Home › Intelligence › News › Crypto Ponzi Schemes: How They Collapse
DAILY BRIEF 2026-10-25 · 7 min

Crypto Ponzi Schemes: How They Collapse

Quick answer

New York's attorney general is pursuing a $1.37 billion judgment against the operators of NovaTech, a crypto fraud that used faith communities and multilevel referral networks to funnel hundreds of thousands of victims into a scheme that never traded a single dollar of real assets. NovaTech is not an anomaly - it is a textbook example of how crypto Ponzi structures are engineered, how they scale, and why they tend to implode in the exact phase of the cycle markets are entering now. Understanding the anatomy of a crypto Ponzi is one of the most practical things any participant can learn.

NeverHodl
NeverHodl™ Intelligence Desk
Crypto cycle intelligence · Data, not opinions
2026-10-25
41.9
BULL Phase · Week 8
View Live Score →
41.9
BTC NHCI
$80,142
BTC Price
1.51
MVRV
54
Fear & Greed

Market snapshot as of 2026-10-25, this brief's publication date. Live figures update on the Dashboard.

What exactly is a crypto Ponzi scheme?

A Ponzi scheme is a fraudulent investment structure that pays existing participants using capital deposited by new participants, rather than from any genuine trading profit or yield. The term originates from Charles Ponzi, who ran a postal-coupon arbitrage fraud in the United States in 1919-1920. In crypto, the same mechanism operates under the cover of claims such as automated trading bots, AI-driven arbitrage, staking yield, or mining pools - none of which need to exist in reality. NovaTech told participants it was running a forex and crypto trading operation generating consistent returns. According to the New York attorney general's lawsuit, no real trading generated those returns. Payments to early participants came entirely from deposits made by later recruits. This is the defining feature of every Ponzi: liabilities grow faster than any real asset base, making eventual insolvency mathematically certain.

How do crypto Ponzis recruit at scale - and why do faith communities get targeted?

Crypto Ponzi operations commonly layer a multilevel marketing (MLM) referral structure on top of the fraudulent yield claim. Participants are rewarded with commissions for recruiting new depositors, turning every existing victim into an unpaid salesperson. This mechanism is sometimes called affinity fraud when it is specifically directed at a defined community - a church congregation, an immigrant group, or a professional network - where trust already exists between members and a gatekeeper recruiter. NovaTech allegedly used prayer groups and church networks to reach victims, a method that exploits the elevated baseline trust people place in co-members of a shared faith community. Affinity fraud is particularly effective in crypto because the underlying technology is already difficult to verify independently. When someone a victim trusts vouches for a platform, skepticism drops sharply. The FBI and SEC have both documented affinity fraud as one of the most persistent vectors of investment fraud in the United States, disproportionately affecting communities with strong internal social bonds.

What on-chain and structural signals separate a Ponzi from a legitimate operation?

Several structural red flags are present in virtually every documented crypto Ponzi. First, returns are described as consistent and above-market regardless of actual market conditions - real trading strategies produce variable, sometimes negative, results. Second, the operator cannot or will not provide independently audited proof-of-reserves or verifiable on-chain settlement records showing that client funds are actually deployed in the assets claimed. Third, withdrawal requests are processed easily at first, then delayed or gated as the scheme matures and the gap between liabilities and real assets widens. Fourth, the referral commission structure - where recruiting new users pays more than the claimed trading yield - signals that new capital inflow, not trading, is the real revenue engine. On-chain analysis tools can cross-reference advertised wallet addresses against actual transaction volumes; in schemes like NovaTech, the wallet activity rarely matches the claimed trading volume. A legitimate fund can demonstrate a consistent, audited trail between client deposits, deployed positions, and returned proceeds.

Why do Ponzis tend to collapse in bull markets - and what does that mean for enforcement?

Counterintuitively, Ponzi schemes often surface and collapse during or just after strong bull markets, not during crashes. The reason is liquidity stress: when legitimate asset prices rise sharply, participants expect their Ponzi account balances - which have also been quoted as rising on paper - to be withdrawable at those inflated values. Redemption demand spikes, but because no real assets exist to sell, the operator cannot meet it. The gap between the scheme's fictional book value and its real cash position becomes impossible to hide. Regulators also tend to receive more complaints during bull cycles as victims compare their Ponzi returns (suddenly lower than what the market itself is producing) with publicly visible crypto gains, and decide to withdraw. The NovaTech enforcement action - a civil suit seeking $1.37 billion from operators including Cynthia and Eddy Petion, filed in New York - follows this pattern: the scheme operated across what were active crypto cycle years, and enforcement is now arriving as the market has moved into a fresh cycle. The $1.37 billion figure represents the full scope of harm the attorney general alleges, covering both principal losses and alleged profits retained by operators.

