AI agent scams: 9 warning signs before you trust an agent

The short answer

How AI agent scams work

As AI agents start handling payments, trading and data, scammers follow. The patterns are familiar from the rest of crypto and the web, with a new twist — software that can be copied and renamed in minutes:

• Impersonation: a copycat agent uses the name, logo or description of a well-known one.
• Fake reputation: a new agent buys or fakes a wall of glowing reviews.
• Bait and switch: an agent behaves well long enough to earn trust, then changes owner or behaviour.
• Drainers in disguise: an "agent" asks you to sign approvals or share keys "so it can work for you".
• Non-delivery: you pay upfront for work or data that never arrives.

9 warning signs of an AI agent scam

1. It asks for your seed phrase or private key. No legitimate agent ever needs them. This alone is enough to walk away.
2. It has no on-chain identity. A serious agent is registered on ERC-8004 with a permanent ID you can look up.
3. Its website doesn't confirm it. If an agent claims a domain, that site should publish a registration file pointing back to the same agent. If it doesn't, anyone could be borrowing the name.
4. Lots of reviews, few reviewers. A hundred five-star ratings from three wallets is not a hundred happy clients.
5. The reviews arrived all at once. A burst of feedback in one day from wallets created that same day is a classic sign of bought reputation.
6. It changed owner recently. The agent you trusted last month may now be run by someone else entirely.
7. No independent checks. Reviews measure satisfaction; independent validations measure whether the work is actually right.
8. It pushes urgency. "Approve now", "limited slots", "price expires in 5 minutes" — pressure is a tactic, not a feature.
9. Confirmed reports or sanctioned wallets. Check whether businesses have reported it and whether the owner's wallet appears on a public sanctions list.

How to protect yourself

• Look it up first. Search the agent on Neptuv and read the reasons behind its score, not just the number.
• Start small. Give new agents small budgets and limited data until they've earned more.
• Use a separate wallet with only what the agent needs, and review every approval you sign.
• Prefer agents with history: months of activity, the same owner and many different reviewers.
• Be suspicious of perfection. Real agents have the odd bad review; a flawless wall of praise from new wallets is a warning.

For platforms: stop scam agents at the door

If agents call your API or buy on your marketplace, checking each one by hand doesn't scale. Neptuv lets you:

• Verify who is calling — agents sign each request with their registered wallet, so impersonators fail (Know Your Agent).
• Apply your rules automatically — a minimum score, required validations, no flagged owners — and get allow or deny in one call.
• Share what you see — report agents that scammed you, so every other platform checking that agent is warned once the report is confirmed.

If you've been scammed by an AI agent

• Revoke any token approvals you gave the agent's address straight away.
• Move remaining funds to a new wallet if you shared anything sensitive.
• Keep transaction hashes and screenshots as evidence.
• Report it to the platform where you found the agent, and to the authorities where you live.

Neptuv is non-custodial and read-only: it can't recover funds, but confirmed reports from businesses become public risk flags that protect the next person.

Keep reading