To stop scammers in a Telegram group, combine two layers: tight group permissions and clear rules that make scams harder to pull off, and an anti-scam bot that removes known scammers and phishing links automatically. Manual moderation alone can't keep up with a busy crypto group, and a bot alone works best when your settings are already locked down.
This guide covers the scams you will actually see, the manual steps every admin should take, and how to automate the rest for free with Heimdall.
The Most Common Scams in Crypto Telegram Groups
Crypto groups attract scammers because they bring together people who hold tokens and often have wallets open in another tab. These are the patterns to watch for.
Impersonator Admins
A scammer copies the name, username style and profile picture of one of your admins, or of the project founder. They rarely post in the group. Instead, they DM members who just asked a question, using the trust that the real admin built.
Fake Support DMs
Someone posts "my wallet is stuck" or "I can't claim", and within seconds several "support agents" message them privately. They ask for a recovery phrase, a private key, or send a link to a "validation" or "sync wallet" site. Real support teams never ask for keys or phrases.
Phishing Links and Wallet Drainers
Links that look like your project's site, a DEX, a claim page or an airdrop checker. When a user connects their wallet and signs, a drainer contract sweeps their tokens. These links are often posted by fresh accounts and deleted by the scammer a few minutes later, after the damage is done.
Fake Giveaways and Airdrops
"Send 1 SOL, get 2 back", "first 100 wallets get the airdrop", or a fake announcement copied from your channel. These play on urgency and often pair with a phishing link.
Fake Contract Addresses
During a launch, scammers post a contract address that is not the real token. Buyers who copy the wrong address end up holding a copycat token, a honeypot they can't sell, or a token built to rug.
| Scam | Where it happens | What the scammer wants |
|---|---|---|
| Impersonator admin | DMs after a member posts | Trust, then keys or a signature |
| Fake support | DMs, sometimes replies in the group | Recovery phrase or private key |
| Phishing link or drainer | Group messages | A wallet connection and signature |
| Fake giveaway | Group messages and DMs | A deposit or a wallet connection |
| Fake contract address | Group messages during launches | Buyers on a copycat or rug token |
Manual Steps Every Telegram Admin Should Take
These are general Telegram practices. They work with or without a bot, and they make every other layer more effective.
Lock Down Member Permissions
In your group settings under Permissions, decide what regular members can do. Many crypto groups remove the right for members to add new members, change group info or pin messages. If your group does not need it, restrict sending links or media so only admins can post them.
Turn On Slow Mode During Busy Periods
Slow mode limits how often each member can post. During a launch or a big announcement, it slows down floods of scam messages and gives your admins time to react.
Keep the Admin List Short and Recognisable
Every extra admin is another name a scammer can copy. Give real admins a clear custom title so members can check who is official in the group's admin list. Make sure every admin has two-step verification turned on in Telegram settings, because a hacked admin account is far worse than an impersonator.
Pin a Clear Safety Message
Pin one short message that says:
- Admins and the team never DM first.
- Nobody will ever ask for your recovery phrase, private key or a wallet "sync".
- The only official links and the official contract address are the ones in this pinned message.
- Report anyone who DMs you claiming to be support.
Tip: Post the official contract address only in the pinned message and your channel. Then any other address posted in the group is suspicious by default.
Use Join Requests for High-Risk Moments
Telegram lets public groups require admin approval for new members. It adds friction, but it can help during a launch when bots and scammers join in waves.
Act Fast and Report
When a scam message gets through, delete it, ban the sender and report the account to Telegram. Then reply in the group so members who saw it know it was a scam.
Why Manual Moderation Is Not Enough
Manual work has three limits:
- Speed. A phishing link only needs to be visible for a minute to catch someone. Admins are not online every minute of the day.
- Repeat offenders. A scammer you ban today joins the next group tomorrow, and then comes back to yours with a new account. Each group fights the same people alone.
- Volume. Large groups get more scam attempts than a small team can read, especially across time zones.
