When a project takes investor money and disappears, the crypto industry has a phrase for it: an exit scam. Sometimes the team rugs the liquidity overnight. Sometimes they slow-drain funds for months while pretending to build. Either way, the result is the same. Wallets emptied, websites taken down, founders scrubbed from the internet, and a Telegram group full of people trying to figure out what happened.
If you spend enough time in crypto, you'll unfortunately meet the exit scam. The point of this guide is to help you spot one before you lose money to it, not after.
What an exit scam is
An exit scam is the deliberate abandonment of a project by its operators after they've raised funds, attracted users, or accumulated treasury assets. The "exit" is the operators leaving with the money. It can happen at any scale: a small DeFi pool drained at launch, a centralized exchange closing withdrawals overnight, a yield platform that goes silent the same week the founder books a one-way ticket.
It's distinct from a hack (where attackers steal funds the team didn't intend to release) and from a project that simply fails (where the team tried and the product didn't work). The defining feature is intent. The operators planned to leave with the money.
The classic exit scam playbook
Most exit scams follow the same arc.
First, marketing. The project pays for influencer coverage, partners with credible-sounding brands, and runs an aggressive social campaign. You see logos of "audit partners" and "advisor" headshots that are sometimes real, sometimes generic stock photos.
Second, unsustainable yield. Returns of 20% to 80% APY appear out of nowhere. The yield is paid in the project's own token, the price of which is propped up by new deposits. When new deposits slow, the price slides, the yield evaporates, and the door starts to close.
Third, withdrawal friction. Users notice that withdrawals are taking longer than usual. Customer support turns slow, then mute. The team announces a "scheduled maintenance" or a "smart contract upgrade." Withdrawals stay paused.
Fourth, silence. The Telegram is locked. The founders' social accounts go dark. The website goes 404. Funds in the project's known on-chain wallets get bridged, mixed, and dispersed within hours.
A well-engineered exit scam can compress this whole arc into a single weekend. A patient one stretches it over a year and walks out with more money.
The red flags that show up early
You can spot most of these before you commit funds.
Anonymous founders with no verifiable history. Pseudonymity isn't automatic disqualification (Bitcoin's founder is pseudonymous), but pseudonymity plus claims of yield, plus a custodial product, is a stack that's failed too many times.
Yields that don't match the underlying market. If a stablecoin pool is paying 40% when the broader market pays 5%, somebody is taking on risk. The risk is either undisclosed leverage, undisclosed token emissions, or the operators planning to leave with deposits. Which one you can't tell from the outside.
Audit theater. A project will link to a one-page PDF from an unknown auditor, or to a respected auditor's report on a contract that bears no resemblance to the contract deployed. Read the audit. Check the address.
Withdrawal friction at any scale. The first time a withdrawal takes "a few hours longer than usual," that's the signal. The pattern doesn't reverse. It accelerates.
Custodial token economics. If the team controls a multisig that can mint, freeze, or migrate the token, that multisig is the exit door. Look at the team's on-chain ownership of the supply. If the top three wallets hold more than 50%, the project's runway depends on those wallets staying loyal.
Locked-up vesting that "unlocks early." When the team announces "in light of community demand, we're unlocking treasury early," the next thing that happens is the unlock and a wallet drain.
The custody lesson
Exit scams aren't a separate category from the broader custody problem. They're a specific shape of the same problem: when somebody else holds the keys, somebody else can leave with them.
The clearest defense isn't picking better projects. It's reducing how much of your stack lives in any custodial structure. If a yield platform pays 20% on USDC, the question to ask is what your loss looks like when the platform is the next exit scam, not what your gain looks like when it isn't.
The structural answer is self-custody. Hold your spot crypto on your own keys. Use yield products only with the portion you can afford to write off. Treat any custodial structure the way you'd treat lending money to a friend who's vague about their employment.
Standard self-custody runs through a hardware wallet with a 24-word seed phrase backup. A stamped steel plate is more durable than paper, but your backup still hinges on one piece of metal surviving every fire, flood, and house move that happens between now and when you need it. We built Ryder One to remove that single point of failure. TapSafe Recovery splits the wallet backup across a battery-free Recovery Tag, your phone, and an optional circle of Recovery Contacts. No single component on its own gives anyone access. The seed phrase is still on-device as a last resort, so you're never locked into our hardware.
The short version
Exit scams have a recognizable shape. Anonymous teams, unsustainable yield, audit theater, custodial token economics, and withdrawal friction are the early signals. Once they appear, time is shorter than you think.
The cheapest defense is fewer custodial relationships. The next-best is moving faster than the door closes.
Don't entrust your savings to a multisig you don't control. Ryder One keeps your keys yours, your backup distributed, and your custody surface as small as it can get. See how it works.
Share: