To avoid crypto scams, check the website address, identify its operator, compare the price independently, trace security claims to their source, and inspect any request for money or wallet access. Do this before depositing or signing. A convincing exchange can display real Bitcoin prices and still invent your account balance. A helpful stranger can point you toward a genuine platform, then persuade you to transfer funds somewhere fraudulent. These five checks help you spot the difference before money leaves your control.

 

1. Check how you reached the website

Start with the route that brought you there. Did you open an established bookmark, follow an advertisement, scan a code, or accept a link from someone in a chat? The last three deserve a separate identity check. A familiar name in a message or link preview does not establish who operates the destination.

Open the provider through a route you established independently. Read the full domain in the address bar, including the ending, and check it again after a redirect. Extra words, altered spellings, or an unfamiliar domain should stop you from entering credentials. Search results can also contain impersonators; the first result is not automatically the official service.

HTTPS encrypts the connection between your browser and a website; it does not prove the operator is trustworthy. The U.S. Federal Trade Commission explains this in Buying From an Online Marketplace (November 2024): scammers can encrypt their websites too. A padlock is not a safety certificate.

Be particularly wary when someone insists that the opportunity works only through their link, private app download, or screen-sharing session. You should be able to research a service without allowing the person who recommended it to control every source you consult.

2. Verify the operator behind the exchange name

Find the legal entity in the service terms, then check whether its name, location, domain, and contact details agree across independently located records. Where a regulatory register applies, open it yourself and check the exact entity and permitted activity. A copied registration number can belong to a real business while the website using it belongs to someone else.

Registration, authorization, and customer protection mean different things across countries and products. A record covering one entity or activity may not cover another affiliate, derivatives service, or customer location. If you cannot establish which business would hold your funds and which terms apply, pause before uploading identification or sending money.

A crypto exchange ranking list can help you compare established names, reported trading volume, liquidity, and supported markets. It is a starting point, not proof that a particular website is genuine or financially sound. Check the domain and regulatory records separately; a directory may also omit legitimate businesses.

A small withdrawal can create false confidence. In its Investment Fraud guidance, the FBI’s Internet Crime Complaint Center describes schemes that allow early withdrawals to encourage larger deposits. That first payment does not prove the remaining balance is real or accessible. Do not send money to a suspicious platform just to test it.

3. Compare the price and question the claimed profit

Treat an unusually favorable quote as a claim to investigate. Match the asset, quote currency, market type, and observation time. A spot last-trade price records a completed trade; a derivatives mark is a reference used by a derivatives venue. They need not agree. Even within spot markets, available buy and sell prices can differ from the latest trade.

Check the current Bitcoin price through a market source you open yourself, rather than a seller’s screenshot. Compare the USD quote and chart with another source at the same time. A displayed price is a reference, not a guaranteed execution price; fees and liquidity can affect what you receive.

Consider a hypothetical offer, using invented prices. Two independent BTC/USD spot pages show approximately $80,000 at 14:00 UTC. A new platform promises to buy your Bitcoin for $88,000 if you deposit first. That is a 10% premium before costs: $88,000 divided by $80,000, minus one. The obvious next question is why the offer exists and whether its terms can be verified.

A price difference alone does not prove fraud. Different currencies, withdrawal restrictions, stale data, or an inaccessible market can explain an apparent bargain. Ask whether you can actually complete the advertised trade and withdraw the proceeds. Do not deposit just to discover the conditions.

The reverse is equally important: a fraudulent dashboard can copy a real market price. MetaMask’s guidance on fake exchanges describes manipulated portfolios and trades that make deposits appear profitable. A correct chart says nothing about whether your account balance or recorded trades are genuine.

4. Verify security alerts before acting

A warning about a compromised account, suspended withdrawals, or an urgent upgrade can pressure you into acting quickly. Open the official app or a verified website yourself and look for the announcement. Do not use the contact details or download link supplied in the warning.

When checking cryptocurrency news, follow important claims back to the provider, project, or authority responsible. Check the date, affected service, network, and latest update. Several reports may repeat the same unconfirmed post, while a genuine notice may concern only one service or withdrawal route.

Ethereum’s September 2022 Merge provides a useful example. The official Merge documentation explains that ordinary ETH holders did not need to move their funds or exchange ETH for an “ETH2” token. Claims that holders had to migrate their coins conflicted with those instructions. The key question was what holders actually needed to do, not whether the upgrade itself was real.

For a current incident, look for corrections and resolution notices as well as the original warning. Scammers can copy a genuine announcement and replace its contact details or wallet address. Verify the requested action through the organization’s own channels.

5. Examine what you are being asked to send or authorize

Before accepting a request, identify what it asks you to do: send money, share a login code, grant wallet permissions, or reveal a recovery phrase. A recovery phrase can restore access to a wallet. Never give it to someone claiming to troubleshoot an exchange account.

Read the network, recipient, amount, and permissions shown in your wallet. Connecting to a website is different from granting a token spending approval, which can let a contract move specified tokens. A spending request during an identity check is a reason to stop and investigate. If you do not understand the permission, cancel the request.

Payment descriptions need the same scrutiny. An ordinary transaction cost and a demand to release supposed profits have different purposes:

Request	What to check
Network fee shown by your wallet	Review the transaction and network. A gas charge does not prove the destination is safe.
Published exchange withdrawal fee	Compare the amount and process with the provider’s published terms and official support.
Extra payment to unlock profits	Stop if someone demands another payment, especially to a separate address or for a changing reason.

The SEC and CFTC’s April 24, 2019 alert, Watch Out for Fraudulent Digital Asset and “Crypto” Trading Websites, describes demands for supposed taxes or fees before victims can withdraw fictitious profits. Distinguish those demands from genuine, published fees and tax obligations. Verify the amount, recipient, and reason through the provider’s official channels and the relevant tax authority, not the person demanding payment.

Never share an authentication code with a supposed support agent or approve a login you did not initiate. Strong passwords and multi-factor authentication help protect accounts, but they cannot make an operator legitimate or protect a transfer you authorize to a fraudster.

Conclusion

Stop if you cannot identify the operator, explain a payment demand, or understand a wallet permission. A real price chart and a reassuring message do not resolve those doubts. Even when the checks reveal no obvious warning signs, market losses, custody failures, and service outages remain possible.

FAQ

Can a trusted friend recommend a fraudulent platform?

Yes. Your friend may also have been deceived, or someone may be using their account. Ask what they checked and look for evidence outside the platform. A sincere recommendation is not a substitute for checking the business yourself.

I only opened a suspicious page. Is my wallet compromised?

Not necessarily. Opening a page alone does not show that your funds were accessed. Close it, then review whether you entered a password, downloaded software, connected a wallet, or signed anything. Those actions carry different risks. Use the wallet provider’s official security guidance, not a pop-up offering to scan or repair your wallet.

What should I do if I have already sent money?

Stop further payments and contact the sending exchange or bank promptly through verified channels. Save messages, destination addresses, transaction identifiers, and payment records for the relevant fraud-reporting authorities. Tell the provider what you sent, when, and where it went. Be wary of unsolicited recovery offers; reporting a transfer does not guarantee its reversal.

If you also exposed account or wallet access, the next step depends on what was shared. Change a leaked account password from a trusted device and review active sessions. For an unwanted token approval, use your wallet provider’s official revocation guidance; disconnecting the website is not enough. A leaked recovery phrase or private key is different: revoking approvals cannot make it safe again. Seek official guidance on securing remaining assets in a new wallet with fresh recovery information, and do not add funds to a compromised wallet to follow a stranger’s instructions.