Cryptocurrency Exchange Scams Review Framework: What Users Should Check Before Signing Up
Cryptocurrency exchanges are the gateways to digital asset markets—but not all are legitimate.
This guide provides a practical, step-by-step framework to evaluate any exchange before you
deposit funds, helping you spot scams, avoid pitfalls, and protect your investments.
📅 Updated for 2026 • 📖 8-step review framework • Not financial advice
📈 1. Fees and Costs
Understanding the Fee Structure
Every legitimate exchange publishes a fee schedule. Scams often hide fees in fine print or
change them unexpectedly. Before you sign up, locate the official fees page and understand
every charge that applies to your trading activity.
Key fees to examine include:
Trading fees: Typically a percentage of each trade, often tiered by
volume. Maker fees (limit orders) and taker fees (market orders) may differ.
Withdrawal fees: Fixed or variable charges for moving crypto or fiat
off the platform. These can vary widely between assets and networks.
Deposit fees: Many exchanges charge for fiat deposits via bank transfer,
credit card, or other payment methods. Some waive these for larger amounts.
Inactivity fees: Some platforms charge a fee if your account is idle
for a set period. This is a red flag if not clearly disclosed.
Hidden or dynamic fees: Watch for fees that vary with market conditions
or are not clearly defined in the schedule.
How to Verify Fees
Always check the official fee page of the exchange. Look for a dedicated “Fees”
or “Pricing” section. If the page is hard to find or the information is vague,
treat that as a warning sign. Compare the fee structure with at least two other established
exchanges to get a sense of industry norms.
ⓘ Red Flag
If an exchange advertises “zero fees” or “no fees ever,” be
skeptical. No business operates at a loss indefinitely. They may be making money through
wider spreads, poor execution, or—in the worst case—by running a Ponzi scheme.
📊 2. Spreads and Execution Quality
What Is a Spread and Why It Matters
The spread is the difference between the highest bid (buy) price and the lowest ask (sell)
price for an asset on the exchange. A narrow spread indicates good liquidity and healthy
competition among traders. A wide spread means you are paying a premium to enter or exit a
position—an invisible cost that can erode your returns.
Scam exchanges often manipulate spreads to extract extra value from users. They may show a
favorable price on the front page but execute your trade at a much worse price, pocketing
the difference.
How to Assess Spreads Before Signing Up
Even without an account, you can often view the order book and current spread on an exchange’s
website or via public APIs. Compare the spread for Bitcoin or Ethereum on the exchange against
major platforms like Binance, Kraken, or Coinbase. If the spread is consistently 2–3 times
wider, that is a significant hidden cost.
Also, check whether the exchange offers limit orders (where you set your own price) alongside
market orders. Limit orders let you avoid paying the spread entirely, though they may not fill
immediately. An exchange that only supports market orders is far less transparent.
📚 3. Asset Coverage
What Assets Are Available?
Different exchanges support different cryptocurrencies. Some focus on major assets like
Bitcoin, Ethereum, and stablecoins. Others list hundreds or thousands of altcoins, including
very low-cap tokens. The range of assets can tell you something about the exchange’s
business model and risk profile.
Red Flags in Asset Listings
Too many obscure tokens: Exchanges that list hundreds of unknown tokens
with little or no vetting may be more concerned with listing fees than user protection.
Fake or clone tokens: Some scam exchanges list tokens that mimic well-known
projects but are actually worthless. Always verify contract addresses on a block explorer.
Missing major assets: A legitimate exchange should offer the most established
cryptocurrencies. If Bitcoin or Ethereum are absent, that is a serious warning.
No stablecoin support: USD-backed stablecoins are essential for hedging and
trading pairs. Their absence may indicate operational issues.
Verifying Asset Legitimacy
Before trading any asset, check its contract address on the relevant blockchain explorer
(e.g., Etherscan for Ethereum, Solscan for Solana). Cross-reference with the project’s
official website and reputable data aggregators like CoinMarketCap or CoinGecko. If the
exchange’s listed address does not match, do not trade that token.
💫 4. Liquidity
Why Liquidity Is Critical
Liquidity refers to the ability to buy or sell an asset without causing significant price
movement. High liquidity means orders fill quickly and at predictable prices. Low liquidity
can lead to slippage—where your trade executes at a worse price than expected—and makes it
harder to enter or exit positions.
