Is This Crypto Exchange Legit?

Pig butchering scams don't work without a convincing fake exchange. The pitch ("I use this platform for arbitrage") lands because the platform looks real when the victim visits it. Real price charts from Binance's public API. Fake balance that increases because the backend is just writing numbers to a database. Withdrawals that work — for a while — to build trust.

The entire façade collapses under a ten-minute verification routine. Run it before you send a single dollar to any exchange you haven't used before, no matter who introduced it to you.

The 10-Minute Verification Routine

Step 1: CoinMarketCap / CoinGecko exchange listing

Open CoinMarketCap's exchange rankings and search for the platform by name. Same for CoinGecko.

• Not listed at all — very strong scam signal. Real exchanges are listed on at least one of these services almost without exception.
• Listed but zero or negligible volume — either a dead platform or a scam front.
• Listed with an "unverified" or low-trust score — proceed carefully.
• A suspiciously similar name to a real listed exchange (e.g., "BinanceUS-pro.com") — clone scam, do not engage.

Step 2: Domain age and WHOIS

Run the domain through a free WHOIS lookup (DomainTools, who.is). Check:

• Domain registration date. If the domain was registered within the last 12 months, that alone isn't proof of scam — but paired with any other red flag, it's conclusive. Real exchanges have multi-year domain histories.
• Registrar and country. Most scam platforms register through registrars that allow anonymous or disposable identities, often in jurisdictions with no crypto oversight.
• WHOIS privacy isn't itself suspicious (legitimate platforms use it too), but combined with a recent creation date, it's another negative signal.

Step 3: Regulatory registration (verified on the regulator's site)

Legitimate exchanges serving US customers typically hold a FinCEN MSB registration. In the UK, the FCA. In Canada, FINTRAC. In Singapore, MAS. In Australia, AUSTRAC. Go directly to the regulator's own website and use its lookup tool:

• FinCEN: fincen.gov/msb-registrant-search
• FCA: register.fca.org.uk
• Check similar search tools for your own jurisdiction's financial regulator.

Critically: do not click a "license certificate" link or PDF that the platform itself hosts. Many scam platforms display fake or expired registration numbers. Verify the number on the regulator's own portal, or it doesn't count.

Step 4: Reddit, Trustpilot, and search-engine reality check

Search [exchange name] scam and [exchange name] withdrawal on Google, and separately on Reddit (site:reddit.com [exchange name]).

• Real exchanges have years of Reddit threads across r/CryptoCurrency, r/BitcoinMarkets, and related subs — both positive and negative posts.
• Scam exchanges either have no results, only brand-new shill posts, or dozens of recent "can't withdraw" complaints.
• Trustpilot reviews follow a telltale pattern: a cluster of identical 5-star reviews in a short window, mixed with 1-star reports of lost funds.

Step 5: Proof of reserves or audited financials

Post-FTX, most major exchanges publish proof-of-reserves attestations — cryptographic proof that customer deposits are matched by on-chain balances. Not having one doesn't make an exchange a scam (many regional exchanges don't publish one), but claiming to have one without a verifiable source is a major red flag.

Step 6: Leadership, team, and public footprint

Search the names of the platform's founders or executives. Real exchange leadership has LinkedIn profiles, interviews, conference appearances, and prior industry history. Scam platforms either have no visible leadership or list names that return no LinkedIn results and no media trail.

Warning Signs That Don't Require Tools

Beyond verification steps, these behavioral signals reliably indicate a fake platform:

• The platform was introduced by someone you met online — dating app, social media DM, investment group chat. Pig butchering's entire playbook is the "introduction."
• Withdrawals work for small amounts, then stop. Classic trust-build-then-harvest pattern. Do not deposit more.
• Support is only available via Telegram or WhatsApp. Legitimate exchanges have email support, ticket systems, or chat within the platform itself, not an external messaging app.
• The UI pushes high-leverage or "guaranteed returns" products that you've never seen promoted by real exchanges.
• A "manager," "broker," or "trader" is guiding your activity through direct messages. Real exchanges do not provide personal trading guidance.
• Deposit addresses change frequently or are non-standard — e.g., you're told to deposit USDT to a new address for each transaction without a clear technical reason.
• The app isn't in the official App Store / Play Store — or it is, but via a sideloaded "enterprise certificate" or TestFlight link.
• There's urgency — time-limited "tax events," "bonus deadlines," or pressure to deposit before an opportunity closes.

Clone-Exchange Patterns

Clone exchanges — platforms that copy a real exchange's branding — are increasingly common. They exploit the fact that many people don't remember the exact domain of a real exchange they've heard of.

• Double-check the URL character-for-character. Scam domains use hyphens, added words ("-pro," "-official," "-global"), or lookalike Unicode characters.
• Real exchanges use canonical short domains (binance.com, coinbase.com, kraken.com). Anything with extra path words in the domain itself (e.g., coinbase-secure-login.net) is a phishing clone.
• Bookmark the genuine domains for exchanges you use and always access via the bookmark, not via search results.

Verified Legitimate Exchanges Can Still Fail You

Verifying legitimacy isn't the same as verifying safety. Even fully registered exchanges can:

• Freeze accounts for compliance reasons (sometimes incorrectly).
• Become insolvent (FTX, Celsius, BlockFi, QuadrigaCX all had apparent compliance and visibility).
• Delist your tokens or regions without meaningful notice.
• Be compromised via hot wallet breaches.

So verification answers one specific question — "is this a scam front?" — not "is my money safe here long-term?" The second question is a different analysis involving exchange reserves, jurisdiction, and your own holding strategy.

If You've Already Deposited

If you've run this routine and discovered that a platform you've been using is almost certainly a scam, the sequence matters:

1. Stop depositing. Immediately. No "one more" deposits, no "tax to release" payments.
2. Attempt one withdrawal of a small amount. This confirms the scam when it fails or requires a fee. Document every step.
3. Preserve all evidence — chat histories, screenshots of the platform, deposit transaction hashes, any marketing materials. Guide in gathering transaction evidence.
4. Report to IC3 and local law enforcement within 24 hours.
5. Engage a forensic investigator — if your deposits went to a centralized exchange's deposit address (common in pig butchering, where the scam platform is just a frontend over a real exchange account held by scammers), freezing is sometimes possible.
6. Do not respond to recovery DMs. Scam victims are immediately targeted by fake recovery services. See are recovery firms legit.

The Bottom Line

Ten minutes of verification saves five, six, or seven figures. The routine is simple enough to do from a phone, and anyone pressuring you not to run it is themselves a red flag.

If you're unsure about a platform before depositing — and especially if someone introduced it to you through a chat app or dating site — book a free consultation. We see dozens of these fake-exchange cases monthly, and most are recognizable as a specific scam operation we've already traced.