← Articles

Crypto Community Management: Why Communities Die After TGE

Crypto community management decides what is left after the token launches. In 2026 the median airdrop saw 73% of claimers move their tokens within a day, and only 8% still held half after 90 days. Here is what a managed community does about it.

Key takeaways

Key takeaways

  • Bitquery tracked 51 airdrops between January and September 2026 and found that 73% of claimers in the median drop moved their tokens within a day, while only 8% still held half of them after 90 days, which is why most crypto communities go quiet after the token launches.

  • Chainalysis put 2025 crypto scam losses at $17 billion with impersonation scams up 1,400% in a year, and community channels on Discord and Telegram are where fake support agents find their victims, so scam defence is a core part of a crypto community manager's job.

  • A crypto community manager averages $85,000 a year on web3.career, and the numbers worth paying for are retention, answered questions and contributor counts, because member count is the least useful number a community has.

Crypto community management is usually judged by the one number that says least about it, which is how many people are in the Discord or Telegram on launch day. The on-chain record shows what those people do next. Bitquery, a blockchain data company, tracked 51 airdrops between January and September 2026 and found that in the median drop 73% of claimers moved their tokens within a day, and only 8% still held half of them after 90 days. Delphi Digital followed 3.7 million wallets over five years and found that between 78% and 94% of recipient wallets across six major tokens sold most of their allocation within 90 days.

The people who remain are the ones scammers come for. Chainalysis estimated that $17 billion in crypto was lost to scams and fraud in 2025, with impersonation scams growing 1,400% in a year. A project's own channels are where a fake support agent finds someone with a problem and a wallet. So the weeks after a token launch bring two things at once, a crowd leaving and a set of attackers arriving, and both land on whoever is running the community.

A community is the people who would still answer a question in your channel if there were nothing left to claim, and member count can't tell you how many of those you have.

What is crypto community management?

Crypto community management is the day-to-day operation of a project's public channels, usually Discord, Telegram and X, so that members get answers, stay safe from scams and have a route to influence the product. In practice it covers five jobs, which are moderation, user support, scam and impersonation defence, feedback to the product team, and running ambassador or contributor programs.

Moderation and support take most of the hours. Moderation keeps the channels readable when thousands of people arrive at once. Support in crypto is rarely "how do I reset my password" and far more often "my bridge transaction is stuck" or "why was my wallet not eligible", and the person asking has money on the line. A community manager answers it, routes it to someone who can, or writes the answer down once so it never has to be typed again.

Scam and impersonation defence has no equivalent in most other industries. Community managers ban fake admin accounts, warn members that staff never message first, lock down who can post links, and treat their own accounts as targets.

Feedback and contributor programs are where the function earns more than it costs. A manager who tags every question by topic can tell the product team which screen confuses people. Ambassador programs recruit members to translate, answer questions in other time zones or write guides, which is how web3 community management scales past the paid team. A crypto points program pays for activity, while a contributor program picks people and gives them a job.

Job

What it looks like day to day

The number that shows it is working

Moderation

Rules, spam removal, readable channels

Share of messages removed, time to remove spam

Support

Answering or routing questions about funds, claims and bugs

Share of questions answered, median time to first answer

Scam and impersonation defence

Banning fake admins, link controls, staff account security

Impersonators removed per week, time to remove a malicious post

Feedback to product

Tagging questions by topic, weekly summary to the team

Issues raised by the community that the team shipped

Ambassador and contributor programs

Translators, regional moderators, guide writers

Active contributors per month, contributors retained after 90 days

Why do crypto communities die after TGE?

Crypto communities die after TGE, the token generation event when a token first becomes tradable, because most members joined for the claim and the claim is over. In 2026 the median airdrop saw 73% of claimers move their tokens within a day and only 8% hold half after 90 days, so the reason to show up leaves with the reward.

We found no public server-level retention data for crypto communities, so the on-chain record is the best proxy for whether the people in the room are still involved.

Time after the claim

What recipients did

Source

Within 1 hour

Seven in ten claimers of Brevis (BREV) had moved their tokens

Bitquery, 51 airdrops, Jan to Sep 2026

Within 1 day

73% of claimers in the median airdrop had moved their tokens

Bitquery

After 30 days

23% still held at least half of what they claimed

Bitquery

After 90 days

8% still held at least half

Bitquery

Within 90 days

78% to 94% of wallets across six major tokens had sold most of their allocation

Delphi Digital, 3.7 million wallets, published June 2026

Both studies are linked above. Delphi's sample included Uniswap, Arbitrum, Jupiter and Pudgy Penguins, and one detail in it matters more than the headline range. The firm found that exit rates were 4 to 11 percentage points higher at day 90 than at day 30, which means the leaving does not stop after the first rush. Delphi also estimated that Arbitrum's airdrop cost $1.16 billion in tokens that went to users who left within a month.

