How to Spot a Fake Crypto Exchange Before You Deposit

What a fake crypto exchange actually is

A real exchange is a market. Your order meets someone else's order, the trade settles, and your coins sit in an account you can pull them out of. A fake exchange only looks like one. Behind the charts, your deposit goes straight to a wallet the scammers control, and everything you see afterward is theater.

The SEC spelled this out in a case filed on December 22, 2025 against three purported crypto trading platforms, Morocoin, Berge and Cirkor, plus four "investment clubs" that ran on WhatsApp. The SEC alleges they took at least $14 million from US retail investors. Its complaint says no trading took place on the platforms, which were fake, and that investors who tried to withdraw were told to pay advance fees first.

Almost nobody finds a fake exchange by searching for one. Someone sends it to you: a new friend, a "mentor" in a group chat, an ad, an account manager. That's why these platforms are the back end of pig butchering scams and most other crypto investment fraud, which the FBI's 2025 Internet Crime Report ranked as the costliest crime Americans reported last year, at $7.2 billion.

The withdrawal fee trap

The fee demand is the clearest sign there is, so it helps to know the forms it takes. The scammers rarely call it a fee. It's a tax, a "capital gains settlement," an anti-money-laundering deposit, a verification charge, a "risk margin," or a penalty for a broken rule you never agreed to. Sometimes the platform claims your account is frozen by a regulator.

The SEC's Morocoin complaint describes a version of that last one. In June 2024, Morocoin told investors it was under investigation and urged them to withdraw everything within ten days. In January 2025, Berge and Cirkor each posted notices claiming the "SEC has initiated a formal investigation," with the same ten-day window. A deadline makes people pay faster.

The FBI's advice on its crypto investment fraud page is short: don't pay any additional fee or tax to withdraw. The FBI says the criminals never release the bulk of the money, even when victims pay. A real exchange takes its fees out of the balance you already have. Taxes on real gains go to the IRS, from you, at tax time.

The registration check, done properly

Most guides tell you to "check that it's regulated." Fake exchanges know that, so they bring paperwork: a FinCEN registration, an "SEC certificate," a license number in the footer. The check is to find the company yourself, on the regulator's own website, and to know what each listing does and doesn't mean.

1. FinCEN's MSB search: a listing proves little, a claim of approval proves a lot. Crypto exchanges serving Americans generally register with FinCEN as money services businesses, and you can search the MSB Registrant Search at msb.fincen.gov by name. But FinCEN's December 18, 2024 alert says scammers often register with false information and then point to the listing to look legitimate. FinCEN doesn't verify what registrants submit, doesn't license anyone, and doesn't approve or endorse any business. A platform that says it's "approved by FinCEN" is lying, and FinCEN's September 2026 scam center alert lists that exact claim as a red flag.
2. Your state regulator: this is the license that counts. Most states require money transmitters to hold a state license, and many apply that to crypto firms. Search the company on NMLS Consumer Access (nmlsconsumeraccess.org), which covers firms licensed by participating state regulators, then confirm on your state's own site. New York's Department of Financial Services publishes its list of licensed virtual currency companies. If the platform claims a license, the name, address and license number should match exactly.
3. The SEC: a filing is not a certificate. In a September 29, 2026 case, the SEC said two schemes, Cryptoaiml and TSAI Pro, took more than $12.5 million and $2.8 million through WhatsApp group chats, AI "trading signals" and a fake platform. Both falsely claimed SEC certification. They pointed to Form D filings on the SEC's own EDGAR system, filed with false contact details, and TSAI linked to a certificate it said the SEC had issued. A Form D is a notice a company files itself. The SEC doesn't "certify" trading platforms, so a certificate is a warning sign, not a credential.
4. Warning lists: search the name and the web address. The CFTC's RED List names foreign firms that appear to need CFTC registration but don't have it, and California's DFPI Crypto Scam Tracker lists platform names from consumer complaints. Some entries in the DFPI tracker describe the same "pay commission before you withdraw" demand. Not being listed proves nothing, because fake platforms change names often.
5. Domain age and app store: run the quick site checks. A domain registered last spring for a platform claiming years of history is a lie you can prove in a minute, and an app you were sent by link instead of finding through the company's own site is a problem. Our guide on how to check if a crypto website is legit walks through the domain and warning-list checks in ten minutes, and fake crypto apps covers the app stores.

Real exchange or fake platform?

Prefer to watch? How to spot a fake crypto exchange, in under a minute.

If you've already deposited

Don't pay the next fee, and don't tell the platform you're onto it. Our first 24 hours plan puts the next steps in order. Save the web address, screenshots of your balance and chats, every wallet address you sent to, and the transaction IDs. Report it to the FBI at ic3.gov, the FTC at ReportFraud.ftc.gov and your state securities regulator, and tell the real exchange you bought the crypto on. Our guide to whether crypto scams can be traced explains what those addresses let investigators do. Anyone who offers to get the money back for a fee is the next scam.

Not sure yet? Our is this a scam? quiz takes a minute, and the Scams hub has every guide in one place.

Here's the math the platform hopes you won't do. Say you deposited $10,000 and the screen shows $40,000. A 20% "tax" on that balance is $8,000 in new money. Pay it, and the next demand is a deposit, then a penalty. Each payment is sized against a number that doesn't exist, and every dollar of it lands in the same wallet as the first $10,000.

Fake crypto exchange FAQ

How can I tell if a crypto exchange is fake?

Look up the company yourself on FinCEN's MSB search and your state regulator's license records, and check that the name and address match. Be suspicious if a new contact sent you the link, support only works through chat, or returns are steady and high. Any demand for a tax or fee before a withdrawal means the platform is fake.

Does FinCEN registration mean an exchange is legit?

No. FinCEN says it doesn't verify what registrants submit, doesn't license businesses and doesn't approve or endorse anyone on its MSB list. Scammers register with false details and then point to the listing. A platform that claims to be "approved by FinCEN" is making a false claim.

Why do I have to pay a fee to withdraw my crypto?

You don't, on a real exchange. Real platforms take their fees out of your existing balance. The FBI says criminals running fake platforms never release the bulk of the money, even when victims pay the extra fee or tax, so stop paying.

Can a fake exchange show a real SEC filing?

Yes. In a September 2026 case, the SEC said two schemes pointed investors to Form D filings on the SEC's own website that were filed with false information. A Form D is a notice a company files itself, not an approval. The SEC doesn't certify trading platforms.

What is the CFTC RED List?

It's the CFTC's Registration Deficient List of foreign firms that appear to be soliciting US customers for products that need CFTC registration without being registered. Being on it isn't a court finding of fraud, and being absent from it proves nothing. Search it along with state and federal registers.

Where do I report a fake crypto exchange?

File a complaint with the FBI at ic3.gov, then report it to the FTC at ReportFraud.ftc.gov and your state securities or financial regulator. Include the website address, wallet addresses, transaction IDs and screenshots of the platform and your chats.