10 Red Flags of a Bad Crypto Exchange

The clearest red flags of a bad crypto exchange are no verifiable regulation, promises of guaranteed or high returns, problems withdrawing your money, and pressure to deposit more. A trustworthy exchange is boring by comparison: it is licensed, it is transparent about fees and custody, and it lets you leave freely. This guide lists ten warning signs to check before you deposit a cent — if a venue trips several of them, walk away, because getting the exchange wrong can cost you everything before the market even moves.

1. No verifiable regulation or licensing

The biggest red flag is an exchange that cannot show it is regulated where you live. Legitimate venues name their licences and registrations and can be checked against a regulator's public register. If an exchange is vague about where it is based, who runs it, or which authority oversees it, treat that as disqualifying. In the UK, check the FCA register; in the US, look for a registered, accountable firm; in the EU, look for a MiCA licence. An unregulated exchange has no one holding it accountable but itself.

2. Guaranteed or unrealistic returns

Any exchange or 'earn' product promising guaranteed, fixed, high returns is either misleading you or running a scam. Crypto has no risk-free yield, and the collapses of Celsius, BlockFi and Voyager showed where 'earn up to X%' programmes can end — with frozen withdrawals and bankruptcy. Real returns are never guaranteed, and 'your money doubles' or 'earn 1% a day' is the language of a Ponzi scheme, not a financial service. This is the fastest red flag to spot and the most important to heed.

3. Withdrawal problems

An exchange that makes it hard to withdraw is showing you the exit is blocked. Watch for surprise 'fees' or 'taxes' demanded before you can withdraw, sudden new verification hurdles that appear only when you try to take money out, ever-rising minimums, or vague delays with no explanation. Searching the exchange's name with the word 'withdrawal' will often surface a pattern of complaints. The ability to take your money out on demand is the whole point of a custodian; if that is friction-filled, nothing else about the venue matters.

4. Pressure, bonuses and cold contact

Legitimate exchanges do not chase you. If someone contacts you out of the blue — on social media, a dating app, or a messaging group — to introduce an exchange, promising a bonus for depositing fast or a 'special opportunity', it is almost certainly a scam, often the long-con known as 'pig butchering'. Deposit-match bonuses that require you to trade a huge volume before withdrawing are a related trick. Genuine venues let you take your time and never depend on a stranger walking you through the sign-up.

5. No transparency on fees, team or custody

Good exchanges publish their fee schedule, name their leadership, and explain how they hold customer assets, increasingly with proof of reserves. Bad ones hide all three. An anonymous team is a serious warning sign — if no one is willing to put their name to the business, no one is accountable when it fails. Hidden fees that only appear at the point of trading or withdrawal, and silence about whether customer funds are segregated, tell you the venue does not want to be examined closely.

6-10. Fake reviews, cloned sites, and more

The remaining flags are quieter but common. Watch for a flood of identical five-star reviews posted in a short window, which signals paid or fake ratings. Check the exact web address for typosquatting — a cloned site one letter off the real domain is a classic phishing trap, so navigate to exchanges yourself rather than through links in emails or ads. Be wary of a brand-new exchange with no history pushing an aggressive token or presale, of poor spelling and broken support, and of any venue asking for remote access to your device. Any one of these on its own may be innocent; several together are a clear signal to stay away.

What good looks like instead

A trustworthy exchange is the opposite of this list: regulated, transparent, named, and easy to leave. Rather than trying to vet an unknown venue against ten flags, start from a shortlist that already clears them — our ranking of the best crypto exchanges does that vetting on objective factors, and our guide on whether crypto exchanges are safe explains the deeper risks. When in doubt, choose boring and accountable over exciting and anonymous. None of this is financial advice.

How to check an exchange in five minutes

You can screen most exchanges quickly. Start with the regulator: look up the firm on the relevant register — the FCA in the UK, your state or federal regulator in the US, or the MiCA authorisation lists in the EU — rather than trusting a licence claim on its own site. Then search the exact brand name alongside the words 'scam', 'hack' and 'withdrawal', and read what comes back, weighting recent reports and credible outlets over anonymous forum posts. Check how old the domain and the company are, whether a real team is named, and whether the fee schedule and custody arrangements are published. Five minutes of this filters out most of the worst venues before you risk a cent.

Type the web address yourself, too, or use a bookmark you saved from a trusted source. A huge share of crypto theft begins with a cloned site one character off the real domain, reached through an ad or a link in an email or DM. The fake looks identical and harvests your login or your recovery phrase. Getting to the exchange the right way — by typing the address or using your own bookmark, and checking the certificate — defeats an entire class of attack for free.

Finally, trust your discomfort. If a venue's returns sound too good, its team is anonymous, its withdrawals are described as troublesome by real users, or a stranger is enthusiastically walking you through the sign-up, those instincts are data. No single flag proves fraud, but the whole point of a checklist is that the signals stack — and when several line up, the correct move is simply to walk away and choose a boring, regulated exchange instead. Nothing you might miss out on is worth handing your money to a venue you cannot verify.