WhatsApp<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"The single most important thing to understand about fake crypto exchange warning signs is this: fraudulent trading platforms in 2025 are not crude forgeries. They are sophisticated, professionally constructed systems designed to pass casual and even attentive scrutiny. They have live market data. They have customer support. They have FCA branding, MAS logos, and SEC registration numbers \u2014 all fabricated. According to OFAC’s May 2025 sanctions action against Funnull Technology \u2014 a Philippines-based infrastructure provider linked to more than $200 million in US pig butchering losses \u2014 the fraudulent platforms its infrastructure supported used 200,000 unique domain hostnames and cloned interfaces from legitimate financial platforms. The same investigation by Chainalysis found that the majority of crypto investment scam sites reported to the FBI were built on Funnull’s domain-generation infrastructure. At ICAR, our investigators have examined dozens of fraudulent trading platforms across cases originating in the UK, US, Canada, Australia, Singapore, and Hong Kong. The architecture of these platforms follows consistent, identifiable patterns. This article documents those patterns \u2014 the seven warning signs that distinguish a fraudulent platform from a legitimate one, a side-by-side comparison of real versus fake exchange features, and a per-jurisdiction guide to verifying any platform before committing funds. 200,000+ Unique fraudulent domain hostnames operated by Funnull Technology alone Source: OFAC Sanctions Action \u00b7 May 2025 Why Fake Crypto Exchanges Look Legitimate The primary design objective of a fake crypto exchange is not to conduct trading \u2014 it is to conduct convincing. The platform’s entire purpose is to persuade a victim to deposit funds, and then to persuade them to deposit more, while creating every possible obstacle to withdrawal. Modern fake exchanges achieve this through several technical and design mechanisms: Interface cloning: the front-end design of established exchanges \u2014 Binance, Coinbase, Kraken, eToro \u2014 is copied with high fidelity using publicly available CSS and HTML. Chainalysis identified an 87 percent CSS similarity between one fraudulent platform and a legitimate EU broker in a 2025 case analysis. Live data feeds: legitimate-looking price charts and market data are generated using free APIs from real financial data providers. The data is real; the trading is not. Fabricated account balances: the victim’s portfolio dashboard shows real-time updating balances and returns. These numbers are entries in a database \u2014 not the result of any actual trade. They can be set to any value the operator chooses. Professional support infrastructure: many fake platforms include live chat support, email help desks, and even phone numbers staffed by the criminal operation’s employees \u2014 some of whom are themselves trafficked workers. Regulatory branding: FCA logos, SEC registration numbers, and central bank certifications are copied from legitimate platforms or fabricated entirely. These images are screenshots or downloaded assets \u2014 they confer no actual authorisation. The 7 Warning Signs of a Fake Crypto Exchange The following seven red flags are present in virtually every fraudulent platform ICAR has investigated. No single flag is definitive in isolation but encountering two or more simultaneously should trigger immediate verification before any further action. \u2691 1 The Platform Cannot Be Verified on Any Official Regulatory Register Every legitimate investment platform or crypto exchange operating in a regulated jurisdiction must be authorised by the relevant financial regulator. In the UK, this means FCA authorisation (or registration for crypto firms under the Money Laundering Regulations). In the US, registration with the SEC, CFTC, or FinCEN. In Australia, an ASIC licence. In Singapore, MAS authorisation. In Hong Kong, SFC registration. In Canada, registration with IIROC or provincial securities commissions. If a platform cannot be found on any of these registers \u2014 regardless of how convincing its regulatory branding appears \u2014 it is not authorised. \u2713 CHECK: UK: fca.org.uk\/register \u00b7 US: sec.gov\/check-an-investment-professional \u00b7 AU: moneysmart.gov.au\/check-register \u00b7 SG: mas.gov.sg\/investor-alert-list \u00b7 HK: sfc.hk\/en\/Regulatory-Functions\/Intermediaries\/Licensing\/Register-of-licensed-persons \u00b7 CA: aretheyregistered.ca \u2691 2 The Domain Was Registered Recently \u2014 Weeks or Months Before First Contact Every fraudulent platform ICAR has investigated was registered within months \u2014 often weeks \u2014 of the victim’s first contact with the scammer who introduced it. A legitimate exchange like Binance (est. 2017), Coinbase (est. 2012), or Kraken (est. 2011) has a domain age measured in years and a well-documented public history. A platform with a domain registered 30\u201360 days ago is almost certainly fraudulent, regardless of how established it claims to be. \u2713 CHECK: Check: whois.domaintools.com \u2014 enter the platform URL and check ‘Created’ date. A legitimate major exchange will show years of history. \u2691 3 Withdrawal Requests Are Blocked, Delayed, or Subject to Fees The most reliable single indicator of a fraudulent platform is a blocked or fee-conditioned withdrawal. Legitimate exchanges process withdrawals \u2014 they may have verification requirements, but they do not charge ‘tax clearance fees’, ‘compliance deposits’, ‘insurance premiums’, or ‘capital gains release charges’ as conditions for releasing your own funds. If any withdrawal attempt results in a request for additional payment, the platform is fraudulent. This is the mechanism by which the fraud extracts the final layer of value from the victim. \u2713 CHECK: Action: attempt a small test withdrawal (e.g. \u00a3100 or equivalent) before making any significant deposit. If the withdrawal is blocked or subject to a fee, cease all activity immediately. \u2691 4 The Platform Was Introduced Through a Social or Romantic Contact Legitimate investment platforms are not introduced through dating apps, social media contacts, or messaging applications by individuals who have been cultivating a relationship. No genuine exchange requires a personal introduction from a trusted contact to access it \u2014 they are publicly available, regulated services. If your awareness of a platform came through a WhatsApp conversation, a dating app match, or a social media connection who mentioned a family member’s success, the introduction itself is a red flag \u2014 regardless of what the platform looks like. \u2713 CHECK: Verify independently: search the platform name + ‘scam’ or ‘review’ on Google, Reddit, and Trustpilot. Check the FCA’s ScamSmart warning list at fca.org.uk\/scamsmart. \u2691 5 The Platform’s Interface Is a Clone of a Known Legitimate Exchange Advanced forensic comparison of<\/p>\n","protected":false},"author":1,"featured_media":1846,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[12,11],"tags":[],"class_list":["post-1843","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto-scams","category-fraud-recovery"],"_links":{"self":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts\/1843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/comments?post=1843"}],"version-history":[{"count":4,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts\/1843\/revisions"}],"predecessor-version":[{"id":1861,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts\/1843\/revisions\/1861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/media\/1846"}],"wp:attachment":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/media?parent=1843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/categories?post=1843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/tags?post=1843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}