If your channel is growing, you have seen it: a reply under your pinned comment from an account with your exact name and photo, telling a fan they "won" and to message a Telegram or WhatsApp number to claim it. Or a wall of "I made $40k with this crypto mentor, DM the number above" copy-paste. This is not random noise. It is a targeted playbook that steals from the people who trust you, and it lands in your comment section faster than you can refresh. This guide walks through YouTube's own defenses, the exact gaps scammers exploit, and how to automate the parts YouTube leaves manual. If you just want a starter word list, our YouTube blocked words list is a free place to begin.
Short answer. YouTube gives you real weapons: blocked-words lists, held comments, hide-user, and an impersonation report form. They work, but they are literal and reactive. Scammers evade string filters and clone your handle faster than manual reports resolve. Pair them with AI-intent moderation, like CommentShark, that auto-hides scam and impersonation waves 24/7.
What the scam actually looks like
Two related threats hit creators every day. The first is scam spam: bot accounts flooding comments with fake crypto "mentors," Telegram or WhatsApp group invites, and prize bait. The second is impersonation: an account that copies your channel name, avatar, and banner closely enough to look like you, then replies to your genuine fans pretending to be you running a giveaway. Security researchers and Ripple itself have flagged waves of these fake-giveaway operations tied to crypto rallies, where impersonators clone a real channel and push viewers into off-platform chats to hand over money for a prize that never arrives.
- Crypto "tips" bait: "Thanks to broker/mentor X I turned $500 into $9,000, contact +__ on WhatsApp."
- Fake giveaway replies: a lookalike of you tells a commenter they won and to "message the number pinned above."
- Telegram / WhatsApp funnels: the goal is always to move your fan off YouTube where you cannot see or moderate the conversation.
- Cloned identity: YouTube confirms a channel does not have to be 100 percent identical to count as impersonation, as long as the intent to copy is clear.
YouTube's built-in tools, and where they stop
YouTube does ship legitimate moderation controls, and you should turn all of them on. Here is what each one does, verified against YouTube Help in July 2026, followed by the honest limitation.
- Blocked words. A channel-wide list of terms. Comments containing or closely matching them are held for up to 60 days instead of publishing. Gap: it is literal string matching. Scammers swap letters, insert spaces or emoji, and use "t3legram" or unicode lookalikes to slide past a fixed list.
- Hold potentially inappropriate comments for review. Set moderation to Basic or Strict and YouTube auto-holds a broader range of risky comments in Studio. Gap: it is tuned for harassment and profanity, not "join my crypto group," which reads as perfectly polite text.
- Block links. Holds any comment that contains a URL. Gap: the highest-value scams post a phone number or a Telegram handle, not a clickable link, so they never trip this filter.
- Hide user from channel. Channel-wide, affects past and future comments, and the user is not notified (a shadow-ban style hide). Gap: it is one account at a time and only after you find them. Bot farms spin up new accounts faster than you can hide them.
- Approved users. Trusted commenters bypass every filter. Useful, but it does nothing to stop the bad actors.
- Report impersonation. On the impostor's channel About page, use the flag icon to Report user and file the Impersonation form. Gap: it is reactive and manual. Review takes time, and by the time a clone is removed it has already DM'd your fans.
Set up YouTube's native defenses in 6 steps
- 1. Open YouTube Studio, then Settings, then Community, then Automated filters.
- 2. Under Blocked words, paste scam-adjacent terms: telegram, whatsapp, giveaway, crypto mentor, DM me, claim prize, plus common spelling dodges. Save.
- 3. Turn on Block links so comments with URLs are held for review.
- 4. Set comment moderation to Basic or Strict so YouTube holds potentially inappropriate comments before they publish.
- 5. Pin a warning comment on your videos: "I will never ask you to contact me on WhatsApp or Telegram, and I never run giveaways in the comments." This kills the impersonator's credibility instantly.