Scam exchanges often have artificially low liquidity, with fake volume generated by bots or
wash trading. This creates a mirage of activity but leaves you unable to withdraw or trade
at fair prices.
How to Check Liquidity
Look at the order book depth for the assets you care about. A healthy order book has tight
spreads and substantial buy/sell orders at each price level. You can also check 24-hour
trading volumes on third-party aggregators. But be cautious—volume can be faked. Cross-reference
multiple sources and look for consistent patterns across time.
If an exchange has very low volume for a major asset like Bitcoin, but claims to have millions
of users, that is a contradiction worth investigating.
🔒 5. Custody and Asset Protection
Where Are Your Funds Held?
Custody refers to how the exchange stores user funds. The gold standard is a combination of
cold storage (offline, air-gapped wallets) for the majority of assets, with a smaller portion
in hot wallets (online) for operational liquidity. Multi-signature wallets, where multiple
keys are required to move funds, add an extra layer of security.
Key Questions to Ask
Does the exchange publish its custody practices? Transparent exchanges
disclose their storage methods and may even undergo third-party proof-of-reserves audits.
Is there insurance? Some exchanges carry crime insurance or custodial
insurance to cover losses from hacks or internal theft. Verify the scope of coverage.
Who holds the private keys? If the exchange is the sole custodian and
does not use multi-sig or distributed key management, that is a significant concentration risk.
Has the exchange ever been hacked or lost funds? Past incidents are not
necessarily disqualifying, but how they handled the situation tells you a lot about their
integrity and operational maturity.
⚠ Critical Warning
If an exchange cannot clearly explain how it stores user funds, or if it avoids the topic
altogether, consider that a deal-breaker. The collapse of QuadrigaCX and FTX both involved
opaque custody practices that left users with nothing.
🛡 6. Security Practices
Essential Security Features
A legitimate exchange provides robust security tools to protect user accounts. Before signing
up, verify that the exchange offers:
Two-factor authentication (2FA): Preferably TOTP via an authenticator app
or hardware key (FIDO/U2F), not just SMS-based 2FA which is vulnerable to SIM-swapping.
Withdrawal whitelists / address book: Restricting withdrawals to pre-approved
addresses adds a powerful layer of protection.
Email and/or SMS alerts: Notifications for login attempts, withdrawals,
and changes to account settings.
Session management: The ability to view and terminate active sessions
from different devices.
Anti-phishing codes: A custom code included in legitimate communications
to help you identify fraudulent emails.
Past Security Incidents
Research whether the exchange has experienced a security breach. If so, how did they respond?
Were users compensated? Did they implement changes to prevent recurrence? An exchange that
has never been hacked may simply be a smaller target—but one that has handled breaches
transparently and improved its practices is often more trustworthy than one that has never
been tested.
⚡ 7. Compliance and Regulation
Licensing and Registration
Cryptocurrency exchanges operate in a complex regulatory environment. While not all jurisdictions
require licensing, a legitimate exchange will typically be registered with relevant financial
authorities in the countries where it operates.
Look for:
FinCEN registration (US): If the exchange serves US customers, it should
be registered as a Money Services Business (MSB) with FinCEN.
State licenses: Many US states require a BitLicense or similar money
transmitter license.
EU regulations: In Europe, look for compliance with AMLD5/AMLD6 and
national financial authority registrations.
UK FCA registration: The Financial Conduct Authority maintains a register
of approved crypto firms.
Canadian MSB registration: Exchanges operating in Canada must register
with FINTRAC.
KYC/AML Policies
Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures are standard for legitimate
exchanges. While some users dislike the privacy implications, strong KYC/AML is a sign that
the exchange is operating above board. An exchange that allows anonymous signups with no
identity verification may be a haven for illicit activity—or a scam itself.
Verify the exchange’s KYC requirements. Do they request government-issued ID, proof of
address, and possibly a selfie? These are industry norms. Be wary of exchanges that ask for
excessive personal information (e.g., bank login credentials) or that seem to have no KYC
process at all.
📞 8. User Support and Red Flags
Testing Customer Support
Before you deposit funds, test the exchange’s support system. Send a pre-sales question
via email or live chat. How long does it take to get a response? Is the answer helpful or
generic? A legitimate exchange invests in support because they want to retain customers.
