1. Introduction
New technologies built on blockchain are revolutionizing the business world (
Fisch 2019;
Härdle et al. 2020;
Gan et al. 2021;
Grobys et al. 2022). For startups and entrepreneurs, such innovations offer new opportunities to access external finance through alternative channels. One such channel is the Initial Coin Offering (ICO). First emerging in 2013 (
Fisch 2019;
Gan et al. 2021), ICOs have been compared to more traditional financing channels, including initial public offerings (IPOs), venture capital (VC) and crowdfunding (
Block et al. 2021). Most analogous to Initial Public Offerings (IPOs) (
Howell et al. 2020;
Härdle et al. 2020;
Hornuf et al. 2022), ICOs utilize blockchain technologies, whereby a blockchain-based issuer sells cryptographically secured digital assets—typically referred to as tokens. These tokens give token holders the right to an issuer’s product or service.
For new firms, ICOs offer several interesting and attractive features, including (i) an absence of entry constraints, (ii) scope for exponential growth, (iii) an absence of geographical barriers, and (iv) simple validation, while to investors they can offer potentially lucrative returns (
Fisch 2019;
Fisch and Momtaz 2020;
Benedetti and Kostovetsky 2021;
Czaja and Röder 2022). Yet, despite the potential of ICOs to support the growth of new businesses, they are also associated with significant risks. Notably, unlike IPOs, which are subject to strict legal regulations, the unregulated nature of the ICO market, combined with confusion regarding underlying technologies, mean ICOs exhibit high potential for scam-related fraud, which can be very harmful to investors (
Howell et al. 2020). An estimate by the research group SATIS, suggests that 78% of all ICOs to date that successfully raise their targets have turned out to be scams, which can erode investor trust.
Given this, an important question is what are the expected losses attributable to scams in the market for ICOs? The answer to this question is important because it can inform policy makers seeking to better understand the nature and impact of fraud in this largely unregulated market, and could contribute to the development of future regulation designed to protect market participants. This paper addresses that question by exploring the size of expected losses associated with scam ICOs using a novel methodology based on power laws. Doing so meant analyzing the population of 5036 ICOs launched between August 2014 and December 2019. Screening the available data on scam accusations and available data on raised funding, 576 ICOs were identified with available relevant information, corresponding to cumulative losses of USD 10.12 billion, which highlights the enormous societal impact of this criminal activity. The largest loss in the sample is the so-called ‘Petro-scam’, where investors lost a total of USD 735 million. In this respect, it is important to note that the Venezuelan Legislative Assembly also declared Petro as illegal in 2018.
This study makes several contributions. First, it contributes to the emerging literature on ICOs. Recent studies have examined the extent to which ICOs are connected to cryptocurrency markets. For example,
Allen et al. (
2022) investigate whether the ICO market in 2017–2018 and in 2021 exhibits contagion from Bitcoin and Ether prices and present evidence that correlations are typically low except when a cryptocurrency bubble bursts. Other studies have focused on determinants of successful IPOs (e.g.,
An et al. 2019;
Fisch 2019;
Howell et al. 2020;
Czaja and Röder 2022) and found that several factors can reduce information asymmetries alongside some non-traditional factors (e.g.,
Howell et al. 2020;
Czaja and Röder 2022). Additionally, studies such as
Bellavitis et al. (
2020) demonstrate how country ICO bans and the role of the media and universities can influence the diffusion of ICOs across the world.
Cumming et al. (
2019) describe the inadequacies of current enforcement of ICOs under existing regulatory frameworks and argue for the importance of international regulation of this market. There is also literature exploring asymmetric information theory related to ICO issuances. Notably,
Hornuf et al. (
2022) investigate whether the degree of prior information exposure to investors predicts various ICO frauds. They show that fraudulent ICOs are typically associated with significantly higher funding amounts raised, and that issuers who post their code on GitHub are at a greater risk from phishing and hacker activities. The present study both complements and reinforces these streams by showing that the expected losses attributable to ICO fraud are of economic significance because the sums of financial means involved are substantial and by modeling the costs associated with ICO scams.
