7 warning signs of a fake crypto exchange, wallet or investment app (2026)

In short: a fake crypto exchange, wallet or investment app usually shows itself in one of seven ways. It reaches you first, through a stranger, a dating match or a Telegram "support" agent. It promises steady returns. It lives on a look-alike domain or an unofficial app. Or it asks for a fee, a "tax" or your seed phrase before you can withdraw. If any of these apply, stop sending money, check the company's official domain through an independent source, and report it. Anyone who then offers to recover your funds for a fee is almost certainly running a second scam.

How big the problem is in 2026

Crypto is now the main way scammers get paid. The FBI's Internet Crime Complaint Center (IC3) received 181,565 complaints involving cryptocurrency in 2025, with reported losses of about $11.37 billion, according to its 2025 annual report. That is more than half of the $20.9 billion lost across all 1,008,597 complaints the FBI received that year.

Two trends stand out. Chainalysis found that impersonation scams grew by more than 1,400% year on year, and that scam operations with on-chain links to AI vendors took in about 4.5 times more than those without (Chainalysis). The FTC reported that investment scams made up $7.9 billion, about half of all reported losses, and that cryptocurrency came second only to bank transfers as the payment method with the highest losses (FTC).

The 7 warning signs

1. Someone you have never met introduced you to the platform

Most fake platforms do not wait to be found. A stranger messages a "wrong number", a dating match mentions an uncle who trades, or a friendly contact on WhatsApp shares screenshots of their profits. This is the pattern often called pig-butchering: weeks or months of trust-building, then an invitation to a trading site that the scammer controls. The FBI files these as cryptocurrency investment scams and calls them "sophisticated long-term scams". Through its Operation Level Up, the FBI notified 3,780 victims in 2025, and 78% of them did not yet know they were being scammed (IC3 2025 report).

The test is simple. If you did not seek out the platform yourself, treat it as suspect until proven otherwise.

2. The returns are steady, high and guaranteed

Real markets go down as well as up. A dashboard that shows smooth daily gains, a "signal group" that never loses, or a mentor who promises a fixed percentage a week is a strong sign of a fake. Many scam sites let you withdraw a small amount early on so you trust them with a larger one. A small successful withdrawal proves nothing.

3. You must pay a "tax", fee or deposit before you can withdraw

This is the most common question on r/Scams and r/CryptoScams, and the answer is nearly always the same: it is a scam. Fake platforms invent a "capital gains tax", "anti-money-laundering deposit", "miner's fee", "account upgrade" or "unfreezing charge" that must be paid in fresh crypto before your balance is released. Each payment leads to another.

Legitimate exchanges deduct their withdrawal fees from the balance you are withdrawing. Taxes are paid to your tax authority, not to the exchange. The moderators of r/CryptoScams put it plainly: if you are doubting whether the site is a scam, it probably is.

4. The domain or app is almost right

Clone sites copy the design of a real exchange or wallet and sit on a look-alike address: an extra letter, a swapped character, a different ending such as .io instead of .com, or a sponsored search ad placed above the real result. Fake apps work the same way. In April 2026, Kaspersky reported 26 fake wallet apps on Apple's App Store imitating MetaMask, Ledger, Trust Wallet, Coinbase and others. They posed as games or calculators, then pushed users to install a trojanised wallet from outside the store, which captured seed phrases as they were typed.

Warning signs include an app with a different developer name from the company's website, few reviews, a request to install a "developer profile" or an APK file, or a link that reached you through a chat rather than the company's own site.

5. "Support" contacts you first on Telegram, X or WhatsApp

Real exchanges and wallet makers do not open support conversations in your direct messages. Scammers watch public replies on X and Telegram groups where people complain about a stuck transaction, then message them as "admin" or "support" with a link to "validate" or "sync" a wallet. Impersonation is the fastest-growing scam category in Chainalysis's 2026 data, up more than 1,400% in a year (Chainalysis). Verified ticks, matching profile pictures and copied logos are cheap to fake.

Use support only through the link on the company's official website, and never share a seed phrase, private key or screen with anyone who asks for it.

6. Odd transactions appear in your wallet history

Address poisoning does not need a fake app at all. The attacker sends you a tiny or zero-value transfer from an address that starts and ends with the same characters as one you use. Later, you copy the address from your history and pay the attacker. In December 2025, one user lost almost $50 million in USDT this way: a small test payment went to the correct address, and minutes later the full amount went to a poisoned look-alike. The two addresses shared their first three and last four characters.

Never copy addresses from your transaction history. Use a saved address book, and check the full string, not just its ends.

