How to Verify a Crypto Platform

How Do You Verify If a Crypto Platform Is Legitimate?

Verifying a crypto platform requires checking five independent layers: regulatory registration on official government registers, corporate existence through national company registries, domain and website history, the backgrounds of named founders and executives, and on-chain wallet transparency. No single check is sufficient — fraudulent platforms routinely pass one or two surface checks while failing the others. The only reliable verification is one that covers all layers before any funds are deposited.  

Why Standard Trust Signals Are Not Enough

Most people assess a crypto platform the same way they assess any website: professional design, positive reviews, security certificates, and regulatory logos. Fraudulent platforms are built specifically to satisfy all of these checks while providing none of the underlying substance they imply. SSL certificates (the padlock in your browser’s address bar) are free and take minutes to obtain. Regulatory logos are images that can be copied from any regulator’s website. Five-star reviews can be purchased in bulk. Professional design costs a few hundred dollars from a template marketplace. Press mentions can be fabricated or placed on low-credibility sites designed to appear like mainstream financial media. This is why due diligence on a crypto platform must go beyond what the platform presents about itself — and must rely on independent, primary sources that the platform cannot control.  

Layer 1: Regulatory Licence Verification

Why Regulation Matters in Crypto

The cryptocurrency industry is regulated unevenly across jurisdictions. Some countries — UK, EU member states, Australia, Singapore, Japan — have established licensing frameworks for crypto asset service providers. Others have minimal or no regulatory infrastructure. A platform operating without a licence in a jurisdiction that requires one is, by definition, operating illegally — and has no obligation to protect client funds, maintain capital adequacy, or follow conduct rules.

How to Verify a Regulatory Claim

Never verify a platform’s regulatory status using information provided by the platform itself. Always go directly to the regulator’s official register and search independently.

What to Check on the Register

When you find a matching entry on a regulatory register, verify all of the following:

• The exact legal nameof the registered entity matches what the platform claims
• The registration numberdisplayed on the platform matches the register entry exactly
• The website addressassociated with the registration matches the platform’s actual URL – not just the domain name, but the full address
• The licence statusis active, not suspended, cancelled, or under investigation
• The permitted activitiesinclude the specific service the platform offers (trading, custody, investment advice)

A mismatch in any of these fields — even a minor one — is a serious warning sign and warrants treating the platform as unverified.  

Layer 2: Clone Firm Detection — Step-by-Step Checklist

Clone fraud is one of the most technically convincing forms of crypto platform fraud. A clone firm copies the name, registration number, branding, and sometimes the entire website of a legitimately regulated company, then operates under that identity to defraud investors. Work through this checklist in order before depositing: Step 1 – Find the real firm on the regulator’s register. Search for the registration number the platform displays. Note the legal name and authorised website address recorded on the register. Step 2 – Compare the website URL exactly. The real firm’s authorised URL is recorded on the register. Compare it character by character with the platform you are looking at. Clone sites frequently use near-identical domains: adding a hyphen, changing a top-level domain (.com vs .io vs .net), or inserting a country code. “tradeplatform-eu.com” is not the same as “tradeplatform.com” — even if every other detail matches. Step 3 – Check the platform’s contact details against the register. Phone numbers, email addresses, and physical addresses should match what is recorded on the regulatory register. Clone operations use different contact infrastructure to direct communications to themselves rather than the real firm. Step 4 – Contact the real firm directly. Use contact details from the official regulatory register — not from the platform — to contact the legitimate company and ask whether the platform you are looking at is genuinely affiliated with them. Step 5 – Check the FCA, ESMA, and your national regulator’s warning lists. Many clone operations have already been flagged. The FCA’s Warning List is updated frequently and is searchable by name and URL. Step 6 – Search “[platform name] + scam/fraud/warning/review” independently. Use search engines to look for third-party reports, regulatory warnings, or victim accounts. Conduct this search in multiple languages if the platform operates across multiple countries.  

Layer 3: Technical and Website Verification

Domain Age and Registration History

A crypto platform claiming years of operation but registered in the past 12 to 24 months is misrepresenting its history. Check the domain registration date and history using a WHOIS lookup service (whois.domaintools.com or lookup.icann.org). Key information to review:

• Registration date:When was the domain first registered?
• Registrant details:Is the registrant’s identity hidden behind a privacy service? Legitimate financial firms generally do not conceal domain ownership.
• Historical records:Use the Wayback Machine (web.archive.org) to see what the website looked like at different points in time — and whether it has recently changed identity or branding

SSL Certificate Inspection

While SSL certificates are not a trust signal on their own, examining the certificate details reveals useful information. Click the padlock icon in your browser and inspect the certificate:

• Who issued it?Free certificates from Let’s Encrypt are used by legitimate and fraudulent sites equally. Extended Validation (EV) certificates — which verify the legal identity of the certificate holder — are harder to obtain fraudulently and indicate a higher level of corporate verification.
• Who is it issued to?The organisation named on the certificate should match the platform’s claimed legal identity.

App Store Presence

Regulated crypto platforms serving retail clients maintain applications in the Apple App Store and Google Play Store. These stores require identity verification, compliance with financial services policies, and ongoing review. A platform available only through a direct download link, a QR code, or a browser-based interface — with no independently listed app store presence — has deliberately avoided this oversight layer.

