Fake Crypto Payment Screenshot Scams and How to Stop Them
How fake crypto payment screenshot scams work, from edited receipts and borrowed TxIDs to fake tokens, plus simple rules that keep crypto sellers safe.
Fake crypto payment screenshots are one of the most common scams small businesses face when they sell for crypto. The "customer" sends an image as proof of payment ("I paid, here's the receipt") and asks for immediate delivery, having paid nothing or far less than the price. This article shows what these attempts look like and how one simple rule protects you from all of them.
How the fake screenshot scam works
The scammer's goal is to get you to deliver without checking whether the money actually arrived. They have several tactics.
1. An edited wallet screen
A wallet app's "sent" screen can be faked in minutes, with the amount, address and date changed at will. The result can be indistinguishable from the real thing.
2. A real but unrelated transaction ID
The scammer sends the TxID of a transaction that genuinely exists on the blockchain but has nothing to do with you. A seller who sees "success" in a block explorer may be convinced without checking whether it went to their address.
3. An exchange withdrawal that's still "processing"
They send a screenshot of an exchange withdrawal marked "processing" or "pending". That withdrawal may never complete, may be cancelled, or may be heading to a completely different address.
4. A short amount or the wrong coin
The customer really does send something, but a much smaller amount or a different coin. The screenshot shows a successful transaction, with the amount cropped out.
5. A fake token
Anyone can create a token on TRON and call it "USDT". A transfer that shows up in a wallet as "100 USDT" may be a worthless imitation rather than real USDT.
6. Urgency and pressure
Almost every attempt comes with pressure: "I need it now", "I've paid, why haven't you sent it?", "I'll leave a bad review". The point is to leave you no time to check.
Who gets targeted most?
This scam mostly targets sellers who track payments by hand:
- people selling through Telegram, Instagram or WhatsApp
- sellers who share one wallet address and check payments by eye
- anyone selling digital goods, in-game items or accounts, where delivery is instant and can't be undone
We covered the benefits of payment links for social selling in crypto payment links for Telegram and Instagram sellers.
The golden rule: a screenshot is not proof of payment
The most effective protection is one rule: confirm payments from what your own system shows, never from an image the customer sends.
With MercanPay, the source of truth is clear:
- The invoice status in the panel. If the invoice is paid or overpaid, the payment is final after 20 block confirmations and credited to your balance. If it's pending or partial, the payment isn't complete, whatever the customer sends you.
- The signed webhook. If your site is integrated, fulfil orders only on an
invoice.paidorinvoice.overpaidevent with a verified signature. See crypto payment webhook events. - An API query. If needed,
GET /v1/invoices/by-order/{order_id}returns the invoice's current state.
Invoices have one more advantage: fake tokens don't pay them. An invoice is only paid with real USDT (TRC20) or TRX, so an imitation token named "USDT" leaves the invoice status unchanged. A short payment leaves it "partial", as explained in handling underpayments, overpayments and late payments.
A browser redirect is a screenshot too
The same logic applies to websites. After paying, the customer's browser is redirected to your success_url with parameters such as status appended, and those parameters can be edited by hand. Fulfilling an order because someone reached that page is the same mistake as trusting a screenshot.
Checking a TxID properly
If a customer sends a TxID and you want to check it, "was the transaction successful?" isn't enough. You also need to confirm:
- Is the recipient address the invoice's address?
- Is the coin real USDT or TRX?
- Does the amount match the invoice?
Doing all three by hand is slow and error-prone, and the invoice system already does it for you, so the easiest check is still the invoice status in the panel. MercanPay's GET /v1/chain/transactions/{txid} endpoint shows a transaction's on-chain status, but a confirmed transaction doesn't mean the money went to your invoice.
A simple process for your team
If several people handle sales, put these rules in writing:
- Only the panel or your system approves delivery. A support agent's "looks like it arrived" isn't enough.
- One invoice per order. Never reuse an address or link for several customers, so there's never a dispute over whose payment is whose.
- A ready answer to pressure. Give the team a polite but firm standard reply for pushy customers.
- Log suspicious cases. Note accounts that try the same trick.
A reply you can send:
Thanks for your message. Orders are processed automatically as soon as the payment is confirmed in our payment system. We'll let you know the moment your payment confirms on the network, which usually takes about a minute.
Staying safe without offending real customers
Plenty of honest customers send a screenshot after paying too. It's a well-meant habit, not bad faith. The goal isn't to accuse anyone but to let the system speak. With an invoice-based flow, payments usually become final in about a minute, and the payment page itself tells the customer "Payment detected · confirming". The customer can see what's happening while they wait, and you can wait with confidence.
FAQ
The customer sent a screenshot but the invoice is still "pending". What now?
Don't deliver. The transaction may not be confirmed yet, may have gone to the wrong network or address, or may never have happened. Ask the customer to check the address and network on the invoice. For network mix-ups, see crypto sent to the wrong network.
The invoice is "partial" but the customer says they paid in full.
Their exchange may have deducted its withdrawal fee from the amount. The payment page shows what's left, and the customer can send the rest to the same address.
Would a payment in a fake token reach my balance?
No. Only real USDT (TRC20) and TRX payments are credited to invoices and your balance.
Can the customer pull the money back after it's confirmed?
No. A final crypto payment can't be reversed unilaterally. More in what "no chargebacks" really means.
Get started with MercanPay
For a sales flow built on verified payments rather than screenshots, open your merchant account. Integration details are in the documentation.
