How to Spot a Fake Exchange or Referral Scam

In short

A fake exchange is a website made to appear as a real crypto exchange and can potentially have access to your login details, deposits and identification documents. And a referral scam typically picks up the language of actual referral codes & sign up bonuses to lure you on a fake exchange. This two elements go hand in hand: a referral offer is more of a bait and getting users onto a fake exchange is real goal.

But the good thing is the warning signs can easily be identified. If there’s one thing to always remember: any legitimate exchange would never ask you for a fee, password, or security codes in order to claim a bonus, unlock a withdrawal, or fix your account.

Warning signs at a glance

Warning sign	Why it matters
Being required to pay a fee, tax or deposit to activate a bonus or withdrawal	Any genuine exchange deducts fees from your balance. Paying to activate your own money is the most common scam.
A stranger contacted you first, on Telegram, WhatsApp, social media or a dating app	Legitimate exchanges don’t initiate private conversations to help you trade or claim rewards
Guaranteed or fixed returns	There is no exchange or trader that can guarantee profits
A far lucrative bonus than the exchange’s own website outlines	Scammers use over-the-top offers to get you onto fake sites
The web address is not entirely right	Look-alike domains are how fake exchanges get access to logins and deposits
Requests for your password, 2FA codes, recovery phrase or screen access	A genuine exchange never needs these
Manufactured urgency	Users get bombarded with countdown timers and “last chance” messages that are designed to coerce you
An exchange that you can’t find any official information about	Legitimate exchanges have a history, reviews and a regulatory footprint

The rest of this guide will go through each type of scam, how to assess any exchange or offer before trusting it, and the steps to take if something has already gone wrong.

Fake exchange websites and apps

A fake exchange typically appears like a real one, even by design. It might mimic a well-known exchange’s design and logo, or come up with a new, professional-looking brand. But, it only has one job: to get away with your login details, your identity documents or your deposits.

How they reach you

• Search ads. Phishers will do paid ads above the real exchange in the search results hence leading users to the fake exchange.
• Look-alike web addresses. Most of these phishing websites will use a swapped letter, an extra word, a hyphen or a different ending, such as “-support”, “-app” or “.co” instead of “.com”.
• Links in messages and social media. Posts, comments and direct messages directed to “official” registration pages or bonus claims.
• Fake apps. Copies of real exchange apps in app stores or linked as direct downloads, outside the official stores.

What happens next

These mimics of real exchanges will access your login and two-factor codes as you type them, then re-use them on a real exchange to empty your account.

Invented exchanges take a slower approach but they are even more damaging. You deposit, your dashboard shows a growing balance. But when you try to withdraw, you’re required to first pay a “tax”, “verification fee”, “anti-money-laundering deposit” or “unlock fee”. They’ll have payment tiers, each one leading to another. But the reality is the balance was made up and nothing could ever be withdrawn.

How to protect yourself

• Type the address yourself, or use a bookmark. Bookmark the real exchange’s address and always make use of it when logging in.
• Don’t sign up via ads. Don’t click on the paid results and use the organic link to the website.
• Check the app publisher. In the app/play store, the developer name should match the exchange precisely. The app should also have a long history and many reviews. Never install an exchange app from a link that’s sits outside the official stores.
• Check for the padlock, but don’t rely on it. HTTPS is just an indication that the connection is encrypted. Scam sites could have it too.

Fake referral codes and bonuses

Referral codes are a legitimate feature and widely used, as explained in my guide on referral codes vs promo codes. However, their popularity makes them an eexcellent cover for scammers.

The “pay to unlock” bonus

This makes the most common bonus scam. A user is told they’ve won or qualified for a huge reward, then asked to send crypto to activate it: a “gas fee”, “activation deposit” or “verification payment”. Genuine exchange bonuses are credited inside your account. You won’t ever have to send money to an outside wallet, or to a person, to receive one.

The impossible offer

A code or link guarantees a huge bonus far more than what the exchange itself offers, such as guaranteed cash or a bonus you can withdraw instantly. The link redirects the users to a fake site, or the offer is bait for a “pay to unlock” request. You need to always compare a code’s claims with what the exchange’s own registration page shows. On this site, every offer page outlines what you can realistically expect and when I last checked it. See all verified offers.

The “private” code with strings attached

A code is given to you in a private chat, along with an offer to “help” you sign up, trade or claim rewards. The code may indeed be genuine. However, their participation leads to the scam. It usually escalates to requests for screen sharing, your login details or a deposit into a “managed account”.

Genuine codes, misleading pages

Essentially, not every lousy referral page is a scam. Some are just exaggerated, advertising an “up to” figure as if every new user will have the opportunity to hit those figures. That may not be theft, but it is misinformation that can lead you to make decisions based on rewards you won’t receive. My guide to how sign-up bonuses work details how to determine what an offer is really worth.

Fake support agents

Fake exchanges and referral scams are notorious for introducing “support” to close the deal. Some may pose as staff from a real exchange; others work for the fake one. They are constantly keeping up with public conversations, especially complaints.