This paper also adds to knowledge regarding the degree to which man-made phenomena are exposed to tail risks by exploring, for the first time, how losses in the ICO market may be explained by sociobiology (i.e., related to natural processes): specifically, by power laws. Man-made phenomena are often fat-tailed-distributed and, hence, can be modeled via power laws (
West and Salk 1987). In doing so, it complements recent papers that model such behavior in traditional financial markets. An exemplar is
Clauset et al. (
2009), who argue, and demonstrate empirically, that power law distributions occur in many situations of scientific interest and have significant consequences for our understanding of man-made phenomena. Most closely related, however, is
Warusawitharana (
2018), who estimates the power law coefficients of 41 stocks over the 2003 to 2014 period and finds that the power law coefficient of the cross-sectional distribution ranges between 2.09 and 3.46. Other recent studies test the power law hypotheses for the realized variance of asset markets (
Grobys 2021), the volatility processes (
Grobys et al. 2021) and the hacking of cryptocurrencies (
Grobys et al. 2022). Extending this literature, the present study is the first to derive implications from power laws for modeling losses in the market for ICOs.
In sum, the present study makes a novel contribution to the aforementioned research streams, by (i) first identifying 13 distinct types of scams observed in the cluster for scam ICOs and (ii) second, through exploring the tail risk associated with losses due to scam ICOs. This is an important and timely issue given that the sums of funding and, especially, losses, as demonstrated in this paper, involved in this new market are highly significant. Moreover, it also contributes to a broad and fast-growing interdisciplinary literature that considers issues related to new digital ecosystems, especially the literature investigating aspects of Bitcoin and Ethereum ecosystems (e.g.,
Yermack 2017;
Aune et al. 2017;
Howell et al. 2020;
Härdle et al. 2020;
Makarov and Schoar 2020;
Chod et al. 2020;
King and Koutmos 2021;
Grobys et al. 2022;
Allen et al. 2022). For example,
Grobys and Sapkota (
2020) analyze the default risk of 143 cryptocurrencies from 2014 to 2018 and estimate that about 60% of all cryptocurrencies eventually end up in default, while
Chod et al. (
2020) demonstrate that a blockchain protocol that leverages Bitcoin can help increase the transparency of firms’ supply chain operations, which, in turn, allows firms to access lower-cost external financing through a positive signaling effect. Perhaps most closely related in this stream to the present study is
Foley et al. (
2019), who propose a model to identify illegal activities in Bitcoin. The authors find that about one-quarter of all users (26%) and close to one-half of Bitcoin transactions (46%) are associated with illegal activity. Finally,
Grobys et al. (
2022) adopt a fractal perspective of cyberattacks in the Bitcoin market and show the expected loss associated with cyberattacks is 106,171.49 coins. All these studies show that, unlike traditional asset markets, new digital financial markets involve different types of risks such as fraud risk, risk of money laundering or credit risk. The present study adds to this literature by providing novel evidence of the costs associated with ICO scams.
The rest of the paper is organized as follows:
Section 2 describes the process of data retrieval and generation of the ICO scam sample.
Section 3 presents the empirical framework and discusses the results.
Section 4 concludes.
2. Data
2.1. Retrieving Data for ICO Scams
Using the R program, rvest and xml2 web scrapping packages were applied to download data from the website icorating.com. This website provides data on the risk score and the hype score for more than 5000 ICOs with additional information on the amount of raised funding in terms of USD (for some of them). Similarly, the website icosbull.com provides data on basic, financial, and social signals for around 3000 ICOs. The financial information for these ICOs was also extracted using the same web scrapping packages. Unfortunately, financial information for many ICOs—especially on the raised amount, important for this study—were missing on these two websites (as well as on major ICO database providers such as icobench, neironix, icoholders, etc.) Nevertheless, after combining data from icorating.com and icosbull.com for only the unique ICOs issued during the sample period, it was possible to collect a rich dataset containing information on the amount of raised funding for 1014 ICOs (from a population of 5036 ICOs) launched between August 2014 and December 2019.
Figure 1 illustrates the process of data retrieval.
2.2. Identifying Scams in the ICO Market
To identify scams in the ICO market, the total population of 5036 identified ICOs were examined. A particular challenge in the data gathering process relates to searching for websites and/or databases that list ICOs which turned out to be scam. Fortunately, there are websites such as deadcoins.com or coinopsy.com enlisting coins and tokens that are not traded anymore, often referred to as ‘dead coins’ or ‘dead tokens’, which aided classification. On investigation, the website deadcoins.com exhibited a list of 2000 dead coins and tokens, and, similarly, the internet provider coinopsy.com reported a list of 1700 dead coins and tokens (of which most happened to be listed on deadcoins.com also), documenting issues behind the default. While, unfortunately, these websites do not provide information on the financials, they do provide additional information which facilitated the identification of the ‘type of the scam’.
