How to Spot Crypto Scams and Choose a Safe Crypto Exchange

Crypto scams are getting harder to spot. Fake mobile apps, cloned websites, and social media phishing campaigns now mimic legitimate crypto exchanges with unsettling precision. Even large platforms are not immune: in February 2025, North Korea’s Lazarus Group stole about $1.5 billion in Ethereum from Bybit, the largest crypto heist on record. For individual investors, though, the bigger threat usually comes from smaller, unregulated platforms built to vanish with your money. This guide walks through the red flags, the safeguards that actually exist, and the steps to choose an exchange that puts security and transparency first.

The Crypto Scam Landscape

Crypto scams have moved well beyond poorly written emails. Fake cryptocurrency platforms are common and are built to look like real exchanges, which makes appearance alone an unreliable signal of legitimacy. Scammers use social media ads and direct messages to steer you toward these clone sites. The sophistication of the fakes means even experienced users can be fooled if they judge a platform by its visuals.

Fake Exchanges Are More Than a Bad Website

A fake crypto exchange often copies the branding, layout, and even the support chat of a real platform. The goal is to get you to deposit funds, after which withdrawals become impossible. Many fakes display phantom account balances and trade confirmations to sustain the illusion. The tell is structural: a fake exchange is not registered with any financial regulator, and its operators stay hidden. Always inspect the URL for subtle misspellings or unusual domain extensions.

Red Flags to Catch Before You Deposit

Scammers rely on urgency and emotional triggers. The following red flags should stop you and prompt a closer look:

• Demands for fees or taxes to withdraw your own funds
• Promises of guaranteed or unusually fast returns
• Pressure to deposit quickly or to share your private keys
• An inability to make normal withdrawals without an excuse
• Unsolicited offers from social media, dating apps, or messaging platforms

If you encounter any of these, treat the platform as high-risk no matter how polished it looks.

Why FDIC Insurance Does Not Apply to Crypto

One of the most persistent misconceptions is that crypto held on an exchange is protected like a bank deposit. It is not. FDIC deposit insurance covers U.S. dollar deposits at insured banks up to $250,000, and it does not extend to crypto assets or protect against the failure of a non-bank crypto platform, as the FDIC states in its own fact sheet. Some exchanges hold customer dollar balances at FDIC-insured banks, but that coverage stops at the dollars and never touches the crypto. The Federal Trade Commission has warned against platforms that blur that line, so read the fine print on how customer funds are held.

What Makes a Crypto Exchange Legitimate

A legitimate crypto exchange is registered with a regulator, transparent about its operators, allows normal withdrawals, and makes no promises about returns. In the United States, that generally means registration as a money services business (MSB) with the Financial Crimes Enforcement Network (FinCEN), the Treasury bureau that administers anti-money-laundering rules, plus compliance with state money transmitter licenses. You can review FinCEN’s requirements on its money services businesses page. Established U.S. platforms document this clearly. Our Coinbase review shows what verifiable registration, published leadership, and clear custody disclosures look like in practice.

We recommend looking for these characteristics:

• A publicly listed leadership team with verifiable backgrounds
• Registration with FinCEN and the relevant state regulators
• Clear, jargon-free explanations of how customer assets are stored
• Audited proof of reserves and, ideally, proof of liabilities
• No history of unexplained withdrawal freezes

A withdrawal that demands an upfront fee is a classic crypto scam signal, and a reminder to verify any exchange before depositing.

Proof of Reserves Is a Half-Measure Worth Understanding

After the FTX collapse in November 2022, proof of reserves became a common standard among major exchanges. Proof of reserves lets users cryptographically verify that their balance is included in the exchange’s total holdings. On its own, though, it is only half the picture, because it shows what an exchange holds at a single moment, not what it owes. Proof of liabilities is the other half, and few exchanges publish it. When you evaluate a platform, check whether it releases regular, third-party-audited reserve reports and whether it also discloses liabilities.

The Bybit Heist and What It Taught Us About Custody

In February 2025, North Korea’s Lazarus Group stole approximately $1.5 billion in Ethereum from Bybit, the largest crypto heist on record, an attribution the FBI made public. Bybit kept operating and reimbursed affected users, but the incident drove home one lesson: customer assets should be held separately from an exchange’s operating funds, ideally in wallets the company’s treasury cannot touch. That separation, often paired with cold storage, limits the damage of a breach. Before trusting a platform, ask how it custodies your assets and whether it keeps the majority in cold storage. For a broader read on how a modern brokerage handles crypto alongside other assets, see our Public.com review.

How to Verify a Crypto Exchange’s Regulatory Status

You can check an exchange’s registration by searching FinCEN’s MSB Registrant Search or your state’s money transmitter licensing database. Many legitimate exchanges list their license numbers on their site, so cross-reference those numbers against the official records. If a platform claims registration you cannot find in the public database, treat it as a red flag. Registration alone does not guarantee safety, but its absence is a clear warning. If you want a comparison of how established platforms present these credentials, our eToro review covers licensing, fees, and custody side by side.

What to Do Before and After You Deposit

Here is the decision frame. Before you fund any account, confirm three things: the exchange appears in FinCEN’s MSB registry, its leadership and custody model are disclosed in plain language, and it lets you make a small test withdrawal without new fees or excuses. If any of those fail, walk away, because a polished interface is not evidence of safety. If you suspect you have already been scammed, stop all communication with the platform, send no more money, and report it to the FTC and the FBI’s Internet Crime Complaint Center.

Frequently Asked Questions

How can I tell if a crypto exchange is legitimate?
A legitimate exchange is registered with FinCEN as a money services business, holds state money transmitter licenses, and is transparent about its leadership. It allows normal withdrawals without demanding extra fees and does not promise guaranteed returns. You can verify its registration on official government websites.

What are the red flags of a crypto scam?
Red flags include demands for fees or taxes to withdraw funds, promises of guaranteed or fast returns, pressure to deposit quickly, and an inability to make normal withdrawals. Unsolicited offers through social media or messaging apps are also common scam tactics.

Are crypto accounts insured like bank accounts in the US?
No. Cryptocurrency holdings on an exchange are not protected by FDIC insurance. Some exchanges hold U.S. dollar balances at FDIC-insured banks, but that coverage does not extend to crypto assets. If an exchange fails, there is no guarantee you will recover your funds.

What is proof of reserves, and why does it matter for crypto exchanges?
Proof of reserves is a cryptographic method that lets users verify their balance is included in an exchange’s total holdings. It became a standard after the FTX collapse. It only shows assets at a single moment, not liabilities, so a complete picture also requires proof of liabilities.

How do I check if a crypto exchange is regulated in my state?
Visit your state’s financial regulator website and search its money transmitter licensing database, and check the FinCEN MSB registry. Cross-reference any license numbers the exchange lists on its site with the official records. If the license does not appear, consider it a warning sign.

What should I do if I suspect I have been scammed by a crypto exchange?
Stop all communication with the platform immediately and send no more money. Report the incident to the Federal Trade Commission and the FBI’s Internet Crime Complaint Center. If you shared personal information, consider placing a fraud alert on your credit file. Recovery is difficult, but reporting helps authorities track and shut down fraudulent operations.