This is the gap an anti-scam bot fills.
How to Automate Telegram Group Scam Protection With Heimdall
Heimdall is a free anti-scam bot for crypto Telegram groups, built by ODIN Tools. There is no subscription and no paid tier. It is protecting over 3 million users across 40,000+ groups.
Here is how it maps to the scams above:
| Scam | How Heimdall handles it |
|---|---|
| Known scammers joining | Checks every new member against a shared list of known scammers, drainers and phishing operators |
| Impersonator admins | Catches fake admins and copied names |
| Phishing links and drainers | Deletes them in milliseconds, before members see them |
| Fake giveaways and scam promotions | Deletes scam messages automatically |
| Fake contract addresses | Flags suspicious or unverified Solana contract addresses shared in the group |
Heimdall bans, mutes or reports offenders on its own, and can alert admins. The scammer list is shared across every group that uses it, so a scammer banned in one group is blocked in all of them. That solves the repeat offender problem that manual moderation can't.
Set It Up in One Minute
- Open @heimdall_odintools_bot in Telegram and press Start.
- Add Heimdall to your group or supergroup.
- Make it an admin with permission to delete messages and ban users.
Protection starts straight away. There are no commands to learn and nothing else to configure. For a full walkthrough of the permissions and what happens after you add it, read the Heimdall setup guide.
Tip: Heimdall works alongside your other bots, so you can keep your welcome bot, captcha or other tools in place.
Keep Your Manual Layer
Heimdall removes the bulk of the noise, but it does not replace your team. Its own terms are clear that automated moderation can miss things or flag a legitimate message by mistake. Keep your pinned safety message, keep permissions tight, and keep an admin or two watching the chat.
If a member is banned by mistake, they can ask for a human review by contacting [email protected] or the Heimdall bot. Let your members know Heimdall is active in the group and how to reach your admins about moderation decisions.
Note: Heimdall only works inside groups where an admin added it. It does not read private messages, so your pinned "we never DM first" warning is still the best defence against fake support DMs.
Your Checklist
- Restrict member permissions you do not need, including links if possible.
- Keep the admin list short, titled and protected with two-step verification.
- Pin a safety message with official links and the official contract address.
- Use slow mode and join requests during launches.
- Add Heimdall as an admin to block known scammers and phishing links automatically.
If your community trades on Solana or EVM chains, point members to the official links and safety rules for Thor too, so they know which bot is real. To see what to look for in an anti-spam bot and how each Heimdall feature works, read Telegram anti-spam bot for crypto groups.
Frequently asked questions
Why do scammers target crypto Telegram groups?
Crypto groups gather people who hold tokens and wallets in one public place. Member lists are visible, new people join every day and many members are used to clicking links and pasting contract addresses, which makes them easy targets for fake support DMs and phishing.
How do I know if an admin in my group is fake?
Real admins appear in the group's admin list. Scammers copy an admin's name and profile picture, then DM members. Ask members to check the admin list in the group info and to treat any admin who messages them first as a scammer.
Can I stop scammers from sending DMs to my group members?
No group setting can block private messages between Telegram users. What you can do is warn members in a pinned message that your team never DMs first, and remove scam accounts quickly so they have less time to collect targets.
Do I still need human moderators if I use an anti-scam bot?
Yes. A bot removes the bulk of scam links and known scammers automatically, but no automated system is perfect. Keep a small, trusted team of admins to handle edge cases, answer members and review anything the bot misses.
What should members do if they already clicked a phishing link?
Stop interacting with the site, move any remaining funds to a fresh wallet they control, and revoke token approvals they may have signed. Then report the link to the group admins so it can be removed for everyone else.
Step-by-step in the Docs
- What is Heimdall: A free anti-scam guard for crypto Telegram groups.
- Add Heimdall to your group: Set up protection in one minute.
- Official links and staying safe: How to tell the real Thor from scammers.