How to Check If a Crypto Website Is Legit: 9 Quick Checks (2026)

Short answer: a legit crypto website can survive a few official checks. A scam site usually fails them in minutes. The CFTC and Investor.gov have been warning about fake trading websites for years. The pattern is familiar. You are promised easy gains. You are rushed. Then you are told to send crypto that you cannot get back. Run these 9 checks before you create an account or send a dollar.

Why these checks matter

Fake crypto websites are built to look finished. They copy the colors and layout of well-known platforms. They show growing account balances that are not real. Investor.gov notes that fraudsters post fabricated historical returns and fake testimonials to create trust. The CFTC's guide to spotting scam trading sites adds that many of these sites vanish as soon as they are exposed and then reopen under a new name.

Registration alone will not protect you from every loss. The CFTC is clear about that. But most scams involve unregistered entities, people and products. That is why the first checks are official databases and not a gut feeling about the design.

New to staying safe online? Start with our guide on how to keep your crypto safe and the 10 crypto scams to avoid.

The 9 checks

1. Check whether the firm is registered

Start here. The right database depends on what the site sells.

• Spot crypto trading. The CFTC's registration page explains that cash or spot crypto platforms are generally not required to register with the CFTC. They are treated as money service businesses by the U.S. Treasury and must register with FinCEN. Many states also require a money-transmission license. You can check state listings through the Nationwide Multistate Licensing System.
• Futures, options, forex or other derivatives. Intermediaries that solicit U.S. customers for those products generally must be registered with the CFTC and be members of the National Futures Association. Check registration and disciplinary history in NFA BASIC.
• Investment advice or securities. Use Investor.gov and FINRA BrokerCheck to see whether the person or firm is licensed.

FinCEN does not approve or endorse any business that has registered as a money service business. The CFTC says any such claim is false and may be part of a scam. A listing only tells you the firm submitted information and is subject to federal anti-money laundering rules. It is not a seal of quality.

If a site cannot be found in the right database, ask why before you send money. You may have little or no protection if you use an unregistered offshore firm.

2. Confirm the physical address

The CFTC's scam-site guide is blunt: if a centralized trading platform does not display a company address, the owners do not want you to know where they are. If there is an address, run a street-view map search. See whether it looks like a real place of business and not a mailbox, a vacant lot or a building that has nothing to do with finance.

An offshore headquarters is not automatically a scam. It does mean you may have fewer ways to get help if something goes wrong.

3. Call a real customer service number

A missing phone number is another sign the CFTC flags. Scam sites often offer only a live chat (sometimes a bot), an email address or a contact form. Messaging-app numbers are easy to fake and easy to change. When the site disappears, those channels disappear with it.

Call the number listed on the site from a phone you already own. Do not call a number that arrived in a text or email. If you cannot reach a person, treat that as a warning and keep going through the rest of the list.

4. Match the domain age to the story

Look up the domain at ICANN's lookup tool. You will see when the web address was created. If the company claims it has been operating for years, but the domain is a few weeks old, the story does not add up. Be just as careful with a site that claims millions of customers or huge trading volume on a brand-new domain.

Also watch for look-alike names and addresses that swap a letter, add a hyphen or use an unusual ending. That is a common way to send you to a copy of a real platform. Our crypto scams guide covers this trick in more detail.

5. See how they ask you to send money

Scam platforms often will not connect to a regular bank. The CFTC explains why. A bank transfer can be traced. Crypto transfers are faster to hide and hard to reverse. The usual script is to walk you through buying crypto on a well-known exchange and then sending it to them.

If the only way in is an irreversible crypto deposit, slow down. A legit platform that serves U.S. customers usually also explains how to fund an account from a bank or card, including the fees and the holds. Compare that process with what you would expect from any financial site you already trust.

6. Reject guaranteed or risk-free returns

This one shows up in almost every official warning. The CFTC says claims such as "risk-free," "zero risk," "absolutely safe" and "guaranteed profit" are hallmarks of fraud. Investor.gov adds that depictions of accounts rapidly increasing in value are often fake.

Every investment has risk. Crypto can fall to zero. A site that hides that fact is not educating you. It is selling you a story. The same habits apply to stocks and other markets: if the return is promised and the risk is missing, walk away.

7. Watch for pressure and unsolicited pitches

Fraudsters create a false sense of urgency so you skip the research. They also reach out first. The CFTC says to use extreme caution with an unsolicited email, message or call about an investment, even if it includes a U.S. phone number. The sender may be operating abroad under a fake name.