Website Content Originality

Copy sections of the platform’s terms and conditions or “about us” text into a search engine with quotation marks. Fraudulent platforms frequently copy compliance text from legitimate firms verbatim. Finding the same text on multiple unrelated websites is a strong indicator of a template-built fraudulent operation.  

Layer 4: Corporate and Team Background Checks

Company Registry Verification

Every legitimate financial services company is registered with a national company authority. Verify the platform’s claimed corporate registration:

• UK:Companies House (find-and-update.company-information.service.gov.uk)
• EU member states:Each country maintains a national business register; the European Business Registry Association (ebra.eu) provides cross-border search access
• Australia:ASIC Companies Register (search.asic.gov.au)
• Singapore:Accounting and Corporate Regulatory Authority (acra.gov.sg)
• Seychelles, SVG, Marshall Islands:These jurisdictions do have company registries, but registration is trivial and carries no regulatory significance — registration alone in these jurisdictions is not a legitimacy indicator

Check when the company was incorporated, who the registered directors are, and whether the company’s stated business activities match what the platform actually does.

Verifying Named Founders and Executives

Many fraudulent platforms list fabricated team members — professional-looking profiles with stock photography and invented credentials. Verify named individuals independently:

• Search LinkedIn for the exact name and cross-reference employment history with the claimed role and company
• Reverse image search profile photographs to identify stock images or stolen photos
• Search the individual’s name alongside the company name in news databases and industry publications
• Check whether claimed professional credentials (CFA, legal qualifications, industry memberships) can be verified through the relevant issuing body

A platform with no verifiable named leadership — or whose named leaders cannot be independently confirmed to exist — should not receive any deposit.  

Layer 5: Blockchain and Wallet Transparency

On-Chain Verification for Crypto Platforms

Legitimate crypto platforms that hold client assets on-chain can demonstrate this through proof of reserves — publishing wallet addresses that show sufficient assets to cover client balances, which can be independently verified on the blockchain. Platforms that refuse to provide any on-chain transparency for their custody operations cannot prove they hold what they claim to hold.

Checking a Deposit Wallet Address

Before sending cryptocurrency to any platform, search the receiving wallet address on a blockchain explorer (Etherscan for Ethereum-based assets, Blockchain.com for Bitcoin, BSCScan for Binance Smart Chain assets). Key things to check:

• Transaction history:Is the wallet newly created, or does it have a history of activity? A brand new wallet receiving funds from many different senders simultaneously is a common feature of fraudulent operations.
• Sanctions screening:Wallet addresses sanctioned by OFAC (the US Treasury’s Office of Foreign Assets Control) appear in sanctions databases including Chainalysis and Elliptic. Several free tools allow basic sanctions checks on wallet addresses.
• Interaction with known fraud addresses:Some blockchain analytics providers maintain databases of wallets associated with confirmed fraud schemes. Checking whether a receiving address has transacted with any flagged wallets provides a risk signal, though absence of flagging does not confirm legitimacy.

 

Layer 6: User Reviews and Community Signals

Where to Look for Independent Reviews

• Trustpilot:Check the volume, age distribution, and content of reviews. A platform with thousands of reviews all posted within a short period, using similar language and generic praise, has likely purchased reviews. Check the one-star reviews carefully — these are harder to manipulate and often contain substantive victim accounts.
• Reddit:Search the platform name on Reddit, particularly in r/Scams, r/CryptoScams, r/investing, and any crypto-specific subreddits. Reddit communities are fast to flag and document fraudulent platforms.
• Trustpilot’s “claimed” status:A platform that has not claimed its Trustpilot page and does not respond to negative reviews may not be actively monitoring its reputation — or may not have a legitimate customer service operation at all.
• Regulatory warning lists:Search the platform name across ESMA’s convergence database, the FCA Warning List, ASIC’s MoneySmart warning list, and MAS’s Investor Alert List simultaneously.

Interpreting Mixed or Suppressed Reviews

Some fraudulent platforms actively suppress negative reviews through legal threats, report abuse, or by flooding the platform with purchased positive reviews. Absence of negative reviews on a platform operating at scale is itself unusual and warrants additional scrutiny.  

If Verification Reveals a Problem — or You Have Already Deposited

If You Have Not Yet Deposited

Do not proceed. A platform that fails verification on any of the above layers — particularly regulatory, clone, or corporate checks — should not receive funds regardless of how compelling the investment opportunity appears or how much pressure is applied to act quickly.

If You Have Already Deposited and Now Have Doubts

Take the following steps immediately:

1. Stop all further deposits– no fee, tax, or compliance charge will release legitimate funds
2. Preserve all evidence– screenshots, transaction records, communications, and the platform’s wallet addresses
3. Do not notify the platformthat you are investigating or considering legal action
4. Initiate a chargebackwith your bank or card issuer if funds were deposited by card or bank transfer
5. Report to your national financial regulator and policeto create a formal record
6. Seek specialist legal and advisory support– particularly if significant funds are involved or if the platform has connections to European jurisdictions