Crypto Giveaway Scam Hits Betterment Customers

Betterment, a well-known U.S. digital investing platform, has confirmed a security breach after scammers used its systems to send fake crypto giveaway messages to customers.

The attack caused confusion and concern after users began receiving push notifications from the Betterment mobile app and emails that looked legitimate.

"third party system" that had enough access to push notifications through your own app? Sounds like straight bullshit y'all got social engineered through support lmfao pic.twitter.com/zB7KxC8ZXt

— Jared (@jareds3737) January 10, 2026

The messages promoted a classic “crypto giveaway” scam. Users were told that if they sent Bitcoin or Ethereum, Betterment would send back triple the amount.

The fake offer included specific wallet addresses and was said to be valid for only a few hours, creating urgency. Because the alerts came through Betterment’s official app and email system, many users initially believed the messages were real.

One user shared a screenshot of the push notification, which reads, “For example, if you send $10,000 in Bitcoin or Ethereum, we’ll send you right back $30,000 to your sending Bitcoin or Ethereum address.”

How the breach happened

Betterment later explained that an unauthorized individual gained access to a third-party marketing and communications tool the company uses. 

This allowed the attacker to impersonate Betterment and send messages directly to customers. The company said the unauthorized access has been removed and that an investigation is ongoing.

On January 9, an unauthorized individual gained access to certain Betterment systems, which allowed them to represent themselves as Betterment and send a fraudulent crypto offer to some customers. This is not a real offer and should be disregarded.

— Betterment (@Betterment) January 10, 2026

Public warnings were issued on X and Reddit within hours of discovering the breach. Betterment emphasized that the crypto offer was fake and should be ignored. The company also said that clicking on the messages did not compromise user accounts, and there is currently no evidence that attackers accessed personal investment data.

Some users pointed out that the scam emails passed common security checks such as SPF, DKIM, and DMARC. This means the emails were officially authenticated by Betterment’s domain and were not simply spoofed messages. This has raised concerns about how trusted communication tools can be misused if a third-party system is compromised.

Lessons for crypto investors

Blockchain records show that the scam wallets did receive some funds before the warnings went out. As with most crypto scams, any money sent is unlikely to be recovered, since cryptocurrency transactions cannot be reversed.

This case illustrates the way in which scams in the world of crypto are developing. They are not just limited to fake websites and random phishing messages, but are often associated with legitimate companies and their platforms. This leads not only to a greater likelihood of success, but it is also extremely threatening for ordinary investors.

Also Read: Tether’s $182M USDT Freeze on Tron Reignites Centralization Concerns

---

---