Crypto scams in Kosovo, and how to see them coming

Verified on 20 October 2026 · CryptoKosovo editorial team

Crypto fraud in Kosovo is not an abstract internet problem. It has happened in a bar in Ferizaj, in an illegal call centre in Pristina and on the phones of people who received a text that looked like it came from their bank. Most schemes follow the same script: a big promise, artificial urgency and a payment you never get back. This guide brings together cases reported by the police and Kosovo media, explains the schemes that show up most often and sets out what to do in the first hours if you become a victim, whether you live in Kosovo or are dealing with Kosovo contacts from abroad.

What has actually happened in Kosovo

The cases below come from police and prosecution announcements and from Kosovo media. We describe them without names: the aim is to understand the scheme, not to convict people a court has not yet ruled on.

1. Aug 2024A Pristina resident reported losing around €50,000 in a crypto “investment” that turned out to be fraud (Bota Sot, 22 Aug 2024).
2. May 2025Police uncovered an illegal call centre in Pristina offering fake crypto investments; three people were arrested.
3. 17 Apr 2026In Ferizaj, three people hoping to buy USDT with cash lost €12,000. According to the indictment, they were led into a room and the money was taken through a hole in a cabinet.
4. 29 Apr 2026The same group allegedly attempted a similar €50,000 scheme in Kaçanik.
5. 30 Apr 2026Arrests in the Ferizaj case (reported by Koha).
6. 22 May 2026Prosecutors file an indictment (KosovaPress).
7. Jul 2026Balkan Insight reports an investigation into a suspected network using crypto for terrorist financing.
8. Aug–Sep 2026The CBK warns the public about fraudulent text messages and “investment groups” (Epoka e Re, Periskopi).

The wider trend is not encouraging. According to Radio Free Europe’s Albanian service, 336 fraud cases had been reported by July 2026, against 349 in the whole of 2025. Those figures cover all types of fraud, not only crypto, but they suggest 2026 will comfortably exceed the previous year.

Ferizaj, April 2026

€12,000taken at a cash meetup

Fraud cases

336Jan–Jul 2026, all types

All of 2025

349per RFE/RL

CBK cash cap

€1,000above it, licensed operators need a bank transfer

The scammer’s playbook: five schemes seen in Kosovo

Fake investment platforms and call centres. It starts with an ad on Facebook or Instagram, often using a well-known face, or a call from an “account manager”. You are guided to install an app or open a professional-looking site where your balance grows every day. The profit exists only on screen. When you try to withdraw, you suddenly owe “tax”, a “verification fee” or “insurance”. The €50,000 Pristina case and the call centre uncovered in May 2025 were both reported as “investments” of this kind.

“Signal” groups. Telegram, WhatsApp and Facebook groups (often called “sinjale” in Albanian) promise weekly profits from following an expert’s trading calls. At best you pay for expensive subscriptions. At worst the group is a pump and dumppump and dumpOrganisers buy a small coin, push members to buy it to lift the price, then sell into that demand and the price collapses., with organisers selling at the very moment members buy.

Fake support and recovery services. Post publicly about a problem with an exchange and within minutes someone claiming to be “support” messages you. They ask you to “verify your wallet” or hand over your seed phraseseed phraseThe 12 or 24 words that unlock your wallet. Whoever has them owns your crypto. No legitimate service will ever ask for them.. A harsher variant targets people already scammed: “lawyers” or “ethical hackers” promising to recover the money for an upfront fee.

Text messages and phishingphishingA fake message or website imitating a bank, exchange or authority to steal your password, one-time code or card details.. Messages that look like they come from your bank, an exchange or an institution, with a link to “unlock your account”. The page copies the original and captures your login or SMS code. The CBK warned the public about such messages in August and September 2026.

Cash meetups. The scheme behind the Ferizaj case, explained in the next section.

Scheme	First contact	What they want	Giveaway
Fake investment platform	Ad, call from a foreign number	A deposit, then “fees” to withdraw	You cannot withdraw without paying again
Signal group	Telegram, WhatsApp, Facebook	Subscription or buying a tiny coin	“Guaranteed” weekly returns
Fake support	Private message after a public post	Seed phrase or a remote-access app	Real exchanges never message first
Recovery scam	Contact after you have lost money	An upfront fee	Promises a certain result
SMS phishing	Text with a link	Password, SMS code, card	Link is not the official domain

Cash meetups and P2P trades: where money disappears fastest

The Ferizaj case shows the local risk clearly. The buyers found a USDT seller who accepted cash, met in a bar and were invited into a room to complete the exchange. The cash went through a hole in a cabinet and the USDT never arrived. The scheme works because the sums are large, cash leaves no trail and the buyer is chasing a slightly better rate than an exchange office offers. Under CBK rules, licensed operators no longer take cash above €1,000, so anyone offering you €10,000 of USDT for cash in a café is operating outside the rules.