Three mechanisms turn that selling into silence. The first is that most members received very little. In Bitquery's median airdrop the top 10% of claimers took 73% of the tokens and the top 1% took 34%, so the typical member did months of tasks for a small payout and has no reason to feel like an owner. Much of the top slice is farming operations running many wallets, a problem we cover in our piece on sybil detection and airdrop farming.

The second is price. Of the 46 airdrops in Bitquery's set that were old enough to judge, 35 traded below their first-week price, with a median decline of 48%. A channel where the typical holder is down by half is a hard room to work, and when the team posts less, members read it as the team leaving too.

The third is that paid activity was never the same thing as interest. When Blockworks Research studied Arbitrum's Short-Term Incentive Program for the Arbitrum DAO in June 2024, it attributed 70% of the trading volume on Vertex, $32.8 billion of $46.9 billion, and 43% of the volume on GMX to the incentives, and it noted that the analysis measured effectiveness and not whether the activity would last. If most of a product's usage is rented, most of its community is too. We have written separately about designing an airdrop so that some of the value stays and about crypto user retention after the wallets arrive, so this article stays with the people in the channel.

How big is the scam problem in crypto community channels?

The scam problem in crypto community channels is large and has moved from malicious links to impersonation. Chainalysis counted $17 billion lost to crypto scams and fraud in 2025 with impersonation up 1,400%, while Scam Sniffer recorded $83.85 million taken from 106,106 victims by wallet drainers, which are scripts that empty a wallet once the owner signs a malicious approval.

Those two figures point in different directions and that is the useful part. Scam Sniffer's 2025 report found that drainer phishing losses fell 83% from $494 million in 2024, and victims fell 68% from 332,000, with the largest single theft at $6.5 million in September 2025 and 11 thefts above $1 million. Over the same period Chainalysis reported that impersonation was the fastest growing category and that AI-enabled scams were 4.5 times more profitable than traditional ones, because cheap tools now produce convincing fake support agents at scale. Wallets got better at warning people about bad signatures, so attackers went after trust in people, and a community channel is a directory of people to impersonate.

The wider numbers are bigger still. The FBI's Internet Crime Complaint Center report for 2025, published in April 2026, recorded $20.877 billion in total reported losses, of which $11.3 billion involved cryptocurrency. Much of that is investment fraud with no link to a project's Discord, but it shows how much money is in play around the people a community manager is supposed to protect.

How the attacks reach a project's own channels

The fake support message. A member posts a problem in a public channel and within minutes gets a private message from an account with the project's logo and an "admin" tag, offering help through a link or asking for a recovery phrase. The defence is a pinned rule that staff never message first and a support queue fast enough that the scammer isn't the first reply.

The compromised moderator. In May 2025 an attacker took over a moderator's account in the Discord of Ledger, the hardware wallet maker, and used its permissions to launch a bot that pushed members to a site asking for their 24-word recovery phrases. Ledger confirmed the breach on 11 May, so a company whose product is security still lost control of its channel through one person's login.

The hijacked invite. In June 2025 Check Point researchers described attackers reclaiming expired or deleted Discord invite codes through the vanity link feature, so that an old link in a project's documentation or an old post sent newcomers to a malicious server with a fake "Verify" button that installed malware. The loader in that campaign was downloaded 350 times.

The fake verification bot. On Telegram, Scam Sniffer reported in December 2024 that scammers were pairing fake X accounts with Telegram groups guarded by a counterfeit "Safeguard" bot, whose verification step ran malicious code and stole wallet keys. The firm was finding 300 impersonator accounts a day on X that month against 160 in November, and at least two victims lost more than $3 million. By January 2025 it said Telegram malware scams had risen 2,000% since November.

The counterfeit token at launch. Bitquery found that 25 of the 51 airdrops it tracked in 2026 attracted counterfeit tokens, which were pushed into wallets 5.4 million times, in the week members are most likely to click a claim link without checking it.