How does the current cycle environment affect Ponzi risk for participants?

The NeverHodl Crypto Cycle Index (NHCI) currently reads 41.9 for Bitcoin, placing the market in the early Bull phase. At this stage of a cycle, optimism begins to outpace caution. New participants enter the market, many for the first time, making them statistically more vulnerable to affinity fraud and yield-based scams. Fraudulent operators know that rising prices create a tailwind for recruitment: when BTC is trading near $80,000 and headlines are broadly positive, the premise that a platform is generating exceptional returns feels more plausible to a newcomer than it would at cycle lows. At the same time, enforcement agencies tend to see their Ponzi-related caseload grow with a lag of 12 to 24 months after the peak recruitment phase - meaning that schemes seeded now may not collapse or reach court until the next cycle. The single most effective protective mechanism available to any participant is verifiable proof-of-reserves: the ability to confirm, on a public blockchain, that the assets an operator claims to hold actually exist at the addresses they control. If a platform cannot provide this, the NHCI reading is irrelevant - no cycle phase makes an unverifiable yield claim safe.

FAQ

What makes a crypto investment scheme a Ponzi and not just a failed fund?

A Ponzi scheme pays returns to existing participants using new participants' deposits rather than actual investment profits. A failed fund loses real money through bad trades or mismanagement. The legal and moral distinction is intent and structure: a Ponzi never had a real profit engine - it was designed to redistribute capital from late entrants to early ones.

What is affinity fraud in the context of crypto?

Affinity fraud is a type of investment fraud that targets members of a defined community - such as a religious congregation, an ethnic group, or a professional association - by exploiting the trust that already exists within that group. In crypto, affinity fraud spreads through social networks where victims recruit people they know, believing sincerely that the platform is legitimate.

What is proof-of-reserves and why does it matter for detecting fraud?

Proof-of-reserves is a cryptographic or audited process by which a crypto platform demonstrates, using verifiable blockchain data, that it holds the assets it claims to hold on behalf of users. It matters for fraud detection because a genuine Ponzi scheme cannot pass a real proof-of-reserves check - the assets do not exist to verify.

Why do Ponzi schemes collapse faster during or after a bull market?

Bull markets trigger a spike in redemption requests because participants see their on-paper balances rising and want to access the gains. Since a Ponzi holds no real assets to liquidate, it cannot meet the surge in withdrawal demand. The shortfall between what participants expect to receive and what actually exists becomes impossible to conceal, causing the scheme to collapse.

How does an MLM referral structure differ from a legitimate affiliate program in crypto?

A legitimate affiliate program pays a one-time or recurring commission for introducing a new user who generates real revenue for the platform through trading fees or similar activity. An MLM structure in a Ponzi pays commissions across multiple tiers of recruiters, and the commission income often exceeds what any real trading yield could support - a structural sign that new deposits, not real profits, are funding the payments.

The NovaTech case is a reminder that rising markets do not sanitize fraudulent structures - they accelerate them. With the NHCI at 41.9 and BTC trading near $80,000, the early Bull phase is exactly the environment where new participants enter and Ponzi recruitment intensifies. The structural tells are consistent across every documented case: unverifiable returns, referral commissions that outpace yield claims, and withdrawal friction that grows over time. None of those red flags are cycle-dependent. At NeverHodl, the NHCI is built to track where the cycle actually stands so you can calibrate risk against reality, not against a platform's claimed returns. Visit neverhodl.com to follow the cycle in real time.

DATA SOURCES Market and on-chain data from CoinGecko, DeFiLlama and the NeverHodl NHCI Engine (37 on-chain, macroeconomic and market indicators across 6 categories, updated hourly). Figures reflect the publication date above.
Methodology →  ·  Live API →  ·  Data Attribution →
See where we are in the cycle
View Live Score → Methodology →

Not financial advice. NeverHodl™ is a quantitative data platform and is not registered as a CASP under MiCA (EU 2023/1114). Conditional scenarios only, no price targets. DYOR. OEPM M4370276.