Every week, new crypto exchanges and brokers appear online with polished websites, celebrity-style ads, and promises of effortless profits. Some are legitimate businesses. Others are elaborate traps designed to do one thing: take your deposit and disappear. Learning how to verify crypto exchange platforms before you send money is the single most effective habit you can build as a crypto user — and it takes less than 30 minutes once you know where to look.
This guide walks you through a practical, step-by-step verification process used by careful investors: checking official regulator registers, searching public warning lists, inspecting the domain and the app, reading the withdrawal fine print, and separating genuine reviews from planted ones. No single check is foolproof, but together they make it far harder for a fake platform to fool you.
Why This Check Matters More in Crypto
Crypto transactions are generally irreversible. If you send funds to a fraudulent exchange, there is usually no bank to reverse the transfer and no chargeback mechanism. The UK’s Financial Conduct Authority (FCA) notes that firms offering regulated financial services must be authorised or registered — and if you deal with an unauthorised firm, you will not have access to complaint or compensation schemes if things go wrong, meaning it is unlikely you would get your money back.
Crypto adds extra wrinkles. Scam operators frequently run “clone firm” scams, copying the name, branding, and even licence numbers of real authorised firms. Others invent impressive-sounding registrations from offshore business registries that are not financial licences at all. A slick website proves nothing — verification does.
Step 1: Check the Licence on the Regulator’s Official Register
A legitimate exchange or broker will tell you exactly who regulates it and give you a licence or reference number. Your job is to confirm that claim on the regulator’s own website — never by clicking a “verify licence” link on the platform’s own site.
In the UK: Use the FCA Firm Checker before you use any financial firm. The FCA explains that the checker tells you whether a firm is authorised and has permission for the service it is offering you — and that checking before you deal with a firm helps you avoid scams. For deeper detail (permissions, historic fines, whether the firm can hold client money), use the FCA Financial Services Register, the official public record. Note that the FCA registers cryptoasset firms for anti-money-laundering purposes; registration is not the same as full authorisation, and it does not carry the same protections.
In the US: For brokers and investment professionals, FINRA’s BrokerCheck is a free tool that lets you research financial professionals and firms, including employment history, qualifications, and disciplinary records. It also covers investment advisers registered with the SEC or state regulators.
What to look for on any register:
- The firm’s legal name matches the name on the register exactly — not just a similar-sounding trading name.
- Status reads “Authorised” or “Active” — not lapsed, suspended, or revoked.
- The permissions cover the actual service being offered (spot trading, derivatives, custody).
- The website domain listed on the register matches the site you are using. If the register lists one domain and you are trading on a different one, you may be on a clone site.
If the platform claims a licence but you cannot find it on the official register, treat that as a serious warning sign — the FCA advises avoiding firms that are not authorised or lack the right permissions.
Step 2: Search the Official Warning Lists
Regulators publish lists of firms they know are operating without permission. Searching these takes minutes and can save your entire deposit.
- FCA Warning List: Search for unauthorised firms and individuals the FCA is aware of. Warnings also appear on the Firm Checker and Financial Services Register when you search for a flagged firm.
- CFTC RED List: The US Commodity Futures Trading Commission maintains a Registration Deficient List of foreign entities that appear to be acting in a capacity requiring CFTC registration but are not registered. The CFTC specifically cautions about unregistered firms in markets with historically high fraud complaints — including digital currencies, forex, and binary options.
Being absent from a warning list is not proof of legitimacy — new scam sites appear faster than regulators can list them — but being present on one is a clear reason to walk away.
Step 3: Inspect the Domain’s Age and Ownership
Most fraudulent exchanges are short-lived: launch a site, collect deposits for a few months, vanish, and relaunch under a new name. A domain check exposes this pattern.
- Check the domain age with a WHOIS lookup. If a platform claims to be “a trusted global leader since 2018” but its domain was registered three months ago, the claim is false.
- Compare the domain to the official one. Scammers register lookalike domains — extra words, different endings, swapped letters. Type the address yourself rather than clicking links from ads or messages.
- Be wary of privacy-shielded registrations combined with other red flags. Legitimate financial firms usually have verifiable corporate details; a completely anonymous registration on a supposedly established exchange deserves scrutiny.
Step 4: Make Sure the App Is the Real App
Fake exchange apps in unofficial app stores — and occasionally lookalikes in official ones — are a common trap.
- Download apps only via a link from the exchange’s official website (the domain you already verified), or by searching the official app store yourself.
- Check the developer name, release date, review history, and download count. A “major exchange” app published last week by an unknown developer with a handful of generic five-star reviews is suspicious.
- On Android, be cautious of APK files sent via messaging apps or download links — these bypass store screening entirely.
- After installing, confirm the app’s login pages and support contacts match the official website.
Step 5: Read the Withdrawal Policy Before You Deposit
This is the step most victims skip. A legitimate exchange publishes clear, specific terms for getting your money out. Read them before you put money in.
