Crypto scams in Mexico: spot the script before you send

Crypto has one feature scammers love: once you send it, nobody can pull it back. There's no chargeback, no bank dispute, no fraud department that reverses a blockchain transfer. Mexico's financial consumer agency, CONDUSEF, says it plainly in its guidance: crypto isn't backed by the government or the central bank, transactions are irreversible, and no authority can help you recover losses.

That makes your habits the real security system. The scams we see aimed at people in Mexico, whether locals, retirees in Lake Chapala, digital nomads in Mexico City or tourists in Cancún, follow a handful of scripts. Know the script and you'll recognise it in time.

The scripts scammers use in Mexico

The friendly adviser on WhatsApp or Telegram

You're added to an "investor" group, or a stranger messages you, or you see an ad using a celebrity who has nothing to do with it. The adviser offers to manage your crypto for 5% or 10% a week. Early on they may let you withdraw a small "profit" to build trust, then push you to deposit more. The money is almost always requested to an account, card or wallet in an individual's name, not a company's. A real exchange never asks you to pay into an adviser's personal account.

Romance and "pig butchering" scams

The name comes from the idea of fattening the pig before slaughter. It starts as a friendship or romance on Tinder, Bumble, Instagram or a "wrong number" text, often with someone who claims to live nearby or to be relocating to Mexico. After weeks of chat they mention how well they do with crypto and walk you through "their" platform. Your balance grows on screen, but it isn't real. When you try to withdraw, you're told to pay "taxes", an "unlock fee" or a deposit first. That's the slaughter.

Fake exchanges and apps

Sites and apps that look like exchanges, complete with charts and a support chat. They arrive by link rather than from the official app store, and often use names close to known brands. The giveaway: depositing is easy, withdrawing never works. Before using any platform, find its legal entity and check it, as we explain in the guide to crypto law in Mexico.

"Fixed return" Ponzi schemes

Investment clubs, "cloud mining" and "AI arbitrage bots" that promise a fixed percentage every month plus bonuses for recruiting friends. Early members are paid with newer members' money until inflows dry up and the site disappears. CONDUSEF has issued alerts about companies offering bitcoin investment without being registered entities. One rule covers all of them: nobody can guarantee a return on crypto, because prices move every day.

Fake support agents

You post "my withdrawal hasn't arrived" on X or Facebook and within minutes "Official Support" replies. Or you google an exchange's phone number and land on a paid ad with a fake one. The agent asks for your seed phraseThe 12 or 24 words that can restore a wallet. Whoever has them controls the funds., a verification code, or for you to install a remote-access app. No legitimate support team ever needs any of that. Contact support only through the chat inside the official app.

Phishing that borrows Bitso's and your bank's name

"Your Bitso account has been locked, verify here." Bitso is a real company with a CNBV-licensed payments arm; the cloned login pages using its branding are not. The same happens with Binance, Mercado Pago and Mexican banks. CONDUSEF counted 10 impersonated financial institutions in April 2026 and 11 in August. If a message scares you, don't tap the link: open the official app and check there.

SIM swap

The scammer convinces your mobile carrier they are you and gets a new SIM with your number. From then on they receive your text-message codes and can reset your email and exchange passwords. The sign is your phone suddenly losing signal. Use an authenticator app instead of SMS for 2FATwo-factor authentication: a second check, such as a time-based code from an app, on top of your password., and ask your carrier whether it can add a PIN to your line. Travellers using a local Telcel or AT&T SIM should be careful about which number their exchange accounts are tied to.

Fake Pi Network wallets

Pi has a huge following in Mexico. Fake "Pi Wallet" sites ask you to type your 24-word passphrase to "verify", "migrate to mainnet" or "claim" coins, and the coins vanish once you do. There are also groups that "pre-buy" your Pi or sell "guaranteed" Pi at impossible prices. Your Pi passphrase never goes into a website outside the official app.

Fake receipts on P2P trades

On P2PPeer-to-peer: you trade directly with another person while the platform holds the seller's crypto until payment is confirmed. markets the buyer sends a screenshot of a bank transfer that never arrived, or an edited receipt with the right amount. If you release the crypto the platform was holding in escrowThe platform locks the seller's crypto and only releases it when the seller confirms the payment arrived., it's gone. A nastier variant is triangulation: the money does arrive, but it was stolen from another victim, who later reports it, and your bank account can be frozen. Only accept payment from an account in the buyer's own name and check the transfer's tracking key on Banxico's CEP portal. Details are in the P2P guide.

Bitcoin ATM and "pay this fine" scams

A caller claims to be from the bank, the police, immigration or the power company and says you must pay immediately at a bitcoin ATM. Mexico has bitcoin ATMs in Mexico City, Monterrey, Guadalajara and Cancún, so the script works here too. No authority or utility takes payment that way. If you do use an ATM for yourself, our bitcoin ATM guide explains fees and how to use one safely.

Cash meetups and rental deposits

Meeting a stranger to swap cash for crypto in person exposes you to robbery and counterfeit notes. And if a holiday rental or apartment in Tulum or Playa del Carmen asks for a deposit in USDT to a personal wallet before you've seen the place or signed anything, treat it like any other unverified upfront payment: don't. Our Cancún and Riviera Maya guide covers safer local options.

Recovery scammers

After the first scam comes the second: "lawyers", "ethical hackers" or a fake "CONDUSEF recovery unit" promising to get your crypto back for a fee. No authority charges to investigate, and nobody can reverse a blockchain transaction.

Everyday habits that prevent most losses

Use a unique password for each exchange and for your email, and switch 2FA to an authenticator app. Bookmark the official address of every platform and log in only from the bookmark or the app-store app. Turn on withdrawal-address allowlisting if your exchange offers it, so coins can only go to wallets you registered earlier.

Write your seed phrase on paper and keep it somewhere safe, never in photos, phone notes or cloud storage. For larger amounts, move them to your own wallet or a hardware device; the wallet guide explains how. And when someone is unusually keen for you to buy a particular coin, ask yourself why they care so much about your money.

If it already happened: the first hours

Speed matters. If the funds reached an exchange and you report quickly, the platform may freeze them before the scammer moves on.

Where to report

The cyber police in Mexico City take reports from anyone, including foreigners, and work to take down fraudulent pages and accounts. Other states have their own cyber units within the state security ministry. Expect to need Spanish or a translator for a formal complaint.

CONDUSEF doesn't investigate crimes or recover money from schemes that aren't financial institutions, but it handles complaints against banks, payment institutions and other registered entities. Start there if the fraud went through your Mexican bank or an exchange's peso entity.

The UIF, Mexico's financial intelligence unit, analyses suspicious-activity reports from banks and exchanges and can freeze accounts tied to money laundering. It isn't a desk where victims get refunds, but your complaint and the platform's reports can reach it through those channels.

Buying crypto without the exposure

The safest way to buy crypto is also the most boring: open an account yourself on a known platform, verify your identity, pay with your own card or bank account, and buy without anyone "helping". If you're new to this, the beginner's guide walks through every step.