Trading Bots and AI Trading: Risks and Red Flags

Updated 2026-10-30

Short answer: a trading bot is software that places buy and sell orders for you by following rules. It can trade faster and more steadily than a person, but it can't see the future, and it loses money when the market does something its rules didn't expect. Anyone promising that a bot or "AI" will make you money is a red flag, not a feature.

What a trading bot does

A bot connects to an exchange account and places orders when its rules say so. Common types:

Grid bots buy a little each time the price falls by a set step and sell a little each time it rises, inside a price range you choose. They do best when the price moves sideways, and badly when it breaks out of the range, especially downward.
DCA bots (dollar-cost averaging) buy a fixed amount on a schedule. This is the simplest kind and is often just a "recurring buy" in your exchange's app.
Signal or "AI" bots trade on indicators, copied trades or a model's predictions. These are the hardest to judge and the most often oversold.

Some exchanges build bots in, for example grid bots inside the exchange's own app. Others are separate services that connect to your exchange account with an API key.

What "AI" can't do

U.S. regulators have warned that fraudsters use the excitement around artificial intelligence to sell trading bots and signals. The U.S. Commodity Futures Trading Commission (CFTC) puts it plainly: AI won't turn trading bots into money machines. A model can find patterns in past prices; it can't know about tomorrow's hack, news or crash.

Why backtests mislead

A backtest runs a strategy on past prices to show how it "would have" done. Useful, but:

A strategy tuned to fit the past often fails on the future ("overfitting").
Backtests usually ignore or understate fees, slippage and gaps when the market moves fast.
Every bot looks good on the period it was designed for. Ask how it did in a crash, not only in a rally.

The real costs

Trading fees on every order: a busy bot can pay a lot of them.
Subscription fees for outside bot services.
Taxes: in many countries every sale or swap a bot makes is a taxable event, so hundreds of small trades mean hundreds of records. See Crypto Taxes: the Basics.

Protect your account (API keys)

If you connect an outside bot to your exchange:

Create an API key with trading permission only. Never enable withdrawals.
Restrict the key to the service's IP addresses if the exchange allows it.
Use a separate sub-account with only the money you're willing to lose.
Revoke the key the moment you stop using the service, or if it reports a breach.

Bot services have leaked API keys before, and the leaked keys were used to place unwanted trades.

Red flags of a bot scam

Promised or "steady" returns, especially daily or weekly percentages.
Pressure to deposit more to "unlock" higher tiers or to withdraw your profits.
A dashboard that shows big gains, but withdrawals are delayed, blocked or need a "fee" first.
You must send coins to the bot operator, instead of keeping them in your own exchange account.
Contact through social media, dating apps or group chats, often from someone who just became your friend.
No real company name, address or history; or a name that copies a known firm.

If someone else holds your money and shows you "profits", assume it may be a scam until you've withdrawn. See Common Crypto Scams.

Do this

Learn to trade by hand first, with small amounts, so you understand what a bot would be doing.
Prefer bots built into a well-known exchange over unknown outside services.
Start small, check results weekly, and stop a bot when the market changes character.
Never give a bot withdrawal access, and never send your coins to a bot operator.
Treat any promised return as a warning sign.