- Withdrawal minimums, fees, and processing times should be stated plainly. Vague language like “withdrawals are processed at our discretion” is a red flag.
- Beware of “unlock fees.” A classic scam pattern: your account shows big profits, but withdrawals are blocked until you pay a “tax,” “verification fee,” or “liquidity deposit.” Real exchanges deduct fees from your balance — they do not demand fresh deposits to release your own money.
- Check whether the platform allows small test withdrawals. Some users verify an exchange by depositing a small amount and withdrawing it. This can reveal problems early — but only do this after the platform has passed the licence, warning-list, and domain checks above. A successful small withdrawal does not prove a platform is legitimate; scam sites often allow small withdrawals to build trust before blocking larger ones.
Step 6: Separate Real Reviews from Planted Ones
Reviews can help, but the review ecosystem around crypto platforms is heavily manipulated.
- Look for patterns, not averages. Dozens of five-star reviews posted within days of each other, all using similar phrasing, suggest paid or fake reviews.
- Read the one- and two-star reviews first. Repeated complaints about blocked withdrawals, unresponsive support, or sudden account freezes matter far more than praise for the signup bonus.
- Check independent forums and complaint boards rather than testimonials hosted on the exchange’s own site.
- Be sceptical of influencer endorsements. Paid promotions rarely disclose the risks, and some promoters are compensated per deposit.
Red Flags Checklist
Run through this list before you deposit. Any single “yes” deserves investigation; several together mean you should walk away.
- The platform is not on any official regulator register, or its claimed licence cannot be found there.
- It appears on the FCA Warning List, the CFTC RED List, or another regulator’s alert page.
- It promises guaranteed returns, “risk-free” trading, or unusually high fixed profits.
- The domain is very new, anonymous, or does not match the domain on the regulator’s register.
- Withdrawals require extra “fees,” “taxes,” or new deposits to unlock your funds.
- Customer support only exists inside the app or via messaging apps, with no verifiable company address.
- Reviews show repeated withdrawal complaints, or the positive reviews look planted.
- You were contacted out of the blue — via social media, dating apps, or messaging — and directed to the platform.
- The site pressures you to deposit quickly with countdown timers or “limited bonus” offers.
- The company behind the exchange cannot be identified, or its listed address is a serviced office with no real presence.
How to Verify a Crypto Exchange: Your Printable Checklist
Work through these steps in order. Do not deposit until every box is checked.
- [ ] Licence confirmed: Found the firm on the official regulator register (e.g., FCA Firm Checker / Financial Services Register, FINRA BrokerCheck). Status is authorised/active with the right permissions.
- [ ] Domain matches: The website domain matches the one listed on the regulator’s register.
- [ ] Warning lists searched: Checked the FCA Warning List and the CFTC RED List — no warnings found.
- [ ] Domain history checked: WHOIS shows a domain age consistent with the company’s claimed history.
- [ ] App verified: Downloaded from the official site or official app store; developer name and history look legitimate.
- [ ] Withdrawal terms read: Fees, minimums, and processing times are clear, with no “unlock fees” required.
- [ ] Reviews researched: Independent reviews checked, with attention to withdrawal complaints and fake-review patterns.
- [ ] Small test done (optional): Only after all checks pass, a small deposit and withdrawal completed successfully.
- [ ] No pressure: You were not rushed, and nobody contacted you unexpectedly to recommend the platform.
If Something Already Feels Wrong
If you have deposited funds and withdrawals are suddenly blocked, stop sending money immediately — “release fees” are almost never legitimate. Gather screenshots of your account, transactions, and all communications. Report the platform to your national regulator and fraud reporting service, and if the approach came through social media or messaging apps, report the accounts there too. The FCA invites reports of unauthorised firms, noting that every report is looked into and can help protect others.
Conclusion
Knowing how to verify crypto exchange platforms is not about paranoia — it is about routine. Check the licence on the official register, search the warning lists, inspect the domain and the app, read the withdrawal terms, and look past planted reviews. Thirty minutes of verification is a small price to pay before trusting a platform with your money. And remember the FCA’s plain advice: if a firm is not authorised or does not have permission for the service you need, avoid dealing with it.
Sources
- Financial Conduct Authority — “How to check a firm or individual is authorised”: http://www.fca.org.uk/consumers/how-check-firm-individual-authorised
- Financial Conduct Authority — “Warning List of unauthorised firms”: https://www.fca.org.uk/consumers/warning-list-unauthorised-firms?search=&page=49
- US Commodity Futures Trading Commission — “RED (Registration Deficient) List”: https://www.cftc.gov/LearnAndProtect/Resources/Check/redlist.htm?combine=&items_per_page=10&order=field_company_registration_def&page=3&sort=desc
- FINRA — “Providing Tools and Resources to Protect Investors” (BrokerCheck): https://www.finra.org/investors/insights/tools-investors
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.