A burned copy-trader asked where to invest next, and the reply with the most votes was three words long. It is nearly right, and nearly is the problem: a rule that names a venue cannot tell the next scheme from the one operation you could actually check.

The answer with the votes

A reader on r/CryptoScams had lost about $17,000 when a copy-trading platform shut down with his money inside. He asked the subreddit where he should invest next. The reply that collected the most votes in the thread - 18 - was three words long.

"Crypto. Telegram. Always a scam." - u/Infinite-Grade-4485, the top comment in the thread

A different reader offered a different rule: "Legitimate traders and financial advisors do not contact people randomly."

The first answer deserves better than debunking, because it is nearly true, it costs nothing to apply, and it would have saved the poster his $17,000. What it cannot do is tell him anything about the next pitch, and there will be a next pitch. How he got into the first one - the balance screen, the small withdrawals that convinced him - is a separate subject. This article is about the advice he received afterwards.

What the three-word rule gets right

Treat "always a scam" as a classifier and score it against our own data. Of the 47 Telegram channels in our index, fewer than half publish calls complete enough for us to parse at all. We went through the others by hand and signed a verdict on each: promotional funnels and results-only showcases account for thirteen of them, commentary and entries published without a stop for the rest - the full accounting is in how we verify a signal channel. A reader who deleted every signal channel from his messenger tomorrow would lose access to very little.

So the heuristic makes a good spam filter. Its false positives are cheap: it discards some honest channels along with the rest, and honest channels were never what anyone was drowning in. If the choice is between "trust nothing on Telegram" and the way most subscribers actually choose - screenshots, vibes and subscriber counts - the three words win comfortably.

That is the whole defence of the rule. As a prior it is roughly calibrated. As a method it stops working the moment anything changes, and something always changes.

Where it stops protecting anyone

A rule that names a venue can only fire when the venue matches, and the schemes it aims at are the part that moves. The SEC's investor alert on group-chat scams describes operations that recruit through paid social-media ads into WhatsApp groups. The scheme we walked through step by step recruited on WhatsApp and finished on BonChat, an app most of its victims had never heard of. Zoom seminars, Discord servers and "mentors" who open with a wrong-number text all run the same script. The person who has internalised "Telegram = scam" is protected on exactly one app.

There is a worse failure hiding inside it. The rule throws away the one arrangement in which lying is detectable - a public feed, written down before the outcome - and leaves standing everything that merely looks respectable. A licence in a PDF, a company website, a professional-sounding fund: none of these can be replayed against anything. The poster in the thread did his losing on a platform with a working website and a support desk. The heuristic that damns every messenger channel had nothing to say about it.

The stronger rule was sitting right under it

The second reply - legitimate traders do not contact people randomly - is built differently. It names a behaviour instead of an address, and behaviours travel with the operator. Someone who messages ten thousand strangers has paid to reach them and intends to make that money back out of them. The direction of first contact is real evidence, on any platform, in any year. The SEC's alert shows the same thing from the enforcement side: the defendants it describes recruited their victims through ads; the victims had gone looking for nothing.

This rule is still a heuristic. A channel you found by searching can be garbage, and a cold message can, rarely, come from someone real. But it fails less often than the venue rule, because it is attached to the economics of the operation instead of its current address.

The variable that separates the cases

Neither reply names the thing that actually divides checkable operations from uncheckable ones. That thing has three parts, and no part mentions a platform:

  1. The record exists before the outcome. A call published at 14:02 with an entry, a stop and a target is a prediction. A screenshot posted after the move is a story.
  2. The record cannot be quietly rewritten - or rewriting it leaves a trace that someone else keeps.
  3. The record can be tested against data its author does not control. Exchange candles qualify: nobody who runs a channel gets to redraw them.

Score a Telegram channel with an open feed against that list. Point one holds: posts carry timestamps the operator cannot backdate. So does point three: the calls name symbols and prices, and anyone patient enough can replay them against candles, which is what we do with every signal we parse. The weak spot is point two, because Telegram lets an author edit a message after posting and delete it for everyone, and a newcomer scrolling the feed sees only the current text. What one edited entry does to a track record is its own article. Our answer to it is a snapshot: we store each signal as first seen, re-read recent messages at the source, and a channel's page shows a count of signals whose text no longer matches what was originally published. Since 29 August that snapshot has a second half. Each day's digests go into a Merkle root written to a contract on Arbitrum, and the contract refuses a second root for a day it already holds - so what we wrote down yesterday sits somewhere we cannot quietly move it either. Every anchored signal has a page carrying the exact bytes, their hash, the branch of the tree and the transaction that holds it; checking one takes a block explorer and no permission from us.

Now run the same scoring on the operation the poster actually used. A platform with a website, a balance page and a support desk publishes nothing before the outcome, keeps its books where nobody can read them, and offers no data anyone can replay. It fails all three points while wearing the costume of an institution. The messenger channel, for all the deserved contempt, at least does its lying in public, where the lie is stamped with a time and left where it can be caught.

Read the three answers in order

The venue rule sets your prior. On Telegram, in crypto, the prior should be grim, and our replay data says the grimness is earned.

The contact rule filters behaviour. If they found you - a direct message, an ad, a group you never asked to join - the conversation is over, whatever the venue.

The history test decides. Before any money moves, there is one question worth asking about the operation in front of you: where is the record that existed before I arrived, and who besides the operator can check it? A channel with an open, replayable feed gives one kind of answer. A fund with a brochure gives another. The three kinds of verification sort out who is doing the checking in each case.

When the answer comes back empty - no record, or a record that begins the day you ask - you have left evaluation and entered trust. That is the state the poster was in twice, and the state the top comment is written from. "Always a scam" is what checking sounds like after it has become impossible. The useful version of the advice sits one step earlier: go where checking is still possible, and then check.

Sources