Telegram Trading Bot Scam Red Flags
How to judge a Telegram trading bot by its chat, its group moderation and its deposit flow, plus the normal bot behaviour that only looks like a scam.
Published 2026-11-08
Start with the chat window, not the chart
The fastest way to judge a Telegram trading bot is to read how it talks to you, not how its trades performed. A bot's fee page, its handle and its past trades can all check out while the conversation in front of you does something else entirely.
Most scam setups show themselves in messages, pinned posts, admin behaviour and the deposit flow before any money moves. That is good news: you do not need to fund anything to see it.
Three places to look
- What the bot asks from you. A username, a deposit address, a private key, a signature. Each request has a different meaning, and one of them ends the conversation.
- What the people running the chat do. How they answer questions, what they pin, what they delete, who is allowed to speak.
- How money goes in and comes out. Where you send funds, where your balance lives, what has to happen before a withdrawal clears.
Two kinds of signal
Hard signals end the session. They involve your keys, your signature or a demand for more money before your own funds are released, and no amount of good trading history makes up for one.
Soft signals decide how much you trust the operator. They are about pressure, secrecy and moderation, and they stack up rather than trigger anything on their own.
A correct-looking handle is not proof on its own, and a badly run chat is not automatically a scam. Everything below is visible in a normal Telegram conversation, before you deposit.
Hard signals and soft signals: the one-flag rule
What a hard signal is
A hard signal is any request or instruction that can hand over control of your funds or your account in a single step. It does not matter how friendly the message is, how long the bot has been running, or how many people in the group say it worked for them. One step, and the wallet is gone.
What a soft signal is
A soft signal is behaviour: how the operator treats users and criticism, how the group is moderated, how withdrawals are described. Soft signals lower trust without proving intent. A bot can be rude, disorganised and pushy and still be honest. A bot can be polite and still be draining wallets.
The rule
One hard signal ends the session. No second opinion, no "let me try a small amount first", no benefit of the doubt. Soft signals accumulate and decide whether you keep using a bot you already have. Three or four of them together are a reason to stop.
Why the split matters
Traders who treat every annoyance as fraud stop noticing the real thing. Traders who ignore both lose funds. Sorting signals by what they can actually cost you keeps the first group calm and the second group safe.
What each one looks like on screen
| Signal | What it looks like in the chat | What to do |
|---|---|---|
| Seed phrase request | A message asking you to "validate" or "sync" a wallet by typing your 12 or 24 words | Close the chat. Never reply, never type the words |
| Key import page | A link asking you to paste a private key into a page that is not the bot's own documented import flow | Stop. Open the bot's own website and check how it says import works |
| Blind signature | A wallet pop-up with an unreadable payload, an unlimited approval, or a permit you did not start | Reject it |
| Forced migration | An announcement that the old bot is "deprecated" and your funds must move to a "new official bot" through a link | Move nothing. Confirm the handle on the bot's own site |
| Withdrawal gated behind a new payment | "Pay a gas, unlock or tax fee before your balance can be released" | Treat the balance as gone and stop depositing |
A note on the last row: a network fee paid to the chain is normal. A payment sent to a person or address before your own balance moves is not.
Hard red flags: anything that touches your keys or your signature
A hard red flag is any request that would hand another party control of your wallet, or that asks you to approve something you cannot read. None of them becomes safe because the bot looks busy or the group looks large. One is enough to end the session.
Seed phrases and key pastes
A message asking you to "validate", "sync" or "migrate" your wallet by sending a seed phrase is a theft attempt, whatever name it carries. No legitimate bot needs it. A trading bot either generates a wallet for you inside the bot, or takes a private key through its own documented import flow, which you reach from the bot's own site or its verified handle. A private key pasted into a form, a screenshot or a direct message from an account calling itself support sits outside that flow, so treat it as a handover.
Blind signatures
Signature prompts deserve the same suspicion. Do not approve a wallet request that appears while you are only checking a balance, claiming a bonus or joining a group, and do not sign anything you cannot read. An approval that grants spending permission can move funds with no further prompt.
