Why are fake exchange services so common?
Fakes are common because cryptocurrency transfers are irreversible: once a scammer receives a payment at their address, they have no obligation to return anything, and the transaction can't be cancelled. The attack doesn't require breaking into anything; it is enough to convince a person to send the coins themselves.
Faking a site is not hard. A design can be copied in an evening, and links are spread through ads, fake search results, comments under videos and private messages. So the look of a page proves nothing by itself.
It also matters that scammers rely on haste. The less time a person has to think, the higher the chance they won't notice a wrong domain or someone else's address.
Which 10 signs give away a fake exchange?
One sign isn't a verdict, but two or three matches are already a reason to stop. Here are the main signals to keep in mind with every exchange and every new service:
- The domain differs from the official one by even one letter, digit or domain zone.
- The link came in a private message or an ad, not from your bookmark.
- The rate is noticeably better than the market rate.
- You are being rushed: “your order expires in 5 minutes.”
- You are asked for a seed phrase, a private key or a wallet password.
- You are asked to send coins “for verification” or “unlocking.”
- The payment address changes during the order.
- There are no clear contacts or rules, or they were copied from another site.
- Support writes to you first.
- There is no history and no mentions outside the site itself.
How do you check a domain and a link?
The first thing to do is compare the address in your browser bar with the official one. BITWHITE has one official domain: bitwhite.net. Any other address, even a very similar one, has nothing to do with the service.
Typical domain tricks:
- replacing letters with similar-looking characters, such as a Latin “l” and the digit “1”;
- adding words like “official” or “secure” to the name;
- a different domain zone with the same name;
- subdomains where a familiar name comes first and the real domain is hidden at the end.
The most reliable way to avoid worrying about such subtleties is to open the site once, confirm the address and add it to your bookmarks. From then on, visit only through the bookmark, not through search or ad blocks. If you have no bookmark, it is better to type the address by hand than to click the first link in the results.
What should you never give to an exchange service?
Never give out your seed phrase (12 or 24 words), your private key or your wallet password. They give full control over your funds, and anyone who knows them can withdraw everything without your involvement.
An exchange doesn't need such data at all: a receiving address is enough, plus a memo or tag if the network requires one. BITWHITE never asks for a seed phrase. If a request comes in the service's name, it is a sign of fraud, no matter how convincing it looks.
The same goes for codes from SMS and authenticator apps, and for requests to install a program for “remote help.” Support may ask for an order number and a txid, but not for access to your device.
What do scam schemes look like in practice?
Payment address swap
You create an order, and in the process the page or an “operator in the chat” sends you a different address “because of a technical error.” One address is issued per order, and there is no need to change it at someone's request in a conversation. Verify the address only on the order page on the official domain.
“Unlocking” and “verification”
After you send the payment, you are told the order is frozen and asked to pay a “deposit” or a “tax.” Any request to make one more payment in order to receive the first is a reason to end the conversation.
An offer in private messages
A stranger on a messenger or social network offers a “profitable exchange” and sends a link. Serious services don't work this way. Don't reply and don't follow the link.
Search ads
A lookalike site can appear first in the ad results. That is why a bookmark is more reliable than a search query.
How does an honest service work, and how is it different?
At a real exchange service the process is predictable: the rate, fee and final amount are visible before you create an order, and the rate is locked when the order is created. At BITWHITE, a payment address is issued for each order and is valid for up to 2 hours. The detailed sequence of steps is described in the article how to exchange cryptocurrency.
If a payment arrives with the wrong amount, on a different network or after the deadline, it doesn't vanish silently but goes to an operator for manual review. Such cases are covered in the article on underpayment and overpayment. In automatic mode, if the exchange fails, the coins are returned to the refund address, and the differences between the modes are explained in the article automatic vs. manual exchange.
A fake is typically the opposite: the terms are vague, there are no rules, and all questions are settled in private messages. Detailed terms before payment are the main sign of a serious attitude toward customers.
Why should an overly good rate and urgency raise suspicion?
A rate noticeably better than the market is bait, not generosity. Nobody will exchange at such a rate at their own loss, which means someone else is getting the benefit, most often the person who took your coins and gave nothing in return.
Compare the offer with market benchmarks and look at the whole difference: rate, fee and final amount. At an honest service, these figures are visible before you create an order and are explained. What makes up the final amount is covered in the article on service and network fees.
The second pressure tool is urgency. Phrases like “one minute left” or “the rate will disappear” exist so that you won't check the address and the network. A real order has clear deadlines, and the rate is locked at the moment it is created, so there is no need to hurry because of a timer. Confirmation times depend on the network itself and its load, and they usually have nothing to do with anyone's ultimatum: benchmarks are collected in the article on confirmations.
How do you tell real support from fake support?
Real support replies to your request; it does not look for you on its own. You write to the official contact that you took from the official site and give your order number (BW-…) and txid. Usually nothing more is needed to look into the issue.
Fake support does the opposite. It writes first, as soon as you mention an exchange in a chat or on a forum. It rushes you, sends links to a “recovery page,” asks for a screenshot of your wallet together with the seed phrase, or offers to “speed up” your order for a separate fee.
If you have doubts, don't continue the conversation in the channel where you were contacted. Close it, open bitwhite.net from your bookmark and find the contact again. Two minutes of checking costs less than a lost payment.
Which mistakes most often lead to lost coins?
Funds are most often lost not because of a sophisticated attack but because of simple habits:
- going to a site via a link from an ad or a chat instead of a bookmark;
- sending coins to an address received in a private conversation;
- choosing the wrong network: for example, sending on a network the address doesn't support, as covered in the article on USDT networks;
- trusting a rate that is better than the market with no explanation;
- deciding under time pressure;
- keeping a seed phrase in notes, in the cloud or in a photo.
Many of these mistakes can be avoided by verifying the address using the instructions in the article how to check a wallet address and not making decisions in a hurry.
Checklist before every exchange
Go through a short list before sending coins. It takes a couple of minutes.
- The address in the browser bar matches the official domain bitwhite.net, and the page was opened from a bookmark.
- The rate, fee and final amount are shown before the order is created and don't contradict market benchmarks.
- The payment address was copied from the order page, not from a conversation.
- The network and, if needed, the memo match those in the order.
- Nobody asked for a seed phrase, keys, codes or remote access.
- You are not rushing because of someone else's ultimatum.
- The order number (BW-…) and txid are saved in case you need to contact support.
What should you do if you've already been scammed?
Stop and don't send any further payments, however much you are told it will get your money back. Repeat “top-ups” only increase your losses.
- Save the conversation, addresses, amounts and txid. The article on txid and the blockchain explorer will help you find the transaction.
- If you gave away your seed phrase, urgently create a new wallet with a new phrase and move your remaining funds to it.
- Change any passwords that may have reached the scammers.
- Report the incident to law enforcement and to the platform where you were contacted.
If you have a question about an order at BITWHITE, write to support through Telegram and give your order number and txid. Beware of anyone who offers to “recover” your coins for an advance fee: that is often the second wave of the scam.