Date

Project or platform

What happened

Reported impact

March 2023

Arbitrum

A developer's Discord account was compromised and used to post phishing links around the airdrop

Fake airdrop sites circulated during the claim

June 2023

BNB Chain

The Discord vanity URL was hijacked and a fake airdrop channel was created

Fake giveaway promoted to members

August 2024

Polygon

The Discord server was compromised and a fake token distribution link was posted in the team's name

One member reported losing more than $140,000

December 2024

Telegram groups

Fake "Safeguard" verification bots installed wallet-stealing malware

At least two victims lost more than $3 million

May 2025

Ledger

A moderator account was taken over and a bot asked members for 24-word recovery phrases

Confirmed by Ledger on 11 May 2025

June 2025

Discord invites

Expired invite links were reclaimed and pointed at malicious servers

Malware loader downloaded 350 times

The first three rows come from Web3 Is Going Just Great's collection of Discord compromises, and the rest from the reports linked above. In all six the attacker borrowed the project's own authority, which is why this work can't be left to a volunteer with full admin rights and no security training.

How much does a crypto community manager cost?

A crypto community manager costs about $85,000 a year on average, according to web3.career's salary data for October 2026, with base salaries running from $50,000 to $180,000 and hourly rates from $26 to $93. Contract and offshore rates are lower, and round-the-clock coverage takes about four people, so the real budget question is hours covered and not headcount.

The web3.career figures are the most complete public benchmark. The job board reports an average of $85,000 a year or $44 an hour, about 15 new community manager roles posted each month, roughly 400 applicants per role, and 61% of roles open to remote work. At the cheaper end, the hiring platform Upstaff lists a 2026 median of $2,666 a month for crypto community management and support contractors, or about $32,000 a year, though that median rests on only five offers and should be read as an indication. We could not find a published benchmark for volunteer or part-time moderator pay that we would trust, so we have left moderator rates out.

A worked example: what full coverage costs

Scams and stuck transactions don't keep office hours, and a token trades every hour of the week. A week has 168 hours and one full-time person covers 40 of them, so staffing a channel around the clock takes 4.2 full-time people before holidays and sick days. At web3.career's average of $44 an hour, 168 hours a week for 52 weeks comes to $384,384 a year. At the bottom of its range, $26 an hour, the same coverage is $227,136.

Those totals are our arithmetic on web3.career's rates. Few projects need a paid human awake at every hour, but the sum shows why a single manager leaves the channel unattended for 128 hours a week. The cheapest way to cover the clock is usually one paid lead supported by trained contributors in other regions, and it only works if those contributors have limited permissions, a written playbook and someone to escalate to.

Which community metrics matter more than member count?

The community metrics that matter more than member count are retention, the share of questions answered, time to first answer, the number of active contributors and the speed of scam removal. Member count only records that someone once clicked join. In Bitquery's 2026 airdrop data just 8% of claimers still held half their tokens after 90 days, so a join says little about who stayed.

Our position is that member count is the least useful number a community has, for three reasons. It rarely falls, because people who lose interest tend to mute a server and forget it instead of leaving. It can be bought, through giveaways, quests and outright fake accounts. And it measures the moment of lowest commitment, the join, while saying nothing about anything that came after.

Even in a healthy community most members are silent. Jakob Nielsen's long-standing rule of thumb for online communities, published in 2006, is that 90% of users read without contributing, 9% contribute from time to time and 1% account for most contributions. Applied to a 50,000-member Discord, that would mean about 500 people doing most of the talking, 4,500 chipping in now and then and 45,000 watching or gone. The rule predates crypto and real servers will vary, but the 500 are the community and the job is to know who they are.

The headline number

What it hides

Report this instead

Total members

Muted, departed and fake accounts

Members who posted or reacted in the last 30 days

New joins this week

Whether anyone came back

Share of a join cohort still active after 30 and 90 days

Messages per day

Spam, price chatter and bots

Questions asked, share answered, median time to first answer

Ambassador sign-ups

People who signed up and did nothing

Contributors who completed work this month, and how many are still active after 90 days

Quest completions

Farming by multi-wallet operators

Share of claimers still holding at day 90

What we'd tell a founder about crypto community management

Staff the weeks after launch more heavily than the weeks before. The leaving and the attacks both peak once the claim opens, so a community budget that ends at TGE ends when the work gets hardest. A token launch strategy that stops at the listing has no answer for day two.

Treat every staff and moderator account as a security asset. The Ledger and Polygon incidents both ran through authority inside the server. Require two-factor login, give each role the fewest permissions it needs, and keep the power to post announcements with two or three people.

