Trading bot scams: the common types, the red flags, and what to do if you were scammed
BotIndex editorial team · Updated 11 Nov 2026 · Editorial policy
Most trading bot scams share one tell: you hand your money to the bot operator instead of keeping it in your own exchange account, and they promise steady returns. Legitimate bots run on an exchange account you control, publish their fees and promise nothing. Check regulator registers, never pay to 'unlock' withdrawals, and report losses to the FTC, CFTC, IC3 or FCA.
How trading bot scams work
A trading bot scam uses the idea of automated trading as bait. The “bot” may not trade at all. Often it is a dashboard that shows invented profits while the operator keeps your deposit, or an app or download built to steal your coins or passwords.
Real trading bots exist, and many are free. Exchanges such as Pionex, Bybit and Bitget run grid and DCA bots at no extra fee (Pionex review, Bybit review, Bitget review). That is exactly why scams work: the product category is real, so a fake one does not sound absurd. If you want the basics first, read what a crypto trading bot is.
Common types of trading bot scams
Guaranteed-return “AI trading bots”
This is the most common pitch: an AI or “quantum” bot that earns a fixed daily or monthly return with no experience needed. In January 2024 the CFTC issued an advisory on AI scams, warning that AI technology cannot predict the future or sudden market changes (CFTC release 8854-24). The FTC puts it more bluntly: “Only scammers will guarantee profits or big returns” (FTC).
Real automated strategies have losing months. Our guide on whether AI trading bots work covers what the evidence actually shows.
Ponzi “bot pools”: the Mirror Trading International case
Here you send money into a shared pool that a bot supposedly trades. Early members are paid from later deposits, often with referral bonuses on top.
The CFTC’s AI advisory uses Mirror Trading International (MTI) as its case study. MTI let customers buy into a pool run by a proprietary bot that “guaranteed at least a 10 percent monthly return (or more than 200 percent per year),” with buy-ins from $100 in bitcoin and “no trading experience required.” Its CEO, Cornelius Steynberg, “stole more than $1.7 billion in bitcoin from at least 23,000 people” (CFTC release 8854-24). In April 2023 a federal court ordered him to pay $1,733,838,372 in restitution plus an equal civil penalty (CFTC release 8696-23).
Fake apps and fake platforms
Some scams build a whole fake exchange or bot app. The FBI warned in 2022 that criminals were persuading US investors to download fraudulent crypto investment apps, some using the name and logo of a real financial institution. It identified 244 victims and about $42.7 million in losses. In one case, victims who tried to withdraw were told to pay “taxes” first, and still could not withdraw after paying (FBI PIN 20220718-001).
The CFTC describes the same pattern: you see gains on the screen, but when you “try to take out large sums, or close the account, and suddenly there are problems” (CFTC release 8936-24).
Impersonator Telegram bots and fake support
Clone bots copy the name and avatar of a real Telegram trading bot and ask you to import your wallet or “verify” a private key. Fake support accounts do the same in group chats. Our Telegram trading bots guide covers how to find the official handle and why a bot wallet should hold only small amounts.
“Free bot” and “free EA” downloads that are malware
Cracked or “free” versions of paid bots, MetaTrader expert advisors (EAs) and “sniper” scripts are risky to install, because you are running unknown code on the same computer that holds your logins and wallets. In October 2024 Checkmarx described a Python package called “cryptoaitools” that posed as a crypto trading bot. On install it stole wallet data, browser passwords, cookies and Telegram data on Windows and macOS. The same code was spread through a GitHub repository, a fake bot website with fake reviews, and a Telegram chat offering a free trial (Checkmarx).
Only download software from the developer’s official site or official app store listing. If you need expert advisors for forex, start with our forex expert advisors guide.
Pump-and-dump groups selling “bot signals”
Some paid groups sell “bot signals” that are really coordinated pumps. Organizers buy first, push members into a thin token, then sell into their buying. If a signal group says everyone must buy the same coin at the same minute, you are the exit liquidity. Our legal guide explains why regulators treat this as market manipulation.
Recovery scams
After a loss, victims get messages from “recovery experts,” “blockchain investigators” or fake law-enforcement contacts who can get the money back for a fee. The FBI says these fraudsters charge an upfront fee, then stop responding or send a useless report and ask for more. It notes that private recovery firms cannot issue seizure orders, and that “Law enforcement does not charge victims a fee for investigating crimes” (FBI IC3 PSA). The CFTC calls these “a form of advance-fee fraud” and says victims are often targeted more than once (CFTC release 8936-24).
Crypto bot scam red flags checklist
Any one of these is a reason to stop. Two or more is close to certain.
- Guaranteed or fixed returns, such as “1% a day” or “10% a month.”
- You deposit into their wallet, app or pool instead of your own exchange account.
- Referral or “affiliate” income for bringing in new users.
- Withdrawals need a fee, tax or “unlock” payment first.
- Unsolicited contact from an “investment manager,” a dating match or a stranger in a group chat. The FTC lists both as common signs.
- Requests for your seed phrase, private key or an API key with withdrawal rights.
- No published fee schedule, or fees revealed only after you deposit.
- A download from a link in a DM, a cracked “pro” version, or a “beta” app outside the official stores.
- Vague technology claims (“proprietary AI,” “quantum arbitrage”) with no explanation of what the bot actually trades.
- Pressure to act now, or celebrity endorsements and testimonials you cannot verify. The FTC notes these can be faked.
