How to Tell if a Crypto Platform Is Fake (Even If It Looks Real)

You tell if a crypto platform is fake by checking the things a scammer cannot easily fake: who registered the website and when, whether the company appears on a real regulator's register, whether you can actually withdraw money, and whether the contact who introduced you is who they say they are. A polished dashboard, a live chat window, and a balance that keeps growing prove nothing. The most expensive scams we see look completely real, because looking real is the whole product.

This guide covers the scams that pass the eye test: fake exchanges and trading apps, relationship investment scams (often called pig butchering), cloned websites, impersonators, fake badges, wallet drainers, and deepfake videos. For each one we explain how it works, why it is convincing, and how to verify. If your question is about a specific token's contract (mint authority, liquidity locks, honeypots, holder concentration), that is a different set of checks, covered in how to spot a rug pull. This article is education, not investment or legal advice.

Why fake crypto platforms are so convincing

Building a fake exchange is cheap. A scam operation can rent a professional-looking trading interface, register a new domain, stand up a support chat, and fill it with numbers that move like real markets. The victim never touches a real order book. Every deposit goes straight to a wallet the operators control, and every "profit" on the screen is just a figure in their database.

The scale is not small. In its 2025 Internet Crime Report, the FBI's Internet Crime Complaint Center (IC3) says cryptocurrency investment fraud was the single largest source of reported losses to Americans in 2025, at about $7.2 billion across 61,559 complaints. The FBI describes these as long-term scams built on "psychological manipulation" and "the appearance of legitimacy," largely run by organized criminal groups based in Southeast Asia.

The common thread is that each scam removes one of your normal safety checks. A fake app replaces the real exchange. A relationship replaces your skepticism. A deepfake replaces a trusted endorsement. The checks below put those safeguards back.

Fake exchanges and trading apps

Fake profits, then a fee to withdraw

How it works: You are steered to a trading site or app, often by someone you met online or in an "investment group" on WhatsApp or Telegram. You deposit crypto, usually by sending USDT or bitcoin from a real exchange to an address the platform gives you. The dashboard shows steady gains. Small early withdrawals may even go through, which builds trust. When you try to take out a larger amount, the account is frozen until you pay a "tax," a "verification deposit," an "anti-money-laundering fee," or a penalty for "suspicious activity." Pay it, and a new fee appears.

The FBI's IC3 has described exactly this pattern: victims are shown fake profits, offered loans to invest more, and then told they must pay income taxes or additional fees before they can withdraw. The 2025 report adds that these charges are a "final attempt" to extract money before the operators disappear.

Why it is convincing: The interface looks like a real exchange, the charts move, customer support answers quickly and politely, and the rising balance makes it emotionally hard to walk away from "your" money.

How to verify:

• No legitimate platform makes you pay a separate fee before releasing your own balance. Real exchanges deduct fees from the withdrawal itself. Taxes are owed to a government, not paid to the platform. Treat any "pay to withdraw" demand as proof of fraud.
• Test a withdrawal early, before you deposit more, and to a wallet you control. A small withdrawal that succeeds is not proof of safety (scammers allow them on purpose), but one that fails or triggers a fee is a clear answer.
• Check the regulator's register yourself (see the checklist below). Search the company's legal name, not the name of the app.
• Check the domain's age. Many fake platforms run on domains registered weeks or months ago.

Fake apps, including ones in official app stores

How it works: Some scam platforms have you install their app from a link, a configuration profile, or a downloaded file instead of the normal store. Others get into the official stores by disguising themselves. In April 2026, Kaspersky reported finding 26 fake wallet apps on Apple's App Store that imitated wallets such as MetaMask, Ledger, Trust Wallet, and Coinbase and were designed to steal seed phrases.

How to verify: Go to the project's official website (typed in by hand, not from a link someone sent) and follow its link to the app store listing. Check the developer name on the listing matches the real company. Be very wary of any request to install a profile, enable "developer mode," or download an app outside the store. And remember that being in an app store is not an endorsement.