Set targets on answered questions. Measure the community team on the share of questions answered and the time to first answer, and report member count as a footnote. A fast, correct answer is also the best scam defence a channel has, because the fake support agent wins when the real one is slow.

Pick contributors instead of farming them. An ambassador program that anyone can join by filling in a form produces a second member count. Choose a small group, give each person a defined job, and measure how many are still doing it three months later.

A first-90-days crypto community management checklist

This is the operating sequence we'd hand a founder for the 90 days around a token launch, assuming one paid lead and a limited budget.

Days 1 to 14: lock down and set the baseline

  • Require two-factor login for every admin and moderator account, and remove admin rights from anyone who does not need them this month.

  • List every bot and integration in the server, remove the ones nobody can explain, and limit who can add new ones.

  • Find every invite link the project has published in documents, posts and videos, replace expired ones, and move to a single permanent link you control.

  • Pin one rule in every channel that staff never send the first private message and never ask for a recovery phrase.

  • Record the baseline numbers, which are active members in the last 30 days, questions asked per week, share answered and median time to first answer.

Days 15 to 45: build the support and feedback routine

  • Open a single support channel or ticket queue, and tag every question by topic as it is answered.

  • Turn the ten most common questions into a public page and link it from the welcome message.

  • Send the product team a one-page weekly summary of what members asked, what confused them and what broke.

  • Run a scam sweep every day, searching Discord, Telegram and X for accounts using the project's name and logo, and log how many were reported and removed.

  • Choose five to ten members who already answer questions well, and invite them into a contributor group with limited permissions and a written playbook.

Days 46 to 90: launch window and review

  • Before the claim opens, post the one official claim address everywhere, and brief contributors on the counterfeit tokens and fake claim sites that will appear.

  • Add coverage for the first 72 hours after the claim opens, with someone awake in each major time zone.

  • At day 30 and day 90 after the claim, compare wallets still holding with members still active, and report both numbers to the team.

  • Rewrite the monthly community report so that retention, answered questions and contributor counts come first and member count comes last.

The count that tells you least

A crypto community is cheap to fill and expensive to keep, and the public data now shows how wide the gap is, with 73% of airdrop claimers moving their tokens within a day and impersonators arriving as they leave. A team that staffs for support and security early, and measures whether a few hundred people got answers, has something left after the claim. Member count will keep rising on its own whatever a team does, which is the best reason to stop looking at it.

Frequently asked questions

What does a crypto community manager do?

A crypto community manager runs a project's public channels, usually Discord, Telegram and X. The job covers moderation, answering or routing support questions, removing impersonators and scam links, passing member feedback to the product team and running ambassador or contributor programs. On web3.career the role averages $85,000 a year, with about 15 new roles posted each month as of October 2026.

Why do crypto communities go quiet after the token launches?

Crypto communities go quiet after the token launches because most members joined to qualify for the token. Bitquery's study of 51 airdrops in 2026 found that 73% of claimers in the median drop moved their tokens within a day, and only 8% still held half after 90 days. Once the reward is paid, the reason to be in the channel goes with it.

How much does a crypto community manager earn?

A crypto community manager earns an average of $85,000 a year, according to web3.career's October 2026 data, with base salaries from $50,000 to $180,000 and hourly rates from $26 to $93. Contract rates can be far lower. Upstaff lists a 2026 median of $2,666 a month for community management and support contractors, based on a small sample of five offers.

How do scammers target crypto Discord and Telegram groups?

Scammers target crypto Discord and Telegram groups by impersonating staff in private messages, taking over moderator accounts, hijacking old invite links and running fake verification bots that install malware. Chainalysis reported that impersonation scams grew 1,400% in 2025. In May 2025 a compromised moderator account in Ledger's Discord was used to ask members for their 24-word recovery phrases.

What metrics should a crypto community track?

A crypto community should track active members in the last 30 days, the share of each join cohort still active after 30 and 90 days, the share of questions answered, median time to first answer, active contributors and the time taken to remove scam posts. Member count is the least useful figure because it rarely falls and can be inflated with giveaways and fake accounts.

How many people do you need to manage a crypto community?

One full-time crypto community manager covers 40 of the 168 hours in a week, so true round-the-clock coverage takes about 4.2 full-time people. At web3.career's average rate of $44 an hour, that is $384,384 a year. Most projects instead combine one paid lead with trained regional contributors who have limited permissions and a clear escalation path.



