List of fake crypto exchanges to avoid in 2026

Twelve confirmed-fraud crypto exchanges with public legal records, documented exit scams, or regulator-issued shutdown orders. Plus the six red flags that catch new fake exchanges before they catch you.

Sources: SEC complaints, FBI Most Wanted listings, OSC reports, court filings, Reuters / Wired investigative coverage. Updated 2026-06-20.

Why this list matters

Between 2014 and 2024, more than $15 billion in user deposits vanished from crypto exchanges that turned out to be fraudulent. Roughly two thirds of those losses came from exit scams (operators walking away), not third-party hacks. The pattern repeats: a new exchange launches with aggressive marketing, accepts deposits for six to twelve months, freezes withdrawals citing "technical issues", and goes silent within days.

The names below are the ones that ended up in court - meaning the founders were charged, sentenced, or have FBI Most Wanted notices. For every name on this list there are dozens of smaller fake exchanges that closed without legal followup. The methodology section below shows you how to spot them before they spot you.

The list - exchanges with public fraud records

Six red flags that catch new fake crypto exchanges

Most fake exchanges are not on any list yet. They have been online for weeks, not years, and their first scam victims have not had time to file a complaint. The signals below catch them anyway.

  1. Domain registered under 6 months ago

    Real exchanges build infrastructure over years. A "global crypto exchange" with a domain registered last quarter is almost always a fake exchange. Verify with a WHOIS lookup before depositing anything.

  2. No regulatory licence - or a fake one

    Legitimate exchanges show their licence number and the regulator who issued it. Fake exchanges either claim no licence at all (and hope nobody asks) or list a fake number. Always verify directly with the regulator (FCA, MAS, FINMA, BaFin, AMF) by searching their public registry - never just trust the badge on the exchange website.

  3. Withdrawal-only KYC

    Deposits are instant and frictionless. Then, when you try to withdraw, the exchange asks for ID, address proof, source of funds, and a video call. This is not compliance; it is a delay tactic to keep funds locked while operators prepare the exit. Real exchanges KYC at signup, not at withdrawal.

  4. Guaranteed returns or "AI trading bot" yield

    No exchange can guarantee returns. The phrase "AI trading bot with daily 1-3% yield" is the modern equivalent of "high yield investment program" - the same Ponzi mechanic with different wording. If yield is advertised at the deposit step rather than in a separate staking product with full risk disclosure, walk away.

  5. UI cloned from a real exchange

    Fake exchanges save development time by lifting the Binance, Coinbase, or Kraken UI almost pixel-perfect. The trading interface looks polished but the order book is fake (numbers drift in patterns no real market produces). Compare the domain and the certificate fingerprint with the official site via the regulator's public listing.

  6. Founders absent from public crypto channels

    A new exchange handling user funds will have founders on LinkedIn with verified employment history, on conference panels, on podcasts, and quoted in industry press. If you cannot find any of the founders by name on any public channel outside the exchange's own website, the names are likely invented. OneCoin and BitConnect both used fake or stolen identities for their executive teams.

Where fake exchanges and scam tokens overlap

Most fake centralised exchanges either (a) issue their own scam token to lock in deposits - the BitConnect BCC token, OneCoin's ONE - or (b) pre-mine fake copies of trending Ethereum tickers and list only those on their platform. In both cases the on-chain contract behind the token is what tells you the truth.

RektRadar covers the on-chain side: paste any Ethereum contract address into the free Ethereum scam checker and it returns one of 100+ risk signals in under two seconds. If the token a "new exchange" is pushing already has hidden_owner, conditional_transfer, creator_holds_all_lp or scam_factory_name flags, the platform is the second layer of the same scam - not a separate problem.

See the full catalog of 100+ Ethereum risk signals for the contract-level checks that RektRadar runs automatically on every token.

How to verify a real crypto exchange before depositing

  1. Find the licence number on the exchange website. Search it directly in the regulator's public registry (FCA / MAS / FINMA / BaFin / AMF / SEC). If the listing does not show up, the licence is fake or the exchange is unlicensed.
  2. Look up the founders by name on LinkedIn and crypto industry media. A real exchange CEO has a public footprint outside the exchange itself.
  3. Check the domain age via WHOIS. Anything under 12 months for a "global" exchange is a warning. Established exchanges (Coinbase, Kraken, Bitstamp, Gemini, Binance, Bitfinex) all have domains older than a decade.
  4. Read proof-of-reserves reports. Real exchanges publish Merkle-tree audits of their reserves quarterly or monthly. The absence of one is a red flag; an audit signed by an unknown auditor is also a red flag.
  5. Test the withdrawal flow first by depositing the minimum amount and trying to pull it back out within the first 24 hours. If withdrawal is blocked, delayed, or KYC-gated only on withdrawal, exit immediately.
  6. Search the exchange name on Reddit, Trustpilot, and the SEC Investor Alerts page. New scam complaints often surface there weeks before mainstream coverage.

One last check before you deposit anywhere

If a centralised exchange is pushing you to buy a specific Ethereum token before withdrawal, paste the contract address into RektRadar first. The free scan returns a risk score in seconds, with the full list of on-chain flags that the analyzer found. No signup is required.

Open the free Ethereum scam checker →