7. Someone offers to get your money back

After a loss, victims are targets again. Recovery scammers pose as lawyers, "blockchain investigators", ethical hackers or even government agencies. They may know your exact losses and dates. The FBI's August 2025 warning lists the signs: claims of partnership with government agencies (no law firm is an authorised partner of US agencies), invented regulators such as an "International Financial Trading Commission", fees paid in crypto or gift cards, refusal to appear on video, and pressure to open an account at a foreign "bank". Recovery scams accounted for $1.4 billion in reported losses in 2025 (IC3).

Law enforcement does not charge for its services, and nobody can reliably reverse a blockchain transaction for an upfront fee.

Quick reference: real platform vs fake

How to check a company's official domain

Before you deposit, confirm that the website and app you are using belong to the company you think they do.

1. Look the company up in an independent directory. Search the BitOrgs register by name and compare the official website listed there with the one in your browser bar, character by character. Browse the exchanges and wallets categories to see the genuine names in each field.
2. Check how the listing was compiled. Our methodology explains where entries come from and how they are reviewed, so you know what a listing does and does not confirm.
3. Cross-check the regulator. If a platform claims a licence, find the regulator's own public register and search for the firm there. Do not trust a licence number shown only on the platform's own site.
4. Reach the app from the website. Open the official domain first and follow its link to the App Store or Google Play. Confirm the developer name matches.
5. Bookmark it. Once you have the right domain, use the bookmark rather than search ads or links from chats.

Our guide on how to verify a crypto company covers licences, team and on-chain checks in more depth, and the statistics page gives an overview of what the register holds. A missing listing is not proof of fraud, but a platform that appears nowhere outside its own site deserves extra caution.

What to do if you've been scammed

1. Stop paying. No further "fee" or "tax" will release your funds.
2. Secure what is left. Move any remaining funds to a new wallet with a new seed phrase if your wallet may be compromised, and revoke token approvals you do not recognise.
3. Keep the evidence. Save transaction hashes, wallet addresses, website URLs, app names, usernames and full chat logs.
4. Report it. In the US, file at ic3.gov and with the FTC. In the UK, report to Report Fraud, which replaced Action Fraud in December 2025, at reportfraud.police.uk or on 0300 123 2040. Elsewhere, contact your national police fraud unit.
5. Tell the exchange you sent funds from. If the money left a legitimate exchange, its compliance team may be able to flag the receiving addresses.
6. Ignore recovery offers. Treat every unsolicited offer of help, including ones that claim to come from police, lawyers or regulators, as a likely second scam.

FAQ

The platform says I must pay tax before I can withdraw. Is that normal?

No. Legitimate exchanges do not hold your balance until you pay tax to them. Any demand for an upfront "tax", deposit or unfreezing fee is a hallmark of a fake platform. Stop paying and report it.

Can a recovery service get my crypto back?

Not for an upfront fee. Blockchain transactions cannot be reversed by a private firm. The FBI warns that fake law firms and "investigators" target scam victims. Report to the police or IC3 instead; they do not charge.

I received a tiny transaction from an address that looks like mine. What should I do?

Nothing, except stop copying addresses from your history. It is likely address poisoning. The transfer cannot harm your wallet by itself; the danger is sending your next payment to the look-alike address.

How can I tell if an exchange website is the real one?

Compare the domain with an independent source such as the BitOrgs register or the company's regulator listing. Check it character by character, bookmark it, and avoid links from ads, emails or chats.

Is an app safe just because it is in the App Store or Google Play?

No. Fake wallet apps have repeatedly passed store reviews. Open the company's official website first, follow its own link to the store, and check the developer name.

Someone from "support" messaged me on Telegram. Is it real?

Almost certainly not. Real support does not start conversations in direct messages, and nobody legitimate will ask for your seed phrase. Contact the company through its official website instead.

Sources

• FBI Internet Crime Complaint Center, 2025 Internet Crime Report (2026)
• FBI IC3 public service announcement I-081325-PSA on fictitious law firms (13 August 2025)
• Chainalysis, 2026 Crypto Scams report (13 January 2026)
• FTC testimony to the Joint Economic Committee on the rising scam economy (25 March 2026)
• Kaspersky, 26 fake crypto wallet apps on Apple's App Store (20 April 2026)
• Cointelegraph, address poisoning leads to $50M USDT loss (20 December 2025)
• techUK, Report Fraud replaces Action Fraud (December 2025)

This article is for general information and is not financial or legal advice.

Last reviewed: 4 November 2026.