← Articles

Crypto Community Management: Why Communities Die After TGE

Crypto community management decides what is left after the token launches. In 2026 the median airdrop saw 73% of claimers move their tokens within a day, and only 8% still held half after 90 days. Here is what a managed community does about it.

Key takeaways

Key takeaways

  • Bitquery tracked 51 airdrops between January and September 2026 and found that 73% of claimers in the median drop moved their tokens within a day, while only 8% still held half of them after 90 days, which is why most crypto communities go quiet after the token launches.

  • Chainalysis put 2025 crypto scam losses at $17 billion with impersonation scams up 1,400% in a year, and community channels on Discord and Telegram are where fake support agents find their victims, so scam defence is a core part of a crypto community manager's job.

  • A crypto community manager averages $85,000 a year on web3.career, and the numbers worth paying for are retention, answered questions and contributor counts, because member count is the least useful number a community has.

Crypto community management is usually judged by the one number that says least about it, which is how many people are in the Discord or Telegram on launch day. The on-chain record shows what those people do next. Bitquery, a blockchain data company, tracked 51 airdrops between January and September 2026 and found that in the median drop 73% of claimers moved their tokens within a day, and only 8% still held half of them after 90 days. Delphi Digital followed 3.7 million wallets over five years and found that between 78% and 94% of recipient wallets across six major tokens sold most of their allocation within 90 days.

The people who remain are the ones scammers come for. Chainalysis estimated that $17 billion in crypto was lost to scams and fraud in 2025, with impersonation scams growing 1,400% in a year. A project's own channels are where a fake support agent finds someone with a problem and a wallet. So the weeks after a token launch bring two things at once, a crowd leaving and a set of attackers arriving, and both land on whoever is running the community.

A community is the people who would still answer a question in your channel if there were nothing left to claim, and member count can't tell you how many of those you have.

What is crypto community management?

Crypto community management is the day-to-day operation of a project's public channels, usually Discord, Telegram and X, so that members get answers, stay safe from scams and have a route to influence the product. In practice it covers five jobs, which are moderation, user support, scam and impersonation defence, feedback to the product team, and running ambassador or contributor programs.

Moderation and support take most of the hours. Moderation keeps the channels readable when thousands of people arrive at once. Support in crypto is rarely "how do I reset my password" and far more often "my bridge transaction is stuck" or "why was my wallet not eligible", and the person asking has money on the line. A community manager answers it, routes it to someone who can, or writes the answer down once so it never has to be typed again.

Scam and impersonation defence has no equivalent in most other industries. Community managers ban fake admin accounts, warn members that staff never message first, lock down who can post links, and treat their own accounts as targets.

Feedback and contributor programs are where the function earns more than it costs. A manager who tags every question by topic can tell the product team which screen confuses people. Ambassador programs recruit members to translate, answer questions in other time zones or write guides, which is how web3 community management scales past the paid team. A crypto points program pays for activity, while a contributor program picks people and gives them a job.

Job

What it looks like day to day

The number that shows it is working

Moderation

Rules, spam removal, readable channels

Share of messages removed, time to remove spam

Support

Answering or routing questions about funds, claims and bugs

Share of questions answered, median time to first answer

Scam and impersonation defence

Banning fake admins, link controls, staff account security

Impersonators removed per week, time to remove a malicious post

Feedback to product

Tagging questions by topic, weekly summary to the team

Issues raised by the community that the team shipped

Ambassador and contributor programs

Translators, regional moderators, guide writers

Active contributors per month, contributors retained after 90 days

Why do crypto communities die after TGE?

Crypto communities die after TGE, the token generation event when a token first becomes tradable, because most members joined for the claim and the claim is over. In 2026 the median airdrop saw 73% of claimers move their tokens within a day and only 8% hold half after 90 days, so the reason to show up leaves with the reward.

We found no public server-level retention data for crypto communities, so the on-chain record is the best proxy for whether the people in the room are still involved.

Time after the claim

What recipients did

Source

Within 1 hour

Seven in ten claimers of Brevis (BREV) had moved their tokens

Bitquery, 51 airdrops, Jan to Sep 2026

Within 1 day

73% of claimers in the median airdrop had moved their tokens

Bitquery

After 30 days

23% still held at least half of what they claimed

Bitquery

After 90 days

8% still held at least half

Bitquery

Within 90 days

78% to 94% of wallets across six major tokens had sold most of their allocation

Delphi Digital, 3.7 million wallets, published June 2026

Both studies are linked above. Delphi's sample included Uniswap, Arbitrum, Jupiter and Pudgy Penguins, and one detail in it matters more than the headline range. The firm found that exit rates were 4 to 11 percentage points higher at day 90 than at day 30, which means the leaving does not stop after the first rush. Delphi also estimated that Arbitrum's airdrop cost $1.16 billion in tokens that went to users who left within a month.