How legitimate trading bots differ
| Typical scam | Typical legitimate bot | |
|---|---|---|
| Who holds your money | The operator’s wallet, app or pool | Your own account on a known exchange |
| Access it needs | Deposit, seed phrase or full wallet key | Trade-only API key, or the exchange’s own built-in bot |
| Returns | Guaranteed or fixed | No promise; losses are possible |
| Fees | Hidden, or appear at withdrawal | Published in advance |
| Withdrawals | Blocked, or need extra payments | Done on the exchange, outside the bot |
The fee point is easy to check. 3Commas lists plans from $15/mo billed annually, Cryptohopper from $24.16/mo billed annually, and exchange bots on Pionex, Bybit and Bitget are free, with only normal trading fees (3Commas review, Cryptohopper review). Platforms that connect through API keys never need you to deposit with them, and a trade-only key cannot withdraw. Our API key safety guide explains which permissions to switch off.
A legitimate bot can still lose you money. “Not a scam” is not the same as “profitable,” which our guide on whether crypto trading bots are profitable covers.
How to check if a trading bot or platform is a scam
When you search “is [bot name] a scam,” look for facts, not forum opinions.
- Check regulator registers. In the UK, the FCA says almost all financial services firms must be authorised or registered, and asks you to check the firm on its Firm Checker and Warning List, using only the contact details listed there (FCA). In the US, FINRA BrokerCheck shows registrations, employment history and disclosures for brokers and firms, and NFA BASIC covers futures firms, individuals and commodity pools.
- Read the result carefully. Many legitimate crypto bot tools are software providers and do not appear on these registers. Missing from a register is not proof of fraud. Appearing on a warning list, or a pooled “managed bot” with no registration, is a serious red flag.
- Confirm the custody model. Ask whether funds stay on an exchange you control. If not, ask who holds them and under which license.
- Check the fees and terms. A real service publishes its pricing and its terms of service, including which countries it serves.
- Use independent reviews built from primary sources. Our platform reviews cite each fee, feature and country rule to the provider’s own pages. Our methodology explains how we check them.
What to do if you were scammed
Act quickly and keep records of transaction IDs, wallet addresses, chats and screenshots.
- Stop sending money. Do not pay a fee to unlock a withdrawal.
- Contact your bank or the exchange you sent funds from. The FCA advises telling your bank immediately if you made a payment (FCA).
- Secure your accounts. Revoke API keys, change passwords and move any remaining crypto out of a wallet whose key you shared.
- Report it (US). The FTC lists ReportFraud.ftc.gov, the CFTC, the SEC, IC3 and the exchange you used (FTC). The CFTC takes complaints online or at 866-366-2382 (CFTC), and IC3 is the FBI’s central hub for reporting cyber-enabled crime.
- Report it (UK). The FCA asks you to report to Report Fraud on 0300 123 2040 first, then to the FCA. It says it “can’t help you get your money back,” but uses reports to protect others (FCA).
- Expect recovery scammers. Anyone who contacts you offering to get the money back for a fee is almost certainly running the next scam.
FAQ
Are AI trading bots a scam?
Not all of them, but 'AI' is a favorite label in scams. The CFTC's January 2024 advisory warns that AI cannot predict the future and describes a bot scheme that promised at least 10% a month and took more than $1.7 billion in bitcoin. Treat any AI bot that guarantees returns or holds your funds as a likely fraud.
How can I tell if a trading bot is a scam?
Ask where your money sits and what is promised. If you must deposit into the bot company's wallet or app, if returns are guaranteed, if you earn by recruiting others, or if withdrawals require a new fee or 'tax', walk away. A real bot connects to your own exchange account with a trade-only API key and publishes its pricing.
Is [bot name] a scam?
Search the exact company name on the FCA Warning List, FINRA BrokerCheck and NFA BASIC, read our review if we cover it, and check whether its fees and custody model are public. No register entry is not proof of safety, and a listing on a warning list is a strong reason to stay away.
Can I get my money back from a trading bot scam?
Sometimes, through your bank, the exchange you sent funds from, or law enforcement, but there are no guarantees. Report quickly to the FTC, CFTC or IC3 in the US, or Report Fraud and the FCA in the UK. Ignore anyone who contacts you offering to recover the money for an upfront fee; the FBI and FCA both warn these are follow-on scams.
Sources
- CFTC — Release 8854-24: CFTC Customer Advisory Cautions the Public to Beware of Artificial Intelligence Scams ↗checked 11 Nov 2026
- CFTC — Release 8696-23: Federal Court Orders South African CEO to Pay Over $3.4 Billion for Forex Fraud ↗checked 11 Nov 2026
- FTC — What To Know About Cryptocurrency and Scams ↗checked 11 Nov 2026
- FBI — Private Industry Notification 20220718-001: Cyber Criminals Create Fraudulent Cryptocurrency Investment Applications ↗checked 11 Nov 2026
- Checkmarx — Cryptocurrency Enthusiasts Targeted in Multi-Vector Supply Chain Attack ↗checked 11 Nov 2026
- FBI IC3 — PSA I-081123-PSA: Increase in Companies Falsely Claiming an Ability to Recover Funds Lost in Cryptocurrency Investment Scams ↗checked 11 Nov 2026
- CFTC — Release 8936-24: CFTC Warns Customers to Watch for Follow-on Frauds ↗checked 11 Nov 2026
- FINRA — About BrokerCheck ↗checked 11 Nov 2026
- NFA — BASIC (Background Affiliation Status Information Center) ↗checked 11 Nov 2026
- FCA — Protect yourself from scams ↗checked 11 Nov 2026
- FCA — Report a scam to us ↗checked 11 Nov 2026
- CFTC — Submit a tip or complaint ↗checked 11 Nov 2026
- FBI — Internet Crime Complaint Center (IC3) ↗checked 11 Nov 2026
Not financial advice. Trading bots do not remove market risk.