Forced migration and gated withdrawals
A message claiming the bot you use is deprecated, with a countdown and a different handle to move funds to, redirects you away from the bot you checked. Treat it as hostile even when the new handle is a small edit of the real one. A withdrawal held behind "a fee, gas or tax" is not a withdrawal process: it is a second deposit, and money sent to release a balance rarely comes back.
| Signal | What it looks like in the chat | What to do |
|---|---|---|
| Seed phrase request | "Validate your wallet" or "sync to the new version", followed by a prompt to type your recovery words | Never send it. Close the chat and open the bot from its own site |
| Key paste outside the documented flow | A form, mini app or DM asking for a private key to "restore" access | Stop. Import only through the flow the bot's own documentation describes |
| Blind signature | A wallet prompt during a balance check, bonus claim or group join | Reject it. Read every request before approving |
| Forced migration | "The old bot is deprecated", a countdown, a different handle for your funds | Do not move funds. Compare the handle with the bot's own site |
| Withdrawal gated behind a new payment | "Pay gas or tax to release your balance" | Do not pay. It is a second deposit, not a withdrawal |
Each of these turns a chat message into control of the wallet, and each is irreversible once signed or sent.
Soft red flags in what the bot says
Soft signals are about how the operator talks. One on its own proves nothing. Two or three in the same conversation should change how much of the rest you believe.
Urgency that makes waiting feel expensive
Countdowns, "last chance" bonus rounds, "the migration closes tonight", any message where the cost of pausing is the point. A real deadline, a real bonus or a real migration is written down somewhere you can read it twice, at your own speed.
Offers to recover or unlock your own money
A stuck balance, or a withdrawal that can be released by sending a payment or signing something, is not support. It is a second attempt at the same funds. Read what the bot's own documentation says about withdrawals before you send anything to free a balance.
No one to check
No website, no documentation, no stated fees, and deflection when you ask who runs the bot. If the terms are not published, you cannot check the fee, the wallet model or the withdrawal rules, and neither can anyone else in the group.
Messages that arrive uninvited
Bots do not cold message users. A message you did not start, carrying a link, a bonus or a "wallet sync", is impersonation until you have opened the bot's own website and confirmed the handle yourself.
Certainty about outcomes
Any phrasing that presents a trading result as certain, whether it comes from sniping, copy trading or a "signal" group. Trading memecoins can lose all of the money you put in. An operator who skips that is selling, not describing.
Language that moves you out of the chat
"DM me", "contact support on this account", "send your issue to this admin". The bot's official handle, taken from its own site, is the only account you should treat as the bot.
Soft red flags in how the group is run
A chat only admins can speak in
A read-only announcements channel is normal and useful: fees, outages, new chains. The signal is a group that presents itself as a community, with members, a welcome message and a pinned "chat rules", but is muted for everyone except the team. Nobody can compare notes in public: not the withdrawal that took a day, not the fee charged differently from the docs, not the fill that came in worse than the alert promised.
A record that only goes one way
Questions and criticism disappear within minutes, while testimonial screenshots stay pinned at the top. Pinned posts show wins only; losses, downtime and complaints are quietly removed. A simple test: ask a neutral question about a fee or a failed transaction, then check whether it is still there ten minutes later.
Support that arrives in a direct message
One admin account that also handles "support" by DM, and asks for wallet details there. Legitimate support answers in the open, or through the bot's own documented flow inside the bot itself.
Agreement that is too tidy
Several accounts agreeing with each other in the same thread, and immediate pressure on anyone who asks a second question. Real user groups are messy, contradictory and full of complaints about congestion. A chorus with a queue behind it is staffed.
The reading
None of this proves fraud by itself. Groups get spammed by impersonators, admins get tired, moderators over-moderate. But an operator who curates the record of what happened is showing you how a dispute with you will go: the same way, with the same missing trace.
If the only evidence of how a bot behaves lives in a chat the operator can edit, you are relying on their version of events. Keep your own: screenshots, transaction hashes, the dates of deposits and withdrawals.
Red flags in money in and money out
Most scam losses happen at the deposit screen, not the trade screen. The money-in and money-out stage is where a dishonest operator has the most to gain and the least to explain.
Where the money goes
A deposit address should be stable and should match the address the bot publishes on its own site. Two things break that:
- The address changes between deposits. Sometimes a new address is normal (rotating deposit wallets exist), but the bot's documentation should say so and the address should always sit under the same operator.
- The address differs from the one on the bot's own site. Copy it yourself from the site, not from a pinned message or a DM.
A balance you cannot see anywhere else
If your balance appears only inside bot messages and never in your own wallet or on a block explorer, you are trusting a number, not a holding. Custodial bots do hold funds for you, so check the withdrawal terms before depositing, not after.
Rules that appear at withdrawal time
Watch for conditions that surface only when you try to leave:
| What appears | What it usually means |
|---|---|
| A new minimum withdrawal | The exit is being renegotiated after you deposited |
| A new fee | The published terms did not mention it |
| A "verification" step | Extra information or payment is being extracted |
| Approval by another person in the chat | Your money is not yours to move |
| Withdrawal released only after you invite someone | Recruitment, not trading |
A request to send funds to a personal wallet "because the bot wallet is congested" is a hard red flag. Real congestion shows up in fees and confirmation times, not in a change of recipient.