From the available sample of 1014 ICOs with information on raised funding, it was possible to use information from the (aforementioned) websites listing dead coins to categorize 97 ICOs as a ‘scam listed by the third party’. All third-party data presented herein were obtained from publicly available sources believed to be reliable. For the rest of the 917 ICOs with financial information on raised amount not listed by any third party, each ICO was searched in the Bitcoin Talk forum (website: bitcointalk.org accessed between January and December 2020) to classify them as either ‘scam’ or ‘legit’. Interestingly, nearly all ICOs have been announced on bitcointalk.org and other forums, including Bitcoin.com, Altcoin Talks, Bitcoin Garden. This is the essential part of a PR campaign. However, Bitcoin Talk is the one deserving most attention given it is the biggest and most popular of such platforms, especially when it comes to the announcements of new coins/tokens.
Using the search term ‘{name}{space}{scam}’ on the Bitcoin Talk forum, all remaining ICOs were manually searched (i.e., those not listed by any third parties as a scam). In total, 917 manual searches were made, every time with a different ICO name and attaching the keyword ‘scam’ to it. The search results showed multiple threads, where the search terms ‘name of the ICO’ and ‘scam’ appear together. Following a careful study of those threads, an ICO was marked as ‘scam’ if any of the forum members had at least one scam accusations of that particular ICO; otherwise, the corresponding ICO was coded as legitimate (e.g., ‘legit’). In total, it was possible to identify scam accusations for 576 ICOs (including those 97 ICOs listed by the third-party websites). The remaining ICOs were marked as ‘legit’ to reflect the fact they are non-scam ICOs.
It is important to highlight that
Liebau and Schueffel (
2019) apply a similar approach to identify scam ICOs, in which each individual ICO is checked along with the keyword ‘scam’. However, they carried out their search using the Lexis Nexis news database for a sample covering only 45 ICOs. Conversely, this study focused on the Bitcoin Forum for scam identification because it is, as per now, the world’s largest FinTech forum. The section ‘trading discussion’ on the website bitcointalk.org contains more than 800,000 posts discussing scam accusations, reputation, and other trading topics about coins or tokens. In the ‘trading discussion’ section, 211,000 threads are created only for scam accusations, whereas 84,000 threads are for reputation (i.e., for promotion). A preliminary data analysis suggests that USD 10.12 billion of raised funding in the market for ICOs was lost due to scams, which is 65.80% of the total amount raised. Note again that the estimate is based on a total of 1014 ICOs which exhibited available data on the amount of raised funding.
A report by the
SATISGROUP (
2018) published on the Bloomberg research terminal helped identify many scam ICOs. This report found that, for data up until July 2018, approximately 78% of all launched ICOs were subject to fraud, corresponding to 11% of total market capitalization. The present study followed a similar approach as the SATISGROUP. That is, it was assessed whether an ICO project either ‘had an intention’ or ‘had no intention’ of fulfilling the project development duties with the funds, and/or was deemed by the community as a scam. The difference between this approach and their approach is that the present study directly (manually) looked into the forum/community discussion on scam accusations. Since ICOs in the data sample were able to raise significant amounts of funding, we believe that they hypothetically fulfill key criteria to signal themselves as legitimate ICOs—even though most of them ultimately were not. However, using rather simple statistical approaches—based on characteristics—may not accurately differentiate between fake and real ICOs. In this regard, Chainalysis, a blogging website decoding Ethereum scams, identified over 2000 scam addresses on Ethereum that have received funds from nearly 40,000 unique users during the 2016–2018 period. Note that having ERC-20 as standard guidelines, many ICOs are using the Ethereum blockchain for token offerings. However, in this research, besides the Ethereum channel, many tokens use their own channels and possibly other channels such as Waves. Since the present study employs a more work-intensive approach to identify scams, scams were not categorized based on the channels used by the tokens.
2.3. Clustering Scams in the ICO Market
Analyzing the hand-collected data, several different ways in which investors are fooled by scammers were identified. These scam incidents were then classified into thirteen different types of scams based on their nature. Fist, categorized ICOs were retrieved and matched from the websites deadcoins.com and coinopsy.com as ‘Listed’. Second, users receiving spam emails, suspicious links and pop-ups, questions for personal and financial details, error on withdrawals, pending withdrawals, balance disappearing form the wallet, etc., are some common accusations which were categorized as ‘PhishingNfraud’. A third category of ICO scams was classified as ‘Fake’. Specifically, an ICO was tagged as fake if a Bitcoin Talk forum member identified the ICO with fake team/project/wallet/social media/trading, etc. Another scamming tool is a so-called ‘bounty program’, which entails financial rewards mostly in tokens for users’ PR activities, such as promoting ICO on forums, telegrams, messengers, translating and localizing documents, and posting on social media and blogs, etc. However, many ICOs fail to pay or do not pay bounty to those promotors. Hence, these ICOs were classified under ‘Bounty Scam’ if a bounty hunter has accused the ICO as a scam for not paying his/her bounty. The results are summarized in
Figure 2.