Take your time. A legit firm will still be there after you finish these checks. If someone will not let you hang up, close the chat or wait overnight, that is the point. They do not want you to think.

8. Look past the testimonials and awards

Do not rely on reviews that appear only on the site itself. Investor.gov warns against depending solely on testimonials. The CFTC also flags generic trophies and "best site" badges when it is not clear who issued them.

Instead, search the exact domain plus the words "scam," "fraud" or "reviews." Look for reports from people who tried to withdraw, not just people who were shown a rising balance. Then compare what you find with the official lists in the next check.

9. Search the official watch lists

Before you open an account, search:

• The CFTC RED List, which names foreign entities that appear to be acting in a capacity that requires CFTC registration but are not registered.
• The SEC's Public Alert: Unregistered Soliciting Entities (PAUSE) list, linked from the CFTC's check page, for firms that claim to be registered and solicit U.S. investors when they are not.

A name that is not on a list is not automatically safe. A name that is on a list is a hard stop.

What to do if you already sent money

Stop contacting the site. Do not send more money to "unlock" a withdrawal or pay a tax or fee to get your balance out. That is a second-stage scam.

Save everything while it is still available: the website address, screenshots, emails with full headers, chat logs, wallet addresses, transaction IDs, dates and payment records. The CFTC's steps after discovering fraud start with a timeline and those records.

Then report it:

• ReportFraud.ftc.gov for a consumer fraud report.
• The CFTC if the pitch involved digital assets, futures, options, forex or a similar product.
• Your state securities regulator or attorney general, and local police if you need a report for a bank or insurer.
• The platform you used to buy the crypto, so it can flag the destination address.

Reporting does not guarantee you will get the money back. Crypto transfers are often irreversible. It can still help investigators and may protect the next person. If you also need a refresher on wallets and seed phrases, use our free CCF Quick Start Guide.

Frequently asked questions

How can I tell if a crypto website is legit?

Run the official checks first. Confirm registration in the right database, verify the address and phone number, compare the domain age with the company's claims and search for independent scam reports. Then look at how they ask you to fund the account and whether they promise guaranteed returns.

Does FinCEN registration mean a crypto site is safe?

No. FinCEN records what the company submitted. It does not approve or endorse the business. Registration is a minimum check, not a safety rating.

Are offshore crypto exchanges illegal for US users?

Not automatically. Many are simply not licensed to serve you, and you may have little protection if something goes wrong. A platform that is closed to U.S. persons and still lets you sign up is a warning, not a loophole. For the wider legal picture, see is crypto legal in the US.

What should I do if a site will only accept crypto deposits?

Treat it as a red flag and slow down. Scam sites prefer irreversible crypto deposits because bank transfers are easier to trace. Ask why a bank option is missing and finish the other checks before you send anything.

Is a site with great testimonials safe to use?

Not by itself. Testimonials on the site can be faked. Search the domain with the word "scam" and check official watch lists before you trust a review.

Where do I report a fake crypto trading website?

File a report at ReportFraud.ftc.gov. If the product looks like a derivative or a digital-asset trading scam, also submit a tip to the CFTC. Tell your state regulator and the platform you used to buy the crypto.

The bottom line

You do not need to be a lawyer to spot a fake crypto website. You need a short, official checklist and the patience to use it. Check registration, the address, the phone number and the domain. Be wary of guaranteed returns, rushed pitches and deposits that only go one way. If you want to learn how to invest and trade digital assets the simple way with AI on your side, explore our CCF programs.

This article is general education, not financial, tax or legal advice. Figures and rules are current as of November 12, 2026 and can change. Trading and investing in digital assets involves risk including loss of your capital.

Written by

Joshua Montoya

CCF · Co-founder

Joshua Montoya is a bestselling author and speaker and an equal co-founder of CCF with Marty Cooney. His story is from fast food to freedom: he left fast food for a digital marketing career in 2010 and has been in crypto since 2017. His mission is the power of 1% and he teaches everyday people to buy, sell, trade and secure digital assets with risk management and independent decisions first.

Marty Cooney

CCF · Co-founder

Marty Cooney is a bestselling author and speaker and an equal co-founder of CCF with Joshua Montoya. His story is from digital publishing to digital assets: he built a career in online marketing and publishing and has been in crypto since 2017. His motto is show up daily and stack your 1% and he teaches everyday people to buy, sell, trade and secure digital assets with a clear process first.

Meet the founders