Fake crypto exchanges and apps: how to spot a clone

How do fake crypto exchanges work? They copy the look of a real exchange or invent a new "investment platform", show you rising balances, and keep every coin you deposit; withdrawals are blocked or need a "fee" first. The networks behind them can be huge: in October 2025 police in Cyprus, Spain and Germany arrested nine suspects in a case coordinated by Eurojust and Europol in which victims had lost, according to investigators, more than 600 million euros through dozens of fake crypto investment platforms.

A fake exchange is the most honest building in the world in one respect: it has a beautiful entrance and truly no exit.

What kinds of fake platforms are there?#

1. Clones of real exchanges. A copy of a well-known exchange on a slightly different address – an extra letter, a hyphen, another domain ending. You log in, the clone keeps your password and your 2FA code, and the attackers empty your real account.
2. Fake apps – even in official stores. In 2021, according to The Washington Post, a man lost about 17 bitcoins (roughly 600,000 dollars at the time) to a fake Trezor wallet app he had downloaded from Apple's App Store. In 2022 the FBI warned of fake crypto investment apps that had cost 244 known victims about 42.7 million dollars; when victims tried to withdraw, they were told to pay "taxes" first.
3. Search-engine ads. You search for an exchange or a wallet, and the first result is a paid ad leading to a clone. The ad sits above the real site and looks the same.
4. "Investment platforms" with call centres. You click an ad with a fake celebrity endorsement or a fake news article, leave your phone number – and a friendly "broker" calls back. They help you "start small", often install a remote-access program like AnyDesk on your computer "to help with the set-up", and show you a dashboard with growing profits. Then they push for more – loans, pension savings.
5. Fake wallets for your seed phrase. An app or browser extension that looks like a well-known wallet and asks you to "restore" your wallet. Whatever you type goes straight to the thieves – more in the lesson Attacks on wallets.

The call-centre networks#

Call-centre fraud is industrial-scale social engineering with scripts, shifts and sales targets. A few cases from Europe:

In the October 2025 case, investigators say the network promoted its platforms through social-media ads, cold calls, fabricated news stories and deepfake testimonials, then laundered the deposits through many exchanges and blockchains. In the Czech case, police reported more than a thousand victims and damage in the hundreds of millions of korunas. In all these cases the people are suspects or accused; the courts have the final word.

How do you check a platform?#

Before you send anything, spend ten minutes on this:

1. Check the licence. In the EU, a crypto service needs a MiCA licence. Look up the exact company name in the ESMA register and in your national regulator's register – in Czechia the Czech National Bank, in Spain the CNMV. Step by step in the lesson Choosing a licensed exchange.
2. Check the warning lists. The Czech National Bank and Spain's CNMV publish lists of firms that offer services without permission. If the name is there – stop.
3. Type the address yourself or use a bookmark. Never log in through an ad, an email or a link in a chat.
4. Get apps from the official website's link, not by searching the store. Check the developer's name and the number of downloads.
5. Check the domain's age. A WHOIS lookup shows when the domain was registered. A "leading global exchange" with a three-week-old domain is not one.
6. Read reviews with suspicion. Look for independent reports and news, and search the name together with "scam" or "withdrawal". Five-star reviews that all sound alike are often bought.
7. Test a withdrawal – but do not trust it. A failed small withdrawal is a clear stop. A successful one proves nothing: fake platforms often let the first small withdrawal through on purpose.

Warning signs you could have seen#

• Someone else chose the platform for you – a caller, a new friend, an ad.
• They want remote access to your computer or ask you to install an app "to help".
• Guaranteed or very high returns, often with a personal "account manager".
• You cannot find the company in any regulator's register – or you find it on a warning list.
• Deposits only in crypto or to a private person's account.
• Withdrawals need a fee, tax or "verification deposit" first.

Common myths#

• "It is in the App Store / Google Play, so it is checked." Stores check apps, not licences – fake apps get through regularly.
• "The website has a padlock icon." The padlock only means the connection is encrypted – also to a clone.
• "My broker has been so patient and helpful." Patience is their job description; the commission comes from your deposits.

Sources#

• FBI: Fraudulent cryptocurrency investment applications (Private Industry Notification, 18 July 2022) (opens in a new tab)
• BleepingComputer: European police dismantle €600 million crypto investment fraud ring (November 2025) (opens in a new tab)
• Europol: Crypto investment fraud ring dismantled in Spain after defrauding 5,000 victims (June 2025) (opens in a new tab)
• ESMA: Markets in Crypto-Assets Regulation (MiCA) and the interim register (opens in a new tab)
• Czech National Bank: Warnings to the public (opens in a new tab)
• CNMV: Warnings about unauthorised firms (opens in a new tab)