How not to loseyour cryptoto “arbitrage”
We break down popular scam schemes and give practical tips on how to protect your funds.
An article by the SpreadRadar editors“Send your coins here — you will get more back in a few minutes.”
An experienced user will find that suspicious. But scammers rarely open with a demand to send a large sum to a stranger. Far more often they build trust first: they show apparently successful trades, send a small amount back, display a “profit” and explain their scheme in detail.
At some point the offer stops looking like fraud and starts looking like an ordinary chance to earn on a price difference. That is the stage where people usually lose their money.
The schemes to watch for are the ones built on the words arbitrage, cross-chain, deposit, Memo, AML check and technical recovery. Scammers take real industry terms and assemble them into a convincing story.
How they find youand win your trust
Scammers write on social networks and messengers and invite you to “private” groups full of fake reviews and profit screenshots.
Arbitrage is real — scammers borrow the name
Crypto arbitrage is a genuine trading strategy: earning on the price difference between venues, pairs or markets. How it actually works is covered in what crypto arbitrage is. That is exactly why “earn on arbitrage” does not sound suspicious by itself.
The problem starts when, in the name of an arbitrage trade, you are asked to do something that has nothing to do with trading:
- send crypto to an unfamiliar address;
- send one token to another asset’s deposit address;
- use someone else’s Memo or Tag;
- send funds to a “technical” wallet;
- top up extra to “complete the operation”;
- pay for an “AML check”;
- transfer an asset for a later “cross-chain credit”.
Spelled out, it all sounds logical. But the difference is fundamental:
In real arbitrage you know where your funds are and what is happening to them. In a scam you are persuaded to trust the instructions and send crypto to the address you were given.
The most dangerous part is the first few transfers
Someone joins a Telegram group about arbitrage. The group offers an easy way to earn: buy an asset in one place, move it to another network, take the profit. To make it easy to agree, they suggest starting with a hundred dollars.
They offer youa simple scheme
You are shown instructions: send a certain amount, receive a profit and repeat the operation with a bigger volume.
He sends it. A while later a hundred and ten comes back. Everything looks perfect: the operation worked, the money returned, there is a profit.
The first transferreally comes back
To earn your trust, scammers may return a small amount together with the “profit”. It is part of their strategy.
Then he is asked to raise the amount to a thousand. Then to five thousand.
Then they ask youto send more
After the first successful operation you are asked to transfer a larger amount. Sometimes this happens several times, gradually raising the volume.
And then the large transfer goes somewhere other than he believes. The scammer takes the money and stops replying.
Why the first profit proves nothing
The small return is part of the scheme. A scammer will happily pay ten dollars if it unlocks five thousand. So the rule is simple: a successful first transaction does not make the next one safe. It only proves that the first transaction went through.
When “cross-chain arbitrage” becomes the trap
One of the most convincing schemes is built on how blockchains actually work. Some coins use a Memo, Tag or another extra identifier when you top up an exchange account. Someone who knows about that feature is more likely to believe a technical explanation.
It goes roughly like this: “The address is shared between users, so you must include the Memo.” Or: “To do a cross-chain credit, send this token to an address on the other network — the system will match your deposit by the Memo.”
It sounds technical. But a well-phrased explanation does not make the operation real.
Where the difference lies
If a platform officially supports a given deposit, the platform itself shows you the asset, the network, the deposit address, the Memo or Tag when one is needed, and any extra conditions. All of it is visible in the interface, with nobody in between.
If a stranger sends you an address and explains that you need to “bypass the standard deposit”, that is a different situation entirely. There is nothing to bypass: the standard deposit is the way to top up.
Why one coin’s address is not another coin’s address
This is one of the most common mistakes. People notice that several assets use a similar deposit system and conclude that the addresses are interchangeable.
Blockchains do not work that way. A similar-looking address does not mean the funds will arrive. The suggestion to send one token to another asset’s deposit address is convincing precisely because the scammer leans on genuine technical details of those networks. The operation itself may not be supported at all — and then what you sent does not come back.
