Before sending money to a crypto exchange, trading platform, token presale, or investment group, use this checklist to test whether the offer is verifiable, transparent, and consistent with normal investment risk. You will learn what to check, what to record, how to monitor changes, and what warning signs should stop you from depositing.
Overview
A professional-looking website is not proof that a crypto investment platform is legitimate. Fraudulent platforms can copy familiar branding, display fabricated licenses, show simulated account balances, or use persuasive promoters on social media and messaging apps. A genuine platform can also be risky, poorly operated, or unsuitable for your needs. The goal of a scam check is therefore not to “prove” that an investment will succeed. It is to verify who operates the service, how funds are handled, whether its claims can be independently checked, and whether you can withdraw without unusual obstacles.
Start with a simple rule: never treat a promise, screenshot, endorsement, or search-engine result as independent verification. Open the platform’s official domain by typing it yourself or using a trusted, previously verified source. Then compare information across several independent records. If the platform cannot be identified clearly, pause before creating an account or connecting a wallet.
This guide applies to exchanges, custodial wallets, automated trading services, mining offers, token presales, yield programs, and private investment groups. The risks differ between these products, but the verification process is similar.
What to track
1. The legal identity and licensing claim
Record the company’s exact legal name, registration location, physical address, support channels, and any license or registration number it publishes. Do not rely on a logo or a badge on the website. Check the relevant public business or financial-services register for your jurisdiction, and make sure the record matches the platform’s name, domain, contact details, and stated activities. A registration may not mean an investment is safe, and an overseas registration may provide limited practical protection, but an unverifiable or mismatched claim is a serious warning sign.
Save the page where the claim appears and note the date you checked it. Scam websites sometimes change their wording after being questioned.
2. The domain, app, and official contact route
Inspect the domain carefully for extra words, altered spelling, unusual extensions, or a lookalike address. Search results and advertisements can lead to impersonation sites, so compare the address with one obtained through a trusted official channel. Review the domain’s age and ownership information where available, but treat these details as clues rather than proof: a new domain is not automatically fraudulent, and an older domain can still host a scam.
Check whether the mobile app is published by the same verified entity and whether its download route is consistent with the platform’s official website. Avoid apps sent as files through a chat, email, or direct message. For broader website checks, see How to Check if a Website Is Legit and Is This App Safe?.
3. Custody, wallets, and withdrawal terms
Find out who controls the assets after you deposit. Does the platform hold funds in its own custody, or do you control the private keys? What network and asset are involved? Are withdrawals available at any time, subject to stated limits, or dependent on manual approval? Read the fee schedule and withdrawal terms before depositing, including any minimums, lockups, cooling-off periods, or identity checks.
A platform showing a balance is not the same as proving that the balance is withdrawable. Be especially cautious if support says you must pay a “tax,” “unlock charge,” “verification fee,” “liquidity deposit,” or other extra payment before releasing your funds. This is a common form of withdrawal scam. Do not send more money simply to recover money already deposited.
4. Promises, promoters, and payment routes
Write down the exact return being promised, not just a general phrase such as “low risk” or “passive income.” Guaranteed profits, fixed daily returns, urgent bonuses, and claims that losses are impossible are inconsistent with the uncertainty of crypto markets. Celebrity images, deepfake videos, testimonials, and screenshots of successful withdrawals can be fabricated or used without permission.
Identify who contacted you and how. Unsolicited messages on Telegram, social media, dating platforms, or private groups deserve additional scrutiny. A promoter who pressures you to act quickly, discourages independent research, or insists that communication stay private is not providing reliable verification. For related impersonation risks, review How to Spot a Deepfake Video or Image.
Record the payment route: bank transfer, card, payment app, cryptocurrency transaction, or wallet address. Never assume a wallet address belongs to a company because a representative supplied it. Verify the address through an independently obtained official channel, and remember that blockchain transactions are generally difficult or impossible to reverse.
Comparison table: ordinary risk disclosure versus scam signals
| Area | More credible sign | Scam signal |
|---|---|---|
| Returns | Explains volatility, possible losses, and no guaranteed outcome | Promises guaranteed, unusually high, or “risk-free” profits |
| Company identity | Clear legal entity that can be checked in relevant records | Vague ownership, copied details, or unverifiable registration claims |
| Withdrawals | Terms and fees are stated before deposit | Extra payment required to release an account balance |
| Contact | Support is available through documented official channels | Pressure from an unsolicited promoter or private chat group |
| Wallets | Explains custody and transaction details clearly | Demands payment to an unverified personal or changing wallet |
| Endorsements | Claims can be confirmed by the person or organization independently | Celebrity images, videos, or testimonials used as the main proof |
A reusable verification worksheet
- Platform name and exact domain:
- Legal company name and jurisdiction:
- License or registration claim and independent lookup result:
- App name, publisher, and official download route:
- Promoter’s name, username, profile link, and first-contact date:
- Product offered: exchange, trading account, presale, lending, or other:
- Return or reward promised, quoted exactly:
- Deposit method and destination wallet or payment details:
- Withdrawal terms, fees, limits, and lockups:
- Evidence that can be independently verified:
- Open questions and reasons to pause:
Cadence and checkpoints
Run the full check before opening an account, sending a first deposit, connecting a wallet, or increasing an existing balance. Do not let a small test deposit create false confidence. A platform may allow a small withdrawal while applying pressure or restrictions to larger amounts.
For an account you continue to use, review the platform monthly or quarterly. Recheck the domain, official announcements, withdrawal terms, support channels, legal identity, and the wallet or payment route before making a significant new deposit. Keep dated screenshots or saved documents of important terms. This creates a record if the website changes or access is lost.
Recheck immediately after a change in ownership, domain, app publisher, branding, withdrawal policy, token contract, or support contact. A request to move funds to a new wallet or migrate to a new website should be treated as a fresh verification exercise, not as a routine update.
How to interpret changes
One unusual detail does not always prove fraud. A new domain could reflect a legitimate rebrand; a delayed withdrawal could result from a stated technical process. The important question is whether the change is explained through an independently verified channel and matches the platform’s published terms.
Several changes together should raise the risk level: a new domain combined with a new wallet address, a changed company name, disappearing terms, blocked withdrawals, escalating fees, or a promoter who becomes more urgent when you ask questions. Treat access to a dashboard, a displayed profit, or a successful testimonial as weak evidence unless you can verify the underlying transaction independently.
If the platform asks for more money before withdrawal, stop communicating through the original promoter and do not negotiate. Save messages, transaction IDs, wallet addresses, screenshots, and account details. Contact the payment provider or exchange used to send funds through its official support route, secure your email and financial accounts, and report the suspected fraud to the appropriate platform and authorities in your jurisdiction. For a recovery checklist, see What to Do After Sending Money to a Scammer.
When to revisit
Revisit this guide before every new crypto investment, not only when a website looks suspicious. Set a monthly or quarterly reminder for platforms you still use, and update your worksheet whenever a company, app, domain, promoter, payment method, token, or withdrawal rule changes. Editors and publishers covering crypto scams should also refresh regulator lookup links, platform impersonation examples, terminology, and withdrawal-scam patterns when major services or rules change.
The practical decision is straightforward: if the legal identity cannot be confirmed, the returns are presented as guaranteed, contact began unexpectedly, custody is unclear, or extra fees are demanded before withdrawal, do not deposit. Verification is not a guarantee of safety, but refusing to proceed when basic facts cannot be checked is one of the strongest protections available.
