Cryptocurrency Payment Scam UK: How to Spot and Avoid Fake Crypto Exchanges
Cryptocurrency payment scams targeting UK residents are costing thousands monthly — here's how to spot them before you lose money.
What is this scam?
A cryptocurrency payment scam occurs when criminals impersonate a legitimate cryptocurrency exchange — such as Coinbase, Kraken, or Binance — to trick UK users into sending money or transferring cryptocurrency. The scammer creates a near-identical website or app, sends phishing emails, or contacts victims directly claiming there's an urgent problem with their account, unusual activity, or a special investment opportunity. Once the victim is convinced they're dealing with the real exchange, they're asked to send funds, verify their identity with sensitive documents, or transfer existing cryptocurrency holdings. The scammer then disappears with the money, which is impossible to retrieve because cryptocurrency transactions are permanent and irreversible. Unlike bank fraud, there's no chargeback system in crypto, making these scams particularly profitable for criminals and devastating for victims.
Warning signs to look for
- The website URL is slightly different from the real exchange (for example, 'coinbasse.co.uk' instead of 'coinbase.com') — check the address bar carefully.
- You received an unsolicited email or text claiming urgent action is needed on your account, with a link to 'verify' or 'confirm' your identity.
- The platform asks you to send cryptocurrency to a 'security wallet' or 'verification address' to unlock your account or claim a reward.
- The site has poor grammar, broken images, or a design that doesn't match the real exchange — legitimate platforms invest in professional design.
- You're offered guaranteed high returns (like '50% monthly profits') or exclusive investment opportunities not advertised elsewhere.
- Customer support is only available via WhatsApp, Telegram, or email — genuine exchanges offer live chat, phone numbers, and verified support channels.
- The platform has no clear company address, regulatory registration, or FCA (Financial Conduct Authority) information visible.
- You're pressured to act immediately or told your account will be closed unless you take action within hours.
How this scam works step by step
The scam typically begins with contact. You might receive an email claiming to be from a cryptocurrency exchange warning of suspicious activity on your account, asking you to click a link and log in to verify your identity. Alternatively, you may see a social media ad or Google search result linking to a fake exchange website, or a message from someone offering crypto investment advice directing you to a platform. Once you visit the fake site, it looks almost identical to the real exchange. You're then asked to log in with your credentials, deposit funds via bank transfer, or verify your identity by uploading a passport or driving licence. Some scams ask you to send cryptocurrency directly from an external wallet to a 'security address' for verification. Once funds are sent or sensitive documents are uploaded, the scammer controls the account or uses your identity for further fraud. The victim discovers the truth only when they try to withdraw funds or when their actual cryptocurrency exchange account shows unauthorized activity. By then, the money or crypto is gone, transferred through multiple wallets to obscure its origin.
How to verify if it is genuine
Before using any cryptocurrency exchange, verify its legitimacy through official channels. Visit the exchange's website directly by typing the URL into your browser — never click links from emails, texts, or ads. Check the FCA Register at register.fca.org.uk; legitimate UK-regulated exchanges will appear there with a clear reference number. Look for HTTPS and a padlock icon in the address bar (though scammers copy these too). Contact the exchange's official customer support team using contact details from their verified website to confirm any alerts you've received. Check social media — real exchanges have verified accounts with blue ticks and consistent posting history; scammers often create accounts that look official but have few followers or recent creation dates. Search '[Exchange Name] scam' on Google to see if others have reported issues. Read independent reviews on established platforms like Trustpilot or CoinMarketCap. For more detailed verification steps, refer to our /guides/crypto-investment-scam-checklist/ guide.
What to do if you have already interacted
If you've been contacted by a suspicious exchange or visited a fake site, act quickly. First, do not send any money or cryptocurrency. If you've already sent funds, contact your bank or payment provider immediately — call the number on the back of your card, not any number provided by the scammer. Request an urgent recall or reversal if the transaction is recent. If you transferred cryptocurrency, unfortunately it cannot be recovered, but report it to Action Fraud immediately to help authorities track the scammer's wallet address. Change your passwords for all cryptocurrency exchanges and email accounts, using unique, strong passwords. Enable two-factor authentication on your real exchange accounts. Check your credit file with Experian, Equifax, or Call Credit to see if the scammer has attempted identity fraud using your documents. Contact the real exchange whose name was impersonated and report the fake website to them — they have fraud teams that monitor this. Do not engage further with the scammer via email, message, or social media.
Reporting this scam in the UK
Report cryptocurrency payment scams to Action Fraud, the UK's official fraud reporting service, by calling 0300 123 2040 or visiting actionfraud.police.uk online. Provide as much detail as possible: the fake exchange name, website URL, any email addresses or phone numbers used, and transaction details. If you received a phishing email claiming to be from a legitimate exchange, forward it to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk. If the contact came via text message, forward it to 7726 (free of charge). Report the fake website directly to the exchange being impersonated — most have dedicated fraud teams and will report it to their hosting provider for removal. Contact Citizens Advice consumer helpline on 0808 223 1133 if you need support understanding your options. If you've lost money via bank transfer or payment app, your bank may be able to help recover funds under Faster Payment rules if you act within hours. Keep copies of all evidence: screenshots, emails, transaction records, and the fake website URL.
Frequently asked questions
Is Coinbase, Kraken, or Binance ever a scam, or is it always the fake version?
The legitimate exchanges — Coinbase, Kraken, and Binance — are not scams. They are regulated (or working towards regulation in the UK) and handle billions in cryptocurrency securely. What scammers do is create fake websites and accounts impersonating these exchanges. The real exchanges are safe if you access them directly via the official website address and have two-factor authentication enabled. Always verify you're on the genuine site before logging in or sending funds.
I already sent money to a fake exchange. Can I get it back?
If you sent money via bank transfer and it reached a UK bank account, contact your bank immediately and use the Faster Payment reversal scheme — but you must act within hours. If you transferred cryptocurrency, unfortunately it cannot be reversed; cryptocurrency transactions are permanent. Report the scammer's wallet address to Action Fraud and the exchange being impersonated so they can flag it. Some exchanges will freeze associated accounts if you report it quickly enough, but recovery is unlikely. This is why verification before sending is so critical.
How do scammers make fake exchange websites look so real?
Scammers copy the entire design, images, and text from the real exchange website, then host it on a domain with a slightly misspelled URL (like 'coinbasse.co.uk' instead of 'coinbase.com'). They use the same branding, colour scheme, and layout so victims don't notice the difference at a glance. The site will have a fake login page that captures your credentials, and once you 'log in', it shows a fake dashboard making it appear your account exists. This is why checking the URL carefully in the address bar is essential — don't just scan it; read every character.
How do I report a fake cryptocurrency exchange to authorities?
Call Action Fraud on 0300 123 2040 or report online at actionfraud.police.uk, providing the fake website URL, any email addresses, phone numbers, and transaction details. If you received a phishing email, forward it to report@phishing.gov.uk (NCSC). Report the fake site directly to the real exchange being impersonated via their official security or fraud reporting page. Report any suspicious SMS to 7726. Include screenshots and evidence of your interactions — the more detail you provide, the better authorities can track and shut down the scam.