If a user posts that a withdrawal is stuck or a referral bonus hasn’t activated, and you may quickly get replies or private messages from “support agents”, “compliance officers” or helpful strangers who suddenly know someone at the exchange.

Most times, they’ll use the exchange’s logo, a convincing username and even a fake ticket number. Their goal here is to get one of these from you:

• your password or two-factor codes
• your wallet recovery phrase
• remote access to your phone or computer
• a payment to “unlock” or “secure” your account
• a transfer to a “safe” wallet while your account is “under review”

The rules that you should always follow:

• Real support doesn’t contact you first on Telegram, WhatsApp, X, Discord or by phone. The only valid support chat or ticket system is the one inside the official website or app.
• Set an anti-phishing code– do this from your exchange’s security settings. Any genuine emails from that exchange will include it, so emails without it are automatically fake.
• Nobody genuine needs your password, 2FA codes or recovery phrase. An exchange will never request these details from you.
• There is no such thing as a “safe wallet” transfer. Any request made to transfer your funds to protect them is a scam.

How strangers lead people to fake exchanges

Many invented exchanges don’t find their victims via search. They’re often recruit people such as: a friendly stranger, a romantic match, a “mentor” or a trading group, often with a referral code to make the sign-up feel normal. The pattern is can be determined fast.

1. Contact. A friendly stranger messages you, or pretends it’s a wrong number, or you meet via a dating app, social media or a trading group.
2. Trust. After weeks of conversation to build a relationship, crypto gets introduce casually: they or a relative have been making some good profits from it.
3. The platform. They’ll recommend you to an exchange or trading app you’ve never heard of, sometimes with a referral code, and assist to you to make a small deposit.
4. The hook. The balance will skyrocket fast. They may even allow you to make a small withdrawal to prove it’s real.
5. The squeeze. They’ll encourage you to deposit more, borrow, or bring in family. Then when you try to withdraw a bigger amount, fees and “taxes” appear, and the contact applies pressure and later disappears.

Warning signs: a stranger becoming very close very fast, who quickly changes the conversation to an investment platform, and whose platform you can’t find any independent information about. A genuine exchange don’t need anyone to walk you through every trade.

The same applies to “trading signal” groups, “AI trading bots” and “account managers” that promise fixed daily or weekly returns. Consistent, guaranteed profits simply doesn’t exist in crypto. Anyone promising them is either hugely mistaken or lying.

Fake exchange or real one?

Fake exchanges may look polished from the outside, so assess them by how they behave rather than how they appear. These differences hold up even when the design is perfect.

	Real exchange	Fake exchange
How you found it	Search, app stores, recommendations you can look up independently	A stranger reaches out, an ad, or a “mentor” who walks you through registration
Web address	Long-established & well-known domain, the same one used across its official channels	Recently registered copy, with an unfamiliar name with no history
Regulator status	Registered and licensed in some countries	Doesn’t appear on registers, on warning lists, or claiming licenses that don’t exist
Independent footprint	Long track record of news coverage, market-data listings, user forums	Barely known by anyone, paid press releases and glowing testimonials.
Referral bonus	Outlined on the exchange’s own sign-up page, and users need to complete tasks to access them.	Large or guaranteed bonuses, and needs a payment, fee or deposit to “unlock”
Returns	No promises; prices are volatile	Constant or guaranteed profits, a balance that only rises
Withdrawals	Published fees, that are deducted from your balance	Additional “taxes”, “unlock fees” or deposits before you can withdraw.
Support	Ticket or chat system operates inside the site or app	Strange, personal accounts on messaging apps, often contacting you first

How to check an exchange before you trust it

Taking a moment to check before you deposit tends to catch most scams. These are typically the same checks I run before listing any exchange on this site; see how I verify offers.

Check	What to look for	Red flag
History	How long has it been in operation? Is it covered by traditional crypto news sites?	Launched recently, with no coverage outside its own site, and some mere paid press releases
Regulator registers	Is it officially registered or licensed in your country? Go search your national financial regulator’s register and warning list	Listed on a regulator’s warning list, or claims a license the register doesn’t indicate.
Independent reviews	What are users saying on independent forums and review sites? Identify patterns, especially on withdrawals	Many reports of blocked withdrawals or surprise “fees”
Proof of reserves	Does it release regular proof-of-reserves reports, preferably checked by a third party?	No reserve information at all
Market data	Is it listed on independent market-data sites with practical trading volumes?	Usually absent from data sites, or may have volumes that look absurdly high for an unknown platform
Contact and company details	Is there a named company, an official address and a support system inside the site?	Support is only via a personal messaging account
Fees and withdrawals	Are fees published openly? Do withdrawals operate without additional conditions?	Withdrawal “taxes” or deposits needed before you can withdraw any funds.

The small-withdrawal test

Before depositing any significant amounts on an exchange, begin by depositing a small amount, then withdraw part of it to your own wallet or bank. If that works seamlessly and the fees match what was published, you’ve tested the most crucial part. But you should be aware that some scam platforms may allow one small withdrawal to build trust, so a single successful withdrawal is not enough evidence.

