How to Tell If a Crypto Platform Is Legitimate

There is no single badge that proves a crypto platform is safe, but a few independent checks will get you very close. The strongest signals are the boring ones: the platform is licensed by a regulator whose register you can search yourself, it does not appear on any official scam warning list, and it lets you withdraw a small test amount with no delay and no fee to "unlock" it.

The warning signs point the other way, and they are just as clear. If a platform promises guaranteed or unusually high returns, rushes you to act, or blocks a withdrawal until you pay a "tax" or "fee," it is almost certainly a scam — no matter how polished it looks. Fraudsters clone real brands, publish real-looking apps, and show fake balances ticking upward on screen. A convincing interface proves nothing on its own.

Scam platforms love to display an official-looking licence number, a regulator's logo, or a line like "registered and authorised." None of that is evidence. The only thing that counts is finding the firm in the regulator's own public register, and checking that the name, website, and firm reference number all match.

• United Kingdom: search the FCA Financial Services Register. Note that some crypto firms are only registered for anti-money-laundering checks, which is not the same as being authorised to give investment advice or hold your money.
• United States: check the firm and the people behind it on Investor.gov and FINRA BrokerCheck.
• Anywhere else: look up your national financial regulator and search its register directly. If you cannot find the platform, or the details do not match what the site claims, treat that as a serious warning.

One rule that never fails: go to the regulator's website yourself by typing the address in — never through a link, phone number, or "verification page" the platform sends you.

Regulators and law-enforcement agencies publish free lists of firms they already know are operating without permission or running scams. Searching these takes two minutes and can save everything.

• FCA Warning List (UK) — firms known to be unauthorised or running scams.
• SEC PAUSE list (US) — entities that falsely claim to be registered, or that impersonate real firms and regulators.
• CFTC RED List (US) — foreign entities soliciting people without the registration the law requires.

One important caveat: a platform being absent from these lists does not mean it is safe. Scammers open new sites constantly and change names faster than any list can keep up. Use the lists to rule platforms out, never to rule them in.

These checks need no special knowledge and take about ten minutes:

• The withdrawal test. Deposit only a small amount, then immediately try to withdraw most of it back to your own wallet or bank. A legitimate platform pays out promptly. If a withdrawal is delayed, or you are suddenly asked to pay a "fee," "tax," or "verification deposit" to release your own money, stop — that demand is the scam.
• Check how old the website is. Paste the domain into a free WHOIS lookup such as who.is. A site promising a serious investment platform but registered only weeks ago is a major red flag.
• Look at the app honestly. Is it in the official Apple App Store or Google Play, under a developer name that matches the company, with a long history of reviews? Being asked to install an app from a direct link, a "TestFlight" invite, or an APK file is a common scam pattern — never a sign of a real, vetted platform.
• Look for a real company behind it. A legitimate platform has a company name, a registered address, and support you can reach before you deposit. Vague contact details, only a chat window, or an "account manager" who reaches you on WhatsApp or Telegram are all warning signs.

Any one of these is a reason to walk away. Two or more together mean it is almost certainly a scam:

• Guaranteed or unrealistic returns. Real investing carries risk, and no honest platform promises fixed daily profits or "risk-free" gains.
• Pressure and urgency. A limited-time offer, a countdown, or a "manager" coaching you to deposit more right now is designed to stop you from thinking.
• You were introduced by someone online. Many of the largest losses begin with a friendly stranger from a dating app, social media, or a "wrong number" text who slowly steers you toward a platform. This tactic — sometimes called "pig butchering" — drove billions of dollars in reported losses in 2024.
• You cannot get your money out. Being blocked from withdrawing, or told to pay taxes or fees first, is the clearest sign of all. Real profits are never locked behind an upfront payment.

First, take a breath — being deceived by these operations does not make you foolish. They are professional, well-funded, and they target careful people every day.

It is important to be honest about recovery: once crypto leaves your wallet, it moves quickly across borders, and getting it back is often not possible. That hard truth is exactly what the next scam relies on, so please protect yourself from being hit twice:

• Stop sending money immediately — including any further "fees," "taxes," or "deposits" a platform claims are needed to release your funds.
• Save the evidence. Screenshot the platform, your account, transaction IDs, wallet addresses, and every message before anything disappears.
• Report it. In the US, file with the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. Elsewhere, contact your national police and financial regulator. If a bank card or transfer was involved, tell your bank right away.

Never pay anyone who promises to recover your crypto for an upfront fee. No legitimate lawyer, "recovery agent," or government agency charges you money in advance to get funds back. The FBI and FTC both warn that people who have already been scammed are then targeted a second time by fake recovery services — sometimes posing as law firms, or even as the FBI itself. If someone contacts you out of the blue offering to get your money back, that is a new scam, not a rescue.

No. Licence numbers, regulator logos, and "authorised" claims are trivial to fake and are copied onto scam sites all the time. The only thing that counts is finding the firm yourself in the regulator's public register — for example the FCA Register in the UK or Investor.gov in the US — and confirming the name, website, and reference number all match. Always type the regulator's address in yourself rather than using a link the platform gives you.

Not necessarily. App-store review is not a guarantee of honesty; scam apps do slip through and get removed later; and fraudsters often use clones or ask you to install an app from a direct link, a TestFlight invite, or an APK file, which bypasses store checks entirely. Treat store presence as one small signal, and still run the licence, warning-list, and withdrawal checks.

This is one of the most common scam patterns. Letting you take out a small sum early builds trust and encourages you to deposit much more; then the larger withdrawal is blocked, often with a demand for a "tax" or "fee" to release it. That fee is simply another way to take your money — paying it does not unlock anything. Stop depositing and treat the platform as fraudulent.

Honestly, often not. Crypto transactions are usually irreversible and move quickly across borders, so recovery is difficult and frequently impossible. It is still worth reporting to law enforcement and your bank, because it aids investigations and occasionally funds are frozen — but be very cautious of anyone who guarantees they can get it back.

No. Treat any upfront-fee recovery offer as a scam. No legitimate lawyer, recovery firm, or government agency asks for payment in advance to return your money, and agencies including the FBI and FTC warn that scam victims are deliberately targeted a second time by fake recovery services. If you did not seek them out and they want money or your wallet details, walk away.