You should be able to answer two questions before you deposit: where does the money sit, and what do the published terms say about getting it back.
Normal bot behaviour that gets mistaken for a scam
A badly run bot and a fraudulent one are not the same thing. Several things that alarm people in a bot chat are ordinary parts of how these products work.
Wallet import is a design choice
Many trading bots create a wallet for you; others let you import one you already hold. Importing means putting a private key into a flow the bot documents on its own site. That is not the same as a stranger in a chat asking for your seed phrase. A documented import screen is a feature, an unsolicited message asking you to "validate" your wallet is not.
It is still a real custody risk. A bot that holds your key can move your funds, so know which model you are using, generated wallet or imported key, before you deposit. Bots that offer import are listed on /bots.
Fees differ by chain
Multi-chain bots often publish separate terms per chain. Sigma's fee documentation sets Ethereum, Base, BNB Chain, Avalanche and Unichain at 1% and Solana at 0%. Maestro's documentation states a 1% trade fee on every supported chain. Different rates across chains are normal pricing for a multi-chain product, not evidence of a bait and switch.
Referral terms are published in the same way: Bloom's fee docs state a 1% trade fee, 0.9% with a referral. A bot charging a fee is not a hidden charge when the fee is written on its docs page.
Congestion, failed swaps and downtime
Swaps fail on busy launches. Gas can spike, liquidity can disappear mid-transaction, and a bot can be slow or briefly offline. A failed trade costs gas, not your whole balance, and it is not evidence of theft.
Slippage and losses on a fast token
Buying a thin token and selling into a falling price is a loss. That is the market, not the operator. Trading memecoins can lose all of the money put in.
A handle that looks unusual
If a bot's handle carries a suffix or a number, the test is not how it reads but where you got it. The reference point is the handle published on the bot's own website. Trojan publishes @solana_trojanbot, Maestro publishes @maestro, BONKbot publishes @bonkbot_bot, and each is the handle to check against.
The short list of things that are not red flags on their own
- A documented wallet import flow, as long as you accept the custody risk.
- Per-chain fees that differ between Solana, Ethereum, BNB Chain and Base.
- A published trade fee, and a published referral discount applied to it.
- Failed swaps or downtime during a crowded launch.
- An odd-looking handle that matches the bot's own website.
Feature pressure: copy trading and sniping sold as an edge
Copy trading and sniping are real features on real bots. The pressure starts when a feature is described as an outcome: guaranteed early entry, risk-free positioning, a way to win back a balance that has already fallen.
The shape of the pitch
Watch for framing rather than mechanics:
- A claim of entry "before everyone else", with no mention of what happens after entry.
- Copy trading described as following smart money, never as copying another trader's losses.
- Sniping offered as recovery: keep going, and the next launch fixes the last one.
- Screenshots of a single win, pinned and repeated, with no losing example beside it.
None of that describes how the tool works. It describes how the seller wants you to feel about it.
Why it is a sales signal, not proof of fraud
The feature may function exactly as advertised and still lose money. A bot executes trades; it does not choose outcomes. A sniped token can fall the moment after you buy, and copying a wallet copies every decision in it, including the bad ones. A bot cannot remove market risk, and framing a feature as certainty is how pressure gets applied to people who are already down.
Compare the description with the published terms
Open the bot's own documentation and read how it describes the feature next to the terms it publishes: fees per chain, wallet model, withdrawal rules. A bot that publishes those plainly, and markets the feature as a tool rather than an edge, is doing the ordinary thing. Pages like /feature/copy-trading and /feature/limit-orders show which bots offer these features; the bot's own docs show whether the language matches the product.
The marketing can be dishonest about outcomes while the product remains legitimate. Judge the claim, then judge the terms.
One hard flag is enough: what to do next
You saw one hard signal. That is enough. Do not finish the deposit you were halfway through, and do not send a small amount "to test" whether the bot is honest after all. A test deposit is still a deposit, and it confirms your wallet to whoever is on the other side.
In the first minutes
- Stop depositing. No top-ups, no top-ups to "unlock" a withdrawal, no payment to a new address because the old one "migrated".
- Withdraw a small test amount first, before any larger move. Confirm it arrives in a wallet you control, one whose key the bot has never seen, before you touch the rest.
- Revoke token approvals where the chain allows it. Then move remaining funds to a fresh wallet.
- Leave the group and stop the bot. Do not argue with the admins about it. A debate gives them time and tells them what you already know.
