1. A counterparty chooses the escrow
The oldest scam in the category: the buyer or seller insists on a specific escrow service, gives you a link, and pressures you to sign up. That "escrow" is a site the scammer controls — often a copy of a real service with the wallet address swapped. Insist on picking the escrow yourself, or on using one you have used before.
2. The escrow domain is one letter off
Lookalike domains (safeescrow.io vs safeescow.io, admindiyar.com vs admindyiar.com) are the second-most-common vector. Copy the domain from the counterparty's link, paste it into a plain notepad app, and compare character-by-character to the legitimate site.
3. The wallet address changes between messages
Real escrow wallets are stable. If the address you were told to send to changes the second time you ask — or is different in the Telegram chat than on the site — the address is being swapped in real time by a scammer or malware. Stop the trade immediately.
4. The "admin" only exists on Telegram
A legitimate escrow has a real domain, a business email you can send to and get a reply from, and human contactable outside a single Telegram handle. If the admin has no footprint anywhere except a chat account created last week, that is the entire business.
5. You are asked to send a "verification deposit"
Any request to send a small deposit "to verify your wallet" or "to activate the trade" before the counterparty sends anything of theirs is a scam. Real escrows never verify wallets by asking for money.
6. Screenshots are the only proof
Payment screenshots can be edited in under 30 seconds. TRC-20 transactions have a public TXID and can be verified on TronScan by anyone. If the counterparty (or the escrow itself) will not give you a TXID, the deposit is fictional.
7. Extreme time pressure
"The buyer has to leave in 20 minutes," "the price expires tonight," "another buyer will take it if you don't decide now." Urgency is the scammer's most important tool because it prevents you from verifying anything. Real deals wait an hour.
8. The escrow refuses a video call
Not every escrow does video calls, but any escrow that flat-out refuses a live walkthrough of their wallet dashboard on a first trade is worth avoiding. Human coordinators expect friction on the first deal.
9. Payment must be in a stablecoin the escrow "prefers"
Legitimate services list which currencies they accept on their public site. If a chat suddenly steers you to a coin you have never heard of, hosted on a network the escrow's site does not mention, you are being funneled into a wallet the scammer controls that has nothing to do with the real service.
10. The dispute policy is missing or vague
Real escrows publish exactly how disputes are resolved: what evidence they accept, who mediates, and how long it takes. A service whose dispute page is a single sentence or missing entirely has no mediation capability. Which means when anything goes wrong, you are on your own.
The simplest counter-play
- Slow every step down by 15 minutes.
- Verify wallet addresses and domains from two devices.
- Insist on a TXID for any claimed deposit.
- Assume every screenshot is fake until proven otherwise.
These four habits alone would prevent the majority of escrow scams that actually get reported. The scammers rely on a hurried victim. Not being that victim costs almost nothing.