Three mechanisms turn that selling into silence. The first is that most members received very little. In Bitquery's median airdrop the top 10% of claimers took 73% of the tokens and the top 1% took 34%, so the typical member did months of tasks for a small payout and has no reason to feel like an owner. Much of the top slice is farming operations running many wallets, a problem we cover in our piece on sybil detection and airdrop farming.

The second is price. Of the 46 airdrops in Bitquery's set that were old enough to judge, 35 traded below their first-week price, with a median decline of 48%. A channel where the typical holder is down by half is a hard room to work, and when the team posts less, members read it as the team leaving too.

The third is that paid activity was never the same thing as interest. When Blockworks Research studied Arbitrum's Short-Term Incentive Program for the Arbitrum DAO in June 2024, it attributed 70% of the trading volume on Vertex, $32.8 billion of $46.9 billion, and 43% of the volume on GMX to the incentives, and it noted that the analysis measured effectiveness and not whether the activity would last. If most of a product's usage is rented, most of its community is too. We have written separately about designing an airdrop so that some of the value stays and about crypto user retention after the wallets arrive, so this article stays with the people in the channel.

How big is the scam problem in crypto community channels?

The scam problem in crypto community channels is large and has moved from malicious links to impersonation. Chainalysis counted $17 billion lost to crypto scams and fraud in 2025 with impersonation up 1,400%, while Scam Sniffer recorded $83.85 million taken from 106,106 victims by wallet drainers, which are scripts that empty a wallet once the owner signs a malicious approval.

Those two figures point in different directions and that is the useful part. Scam Sniffer's 2025 report found that drainer phishing losses fell 83% from $494 million in 2024, and victims fell 68% from 332,000, with the largest single theft at $6.5 million in September 2025 and 11 thefts above $1 million. Over the same period Chainalysis reported that impersonation was the fastest growing category and that AI-enabled scams were 4.5 times more profitable than traditional ones, because cheap tools now produce convincing fake support agents at scale. Wallets got better at warning people about bad signatures, so attackers went after trust in people, and a community channel is a directory of people to impersonate.

The wider numbers are bigger still. The FBI's Internet Crime Complaint Center report for 2025, published in April 2026, recorded $20.877 billion in total reported losses, of which $11.3 billion involved cryptocurrency. Much of that is investment fraud with no link to a project's Discord, but it shows how much money is in play around the people a community manager is supposed to protect.

How the attacks reach a project's own channels

The fake support message. A member posts a problem in a public channel and within minutes gets a private message from an account with the project's logo and an "admin" tag, offering help through a link or asking for a recovery phrase. The defence is a pinned rule that staff never message first and a support queue fast enough that the scammer isn't the first reply.

The compromised moderator. In May 2025 an attacker took over a moderator's account in the Discord of Ledger, the hardware wallet maker, and used its permissions to launch a bot that pushed members to a site asking for their 24-word recovery phrases. Ledger confirmed the breach on 11 May, so a company whose product is security still lost control of its channel through one person's login.

The hijacked invite. In June 2025 Check Point researchers described attackers reclaiming expired or deleted Discord invite codes through the vanity link feature, so that an old link in a project's documentation or an old post sent newcomers to a malicious server with a fake "Verify" button that installed malware. The loader in that campaign was downloaded 350 times.

The fake verification bot. On Telegram, Scam Sniffer reported in December 2024 that scammers were pairing fake X accounts with Telegram groups guarded by a counterfeit "Safeguard" bot, whose verification step ran malicious code and stole wallet keys. The firm was finding 300 impersonator accounts a day on X that month against 160 in November, and at least two victims lost more than $3 million. By January 2025 it said Telegram malware scams had risen 2,000% since November.

The counterfeit token at launch. Bitquery found that 25 of the 51 airdrops it tracked in 2026 attracted counterfeit tokens, which were pushed into wallets 5.4 million times, in the week members are most likely to click a claim link without checking it.

