Home › Crypto Fraud & Asset Recovery › Crypto Exit Scams

Overview

A crypto exit scam is a fraud in which the people running a cryptocurrency project, platform, or fund collect money from investors or users and then abandon the operation and disappear with the funds. The defining act is the “exit” — the operators leaving, with the money, and ceasing to be reachable. An exit scam may be dressed up as a promising new token, a high-yield investment platform, a cryptocurrency exchange, or a fundraising token sale; what makes it an exit scam rather than a business is that the disappearance with investor funds was the plan.

The best-known form of crypto exit scam is the “rug pull,” a term for an exit scam carried out through a token. Developers launch a token, promote it heavily, and attract investors who buy the token and, often, deposit assets to support its trading. Then the developers “pull the rug”: they extract the value and leave the token worthless. Rug pulls have become one of the most common frauds in decentralized finance, and they range widely in scale, from a small number of very large, high-profile collapses to an enormous volume of small, near-automated token scams, so prevalent that on some token launch platforms the large majority of newly created tokens collapse as scams within weeks of launch.

This page explains how exit scams and rug pulls work, the legal line between an exit scam and an honest project that simply failed, how United States law treats the conduct, and what recovery is realistically available to someone who has lost money. It is a companion to the Crypto Fraud & Asset Recovery foundation, which sets out the recovery mechanisms — criminal forfeiture and restitution, civil litigation, and asset tracing — in full.

How Exit Scams Work

Rug pulls take a few recognizable forms. In a “liquidity” rug pull, the developers exploit how decentralized exchanges work: trading a token requires a pool of paired assets — the token alongside something of real value, such as a major cryptocurrency or a stablecoin — and whoever controls that pool can withdraw the valuable side of it. If the developers keep that control rather than locking it away, they can drain the pool at a moment of their choosing, collapsing the token’s price to nothing. In a “hard” rug pull, the token’s smart contract is malicious from the start — built with hidden functions that let the developers mint unlimited new tokens, or that quietly prevent everyone else from selling, a design known as a honeypot. In a “soft” rug pull, there is no malicious code at all; the developers simply build hype, sell their own large holdings into it, and abandon the project, leaving ordinary buyers with the loss.

Not every exit scam involves a token or a smart contract. A centralized platform, such as a cryptocurrency exchange, a lending or “yield” service, an investment fund, can run an exit scam simply by taking custody of customer deposits, operating long enough to attract a large pool of them, and then shutting down and disappearing. Some of the largest exit scams in the history of the industry have been of this kind, with platforms vanishing with hundreds of millions or billions of dollars in user funds. A fundraising token sale can do the same: raise money from the public on the promise of building a product, then deliver nothing and disappear with the proceeds.

What the forms share is a lifecycle. The operators establish credibility through marketing, an active online community, promises of returns, sometimes a fabricated team or a copied codebase that lends an air of legitimacy. They attract funds. They reach the point at which the accumulated funds are worth more to them than continuing the operation. And they exit. The features of crypto that make this easy are the same ones that make the other schemes in this resource center possible: a token or platform can be launched quickly and cheaply, the operators can be anonymous or pseudonymous, and value can be moved across borders and out of reach within minutes. The recognized warning signs, such as anonymous developers, unlocked liquidity, guaranteed or risk-free returns, no working product, an outsized share of the token held by insiders, no independent audit, are all signs that the exit is possible and easy.

Fraud or Failed Project? Why Intent Is Decisive

An exit scam is, in legal terms, simply fraud and theft, and where the elements are met it is straightforwardly illegal. There is no “code is law” ambiguity of the kind that complicates an oracle manipulation case, because an exit scam involves real misrepresentations made to real investors. But that does not make every collapsed crypto project an exit scam, and the distinction is legally decisive. A great many crypto projects fail honestly: the product does not work, the market turns, the funding runs out, and investors lose money. That is a loss, but it is not a crime. What separates an exit scam from an honest failure is intent, whether the operators set out to deceive and to take the money, or genuinely tried and failed.

This is the central question in any exit scam matter, and it is often the hard one. A “soft” rug pull is the clearest example of the difficulty: developers selling their own tokens and moving on can look, on the surface, no different from a founder walking away from a struggling venture. Fraud must be proved, and proving it means showing intent, typically through evidence that the project’s representations were false when they were made, that the operators concealed their control or their plans, that the promised product was never real, or that the conduct fits a pattern the operators had followed before. For anyone who has lost money, this is also the first practical question to confront: a matter that can be shown to be intentional fraud has legal avenues, while a genuine business failure, however painful, generally does not. An early and honest assessment of which one occurred is the foundation of any sensible decision about what to do next.