Scams that start with a relationship

Pig butchering (cryptocurrency investment fraud)

How it works: The FBI calls this cryptocurrency investment fraud; the slang name, pig butchering, refers to "fattening" the victim before taking everything. It often starts with a wrong-number text, a dating app match, a social media message, or an invitation to an investing group. The contact is friendly, patient, and often attractive or successful. Over weeks, they mention how well they are doing with a crypto trading platform, offer to teach you, and walk you through opening an account. Everything after that follows the fake exchange pattern above.

Why it is convincing: By the time money comes up, you trust the person. They never pressure at first. They may send photos, voice notes, and sometimes short video calls. The platform they point you to looks professional, and the early gains feel like proof that they were right.

How to verify:

• Separate the person from the platform. Ignore how much you trust the contact and run the same checks you would on any exchange a stranger recommended.
• Run a reverse image search on their profile photos with Google Lens or TinEye. Stolen photos of models or real professionals are common.
• Notice who sent you where. The FTC is blunt about this: if someone you met on a dating site or app wants to show you how to invest in crypto, "that's a scam".
• Tell someone you trust before you deposit. Pressure to keep it secret is a warning sign.

"Guaranteed returns" programs

How it works: Arbitrage bots, "AI trading" services, staking pools, mining contracts, or cloud mining plans promise a fixed daily or monthly return. Some pay early investors with later investors' deposits, which keeps things looking healthy until new money slows down. Many add referral bonuses so victims recruit friends.

How to verify: You mostly don't need to. The FTC puts it simply: "Only scammers will guarantee profits or big returns." If a program cannot lose, or cannot explain in plain terms where its returns come from, the returns are coming from other depositors.

Scams that borrow someone else's name

Cloned websites and lookalike domains

How it works: Scammers copy a real exchange, wallet, or project site pixel for pixel and host it on a domain that differs by a letter, a hyphen, or a different ending (.io instead of .com, for example). They promote it through search ads, social media replies, and direct messages. The IC3 specifically warns about misspelled URLs that imitate legitimate financial institutions.

How to verify:

• Look up the domain with ICANN Lookup. The registration date tells you how old the domain is. A platform claiming years of history on a domain registered last month is not what it says.
• Check its history on the Wayback Machine. A real business usually has a visible past; a fake one appears out of nowhere.
• Bookmark the real site once you have confirmed it, and only use the bookmark. Do not click sponsored search results or links in messages to reach an exchange or wallet.

Impersonated projects, influencers, and support staff

How it works: Fake accounts copy the name, profile picture, and posting style of a real project, a well-known trader, or an exchange's support team. They reply to people who post about a problem ("DM us, we can fix your wallet") or promote a "new token" or "presale" with a contract address that belongs to the scammer. Fake support agents typically ask you to "validate" or "sync" your wallet by entering your seed phrase.

How to verify:

• Get contract addresses only from official project channels, meaning the project's own verified website and its official accounts, cross-checked against each other. Never trust an address from a reply, a DM, or a screenshot.
• Real support does not message you first. No legitimate person or platform ever asks for your seed phrase, for any reason.
• Check account details, not just the display name. Handles, join dates, and follower history are harder to fake than a profile picture.

Fake audits, KYC badges, and partnerships

How it works: The site shows logos for security audit firms, a "KYC verified" badge, and a row of partner logos (major exchanges, payment companies, sometimes a government seal). Logos cost nothing to copy.

How to verify: Go to the auditor's or partner's own website and look for the report or announcement there. Real audit firms generally publish their reports or let you verify them. If the only evidence of a partnership is the scam site itself, treat it as fake. A real audit is also narrower than it sounds: it covers the code reviewed, not whether the team is honest.

AI deepfake videos of celebrities and public figures

How it works: Scammers use AI to produce videos of billionaires, politicians, news anchors, or crypto founders apparently endorsing a platform or a giveaway ("send 1 ETH, get 2 back"). The FBI has warned that criminals use generative AI to make fake promotional videos for investment fraud and to run live video calls with supposed executives. In July 2026, the IC3 even warned about a deepfake video of a senior FBI official steering victims to a spoofed version of ic3.gov.