Date

Project or platform

What happened

Reported impact

March 2023

Arbitrum

A developer's Discord account was compromised and used to post phishing links around the airdrop

Fake airdrop sites circulated during the claim

June 2023

BNB Chain

The Discord vanity URL was hijacked and a fake airdrop channel was created

Fake giveaway promoted to members

August 2024

Polygon

The Discord server was compromised and a fake token distribution link was posted in the team's name

One member reported losing more than $140,000

December 2024

Telegram groups

Fake "Safeguard" verification bots installed wallet-stealing malware

At least two victims lost more than $3 million

May 2025

Ledger

A moderator account was taken over and a bot asked members for 24-word recovery phrases

Confirmed by Ledger on 11 May 2025

June 2025

Discord invites

Expired invite links were reclaimed and pointed at malicious servers

Malware loader downloaded 350 times

The first three rows come from Web3 Is Going Just Great's collection of Discord compromises, and the rest from the reports linked above. In all six the attacker borrowed the project's own authority, which is why this work can't be left to a volunteer with full admin rights and no security training.

How much does a crypto community manager cost?

A crypto community manager costs about $85,000 a year on average, according to web3.career's salary data for October 2026, with base salaries running from $50,000 to $180,000 and hourly rates from $26 to $93. Contract and offshore rates are lower, and round-the-clock coverage takes about four people, so the real budget question is hours covered and not headcount.

The web3.career figures are the most complete public benchmark. The job board reports an average of $85,000 a year or $44 an hour, about 15 new community manager roles posted each month, roughly 400 applicants per role, and 61% of roles open to remote work. At the cheaper end, the hiring platform Upstaff lists a 2026 median of $2,666 a month for crypto community management and support contractors, or about $32,000 a year, though that median rests on only five offers and should be read as an indication. We could not find a published benchmark for volunteer or part-time moderator pay that we would trust, so we have left moderator rates out.

A worked example: what full coverage costs

Scams and stuck transactions don't keep office hours, and a token trades every hour of the week. A week has 168 hours and one full-time person covers 40 of them, so staffing a channel around the clock takes 4.2 full-time people before holidays and sick days. At web3.career's average of $44 an hour, 168 hours a week for 52 weeks comes to $384,384 a year. At the bottom of its range, $26 an hour, the same coverage is $227,136.

Those totals are our arithmetic on web3.career's rates. Few projects need a paid human awake at every hour, but the sum shows why a single manager leaves the channel unattended for 128 hours a week. The cheapest way to cover the clock is usually one paid lead supported by trained contributors in other regions, and it only works if those contributors have limited permissions, a written playbook and someone to escalate to.

Which community metrics matter more than member count?

The community metrics that matter more than member count are retention, the share of questions answered, time to first answer, the number of active contributors and the speed of scam removal. Member count only records that someone once clicked join. In Bitquery's 2026 airdrop data just 8% of claimers still held half their tokens after 90 days, so a join says little about who stayed.

Our position is that member count is the least useful number a community has, for three reasons. It rarely falls, because people who lose interest tend to mute a server and forget it instead of leaving. It can be bought, through giveaways, quests and outright fake accounts. And it measures the moment of lowest commitment, the join, while saying nothing about anything that came after.

Even in a healthy community most members are silent. Jakob Nielsen's long-standing rule of thumb for online communities, published in 2006, is that 90% of users read without contributing, 9% contribute from time to time and 1% account for most contributions. Applied to a 50,000-member Discord, that would mean about 500 people doing most of the talking, 4,500 chipping in now and then and 45,000 watching or gone. The rule predates crypto and real servers will vary, but the 500 are the community and the job is to know who they are.

The headline number

What it hides

Report this instead

Total members

Muted, departed and fake accounts

Members who posted or reacted in the last 30 days

New joins this week

Whether anyone came back

Share of a join cohort still active after 30 and 90 days

Messages per day

Spam, price chatter and bots

Questions asked, share answered, median time to first answer

Ambassador sign-ups

People who signed up and did nothing

Contributors who completed work this month, and how many are still active after 90 days

Quest completions

Farming by multi-wallet operators

Share of claimers still holding at day 90

What we'd tell a founder about crypto community management

Staff the weeks after launch more heavily than the weeks before. The leaving and the attacks both peak once the claim opens, so a community budget that ends at TGE ends when the work gets hardest. A token launch strategy that stops at the listing has no answer for day two.

Treat every staff and moderator account as a security asset. The Ledger and Polygon incidents both ran through authority inside the server. Require two-factor login, give each role the fewest permissions it needs, and keep the power to post announcements with two or three people.

