How to Verify a Crypto Exchange Is Real Before You Deposit

How to Verify a Crypto Exchange Is Real Before You Deposit

Here's a fact that wrecks most people's mental model: successfully pulling money out of a crypto platform doesn't prove it's legit. The FTC has documented scammers who deliberately let you withdraw a small amount first — it's bait, not proof. You test it, it works, you relax, and then the real deposit goes in and never comes back out. (FTC Data Spotlight, 2022)

So if "I already withdrew from it once" isn't the verification step you thought it was, what is? A handful of checks that take less time than the platform's own onboarding form, and none of them require you to trust the person who told you about it.

Why This Matters Before You Send Anything

Somebody pointed you at a platform — a dating match, a Telegram group, an "investment coach" who slid into your DMs, or a coworker who swears their cousin doubled his money. The dashboard looks clean. Support answers fast. Everything about it is engineered to feel exactly as legit as the real thing, because copying a legitimate exchange's UI costs the scammer nothing and buys your trust for free.

The mechanics of how these platforms fake profits and stall withdrawals are covered in depth in our guide to fake crypto exchanges and the broader pig butchering pattern, part of our wider look at crypto scams. This post is narrower on purpose: you have a specific platform in front of you right now, and you want to know if it's real before you fund the account.

The Fast Official Check: Is It Registered?

Any US crypto exchange or platform that moves customer funds is legally required to register as a Money Services Business (MSB) with the Treasury's Financial Crimes Enforcement Network. Operating one without registering is a federal crime under the Bank Secrecy Act. That makes the registry a genuinely useful first filter — not because registration proves a company is honest, but because its absence is a hard stop.

Search the platform's exact legal business name (not just its marketing brand) at FinCEN's MSB registrant search. No match, no registration date, or a name that doesn't match what's on the platform's own "About" page — any of those is a reason to stop right there.

One honest caveat: the registry shows whether a company registered, not whether it's currently behaving. Plenty of fully-registered entities have still ripped people off. Treat this as a floor, not a finish line.

If the platform specifically claims to be a registered broker or investment adviser (some of the slicker "AI trading" scams do), check that claim separately at FINRA BrokerCheck or investor.gov. Most crypto exchanges aren't SEC-registered broker-dealers at all, so this check is really for platforms that specifically dress themselves up as regulated investment firms.

The Checks That Take Five More Minutes

Once the registration question is settled, run through these before you fund anything:

How old is the domain. A platform "trusted by millions" that was registered eight weeks ago is not trusted by millions. A free whois lookup tells you exactly when the site went live.

Does the team page hold up. Real exchanges have named executives with LinkedIn histories that predate the company by years. Stock photos, first-name-only bios, or a leadership team that appeared on the internet the same month the site launched are the tell.

Is there any proof of reserves. Established exchanges publish audited proof that customer funds are actually held 1:1. A platform that can't or won't show this is asking you to take its solvency entirely on faith.

What does the app store say, if there's an app. Check both the rating and how long the app has existed — and read the 1-star reviews specifically, since that's where "couldn't withdraw" complaints surface first.

How fast and how real does support feel. A canned response to a specific, detailed question is a red flag. So is a support rep who gets cagey the moment you ask about withdrawal limits or fees.

None of these checks are exotic. They're the same due diligence you'd apply to any company you were about to hand money to — crypto platforms just get a pass on it because the interface looks so polished.

Red Flags in How You Got Here

The platform itself is only half the picture. Pay attention to how you found it:

• Someone introduced you personally, especially through a dating app or a relationship that escalated fast. Legitimate exchanges don't need a personal matchmaker.
• You were told to act before you had time to check anything — a "limited window," a bonus that expires today, a friend who's "already in and it's working."
• Returns are guaranteed or suspiciously consistent. Markets don't work that way. Ever.
• You're being coached step-by-step through the deposit process. Someone walking you through exactly how much to send and when isn't helping you invest — they're managing their own payout.
• Withdrawing more than a token amount suddenly requires a "tax," a "compliance fee," or an "unlock deposit." This is the actual moment the scam reveals itself, and by then the real money is already in.