How to verify: Look for the claim on the person's verified official accounts or in real news coverage, not in the video itself. The FBI suggests watching for visual and audio glitches such as distorted faces or hands, odd shadows, and voice lag, but good fakes can pass that test, so the source matters more than the quality. As the FTC notes, celebrities are not contacting you through social media to multiply your crypto.

Scams that only need your signature: fake airdrops and wallet drainers

How it works: A free token appears in your wallet, or you see an airdrop or "claim" announcement from what looks like a real project. The claim site asks you to connect your wallet and sign a transaction or message. That signature is actually an approval that lets the scammer's contract move your tokens or NFTs. Once it is signed, a drainer can empty the wallet in minutes, with no seed phrase needed.

Why it is convincing: Connecting a wallet and signing is a normal part of using crypto apps, and wallet pop-ups are hard for most people to read. The site usually copies a real project's branding exactly.

How to verify:

• Treat unexpected tokens and NFTs as bait. Do not visit links in their names or descriptions, and do not try to sell or claim them.
• Confirm any airdrop on the project's official website and accounts before connecting anything.
• Read what you are signing. Approvals that grant "unlimited" spending or access to "all" of your NFTs deserve a hard stop.
• Review and revoke old approvals with a tool like Revoke.cash. Revoking does not recover stolen funds, but it can close a door that is still open.
• Keep a separate wallet with little in it for trying new apps, so one bad signature does not reach your savings.

How to check if a crypto website is legit: a checklist

Run through this before you deposit anywhere new, and again if anything about the platform changes. No single check is proof of safety, but a failure on any of them is a strong reason to stop.

1. Find out how you got there. If a stranger, a new friend, a dating match, or an ad sent you, raise your guard before anything else.
2. Check the domain age with ICANN Lookup, and compare it to how long the platform claims to have existed.
3. Check the regulator. In the US, search FinCEN's MSB Registrant Search. Note that FinCEN registration is a federal filing, not a license or an endorsement, and money transmitters are also licensed separately by states. In Hong Kong, check the SFC's list of licensed virtual asset trading platforms, its public register, and its alert list. In Singapore, use the MAS Financial Institutions Directory and Investor Alert List. In the UK, use the FCA register.
4. Make sure the registered entity is really this site. Scammers sometimes borrow a real company's name. Confirm the website listed on the regulator's record matches the one you are using.
5. Test a small withdrawal to a wallet you control before adding more. Any fee demanded before release is a stop sign.
6. Reverse image search team photos and any contact's profile pictures with Google Lens or TinEye.
7. Verify endorsements, audits, and partnerships on the other party's official site, not on the platform's.
8. Get contract addresses and app links only from official channels you reached on your own.
9. Never share your seed phrase or private key, and never type it into a website or an app someone sent you.
10. Slow down. Deadlines, bonuses that expire tonight, and "VIP" tiers that require a bigger deposit are pressure tactics, not opportunities.

When it still looks real

The best-run scams are designed to survive these checks. The domain may be a few years old. The company name may match a real registration somewhere. The person who introduced you may have months of believable history. At that point, the hard part is not knowing what to check. It is judging whether a set of small oddities adds up to a pattern.

That is where a second pair of experienced eyes helps. Our team reviews reported cases across many scams, and the same scripts, fee demands, and platform templates show up again and again. If you want someone to look at a platform, an offer, or a person who contacted you, we offer a 1-on-1 scam and risk review. It is a risk review focused on red flags, not investment advice: we will not tell you to buy, sell, or hold anything, and we are not a law firm.

If you already sent money

Stop sending more, including any "fee" to unlock a withdrawal. Save everything: the website address, app name, chat history, wallet addresses, and transaction hashes. Then work through what to do after a rug pull or scam and how to report a crypto scam, which includes filing with the IC3 at ic3.gov if you are in the US.

Expect a second wave. The FBI notes that victims of cryptocurrency investment fraud are often targeted afterward by people claiming they can recover the money for a fee, including people impersonating the FBI and the IC3 itself. Read how crypto recovery scams work before you respond to anyone who offers to get your funds back.