Set targets on answered questions. Measure the community team on the share of questions answered and the time to first answer, and report member count as a footnote. A fast, correct answer is also the best scam defence a channel has, because the fake support agent wins when the real one is slow.

Pick contributors instead of farming them. An ambassador program that anyone can join by filling in a form produces a second member count. Choose a small group, give each person a defined job, and measure how many are still doing it three months later.

A first-90-days crypto community management checklist

This is the operating sequence we'd hand a founder for the 90 days around a token launch, assuming one paid lead and a limited budget.

Days 1 to 14: lock down and set the baseline

  • Require two-factor login for every admin and moderator account, and remove admin rights from anyone who does not need them this month.

  • List every bot and integration in the server, remove the ones nobody can explain, and limit who can add new ones.

  • Find every invite link the project has published in documents, posts and videos, replace expired ones, and move to a single permanent link you control.

  • Pin one rule in every channel that staff never send the first private message and never ask for a recovery phrase.

  • Record the baseline numbers, which are active members in the last 30 days, questions asked per week, share answered and median time to first answer.

Days 15 to 45: build the support and feedback routine

  • Open a single support channel or ticket queue, and tag every question by topic as it is answered.

  • Turn the ten most common questions into a public page and link it from the welcome message.

  • Send the product team a one-page weekly summary of what members asked, what confused them and what broke.

  • Run a scam sweep every day, searching Discord, Telegram and X for accounts using the project's name and logo, and log how many were reported and removed.

  • Choose five to ten members who already answer questions well, and invite them into a contributor group with limited permissions and a written playbook.

Days 46 to 90: launch window and review

  • Before the claim opens, post the one official claim address everywhere, and brief contributors on the counterfeit tokens and fake claim sites that will appear.

  • Add coverage for the first 72 hours after the claim opens, with someone awake in each major time zone.

  • At day 30 and day 90 after the claim, compare wallets still holding with members still active, and report both numbers to the team.

  • Rewrite the monthly community report so that retention, answered questions and contributor counts come first and member count comes last.

The count that tells you least

A crypto community is cheap to fill and expensive to keep, and the public data now shows how wide the gap is, with 73% of airdrop claimers moving their tokens within a day and impersonators arriving as they leave. A team that staffs for support and security early, and measures whether a few hundred people got answers, has something left after the claim. Member count will keep rising on its own whatever a team does, which is the best reason to stop looking at it.

Frequently asked questions

What does a crypto community manager do?

A crypto community manager runs a project's public channels, usually Discord, Telegram and X. The job covers moderation, answering or routing support questions, removing impersonators and scam links, passing member feedback to the product team and running ambassador or contributor programs. On web3.career the role averages $85,000 a year, with about 15 new roles posted each month as of October 2026.

Why do crypto communities go quiet after the token launches?

Crypto communities go quiet after the token launches because most members joined to qualify for the token. Bitquery's study of 51 airdrops in 2026 found that 73% of claimers in the median drop moved their tokens within a day, and only 8% still held half after 90 days. Once the reward is paid, the reason to be in the channel goes with it.

How much does a crypto community manager earn?

A crypto community manager earns an average of $85,000 a year, according to web3.career's October 2026 data, with base salaries from $50,000 to $180,000 and hourly rates from $26 to $93. Contract rates can be far lower. Upstaff lists a 2026 median of $2,666 a month for community management and support contractors, based on a small sample of five offers.

How do scammers target crypto Discord and Telegram groups?

Scammers target crypto Discord and Telegram groups by impersonating staff in private messages, taking over moderator accounts, hijacking old invite links and running fake verification bots that install malware. Chainalysis reported that impersonation scams grew 1,400% in 2025. In May 2025 a compromised moderator account in Ledger's Discord was used to ask members for their 24-word recovery phrases.

What metrics should a crypto community track?

A crypto community should track active members in the last 30 days, the share of each join cohort still active after 30 and 90 days, the share of questions answered, median time to first answer, active contributors and the time taken to remove scam posts. Member count is the least useful figure because it rarely falls and can be inflated with giveaways and fake accounts.

How many people do you need to manage a crypto community?

One full-time crypto community manager covers 40 of the 168 hours in a week, so true round-the-clock coverage takes about 4.2 full-time people. At web3.career's average rate of $44 an hour, that is $384,384 a year. Most projects instead combine one paid lead with trained regional contributors who have limited permissions and a clear escalation path.