Check if the exchange has a visible support email, a ticket system, live chat, and a knowledge
base or FAQ. The absence of any meaningful support channels is a major red flag.
Red Flag Warning Signs
Here are the most common red flags that suggest an exchange may be a scam:
No physical address or contact details. Legitimate businesses have a
registered office.
Anonymous or unverifiable team. If the founders hide their identity,
they are not accountable.
Too-good-to-be-true promises. Guaranteed returns, bonus offers that
seem excessive, or “risk-free” trading are classic scam hooks.
Pressure to deposit quickly. Scammers use urgency to prevent you from
doing thorough research.
Poor website quality. Broken links, spelling errors, and unprofessional
design can indicate a hastily built scam site.
No social media presence or community. Legitimate exchanges engage with
their users on platforms like Twitter, Reddit, and Telegram.
Inconsistent legal documents. Terms of service and privacy policies
that are generic, copied from other sites, or contain contradictions.
📊 Comparison: Red Flags by Category
This table summarizes what to look for—and what to avoid—across the key evaluation dimensions.
Use it as a quick reference when reviewing any exchange.
Category
What to Look For (Green Flag)
Red Flags to Avoid
Why It Matters
Fees
Clear, published fee schedule; competitive with industry averages
Hidden fees, vague pricing, “zero fees” claims
Unclear fees erode your returns and indicate lack of transparency
Spreads
Narrow spreads (< 0.1% for major pairs); limit order support
Wide spreads ( > 0.5% for major pairs); market orders only
Wide spreads are a hidden cost; lack of limit orders reduces control
Assets
Major cryptocurrencies + stablecoins; verified contract addresses
Obscure tokens, missing BTC/ETH, fake or clone tokens
Fake assets make it impossible to exit; missing majors shows lack of legitimacy
Liquidity
Deep order books; 24h volume in line with market
Thin order books; suspiciously low or inflated volume
Low liquidity makes trading costly and exit difficult
Opaque custody; no audits; single individual controls keys
Poor custody means you are at risk of total loss
Security
2FA (authenticator/hardware); whitelists; alerts
No 2FA, SMS-only 2FA, no withdrawal restrictions
Weak security invites theft and account takeover
Compliance
Registered/licensed in major jurisdictions; KYC/AML
No registration; anonymous; no KYC or vague KYC
Unregulated exchanges have no accountability and may vanish
Support
Multiple channels; responsive; knowledge base
No contact methods; slow or no responses; copied FAQ
No support means no recourse when problems arise
This table is a general framework. Each exchange should be evaluated on its own merits.
Always verify current conditions directly from the official source.
✅ Practical Pre-Signup Checklist
📝 Before You Create an Account or Deposit Funds
Locate and read the full fee schedule. Understand all charges.
Check the spread for your preferred trading pair(s) against a major exchange.
Verify that the exchange supports the assets you intend to trade or hold.
Examine the order book depth for your primary assets.
Find the custody policy—cold storage, multi-sig, and any proof-of-reserves.
Enable and test all available security features (2FA, whitelists).
Confirm the exchange is registered with relevant financial authorities.
Test customer support with a pre-sales question and time the response.
Search for independent reviews and user experiences across multiple platforms.
Make a small test deposit and withdrawal to verify the process works.
Document your findings and compare with at least two other exchanges.
💡 Scenario: Putting the Framework into Action
📈 Example: Evaluating Exchange XYZ
Alex discovers Exchange XYZ through a social media ad. The exchange
claims to have “zero fees,” offers 100+ altcoins, and has a flashy website.
Before signing up, Alex applies the framework:
Fees: No fee schedule is visible on the site. A footer link points
to a “coming soon” page. Red flag.
Spreads: Without an account, Alex checks the BTC/USD spread on the
public order book. It is over 1.2%—more than five times the spread on Kraken. Red flag.
Assets: The exchange lists a token named “Bitcoin Pro”
that is not Bitcoin. The contract address is not listed. Red flag.
Liquidity: Order book shows only a few BTC buy/sell orders, despite
claims of high volume. Red flag.
Custody: No information on storage. Red flag.
Security: Only SMS 2FA is offered. No withdrawal whitelist. Red flag.
Compliance: No registration information. The company address is a
P.O. box in a Caribbean jurisdiction with weak regulation. Red flag.
Support: Alex sends a question via the contact form. Three days
later, there is no response. Red flag.