How the Law Applies

When an exit scam is pursued, it is pursued through established fraud law rather than any crypto-specific statute. The core charge is wire fraud, 18 U.S.C. § 1343, which reaches any scheme to defraud carried out through electronic communications — and an exit scam, conducted through websites, messaging applications, and online promotion, is squarely within it. Where the token or investment was a security, the antifraud provisions of the securities laws apply — Section 17(a) of the Securities Act and Section 10(b) of the Securities Exchange Act with Rule 10b-5 — and the offering may itself have been an illegal unregistered securities sale. Where it was a commodity, the Commodity Exchange Act’s antifraud provisions apply. Because the operators must move and conceal the proceeds, money laundering charges under 18 U.S.C. §§ 1956 and 1957 commonly accompany the fraud counts, as does conspiracy. The classification question — whether a given token is a security or a commodity — is examined in the Digital Asset Regulation foundation section of this website.

Several authorities act in this area. The Department of Justice prosecutes exit scams criminally; the Securities and Exchange Commission and the Commodity Futures Trading Commission bring civil enforcement actions within their respective authority; and the Federal Bureau of Investigation investigates. The federal posture is current and explicit: in an April 2025 memorandum setting digital asset enforcement priorities, the Department of Justice named fraudulent digital asset development projects — rug pulls — as a specific category of conduct it would prioritize, alongside the misappropriation of customer funds by platforms. The same memorandum redirected the Department away from cases that effectively regulated the industry and toward conduct that directly victimizes investors. Exit scams sit at the center of that priority.

The difficulty in practice is not the law but the defendant. An exit scam is easy to characterize as a crime and hard to bring home against a perpetrator who is anonymous, who operated through offshore entities, and who has already moved the proceeds. Prosecutions and recoveries are most successful where the operators can be identified — and identification is more achievable than scammers tend to assume, because blockchain transactions are permanent and traceable and because operators frequently leave identifying traces at regulated exchanges and elsewhere. Where the operators are identified and within reach of United States authority, the established statutes are more than sufficient to reach the conduct.

Recovery and What Victims Can Do

Recovery from an exit scam follows the routes set out in the Crypto Fraud & Asset Recovery foundation section of this website. Where the government identifies the operators and seizes assets, criminal forfeiture and restitution can return funds to victims. Civil litigation either by an individual, or, because an exit scam typically harms many investors in the same way, frequently as a class action, can pursue the operators and, in some cases, others who enabled or profited from the scheme. Where proceeds can be traced to a regulated cryptocurrency exchange, they can sometimes be frozen before they are withdrawn. None of these routes is certain, and recovery in full is uncommon; but recovery is not impossible, and which routes are realistic depends entirely on the specific facts.

Two things consistently improve the outcome. The first is speed. Stolen cryptocurrency is most recoverable in the period immediately after the scam, while the proceeds are still moving and have not yet been cashed out or laundered beyond reach; a freeze or a tracing effort that begins within days has a materially better prospect than one that begins months later. The second is an early, realistic assessment of the matter — who the recoverable parties might be, where they and the proceeds are, whether the loss can be shown to be intentional fraud, and whether the likely recovery justifies the cost of pursuing it. That assessment is the point at which experienced legal counsel is most useful: not every exit scam loss can or should be litigated, and knowing which is which, early, prevents both missed opportunities and money spent chasing the unrecoverable.

Losses should be reported regardless of whether the victim chooses to pursue private recovery. Suspected fraud can be reported to the FBI through the Internet Crime Complaint Center at ic3.gov, and, where a security or commodity was involved, to the Securities and Exchange Commission or the Commodity Futures Trading Commission, both of which also operate whistleblower programs, a route described in the Whistleblower Programs resource section of this website. One caution belongs here: people who have lost money to a crypto scam are routinely targeted a second time by “recovery” services that promise, for an up-front fee, to retrieve the funds and then take the fee and disappear. Legitimate recovery work does not take that form. Someone deciding how to proceed should be as careful with the help they accept as with the investment that caused the loss.

Frequently Asked Questions

Related Resources

• Crypto Fraud & Asset Recovery — the full treatment of how losses to digital asset fraud are recovered, through criminal forfeiture and restitution, civil litigation, and asset tracing.
• Digital Asset Regulation — the regulatory architecture that determines whether a token is a security or a commodity, and which agency’s authority follows.
• Pig Butchering Scams — long-confidence investment fraud that frequently ends in a fake platform the victim cannot withdraw from.
• Crypto Pump-and-Dump Schemes — coordinated price manipulation in digital asset markets, which a “soft” rug pull often resembles.
• Whistleblower Programs — the SEC and CFTC programs through which investment fraud can be reported, with awards for information leading to enforcement.