Checking a referral code or bonus

• Open the exchange’s sign-up page with the code and compare what it outlines with the bonus that comes with the referral code.
• Check the link’s domain before clicking on it. A referral link should redirect to the exchange’s real website.
• Read the reward terms from your account, not in a message or video.
• Always remember that a real code doesn’t need a payment, a password or a 2FA code in order to work.

Protect your account from day one

Even on a legitimate exchange, accounts can be overtaken by phishing and stolen passwords.

1. Make sure to use a long, unique password and preferably stored in a password manager.
2. Turn on 2FA authentication with an authenticator app or passkey.
3. Set up your anti-phishing code so you can easily determine genuine emails.
4. Turn on a withdrawal address whitelist, so funds can only be transferred to addresses you’ve approved.
5. Review logged-in devices on the regular and get rid of any you don’t recognize.
6. Keep long-term savings in a wallet you have more control on, not on an exchange.

If you think you’ve been scammed

Take action quickly. These scams are usually organized by groups and it’s typical that they’d catch careful, intelligent people every day.

1. Stop sending money. Don’t continue paying the fees requested, taxes or one last payment to release your funds. More payments won’t unlock the balance.
2. Secure your accounts. If you gave out your password, 2FA code or recovery phrase, proceed to change your passwords, reset 2FA authentication and transfer any remaining funds to a new wallet you control. A recovery phrase that has been shared with intruders can’t be trusted again.
3. Contact your exchange via its official support. If funds were stolen from genuine exchange account, report it instantly. Exchanges sometimes have the privilege to freeze funds that reach other accounts on their platform, but only if an issue is reported on time.
4. Contact your bank if you paid through your card or via bank transfer. Card payments can sometimes be disputed.
5. Collect evidence. Keep a clean record of transaction IDs, wallet addresses, usernames, website addresses, screenshots of conversations and dates. And don’t delete the chats.
6. Report it. Proceed to report to your local police and your local country’s national fraud reporting service. In the US, that’s ReportFraud.ftc.gov and the FBI’s Internet Crime Complaint Center (ic3.gov). Additionally, report the fake website or account to the platform hosting it, and to your financial regulator if it is a fake exchange or investment firm.

Recovering crypto is not guaranteed, but reports do assist investigators connect cases, trace funds and shut down sites before they reach more victims.

Beware of recovery scams

After experiencing such a loss, many victims are contacted by people offering to get their money back like “blockchain investigators”, “recovery lawyers”, hackers or even fake police officers. They’ll ask for an upfront fee or a “percentage in advance”. In most instances, these are always the same scammers, or people buying lists of target victims.

A genuine law enforcement won’t charge you to investigate. Be cautious of anyone who contacts you first offering to recover lost crypto, and never pay upfront for recovery.

Frequently asked questions

1. How can I tell if a crypto exchange is real? Investigate how long it has been in operation, whether it’s registered with or warned about by your local regulator, what independent users are saying about withdrawals, and whether it publishes proof of reserves. Then begin with a small deposit and withdrawal before trusting it with more.
2. Are referral codes a scam? No. Referral codes are a typical marketing incentive and it’s how exchanges attract users, and a genuine code shouldn’t cost you anything. The scam is when a “code” or “bonus” requires you to pay, share login details, or make use of a site that isn’t the exchange’s real website.
3. An exchange says I must pay tax before I can withdraw. Is that normal? No. Genuine exchanges deduct their withdrawal fees from your balance, and taxes are paid to your tax authority, not to an exchange. A demand for an upfront payment to release funds is the no.1 sign of a scam platform.
4. Will a real exchange ever contact me on WhatsApp or Telegram? Absolutely not. Exchanges indeed run official community channels, but their staff won’t message you privately first. A user is required to use the support system inside the official site or app.
5. My balance on an exchange keeps growing. Could it still be fake? Yes. A fake exchange is able to control the figures on its own dashboard, so a balance that increases steadily proves nothing. But the real test is a withdrawal to your own wallet or bank without the need to make any additional payments. If you’re asked to pay first, then it’s a fake exchange.
6. I signed up through a referral link. How do I know the site was real? Assess the address in your browser against the exchange’s official address, which a user can confirm via its verified app store listing or established news coverage. Then you can sign in by typing that address yourself. In case your account and balance appear there, then you logged in on the real exchange. If you can’t log in to the official site, the site you used was just a copy: ensure to change any password you reused and turn on your 2FA authentication everywhere.
7. Can stolen crypto be recovered? Sometimes, especially when a user reports it immediately, with the funds hitting a regulated exchange that can freeze them. But in most scenarios, its almost impossible. Be wary of anyone who promises recovery, but needs an upfront fee.
8. How do I check whether a referral offer is genuine? Open an exchange’s sign-up page with the code and compare what it showcases with what you are being promised. A genuine offer should be visible on the exchange’s own site and inside your account.

---

Crypto is volatile and you can lose money. This guide is general information, not financial or legal advice. If you’ve been the victim of fraud, contact your local police and your country’s fraud reporting service.