NFT Scams Targeting Artists on Instagram: How They Work

TL;DR

• The pitch is flattery plus money. A “collector” DMs you on Instagram, praises your work and offers a large sum, often in ETH, to buy it as an NFT.
• The catch is always an upfront payment or a wallet action. You are asked to pay a “minting” or “gas” fee, log in on a marketplace you have never heard of, “sync” your wallet or scan a QR code.
• Real buyers do not need your seed phrase. OpenSea and MetaMask both say plainly that they will never ask for it, and that anyone who has it controls your wallet.
• You can usually walk away at no cost. Stop replying, do not click, report the account. If you already paid or connected a wallet, move fast: new wallet, report to the platform and to the police.
• Report it officially. In the US that means the FBI’s IC3 at ic3.gov. In the EU, Europol points you to your national police reporting site.

Contents

1. Why scammers target artists
2. The six common patterns
3. How each scam works step by step
4. Red flags at a glance
5. What the platforms themselves say
6. What to do if you were targeted
7. FAQ

If you post your art on Instagram, sooner or later a stranger will tell you it is brilliant and offer you thousands for it as an NFT. The sums can be very large. The message is almost never a real offer. It is the first step of a script that ends with you paying a fee, handing over wallet access, or both. This guide explains the common versions, how each one works, and what to do if one lands in your inbox.

Why scammers target artists

Artists are an ideal audience for this script. Your work is public, you are easy to contact, and a message saying “I love your piece and want to buy it” does not look strange. It looks like a good day.

The NFT angle adds a second advantage for the scammer: many artists do not use crypto. That knowledge gap leaves room for invented fees and invented steps. A March 2026 warning from bbk berlin describes exactly this: “collectors” who are enthusiastic but vague about the work, who insist on a specific platform “at the latest in the second step”, and who quote an “unusually high purchase price in Ethereum (ETH)”. The organisation’s advice is short: be sceptical of offers to buy art as NFTs, examine each offer, and make no advance payments under any circumstances.

The six common patterns

Most NFT scams aimed at artists are combinations of the same few building blocks.

How each scam works step by step

1. The fake buyer. You get a DM from a profile that looks like a collector, a gallery or a curator. It praises your work in general terms and offers a large amount, often in ETH. The only goal at this stage is to keep you talking.

2. The upfront fee. The buyer explains that before the sale, your work must be “minted” as an NFT, and that this costs a fee. Sometimes they call it gas. The fee is real money from you; the payment never arrives. Blockchain fees do exist, which is why the story sounds plausible. But a buyer who wants your work has no reason to make you pay a stranger’s platform first.

3. The fake marketplace. You are sent a link to a site that looks like a known NFT marketplace, or to a “new” platform the buyer insists on using. The FBI’s 2023 alert on NFT phishing describes this mechanism: victims follow links to a fake site, connect their wallet, and “unknowingly connect their cryptocurrency wallets to a drainer smart contract.” Look at the web address. OpenSea warns that lookalike sites often have a name that “looks official but the web address has typos or duplicates.”

4. Wallet “sync” and QR codes. This one often starts after you ask a question in a public channel, such as an NFT project’s Discord. A helpful stranger DMs you. Whatever your problem was, the fix is the same: “synchronise” your wallet, “validate” it, run a “migration”, or scan a QR code that opens a wallet connection. These are not repairs. They ask you to approve a connection or signature that lets someone move your assets. OpenSea’s guidance on staying safe on Discord and social media notes that “most scam and phishing attempts begin through DMs” and lists asking you “to sign any message with your wallet” as something its staff will never do.

5. Seed phrase phishing. A “support agent”, a “verification bot” or a form on a fake site asks for your seed phrase (also called a secret recovery phrase). MetaMask is blunt about what that means: “Anyone who can access your SRP can control your funds.”

6. Fake verification. Here the target is your Instagram account, not your crypto. You are told your account or the sale must be “verified”, and you are sent to a login page. If you enter your password, the scammer can take over your account and use it to run the same script on your followers. Meta’s scam tips advise you to “be suspicious before entering your social media or other online login and password when someone asks you to enter.”

Red flags at a glance

What the platforms themselves say

Both marketplaces and wallet providers publish clear rules about what they will never do. If a message contradicts them, it is not from them.

The FBI’s checklist from the same 2023 alert adds two practical habits: check that the account contacting you is the legitimate one, and check the website’s domain for misspellings or extra characters.

What to do if you were targeted

If you only received the message: do not reply, do not click, and report the account to Instagram using the report option on the message or profile. Block it. That is the whole job.

If you clicked a link or entered your Instagram password: change your password from inside the Instagram app, turn on two-factor authentication, and check that your email and phone number on the account are still yours.

If you connected a wallet, signed something or shared your seed phrase: treat the wallet as compromised. OpenSea recommends “installing a new wallet, and moving your items to it ASAP.” Never reuse the old seed phrase. Be wary of anyone who then offers to “recover” your assets for a fee, which is a common second scam.

If you sent money: report it to the police. Collect screenshots, the scammer’s profile name, links, wallet addresses and transaction IDs first.

• United States: file a complaint with the FBI’s Internet Crime Complaint Center at ic3.gov. The FBI asks you to include links, social media accounts, crypto accounts and domains, and the keyword “NFTHack” for NFT cases.
• European Union: Europol’s reporting page sends you to each country’s own reporting site and notes that “reporting mechanisms vary from one country to another.” Where there is no online option, it advises going to your local police station.
• Elsewhere: contact your national police or cybercrime unit, and your bank if you paid by card or transfer.

FAQ

About the Author

Vyara Stefcheva

Vyara Stefcheva is the founder and editor of Egorithms and an independent marketing expert. She follows how technology, AI and algorithms change the way people find, choose and buy, and writes about what that means for businesses and for the people who use them.

She has spent her career building marketing and business strategies for more than 300 brands across three continents. She built and exited a marketing agency and now works independently. She has taught more than 20,000 people through lectures, courses and corporate training, and speaks at conferences about AI and the future of the internet.

On her YouTube channel she tests new AI and marketing tools as they launch and gives each an independent verdict: adopt, watch or ignore.

See author's posts