abusedesk
Report a site

Anti-phishing · cryptocurrency

Fake crypto exchanges take your coins.
We find them and get them taken down.

abusedesk hunts the look-alike sites that impersonate real cryptocurrency brands, documents what they do, and files abuse reports backed by evidence a registrar can verify — so the domain comes down before it reaches the next victim.

Evidence-firstEvery claim backed by a captured, timestamped artifact — nothing assumed.
Human-reviewedNo automation sends a complaint or closes a case. A person signs off.
TakedownsReports go to the registrar, host, and blocklists that can act.

The threat

Crypto phishing doesn't take a password. It takes your coins.

Sites impersonating exchanges like the ones you already trust are built to look identical — the same interface, the same badges, the same reassurance. A victim who arrives from a search ad or a message sees a real-looking exchange and sends crypto that never comes back. There's no chargeback and no reset.

01 · lure

Impersonation

A look-alike domain clones a trusted exchange down to the reviews badge, so the victim never doubts where they are.

02 · take

Theft

A fake swap, a wallet prompt, or a redirect that monetises the victim's trust. The coins move once and don't return.

03 · vanish

Deniability

These sites are hard to pin down and easy to dismiss as “looks fine to me.” A report has to prove what happened, not just assert it.

The report

A complaint is a legally meaningful artifact.

Nothing is invented — not an ASN, not a registrar, not an allegation. Every report ships with an immutable evidence package: full-page screenshots, the captured page, and the public-record facts, sealed under a SHA-256 listing and an RFC 3161 timestamp so the moment of capture can be proven later. Then a person reads it before it goes out.

Never fabricated. An invented registrar or a reworded accusation is an incident, not a small inaccuracy.

Irreversible steps need a human. No model, no timer, and no automated role sends a complaint or closes a case.

The report speaks the recipient's language. URLs are defanged, victim data is masked, and nothing internal reaches the desk that reads it.

What we will and won't claim

Three outcomes that are never blurred into one.

The difference between them is the difference between a report an abuse desk acts on and one it closes as invalid.

checked · not found

We looked and measured nothing wrong on that point. A firm negative, stated as one.

not checked

A point we did not examine. Listed as a limitation, never dressed up as a clean result.

couldn't obtain

The material wasn't reachable. Flagged for a human — not passed off as “nothing there.”

Contact

Seen a fake exchange? Send it over.

Abuse desks, exchanges defending their brand, and anyone who spotted a crypto look-alike: reach us at the address below. Every report is reviewed by a human before anything is filed.

Machine-readable policy at /.well-known/security.txt · include the full link if you have it.