The fifth common type of scam among ICOs in the sample is the so-called ‘Exit Scam’, according to which developers and promotors (the ones who collected the funds in an ICO) suddenly disappear, leaving the investors with no information. There were also numerous incidences of ICO scam accusations where the same group of scammers were also actively scamming in other projects. These were categorized as ‘Previous Scammers’. Unfortunately, due to the lack of regulations, the same individual/team/promotor can potentially fool the naïve investors repeatedly.
The sixth classified scam in the sample is the ‘Airdrop Scam’, which is a type of fraud where scammers steal a wallet’s private keys from users. More specifically, scammers create a booby trap and users willing click on the links and give away their private information to acquire free tokens, ultimately losing their coins to scammers. It is important to note that, given there are more than 32,000 crypto exchanges/markets around the world, it is difficult for users to identify scam exchanges. Developers that would like to take advantage of this situation preferably launch the ICO at a fraudulent exchange. This type of scam was categorized as an ‘Exchange scam’. Furthermore, it can be observed that copying the whitepaper of a promising ICO and launching it using a similar or different name has also been a new trend among scammers. This type of scam was classified as a ‘Whitepaper Plagiarism Scam’. Fortunately, users are becoming more familiar with this type of scam and typically report it in the Bitcoin Talk forum.
‘Pump and Dump’ is another technique associated with scams that can be observed in the sample. Unfortunately, one cannot directly observe this type of scam at the very beginning of a project but only when it is already too late. Usually, investors and traders rush to buy the tokens at an early phase when the price is low. Similarly, some investors buy them in fear of missing out at a high price. Once the scammers complete the sell, the price suddenly crashes. Moreover, a ‘Ponzi scam’ is another category of scam that was observed in the data. While it is similar to a classic pyramid scam, the essential difference is that a Ponzi scam requires that victims also invest in some product(s) or service(s) associated with the ICO, with promised returns at a later stage. As a new method of scamming investors, it was observed that scammers launch websites that resemble similar names and domain names of existing ICOs or projects. New (or naïve) investors that are unaware of the original websites fall into this trap and lose their coins. Hence, this type of scam was classified as a ‘Website scam’.
Disconcertingly, the so-called ‘Porn scam’ was found to have become increasingly popular among scammers. Some ICOs offer premium access to their porn sites and/or their products. This is perhaps the easiest way of scamming people because a user of such a website might be hesitant to report a scam because in many countries/societies watching porn is strictly prohibited. Hence, this type of scam is a ‘Porn scam’. Finally, the last type of scam identified in the data was categorized as a ‘Pre-mine scam’. Pre-mining occurs when a fraction of the tokens for a project are made available to a group of developers and promotors prior to their offering to the public. This is an important aspect to distribute rewards to developers. However, if the fraction of the tokens reserved for a pre-mine is high, there is probably some reason to be concerned. An ICO was categorized as a ‘Pre-mine scam’ if some tokens are shared among the developers and the promotors after the final token sale instead of burning the unsold tokens. This is defrauding investors because a higher token circulation supply generally implies a lower token price. Moreover, there is a chance to manipulate the market if developers have the large fraction of the tokens from the pre-mining activity. This also applies to the context of cryptocurrencies (
Grobys and Sapkota 2020).
4. Conclusions and Implications
4.1. Conclusions
ICOs have become an important alternative financing channel for startups to raise funds without the involvement of financial intermediaries, and a new market for investors with potentially attractive, though risky, returns. Unfortunately, due to the lack of regulation, the market for ICOs has become notorious for scammers. In this paper, we apply power laws to address the question as to what the expected losses attributable to scams in the market for ICOs are. It is noteworthy that the present study follows
Taleb (
2020, p. 91), who asserts that “
power laws should be the norm”, and is further motived by the seminal paper of
Mandelbrot (
1963, p. 438), which argued “
that there is strong pragmatic reason to begin the study of economic distributions and time series by those that satisfy the law of Pareto.”.
