Security

Christmas Crypto Scams: How Fraudsters Target UK Shoppers and Savers in December

  • September 28, 2026

Christmas Crypto Scams: How Fraudsters Target UK Shoppers and Savers in December

December is a month of logistics. Presents to buy, deliveries to chase, a budget that has to stretch, and an inbox full of "your parcel is waiting" messages. Fraudsters work to the same calendar. They know you are spending more, checking your phone more, and hoping for a bit of good news before the year turns. Crypto is one of their preferred tools because payments move quickly, usually cannot be reversed, and can cross borders in minutes. Here is what the seasonal scams look like, and the habits that stop most of them working.

Why December Suits Crypto Fraud

Scams rarely need clever technology. They need a moment when your attention is split, and December supplies that in abundance.

Three things happen at once. Spending rises, so an odd payment hides among the ordinary ones. Time pressure rises, so people click faster and read less carefully. And hopes rise — for a bonus, a refund, a bargain, or a fresh start in January. Fraudsters build their offers around all three: a gift that must be claimed today, a refund that needs your bank details, an investment that has to be funded before the price moves.

The crypto angle matters because of what happens after you pay. A card payment can be disputed and a bank transfer can sometimes be recalled. A crypto payment, once confirmed, is gone. That is the whole appeal for the person on the other side.

The Festive Giveaway That Never Arrives

In December, giveaway scams get a seasonal coat of paint: an advent calendar of prizes, "12 Days of Crypto", an airdrop for loyal holders, or a doubling offer tied to a well-known name. The messages arrive by email, in Telegram and Discord groups, and through adverts that imitate real brands.

The details vary, but the shape is always the same. You are told you qualify for something valuable, then asked for one small thing to release it. Usually that means one of these:

  • Sending a "verification" or "gas" payment from your own wallet.
  • Connecting your wallet to a claim page and signing a request that hands over permission to move your tokens.
  • Typing your seed phrase into a page to "sync" or "validate" your wallet.
  • Sharing a one-time code so an "agent" can finish the process for you.

A typical message reads:

"Your wallet has been selected for a festive reward. Connect to claim before midnight — unclaimed rewards are returned to the pool."

There is no reward, and the countdown is a prop. One rule covers every version of this: a genuine giveaway never asks you to pay first, never needs your seed phrase, and never needs your wallet connected to a page you found through a message or an advert.

Fake Shops and Checkouts That Only Take Crypto

Clone shops are the workhorse of December fraud. A fraudster builds a convincing copy of a retailer, buys adverts that place it above the real site, and prices one popular item below everyone else. The stock counter ticks down. The reviews are copied from elsewhere. Then comes the twist at checkout: the shop accepts payment only by bank transfer or crypto.

That last detail is the tell. A shop that cannot take a card is a shop that cannot be charged back. Pay in crypto and you have no route to a refund.

Five minutes of checks before you buy

  1. Type the address into your browser rather than tapping a link, and read it slowly. Extra words, hyphens or a swapped letter are common tricks.
  2. Look for a returns policy, a trading address and a company number. UK limited companies can be checked free of charge at Companies House, and a number that does not match the trader is a problem.
  3. Search the domain name alongside the word "scam" or "review", and read results from outside the site itself.
  4. Check the payment options. If card payment is missing and crypto is pushed, walk away.
  5. Treat heavy discounts on in-demand items as a warning rather than a gift.

If you have paid and nothing arrives, contact your bank or card provider straight away. The sooner you call, the more options you have.

Pressure Tactics: Urgency, Authority and a Friendly Voice

Some scams lean on a fake shop. Others lean on a fake person, and December gives them plenty of ways in.

  • Fake support. You post about a problem in a public forum, and minutes later a helpful account offers to fix it. Genuine exchange or wallet support does not message you first.
  • Urgent security warnings. "Your account has been compromised — move your funds to this safe wallet." The address belongs to the fraudster.
  • Remote access requests. Anyone asking you to install screen-sharing software so they can "help" is asking to watch you type passwords and read your codes.
  • Secrecy. "Don't tell your bank, they'll block it." A request to lie to your bank is never legitimate.
  • Slow-burn investment chats. A friendly stranger, weeks of harmless conversation, then a platform showing impressive fake gains that refuses withdrawals unless you pay a fee.
  • Recovery offers. If you have already been stung, expect a second wave of people claiming they can get your money back for an upfront fee. That is another scam.

Banks and tax authorities do contact people, particularly around the January self-assessment deadline, but they do not operate like this. If a message creates panic and asks for a transfer, end the conversation and call the organisation on a number you look up yourself.

If Something Goes Wrong

Act quickly, in this order:

  1. Stop all payments and stop talking to the other party.
  2. If a bank transfer or card payment was involved, call your bank now. Many UK banks can act faster than people expect when they are told immediately.
  3. If your wallet was compromised, move whatever is left into a new wallet with a fresh seed phrase generated on a device you trust, then revoke token approvals for the old wallet using your wallet's own tools or a reputable approval-revoking service.
  4. Report it. Action Fraud takes reports for England, Wales and Northern Ireland, and Police Scotland for Scotland. Wallet addresses and transaction hashes are often the most useful evidence you can provide.
  5. Keep everything: screenshots, emails, chat logs, transaction IDs.
  6. Tell someone. Embarrassment is the fraudster's best protection, and a conversation with a friend is often what stops the next payment.

If the sums involved are significant, or if tax and legal questions follow, speak to a regulated professional. You can check a firm's status on the FCA Register and its Warning List before you take advice from anyone.

The pattern behind almost all of this is simple: something valuable, available only now, and only if you move money or share access. Slow down, verify through a channel you chose yourself, and December becomes a much less rewarding month for the people who do this for a living.

Photo: Polina Tankilevitch / Pexels

PreviousRug Pulls and Fake Tokens: Warning Signs Every Investor Should RecogniseNextCrypto Tax in the UK: A Beginner's Guide to HMRC Reporting