Fake Crypto Exchange Support Scams

Fake crypto exchange support scams involve fraudsters impersonating the customer service teams of cryptocurrency exchanges, wallets, or related platforms. They target people who are experiencing — or can be made to believe they are experiencing — a problem with their account, and manipulate them into revealing login credentials, two-factor authentication codes, or seed phrases, or into approving transactions that transfer their funds to the attacker.

This scam is a crypto-specific variant of the broader fake tech and financial support scam category, adapted to the unique vulnerabilities of crypto platforms. Because cryptocurrency transactions are irreversible and most exchanges hold significant balances, successful attacks result in complete and unrecoverable losses.

Scammers find their targets through multiple routes. People who post publicly about exchange issues are immediately targeted via direct messages. Fake support accounts exist permanently on Discord, Telegram, and Twitter/X, ready to intercept people searching for help. Some scammers create fake exchange websites that appear in search results and include fraudulent support chat systems. In other cases, phishing emails impersonating the exchange prompt a support interaction.

The impersonation is often convincing. Fake support agents use the exchange's real branding, know general information about how the platform works, and employ professional-sounding language that mimics genuine customer service.

The most common trigger is a person posting on social media, Reddit, Discord, or Telegram about a problem with an exchange account. Scammers monitor these platforms continuously and respond within minutes via direct message, presenting as support staff.

Alternatively, a phishing email claims the person's exchange account has been flagged for suspicious activity, a withdrawal is pending verification, or their account will be suspended unless they verify their identity. A link leads to a fake exchange interface or support portal.

The support interaction follows a pattern designed to extract the information needed for account takeover. The agent asks the person to log in while on a screen share, capturing their password. They say a verification code has been sent and ask the person to read it out — capturing the 2FA code. They claim a 'wallet sync' is needed and ask for the seed phrase. Or they initiate a 'test withdrawal' to a 'verification address' that is actually the attacker's wallet.

In some cases, the scammer creates enough urgency — 'your account will be suspended in 30 minutes unless you verify' — that the victim acts before stopping to question whether the contact is legitimate.

Exchange support scams work because people in difficulty with their accounts are anxious and receptive to help. The emotional state of a person who believes their account is compromised or suspended makes them more likely to comply with requests that would otherwise raise suspicion.

The crypto context adds urgency: accounts hold real money, and the fear of losing access — or of an unauthorised withdrawal in progress — creates pressure to act immediately. Scammers exploit this by adding artificial time constraints.

Many people are also unfamiliar with how legitimate crypto exchange support actually operates, which makes it harder for them to identify when a support interaction deviates from what real support does.

A person posts on a public forum about a withdrawal that is taking longer than expected on a cryptocurrency exchange. Within two minutes they receive a direct message from an account using the exchange's logo claiming to be support. The account asks them to provide their account email and to share their screen. On the screen share, the support agent walks them through logging in, asks them to read out the verification code sent to their phone, and then says a 'manual review' withdrawal to a 'verification wallet' is needed to confirm ownership. The person approves the transaction, which sends their entire balance to the attacker's wallet. The support account then goes silent.

Hi, I'm from [exchange] support. I can see your account issue. Please connect to our verification portal: [fake link]

Your withdrawal is held for review. Provide your verification code to the support team to release it.

Account suspended due to suspicious login. Verify your identity at [fake link] to restore access.

To confirm account ownership, we need you to complete a test transaction to [wallet address]. Funds returned within 10 minutes.

Your account shows unauthorised access. Provide your seed phrase to our verification system to freeze activity: [fake link]

To update your security level, please share your screen and log into your account so we can apply the fix.

Legitimate cryptocurrency exchanges do not send unsolicited DMs offering support. They do not ask for your password, seed phrase, or two-factor codes in any support interaction. They do not ask you to make a 'test withdrawal' or a 'verification transaction'.

Contact exchange support only through the official website or app — not through links in emails, not through inbound DM contacts. Navigate to the exchange's website yourself and use the support channel listed there.

If you receive a DM from someone claiming to be support after posting about an issue, assume it is fake. Real exchanges monitor public posts from their verified accounts, not via DMs to individual users.

For any email claiming to be from your exchange, check the sender domain carefully and do not click links — navigate directly to your account via your bookmark or the official app.