Fake Crypto Exchange: How to Tell a Real Trading Platform from a Decoration

Imagine: the website shows trades and profits, but the real assets have already gone to the addresses of the scheme operators. On the screen, everything may look familiar, so the dangerous moment is easy to miss.

The main thing to know right away: The main thing is not to panic and not to try to "fix" the situation with random transfers. First, stop the repeated risk, save the original data, and only then figure out what happened.

How the scheme works

A fake exchange may copy the design of a well-known service or look like an independent platform. The deposit goes to an address controlled by scammers, and the trades and profits in the interface are drawn without real execution.

In this situation, it is important to separate two things: the attack mechanism itself and what has already happened to the assets. The website shows trades and profits, but the real assets have already gone to the addresses of the scheme operators. After an incident, a technical analysis begins not with guesses, but with a specific operation and its continuation in the blockchain.

What to do if this has already happened

Check the domain, legal details, independent mentions, and real on-chain deposit addresses. If withdrawal requires "unblocking" with a new payment, do not increase the amount until verification.

1. Stop repeating the action that caused the incident: do not sign new requests and do not send additional payments.
2. Save the tx hash, full addresses, network, asset, amount, and time of the operation.
3. Record the correspondence, domain, profile, application, or signature screen — everything that explains the context of the operation.
4. If there is a risk of wallet compromise, move the remaining assets to a new safe wallet without using the exposed seed phrase.
5. If the amount is substantial, it makes sense to trace the further route of the funds and identify service points along the way.

What to save for analysis

For this specific topic, it is especially useful to save: the domain and screenshots of the platform, deposit addresses, tx hash, correspondence, and requirements for "withdrawal".

For an initial analysis, prepare the data in one message or file — this reduces the risk of losing an important detail:

• tx hash / txid
• full sender and recipient addresses
• network, asset, amount, and time
• screenshots and correspondence
• domain, profile, or application, if related to the incident

What not to do

• Do not share your seed phrase and private keys with "helpers" or a "recovery service".
• Do not pay an unknown intermediary a "tax", "insurance", or "unblocking fee".
• Do not delete correspondence and transaction history before everything is saved.

Important: a transaction and an address are verifiable on-chain facts. The owner's identity, motive, and legal status should not be automatically derived from a single graph.

When it makes sense to involve a specialist

If the amount is substantial, the route has already branched, or exchanges, exchangers, bridges, and other services have appeared along it, a manual analysis helps separate available actions from useless ones. To start, public data is usually enough — private keys are not needed.

Frequently asked questions

If the platform shows trades and profits, does that prove the assets exist?

No. The website interface can display any numbers. The existence of assets and their movement must be confirmed by independent data.

Can a confirmed transaction be canceled?

As a rule, no. Further actions depend on the route of the funds and whether services have appeared along it that can restrict the movement of assets.

Can a scammer be identified immediately by an address?

No. The blockchain shows addresses and operations. Identity requires additional data: the service's KYC, public sources, case materials, or other confirmations.

In short

The website shows trades and profits, but the real assets have already gone to the addresses of the scheme operators. If this has already happened, first stop the repeated risk and save the original data. Then you can analyze the route and the real points for further actions.