Do not send an asset to another coin’s address just because you were told it is needed for “cross-chain arbitrage”. Check first, in the platform’s own interface.
Which networks show up most often
Pay particular attention to offers built around networks that use Memos, Tags, human-readable account names or other identification mechanisms — those are what give a scammer material for a “technical” explanation. Assets that appear in such scenarios include HIVE, ATOM, BTS, IOST, OSMO, STEEM, TLOS, TON, WAXP and XRP.
Being on this list does not make a coin fraudulent or unsafe. This is strictly about scenarios in which criminals exploit deposit mechanics. The networks themselves work normally, and an ordinary deposit made through an exchange interface has nothing to do with the schemes described here.
HIVE: the illusion of a “personal” address
One scheme is built around HIVE and labels that look like a personal deposit address.
The scammer finds the victim’s exchange UID — say 123456 — and creates something like uid123456. To anyone who does not check against the official interface, it looks like an address tied to their own account.
From there the familiar sequence runs: a small deposit, a small return, trust, a large transfer. The first payouts prove the scheme “works”. Then a serious sum goes out, and contact stops.
An address that looks like the real one
A scammer does not need complex infrastructure. Sometimes it is enough to make a name look official. It is especially dangerous when they use the exchange’s name, copy part of an official handle, append a UID, substitute similar characters, or change just a couple of letters.
You send fundsto a fake address
Scammers create addresses that look like real ones, use look-alike UIDs, similar characters or addresses on other networks, and ask you to add a Memo.
People see a familiar word and stop checking the rest. That is why an address has to be compared against the official site or app — never against an image, a message or a third party’s instructions.
EOS: when a scammer’s account looks official
Networks with human-readable account names carry their own risk. On EOS a criminal can register a name that closely resembles a genuine one; lookalike characters and letter combinations are hard to spot at a glance.
Such accounts are then used to promote “official” bonuses, deposit campaigns, arbitrage operations, special programmes and rewards for transfers. Names mentioned in connection with these scenarios include solbndeposit, xrpbndeposit, eosxrdeposit and eosupdeposit.
We list them as plain text and deliberately without links: an article about avoiding scammers should not take you to one in a single click. The point that matters is this — a name resembling a well-known platform does not prove any connection to it.
“Add the address to your whitelist and it will be safe”
Another common argument points at your own security settings: “if the address is whitelisted, it is already linked to your account”.
That is false. A whitelist permits withdrawals to specific addresses, and nothing more. Adding an address does not prove it belongs to the exchange, to you, or to any official service. The recipient still has to be verified separately.
Fake tokens: when the transfer looks genuine
Scammers use fake assets as well as fake addresses. The name of a popular token is trivial to copy. Someone receives a token named like USDT and concludes the payment arrived.
A name on its own proves nothing. What has to be checked is the blockchain, the contract address, the issuer, the network and the actual arrival of the funds. The same applies to offers promising to send you ETH, USDT or anything else “as part of an official campaign”.
“Pay the AML fee and your funds will be released”
After a big transferthe scammer vanishes
The money goes to the scammer’s wallet and contact suddenly breaks off. You may keep being pushed to pay extra “AML”, “fee” or “unlock” charges.
This one appears after the money has already been sent. There is no longer any need to sell the arbitrage idea — now the scammer has to explain why the money cannot be withdrawn. The phrasing runs:
- “Your transfer was flagged for an AML check.”
- “A fee is required to unlock it.”
- “An additional deposit is needed.”
- “Confirm the source of funds with a payment.”
- “The funds will return automatically once you pay.”
One payment is followed by the next. If a demand like this arrives after you sent money to a stranger, do not act on it straight away: check the information through the official channel of the platform concerned.
Telegram and X: where it usually starts
Most of these stories begin not on a blockchain but with an ordinary message. Someone writes to you and invites you into a group. Inside there are already “experienced traders”, profit screenshots, trading signals, stories of large earnings, “exchange representatives” and arbitrage instructions.
It all adds up to the feeling of a real community. But member counts and positive reviews prove nothing: some of those accounts may belong to one person, or have been prepared in advance to create the appearance of activity.