On online P2PP2PPeer-to-peer: buying crypto directly from another person, with the platform holding the seller’s coins until you pay. marketplaces the risk is smaller but real. The platform holds the seller’s coins in escrowescrowThe platform locks the seller’s crypto and releases it to the buyer only once the seller confirms receiving payment., yet it cannot see where the payment comes from. In a scheme known as triangulation, the scammer convinces a third victim to pay you for a fictitious item while the scammer collects your crypto. When the victim realises, they complain to their bank, and the account at risk of being frozen is yours. The rule: accept payment only from an account in the same name as the buyer’s verified profile. Our P2P crypto guide for Kosovo covers how it works and real prices, while licensed crypto exchange offices are the walk-in alternative.

Flash USDT, copycat tokens and “national coins”

“Flash USDT” is sold in Telegram groups as software that “generates” USDT, or as USDT at half price. In reality it is either a worthless tokentokenA crypto unit created on top of an existing blockchain. Anyone can create one and give it any name. named USDT that shows up in your wallet, or a transaction that looks successful for a few minutes and then vanishes. Real USDT is issued only by Tether. Always check the contract address and network, as explained in our USDT guide.

The same logic applies to tokens with reassuring names. On BNB Smart Chain there is, for example, a token called “Kosovo coin”. Kosovo uses the euro and the CBK has not issued any digital currency, so any token carrying the country’s name is a private project guaranteed by nobody. That does not automatically make it a scam, but the name protects you from nothing. The same caution applies to anyone using the name of a popular project, Pi Network included, to sell you “early access”, “migration” services or above-market buy-backs.

Eight red flags that should stop you

If you notice one of these, pause before paying. If you notice two, walk away.

• You are promised a guaranteed return or a fixed “weekly” profit.
• They contacted you first, by phone, text or private message.
• You are pushed to pay today because “the price rises tomorrow” or “places are limited”.
• You are asked for your seed phrase, an SMS code or to install a remote-access app.
• You must pay a “fee”, “tax” or “insurance” to withdraw your own money.
• The seller only takes cash, in a private place, for more than €1,000.
• The company is not on the CBK list and shows no licence you can verify abroad.
• Payment arrives from an account in a different name from the buyer you dealt with.

Verify a provider before you hand over money

In Kosovo, anyone exchanging crypto for euros as a business has needed a CBK licence since 1 March 2026. The CBK list dated 15 October 2026 contains one crypto operator: CoinPrime SH.P.K., based in Ferizaj. The list is public on the CBK page for licensed institutions and checking it takes two minutes; our guide to whether crypto is legal in Kosovo walks you through it.

Global online exchanges do not appear on the CBK list because they have no Kosovo entity. For those, check the licence on the register of the regulator they name, not on their own website. We have done this for the main platforms in our exchange reviews. A “platform” licensed nowhere, which you found through an ad featuring a celebrity, does not need a second check.

Been scammed? What to do in the first hours

Speed matters, but panic leads to a second mistake. Follow this order:

1. Stop all further payments

   Do not pay any “withdrawal fee”, “tax” or “penalty”. Each new payment only adds to the loss. Cut contact with the scammer.

2. Preserve the evidence

   Screenshot chats, profiles, websites and balances. Note phone numbers, usernames, wallet addresses, transaction hashes and the IBANs you paid. Do not delete conversations.

3. Call your bank immediately

   If you paid by card or transfer, ask for the card to be blocked and whether the payment can be stopped. Change passwords if you shared login details.

4. Report to Kosovo Police

   Go to the nearest station or call 192. Get a copy of the report; your bank and the exchange may ask for it. If you live abroad, also report to the police where you live.

5. Notify the exchange

   If the crypto passed through an exchange, send the transaction hash and the scammer’s address to its official support, from inside the app. Exchanges sometimes freeze funds that arrive in identified accounts.

6. Complain to the CBK if a licensed institution is involved

   If the issue involves a Kosovo bank or licensed operator, complain to the institution first, then to the CBK’s consumer protection unit.

If you are just starting and want your first purchase without these risks, our step-by-step guide to buying Bitcoin in Kosovo covers the account, verification and moving coins into your own crypto wallet.

Crypto scams in Kosovo: frequently asked questions

Sources and verification

1. KoSSev — Arrests over Ferizaj USDT fraud and Kaçanik attempt (citing Kosovo Police)
2. KosovaPress — Indictment in the Ferizaj crypto fraud case (Albanian) — 22 May 2026
3. Radio Free Europe (Albanian) — Online sellers targeted by fraudsters — 12 Jul 2026
4. CBK — List of licensed financial institutions — list dated 15 Oct 2026
5. CBK — Law No. 08/L-295 on Crypto-Assets (PDF, English)
6. Central Bank of the Republic of Kosovo