- Keep the record: message screenshots, the exact handle that contacted you, transaction hashes and the deposit address you were given.
If a seed phrase or private key was shared
Treat that wallet as compromised from that moment. Anyone holding the phrase can move everything in it, whether or not the balance still shows inside the bot. Create a new wallet, move out whatever remains, and stop using the old address for anything.
Withdrawal gated behind a new payment
Do not pay it. A demand for a "release fee", "tax" or "verification deposit" before your balance can leave is one of the clearest hard signals there is. Close the chat instead.
Verify before you deposit, in one pass
One pass through the bot's own website answers the question the chat raised.
Take the handle from the bot's own site
Open the bot's website yourself and copy the Telegram handle from there. Not from a search result, not from a forwarded message, not from a pinned post in a group, and not from an admin who messaged you first.
Bots that publish an official handle include Banana Gun (@BananaGun_bot), Bloom (@BloomSolana_bot), BONKbot (@bonkbot_bot), GMGN (@GMGN_sol_bot), Maestro (@maestro), Pepeboost (@pepeboost_sol_bot), Sigma (@Sigma_buyBot), Trojan (@solana_trojanbot) and Unibot (@unibotsniper_bot).
BullX, Looter, MevX and Shuriken do not state a handle in their documentation. If you use one of them, confirm the handle on the bot's own site and ignore any handle that was sent to you in a chat.
Check the terms against what the chat told you
Read the published trade fee, the chains it applies to and the withdrawal rules. If the chat quoted a different fee, offered a discount the docs never mention, or described withdrawal conditions you cannot find on the site, stop there. Compare the written terms, not the promises.
Check the wallet model
Establish whether the bot generates a wallet for you or expects an imported key. If it holds your key, its downtime, a chain outage or a shutdown is your exposure. Know what happens to your funds if the bot goes offline before you send anything.
Then compare
Start at /bots for the full list. Bots whose handles and terms are published and checkable are on /bot/banana-gun, /bot/trojan, /bot/maestro, /bot/bonkbot, /bot/gmgn and /bot/sigma. For the sales pressure built around copy trading and sniping, see /feature/copy-trading and /feature/limit-orders. Put two bots side by side and pick the one whose handle, terms and wallet model you have confirmed yourself.
Frequently asked questions
How can I tell if a Telegram trading bot is a scam?
Use the bot's own website to get its official Telegram handle, then open that handle manually; impersonator bots are common. Read the fee docs before depositing and compare the quoted fee with what the bot charges. A legitimate bot does not ask for your seed phrase. Treat unsolicited messages, bonus offers, urgent deadlines and requests to pay a fee before withdrawal as stop signs. Start with a small amount you can afford to lose, because a bot that holds your private key can lose your funds. If anything feels off, stop and verify again.
Do real trading bots ever ask for a seed phrase?
No. A seed phrase controls your whole wallet. No trading bot needs it to execute trades, and you should never share it with anyone. A bot that asks for a seed phrase, even to "restore," "validate" or "sync" your wallet, is not safe to use. Close the chat and open the bot only through the official handle listed on its own website. If you already shared a seed phrase, move remaining funds to a new wallet immediately. A bot that holds your private key can lose your funds.
A bot messaged me first with a bonus and a link. Is that normal?
Not normal. A first message with a bonus and a link is a common impersonation pattern. Official bots do not need to cold-DM you to offer a bonus; a message that arrives first is a reason to slow down, not click. Close the chat, go to the bot's own website, and open the official Telegram handle yourself. Do not connect your wallet from a link in a direct message. If the account is not the official handle, block it. Bonus pressure plus a link is a stop sign.
The admin says I need to pay a fee before my withdrawal is released. Is that standard?
No. A fee that must be paid before a withdrawal is released is a classic scam pattern. A published trading fee is charged on trades; it is not a separate payment to an admin to unlock a withdrawal. Check the bot's own fee docs and open the official handle from its website. Do not send crypto to a wallet address from a chat admin. Stop, verify the handle, and treat any payment request as a reason to withdraw what you can and leave.
The bot's fees are different on Solana and Ethereum. Is that a red flag?
No. Chain-specific fees are common. Sigma's fee docs list a 0% Solana trade fee and a 1% Ethereum trade fee. Banana Gun's published fees list a 0.5% Ethereum trade fee and a 1% Ethereum snipe fee; its Solana trade fee is 1%. Bloom's fee docs state 1% on every supported chain, or 0.9% with a referral. The red flag is a quoted fee that does not match the bot's own docs, or a request to pay a fee to a person instead of through the bot.