The most dangerous sentence is “you have already earned”
Profit is often displayed before anyone has received anything. A balance and a profit figure appear on screen, the numbers rise, and it feels as though the money is already yours.
But a balance on an unknown platform is text on someone else’s website, not funds on a blockchain. Until the asset has arrived in a wallet you control or a confirmed account on a platform you trust, the numbers are not evidence.
Off-platform deals: where the protection disappears
“Let’s do it directly, it works out better” or “don’t use the exchange, the fee is lower here.” On the face of it the terms improve. But along with the saving go almost all of the protections. The outcomes are predictable:
- You sent the crypto and no payment came. The buyer took the asset and vanished.
- You paid and no crypto came. The seller took the money and stopped answering.
- You were sent a fake token. The transfer technically exists, but the asset is not what you take it to be.
- You are drawn into larger amounts step by step. A small trade goes through, then you are invited to raise the sum.
The scams that happen inside P2P trades themselves are covered in how to avoid scams in P2P trading.
The scammer may be someone you know
Sometimes a criminal does not need a new identity at all: hijacking a friend’s account or cloning their profile is enough. Then the message arrives: “Hi, I really need help — can you send crypto urgently? I’ll pay you back.”
Where money is involved, one message is not enough. Call the number you already had saved, or reach the person through a different channel. Never verify someone’s identity through the same account the request came from.
When a return should make you cautious
A high return does not prove fraud on its own. A combination of signs does call for caution:
- the return is promised as guaranteed;
- risk is denied outright;
- you are being rushed;
- you are urged to increase the deposit;
- you are asked to send funds to a personal address;
- the opportunity is described as “exclusive”;
- you are told not to discuss it with anyone;
- extra payments are demanded before a withdrawal;
- independent confirmation of the operation is refused.
The more of these line up at once, the more important it is to stop and check the offer yourself. How to cap the size of a possible loss in advance is covered in risk management in arbitrage.
What to check in the minute before you send
Before pressing Send, stop for a minute and check four things:
- The asset. Are you sending the right coin?
- The network. Does the recipient support this particular network?
- The address. Did it come straight from an official source?
- Memo or Tag. Is one required here, and does it match the deposit you were shown?
If even one of them is in doubt — do not confirm the transaction until you have checked. On a blockchain a single mistake costs the whole transfer.
Already sent? Do not pay the scammer twice
If the transfer has gone and you suspect fraud, the first reaction is usually emotional: get the money back as fast as possible. That is exactly what gets exploited. After the first transfer you may be offered “help recovering the funds” — for one more payment.
Do not send more money simply because you are promised the earlier amount back. Collect evidence instead: wallet addresses, transaction hashes, screenshots, the correspondence, links to accounts, group names, dates and times, a description of the scheme and details of any additional payments.
Then report it to law enforcement and hand over what you have gathered. Where funds were sent voluntarily to an external address the exchange does not control, the exchange may have no technical way to return them.
The bottom line: check the operation, not the promise
A scam can look thoroughly professional: a website, a Telegram group, a “support team”, tidy instructions, real blockchain transactions, even the first payouts. None of that answers the question that matters — where are your funds actually going?
Before any operation, verify the address, the network, the asset and the purpose of the transfer through an official source. Be especially careful with requests to send one token to another’s address, perform a “manual” cross-chain transfer, move funds to a personal wallet, use an unfamiliar Memo or Tag, pay to unlock something, pay to pass AML, or raise the deposit after a small successful trade.
Arbitrage is a real trading practice. But the word “arbitrage” does not make a transfer safe. The best moment to check is not after sending, but before pressing confirm.
A short checklist before you transfer
- Who am I sending funds to?
- Where did I get this address?
- Does the recipient support this exact asset and this exact network?
- Is a Memo or Tag required?
- Have I verified this on the official site or in the app?
- Why am I being asked to send funds this particular way?
- What happens if the transfer is not credited?
- Am I being promised a guaranteed profit, or a refund after an extra payment?
If any one of these has no clear answer, it is safer to stop and check everything yourself first.