- 6. When a clone appears, go to its channel About page, click the flag, choose Report user, and file the Impersonation report. Hide the account from your channel while you wait.
Do all of this and you will stop a real share of the junk. But notice the pattern in every gap above: YouTube's filters match text, not intent, and its impersonation defense is a form you fill out after the damage is done. A scam that says "amazing content, join our community for daily signals" contains zero blocked words, zero links, and zero profanity. It sails straight through. That is the seam CommentShark is built to close.
Where CommentShark picks up the slack
CommentShark manages your own comment section (it never posts on other people's videos). It runs your rules against every incoming comment around the clock, so scam and impersonation waves get hidden while you sleep instead of piling up until your next login. It combines three matching modes so you are not stuck with brittle keyword lists.
- Blocked-words and regex rules. Go beyond a flat list. A single regex catches spacing tricks, emoji padding, and "t3l3gram" style dodges that a literal blocked-word entry misses. Our regex filter guide shows the patterns.
- AI-intent moderation. Instead of matching a word, an AI rule reads the comment's meaning. "Join our private group for daily crypto signals" gets hidden as a scam funnel even with no banned keyword, no link, and no slur. This is the layer native filters do not have.
- Autonomous or approval-queue, per rule. Trust the AI to auto-hide obvious scams outright, and route the borderline calls to a review queue you clear in one pass. You decide the autonomy level rule by rule.
- 24/7 coverage. Rules run continuously, so a Saturday-night impersonation raid is hidden before your fans ever see it, not after.
You can start free. The permanent free plan includes 3 rules, 20 automated actions/mo with AI matching included, which is enough to run a scam-hide rule and an impersonation-pattern rule from day one. Paid plans (from $19/month) lift the caps plus add sentiment and intent analytics so you can see how much scam pressure your channel is actually under. See our comment moderation tool for the full picture.
Be honest: no tool catches 100 percent
Anyone promising a perfect scam filter is selling you something. Scam operations mutate their wording daily, and impersonation is fundamentally an identity problem that only YouTube can resolve at the account level. What automation does is change the ratio. Native filters plus AI-intent moderation catch the overwhelming majority automatically, shrink your manual review to the genuine edge cases, and buy back the hours you would otherwise spend refreshing your comments in a panic. Keep the pinned warning up, keep reporting clones, and let the software absorb the volume.
Frequently Asked Questions
How do I stop crypto scam comments on YouTube?
Turn on blocked words (add telegram, whatsapp, crypto mentor, DM me), enable block links, and set moderation to Basic or Strict in YouTube Studio. Because most crypto scams contain no banned word or link, add an AI-intent rule in a tool like CommentShark that hides comments by meaning, not just matched text.
Why do YouTube blocked words miss so many scam comments?
Blocked words is literal, closely-matched string filtering. Scammers evade it with letter swaps (t3legram), emoji or space padding, and phone numbers instead of links. Regex rules and AI-intent moderation catch the intent behind those variations, which a fixed word list cannot.
Someone is impersonating my channel in the comments. What do I do?
Go to the impostor's channel About page, click the flag icon, choose Report user, and file YouTube's Impersonation report. Hide the account from your channel, and pin a comment telling fans you never run giveaways in the comments or ask them to message you on WhatsApp or Telegram. Reporting is reactive, so pair it with automated hiding to catch new clones fast.
Does hiding a user on YouTube delete their past comments?
Hiding a user is channel-wide and applies to both past and future comments, and the user is not notified. They can still see their own comments on their end, but no one else can, which is why it is sometimes called a shadow ban. It only works on accounts you have already identified, though, so it does not scale against bot farms on its own.
Is CommentShark a bot that comments on other channels?
No. CommentShark only manages your own comment section. It hides, deletes, and replies within your channel based on your rules. It never posts comments on anyone else's videos.
Hide scam, crypto, and impersonation comments automatically, 24/7, starting on the free plan.
Set up scam moderation free
