Skip to main content
Crypto Life Church logoCrypto Life Church

For Leaders

Protecting Your Congregation From Crypto Fraud

A practical guide for faith leaders: leader impersonation, affinity fraud, and a simple safety plan any community can adopt.

By Crypto Life ChurchPublished 9 min read

Faith communities are built on trust. Members trust their leaders, trust one another, and want to help when someone is in need. Those are beautiful qualities, and scammers know how to exploit them.

This guide is for clergy, staff, board members, and volunteers at churches, mosques, synagogues, temples, gurdwaras, and other communities. It is not about whether anyone should use cryptocurrency. It is about protecting your members from people who use crypto to steal.

Key takeaways

  • Tell members clearly: our leaders will never ask you for gift cards, cryptocurrency, or urgent money transfers by text, email, or phone.
  • A familiar voice, email address, or account is not proof. Verify any request for money by calling a number you already know.
  • Require two people to approve significant payments, and verify any change to bank details, wallet addresses, or payment instructions.
  • If you accept cryptocurrency donations, publish your address only through official channels and check your QR codes regularly.
  • Be cautious when investment opportunities spread among members.
  • Respond to victims with care, not blame.

Why faith communities are targeted

The U.S. Securities and Exchange Commission explains that affinity fraud (opens in a new tab) targets members of identifiable groups, including religious communities, and that fraudsters may enlist respected leaders to spread the word. Many times, the SEC notes, those leaders become unwitting victims of the fraud they helped to promote. Our article on fake investments includes guidance for faith leaders on avoiding that trap.

Communities also have public information that scammers can use: leaders' names and photos on websites, service times, event announcements, and member directories. With these details, a scammer can sound convincingly like an insider.

Common scams that target congregations

  • Leader impersonation. A text, email, or social media message appears to come from a pastor, imam, rabbi, priest, or board member. It asks for a quick, confidential favor: buying gift cards, sending cryptocurrency, or paying an “urgent” bill.
  • AI voice cloning of leaders. A phone call or voicemail sounds exactly like your pastor, imam, rabbi, priest, or another leader, asking for money or an urgent favor. Recorded sermons, services, and videos posted online give scammers plenty of audio to copy. (See below.)
  • Hacked community accounts. Sometimes the message really does come from your community's own email or social media account, because a scammer has broken into it. (See below.)
  • Fake fundraising. A message asks for donations to a family in crisis or a disaster relief effort. Some legitimate charities do accept cryptocurrency; the warning signs are a request that is unexpected, urgent, or secret. Give through the charity's own official website or your community's known channels.
  • Swapped donation QR codes. If your community accepts cryptocurrency donations, a criminal may try to replace your QR code or address with one that sends gifts to their own wallet. (See below.)
  • Investment opportunities shared among members. A program promising steady returns spreads from member to member. (See Fake Cryptocurrency Investment Opportunities.)
  • Targeted scams against older members. Isolated or recently widowed members may be approached by romance or impersonation scammers. (See Crypto Scams Targeting Seniors.)

When a leader's voice can be copied

Many faith leaders are heard every week in livestreamed services, recorded sermons and lessons, podcasts, and social media videos. That public voice is a gift to a community, but it also gives scammers material to work with.

The FTC explains that in family emergency scams, a scammer needs only a short audio clip of a loved one's voice, which may come from content posted online, and a voice-cloning program (FTC (opens in a new tab)). The FBI has warned that criminals also use AI-generated audio to impersonate well-known public figures and personal relations to get people to send money (FBI/IC3 (opens in a new tab)). A respected leader can be both: a public voice and a personal, trusted one.

  • Don't trust the voice alone. A call that sounds like your leader is not proof that it is your leader, especially if it involves money, secrecy, or urgency.
  • Hang up and call back using the leader's or office's number that you already know, not a number from the call, voicemail, or message.
  • Agree on a verification step. The FBI recommends that families create a secret word or phrase to verify identity. Leadership teams and finance volunteers can use the same idea for any request involving money.
  • Remember the public promise. If your leaders have said they will never ask members for gift cards, cryptocurrency, or urgent transfers, that promise applies to phone calls too.

Communities don't need to stop sharing sermons or services online. The goal is to make sure members know that a familiar voice alone is never a reason to send money.

When the message comes from a real account

Checking the sender's address is a good habit, but it isn't enough on its own. If a scammer breaks into a leader's or office's email or social media account, their messages will come from the real, familiar address.

The FBI calls one version of this business email compromise (opens in a new tab): criminals take over legitimate email accounts, through trickery or hacking, and use them to request transfers of money. The FBI advises using secondary channels to verify requests for changes in account information. In practice:

  • Treat any unusual financial request as unverified until you confirm it by phone or in person, using a number you already know, even when it comes from a familiar address.
  • Be especially careful with messages that change how or where money should be sent.
  • If an account may have been compromised, change its password, turn on multifactor authentication (opens in a new tab), and warn members through a different channel.