After screening more than 5000 ICOs, a final sample of 1014 ICOs that had available data on the raised amounts of funding was generated. Although 97 ICOs were listed as scams on the webpages coinopsy.com and deadcoins.com, it was found that 479 ICOs have at least one reported scam accusation on bitcointalk.org. Such scams are harmful to investors. The evidence presented in this paper infers that 56.80% of all launched ICOs were subject to fraud, corresponding to 65.80% of the overall market capitalization. Specifically, from the total of USD 15.38 billion raised by the 1014 ICOs, USD 10.12 billion were lost due to scams. Naïve statistics suggest that the average loss associated with a scam ICO is USD 17.57 million. However, the findings of this paper infer that these figures may be misleading because the underlying distribution governing losses due to scam ICOs follows a Pareto-type distribution, having extremely fat tails. For this reason, the tail of the distributions was modeled using power laws, whereby it was found that one cannot reject the power law null hypothesis.
4.2. Implications
The findings in this paper have notable implications for future research and policy makers looking to better understand and regulate ICO markets. Importantly, they highlight that the economic magnitude of the power law exponent associated with losses due to scam ICOs indicates that the theoretical second moment is not defined. A simulation experiment showed that losses due to scam ICOs are highly exposed to low-probability and high-impact events. Specifically, in 10 out of 100,000 sample averages—or with a probability of 0.01%—the sample average associated with losses exceeded USD 1.73 billion. This is an interesting finding because the sample average loss in the actual tail of the loss distribution is only USD 56.44 million. Taken together, the results in this paper help advance understanding of the ICO market and indicate that we have not yet observed the largest loss due to scams in the market for ICOs.
Taken together, this study’s findings contribute to a need to reevaluate regulation and corporate governance mechanisms in the context of the whole of digital finance to help mitigate fraudulent behaviors (e.g.,
Cumming et al. 2019). For example,
King and Koutmos (
2021) highlight warnings from the Securities and Exchange Commission regarding growing market manipulation and fraud in cryptocurrency markets, while
Hornuf et al. (
2022), in the context of ICOs, argue for the need to install third-party governance assessing the quality of the issuers, such as specialized platforms, or the engagement of institutional investors and venture capital funds that can perform effective due diligence by verifying the quality of projects. This paper reinforces this view by showing that the expected losses attributable to ICO fraud are of economic significance because the sums of financial means involved are substantial.
There are several corporate governance mechanisms that could be used to reassure prospective investors about the potential for scams and help prevent fraudulent behaviors in ICO markets: (i). Implementation of effective KYC/AML procedures—ICO issuers should implement proper KYC (Know Your Customers)/AML (Anti Money Laundry) procedures to verify the identity of their investors and to prevent money laundering. (ii). Conduct due diligence on ICO projects—potential investors should conduct due diligence on ICO projects before investing, to identify red flags and to avoid scams. (iii). Regulation of ICO markets—governments and financial regulators should create regulations for ICO markets to protect investors and to reduce the chances of fraud. (iv). Development of industry standards—industry associations and standards bodies should develop industry standards for ICOs, to improve transparency and to reduce the chances of fraud. (v). Education of investors—investors should be educated about the risks associated with investing in ICOs, to make informed investment decisions and to avoid being scammed. (vi). Creating a blacklist—list of known scams and fraudsters, and warning investors to avoid these. (vii). Most importantly, third-party audit—requiring all ICOs to undergo a third-party audit. (viii). Working closely with law enforcement agencies to investigate and prosecute any cases of fraud or corruption in the ICO market.
There are also several ways that platforms themselves could help reduce the number of scams and protect investors. For example, platforms could provide more information on how to spot a scam, offer a way to report scams, or even offer a way to verify the identity of other users. However, it is ultimately up to the users to be vigilant and take precautions when using these platforms. One possible role for the platforms would be to provide data that could be used to identify areas where safety and scams are more likely to occur. These data could be used to help develop strategies to mitigate these risks. Most importantly, the platforms can play a role in identifying the scams and stopping them from being able to advertise. However, it is difficult to identify all scams, and it is also difficult to keep up with the ever-changing ways that scammers operate. There is no sure way to prevent all scams, but the platforms can help by making it more difficult for scammers to advertise. Yet, the implications of identifying risk in the ICO market are significant. By understanding the risks associated with investing in ICOs, investors can make more informed decisions about which ICOs to invest in and how much to invest. Additionally, by identifying risks early on, investors can avoid potential losses and protect their investment portfolios, otherwise ICO scams can damage the reputation of the cryptocurrency industry as a whole.