What "Real" Looks Like, for Comparison

You don't need to memorize a list of every legitimate exchange, but a few reference points help. Coinbase, Kraken, and Gemini are widely known, MSB-registered, and hold state money-transmitter licenses. None of them requires an invite code, promises guaranteed returns, or needs a stranger to walk you through your first deposit. (That link goes to our Coinbase scam-impersonation page — worth a look if someone claiming to be "Coinbase support" has already contacted you, since the platform itself being real doesn't mean every message about it is.)

Binance.US is a genuinely more complicated case worth knowing about if it comes up: its parent company, Binance, paid a multibillion-dollar settlement to the DOJ, FinCEN, OFAC, and CFTC in 2023 and remains under a compliance monitor. The SEC's separate civil case against Binance and its founder was dismissed in May 2025, but that resolved the SEC matter specifically — it doesn't erase the earlier settlement or the ongoing monitorship. That's disclosed regulatory history, not a hidden scam, but it's exactly the kind of thing worth knowing before you decide where your money goes.

If you already have an account on an exchange you've verified is legitimate, the next real risk is someone taking it over rather than a fake platform stealing your deposit outright. A hardware security key like a YubiKey 5C NFC closes that gap — it stops the credential-phishing and SIM-swap tricks that let scammers into a real, legitimate exchange account after the fact.

If You've Already Deposited

Stop sending anything else — no "tax," no "fee to unlock withdrawals," no matching the deposit to "prove you're serious." That request is always the scam continuing, never the way out of it. For the full recovery playbook — who to report to, realistic odds, and how to avoid the second wave of "recovery experts" who target people who already lost money — see our crypto scam recovery guide. The short version: report to the FBI's IC3 at ic3.gov as fast as possible, since their Recovery Asset Team can sometimes freeze funds within a narrow window after a transfer, and file with the FTC at reportfraud.ftc.gov.

The One-Minute Version

Before you fund any platform you're not already familiar with: look it up on FinCEN's MSB registry, check how old the domain actually is, see if the team is real people with real histories, and ask yourself honestly how you ended up there in the first place. If a stranger walked you to this platform and a countdown clock is telling you to hurry, you already have your answer — you don't need the rest of the checklist. And if you're holding a link or a pitch right now and want a second opinion before you commit, you can check it at Cautellus first.

FAQ

Is FinCEN's MSB registry the same as a "this exchange is safe" guarantee? No. It only confirms the company registered as required by law — not that it's currently solvent or honest. Plenty of registered entities have still failed customers. Use it to rule platforms out, not to wave others through.

I withdrew money successfully, doesn't that prove the platform is real? Not by itself. The FTC has specifically documented scammers allowing small early withdrawals to build confidence before blocking larger ones later. Treat an early successful withdrawal as one data point, not proof.

What if the platform claims to be registered with the SEC? Check that specific claim at FINRA BrokerCheck or investor.gov. Most crypto exchanges aren't SEC-registered broker-dealers at all, so a platform leaning hard on "SEC-compliant" language for a basic crypto exchange is worth extra scrutiny.

Is Binance.US safe to use? It's operating and its earlier SEC lawsuit was dismissed in 2025, but its parent company remains under a compliance monitor tied to a 2023 federal settlement. That's disclosed regulatory history, not proof of an active scam — just something to weigh before choosing it over a platform with a cleaner track record.

What's the single fastest check if I only have two minutes? Search the platform's exact legal name in FinCEN's MSB registrant search. No match is a hard stop. A match buys you time to run the rest of the checklist before you send anything.

Real platforms don't need a stranger to walk you through your first deposit, and they don't put a countdown clock on your due diligence. If either of those things is happening, you already have your answer.

Sources: FTC Data Spotlight — Reports Show Scammers Cashing in on the Crypto Craze · FinCEN MSB Registrant Search · FINRA BrokerCheck · SEC Litigation Release — Binance dismissal