups are public. Anyone can join and read. Scammers sit in them, often with several accounts.
2. They pick people with problems. Messages containing “help”, “stuck”, “lost”, “can’t withdraw”, “wallet not showing” are the signal. New members asking basic questions are also targets.
3. They copy an admin. Display name, profile photo and sometimes the bio of a real admin or the project itself. The only thing they can’t copy is the @username, so they choose something close: an extra letter, an underscore, _support or _help at the end.
4. They DM you first. Often with a friendly opener: “Hi, I saw your message in the group. I’m from the support team. Can you describe the issue?”
5. They move you somewhere. A “support form”, a “wallet validation” site, a “sync tool”, or a bot. Or they ask directly for your seed phrase, a screenshot of your wallet, a code sent to your phone, or a “verification deposit”.
6. They add pressure. “Your account will be frozen in 30 minutes unless you verify.” Urgency is what stops people from checking.
Variations you’ll see
- Fake support group. Instead of a DM, you’re invited into a small group called “Exchange Support Desk” with a few “agents” who all back each other up.
- Fake moderator in replies. Someone with a convincing name replies to you in the public chat: “Please contact our support @something”. The handle is theirs.
- Fake “Telegram” account. A message claiming your account will be deleted unless you confirm a login code. Telegram’s real service notifications come from an official account marked as such, and Telegram never asks you to send it your login code.
- Fake bot. A bot with a name like the project’s support bot, asking for wallet details. More in crypto Telegram bots and what never to give them.
The 10-second check
Tap the account that messaged you and look at the @username. Then:
- Go back to the group and open the admin list (tap the group name, then the members or administrators section, depending on your app). Compare the usernames exactly.
- Or compare it with a username the project publishes on its own website.
Fakes are built to pass a glance. Say the real admin is @ExampleEx_Anna (a made-up handle). These are all different accounts:
| Username in your DMs | What’s changed |
|---|---|
| @ExampIeEx_Anna | Capital I in place of the lowercase l |
| @ExampleExAnna | Underscore removed |
| @Example_Ex_Anna | Underscore added |
| @ExampleEx_Annaa | Letter doubled |
| @ExampleEx_Anna_support | Word added at the end |
Capital letters alone don’t make a different account, because Telegram usernames aren’t case-sensitive. A different letter, digit or underscore does.
If they don’t match exactly, it’s not the admin. That’s it. You don’t need to argue with them or test them.
A few other tells:
- When someone outside your contacts writes to you, Telegram shows options to add, block or report them at the top of the chat, and recent versions add some details about the account there. Read them before you reply.
- Real admins in large groups rarely DM members first. Many groups say so in the pinned message.
- Anonymous admins exist in Telegram groups: they post under the group’s name instead of their own. Their messages appear in the group, not in your private messages. A “group” can’t DM you.
Why real admins don’t DM first
From the admin’s side, DMing members one by one doesn’t scale and creates exactly the confusion scammers exploit. That’s why most projects make a public rule: support happens in the chat, through the website’s ticket system, or through an official bot listed on the website. Exchanges repeat it constantly. Check the pinned post of almost any exchange group in our exchange communities category and you’ll find a version of it.
So when a “staff member” messages you first, the correct assumption is that it’s not staff.
Make yourself a harder target
You can’t stop people from seeing you in public groups, but you can make yourself less useful to them. Under Settings → Privacy and Security:
- Phone Number: hide it from everyone.
- Groups and channels / Invites: limit who can add you to My Contacts, so nobody can drop you into a fake support group.
- Messages: recent versions let you restrict or filter messages from strangers. Options vary by version and some need Telegram Premium.
- Two-Step Verification: turn it on, so a stolen login code isn’t enough to take your account.
The full walkthrough is in Telegram privacy settings for crypto users.
And a behavioural fix: when you need help in a public group, don’t post details of your problem. “Is support active right now?” gets you the same answer as “My 3 ETH withdrawal is stuck” without advertising what you’ve got.
If you already replied
If you only chatted, block and report the account. Nothing is lost.
If you clicked a link or entered anything:
- Seed phrase or private key shared: assume the wallet is compromised. Move what’s left to a new wallet with a new seed phrase immediately, from a clean device if possible.
- Exchange password or 2FA code shared: log in to the exchange directly, change your password, reset 2FA, and contact the exchange’s real support through its website.
- Telegram login code shared: go to Settings → Privacy and Security → Active Sessions, terminate all other sessions, and set up Two-Step Verification if it wasn’t on.
- Token approval signed: revoke it using a token approval checker on a block explorer.
Be ready for a second wave. People who’ve just lost money are targeted by “recovery services” promising to get it back for a fee. That’s another scam, explained in crypto recovery scams on Telegram.
Reporting impersonators
In the private chat, tap the sender’s name, open the menu and choose Report or Block and report. In the group, tag an admin publicly (by their real username) and say an account is impersonating staff. Good moderators act fast because they know how much damage these accounts do.
For investigations into larger scams and stolen funds, channels like ZachXBT track where money goes after hacks and rug pulls. They won’t get your funds back, but they’re a useful read on how these operations work. More hack-alert channels and the official groups of the main wallets are in our security and wallets category.
The rule to remember
Nobody legitimate needs to DM you first, and nobody legitimate needs your seed phrase. If you keep only those two rules, this whole category of scam stops working on you.
Part of our series on crypto Telegram. Start with the overview: How to Find Good Crypto Telegram Channels (and Skip the Junk).