Conclusion: Alex decides not to use Exchange XYZ. The evaluation revealed
multiple red flags across every category. Alex instead chooses a well-known, regulated
exchange with transparent fees, narrow spreads, and strong security.
This scenario shows how the framework works in practice—it helps you say “no”
to risky platforms and “yes” to safer ones.
⚠ Common Mistakes and Risk Warning
Common Mistakes When Choosing an Exchange
Relying solely on reviews: Reviews can be bought or fabricated. Use them
as a starting point, not a conclusion.
Ignoring fee structures: Low trading fees can be offset by high withdrawal
fees or wide spreads. Look at the total cost.
Skipping the small test withdrawal: Always test the withdrawal process
with a small amount before trusting the exchange with significant funds.
Depositing without verifying regulatory status: An unregulated exchange
has no accountability and no recourse if it fails.
Sharing private keys or passwords: No legitimate exchange will ask for
your private keys or password. Any request for this is a scam.
Overlooking security features: Failing to enable 2FA and other security
settings leaves your account vulnerable to theft.
Chasing bonuses or rewards: Excessive signup bonuses are often used to
attract deposits before the exchange disappears.
Failing to document communications: Keep records of all interactions
with the exchange in case of disputes.
⚠ Risk Warning and Important Disclaimer
Cryptocurrency trading and investing carry substantial risk, including the potential
loss of all invested funds. This guide is for educational and informational
purposes only. It does not constitute financial, legal, investment, or tax advice.
The framework provided here is a general evaluation tool. It does not guarantee that an
exchange is safe, nor does it predict future behaviour. Scammers are constantly adapting
their tactics, and even legitimate exchanges can fail.
You are solely responsible for your own research, decisions, and the
security of your digital assets. Always:
Consult with a qualified financial advisor for personalized advice.
Verify the current status of any exchange directly from official sources.
Stay informed about the latest security threats and regulatory changes.
Never invest more than you can afford to lose.
This guide is published as of 2026. Exchange features, fees, regulations, and platform
availability change frequently. Always verify current information independently.
💬 Frequently Asked Questions
▷ How can I tell if a cryptocurrency exchange is a scam?
Look for multiple red flags: no fee transparency, wide spreads, fake assets, thin
order books, opaque custody, weak security, no regulatory registration, and unresponsive
support. If you see two or more of these, treat it as a high-risk platform and avoid it.
▷ Is it safe to use exchanges that are not regulated?
Unregulated exchanges have no oversight and no obligation to protect your funds.
They may disappear with your assets without any recourse. While some unregulated
exchanges operate legitimately, they represent a significantly higher risk than
regulated platforms.
▷ What are the most common types of crypto exchange scams?
Common scams include: fake exchanges that steal deposits, Ponzi schemes promising
guaranteed returns, phishing sites that mimic legitimate exchanges, exit scams where
the exchange suddenly shuts down, and wash-trading operations that fake volume to
attract users.
▷ How do I verify that an exchange really holds my assets?
Look for proof-of-reserves audits conducted by independent third parties. Some
exchanges publish cryptographic attestations of their holdings. You can also make a
small test withdrawal to confirm that the exchange has the liquidity to send your
funds off-platform.
▷ What should I do if I think I've been scammed by an exchange?
Immediately stop all activity. Document everything: screenshots, transaction hashes,
communication records. Report the incident to your local financial regulator, police,
and relevant cybercrime authorities. Contact your bank if you used fiat deposits.
Unfortunately, recovery is difficult, but reporting helps protect others.
▷ Are there any exchanges that are universally considered safe?
No exchange is universally safe. Even the largest, most regulated platforms have
experienced issues. However, exchanges that are publicly traded, licensed in major
jurisdictions, and have a long history of transparent operations are generally
considered more trustworthy than unregulated newcomers.
▷ How often should I review my exchange security settings?
At least once a quarter, and immediately after any major security announcement or
regulatory change. Regular reviews help you catch vulnerabilities and ensure that
your 2FA, whitelists, and other protections are still active and properly configured.
▷ Is it better to use multiple exchanges or stick to one?
Diversifying across two or three reputable exchanges can reduce your exposure to a
single point of failure. However, this also increases your attack surface—you need
to maintain security across multiple platforms. A balanced approach is to use one
primary exchange for trading and one or two others for backup or specific assets.