If your community accepts cryptocurrency donations

Accepting cryptocurrency donations is a legitimate choice, and a donor who gives this way is not doing anything suspicious. If your community accepts them, the main risk is simple: a donation address or QR code that has been swapped for a criminal's.

The FBI warns that criminals tamper with both digital and physical QR codes (opens in a new tab) to replace legitimate codes with malicious ones, including to redirect payments. The FTC has reported scammers covering up real QR codes (opens in a new tab) with codes of their own.

  • Keep one master record. Store the correct, full donation address somewhere secure that more than one trusted person can check.
  • Publish only through official channels you control, such as your website and your own printed materials, and tell members where to find it.
  • Check published codes regularly. Scan each QR code with a phone and compare the full address it shows with your master record, not just the first and last few characters.
  • Inspect printed codes. The FBI advises making sure a physical QR code hasn't been tampered with, such as with a sticker placed on top of the original.
  • Never change the address because of a message. Treat a change to your donation address like a change to bank details: it needs two-person approval and independent verification.
  • Tell members what to expect. If a message or flyer shows a different address, members should check with the office before giving.

None of this makes cryptocurrency donations suspect. It simply means your donation address deserves the same care as your bank account number.

Warning signs to share with members

  • A leader asks for money, gift cards, or cryptocurrency by text, email, or direct message.
  • A phone call or voicemail that sounds like a leader asks for money or an urgent favor. Voices can be copied with AI.
  • A message from a familiar address asks for an unusual payment or a change in payment details.
  • The request is urgent and asks you to keep it private.
  • The message comes from a new number, a misspelled email address, or a duplicate social media account.
  • A donation QR code or address looks different from the one your community has published.
  • Someone promotes an investment within the community and promises steady or guaranteed returns.

Build a simple safety plan

You don't need a large budget or technical expertise. These steps work for communities of any size:

  1. 1Make a public promise. Announce regularly, in services, newsletters, and on your website, that your leaders will never ask members for gift cards, cryptocurrency, or urgent money transfers by text, email, phone, or social media.
  2. 2List your official channels. Share the phone numbers, email addresses, social media accounts, and (if you accept them) the cryptocurrency donation details your community actually uses, so members can spot impostors.
  3. 3Use a two-person rule for money. Require two authorized people to approve significant payments. Before anyone acts on a change to bank account information, a cryptocurrency wallet address, or payment instructions, verify it independently by calling the person or organization at a number you already have, never one from the request itself.
  4. 4Protect leaders' accounts. The Cybersecurity and Infrastructure Security Agency recommends strong passwords, a password manager, and multifactor authentication (opens in a new tab). Apply these to your community's email and social media accounts.
  5. 5Report impostor accounts. Report fake profiles to the platform and let members know quickly when one appears.
  6. 6Keep caring for the vulnerable. Pastoral care teams and volunteers who check in with older or isolated members are a natural line of defense.

Make scam awareness part of community life

One announcement is easy to forget. Short, regular reminders work better. Some communities mention scam safety a few times a year, for example before holidays, when giving appeals go out, or after a local news story about a scam.

Keep the tone calm and practical, never fearful. The message is simple: scammers may use our names and our trust, so we check before we send. Invite members to forward suspicious messages to a designated volunteer or the office, and thank them when they do. A member who asks “Is this real?” has done exactly the right thing.

If someone in your community is scammed

Respond with compassion. Victims often feel deep shame, and some stop attending because of it. Remind them that scammers are skilled professionals and that being deceived says nothing about their intelligence or faith.

Help them act quickly. If they sent cryptocurrency, they should contact the exchange or ATM operator right away; for other payments, the bank or company they used. They should report the scam to the FBI at ic3.gov (opens in a new tab) and the FTC at ReportFraud.ftc.gov (opens in a new tab), including the transaction details (opens in a new tab). Then watch for follow-up “recovery” offers from people posing as investigators or attorneys, which are often a second scam. Our guide What to Do If You've Been Scammed can be shared directly with members.

Official sources

The facts in this article come from these official resources.

Learn together

Bring Crypto Safety Education to Your Community

Crypto Life Church helps churches, mosques, synagogues, temples, gurdwaras, and other faith communities educate their members about cryptocurrency, financial fraud, and online scams. Our introductory program, available now, brings plain-language scam prevention to leaders and members together. We are also developing practical materials for leaders, such as announcement text and a printable scam-warning handout.

Explore our educational programsPrograms for faith communities

This article is general education, not legal, financial, or tax advice. Stories marked “Illustrative example” are composite scenarios written to show how scams work; they are not real cases.

More resources

All resources