Fake Exchange Support Scams Targeting Bitcoin Users
Criminals pose as customer support agents for major Bitcoin exchanges to steal login credentials, 2FA codes, and direct Bitcoin transfers from victims seeking help.
Part of: Fake Crypto Exchange Support Scams
Last reviewed: 1 June 2026
Fake exchange support scams prey on Bitcoin users who encounter real or perceived problems with their accounts. Scammers monitor social media for complaints about exchanges and insert themselves as helpful support agents — directing victims through a process that ultimately hands over account access or BTC.
Because Bitcoin withdrawals cannot be reversed by the exchange, a single successful impersonation can drain an entire account balance. Scammers also create convincing lookalike support sites that appear above genuine results in paid search ads.
How this scam works on Bitcoin
A user posts on Reddit or X that their Bitcoin withdrawal is delayed. Within minutes a fake support agent replies with a link to a 'priority support portal.' The portal collects the user's email, password, and 2FA code — enough to hijack the account and withdraw all BTC.
Some attackers call victims directly after scraping contact details exposed in data breaches, claiming to be from the exchange's fraud department. They warn of suspicious activity and walk victims through 'securing' their account by sending BTC to a 'safe wallet' controlled by the scammer.
Fake support apps on unofficial app stores ask users to log in to resolve an issue, harvesting credentials silently in the background.
Common red flags
- Support contact initiated via a reply to your public social media post
- You are asked to provide your 2FA code, password, or seed phrase to verify identity
- The support URL does not exactly match the official exchange domain
- Agent requests a 'test withdrawal' to a new address to confirm your account works
- Phone call from someone claiming to be exchange support — most exchanges do not provide inbound phone support
- Agent claims your account has been flagged and must be moved to a new wallet immediately
How to protect yourself
- Access exchange support only through the official website — bookmark it and navigate directly
- Never share your 2FA code, password, or any one-time codes with anyone claiming to be support
- Use a dedicated email address for exchange accounts and enable phishing-resistant hardware 2FA
- Withdraw Bitcoin only to addresses you have personally verified in a secure environment
- Keep most of your Bitcoin in a self-custody wallet, not on an exchange
- Enable withdrawal address whitelisting so new addresses require a time-delayed confirmation
How to report it
- Report the fake support account or URL to the genuine exchange's security team immediately
- File a complaint with your national financial fraud authority and cybercrime unit
- Warn others in the community by reporting the impersonator to the relevant platform
Frequently asked questions
Can the exchange reverse a Bitcoin withdrawal made by a scammer who accessed my account?
No. Once a Bitcoin transaction is confirmed on-chain the exchange cannot reverse it. Contact the exchange immediately to freeze further activity, change all credentials, and file reports with law enforcement.