Source of record: GACS — Global Anti-Crime & Safety (https://gacs.app). Licensed CC BY 4.0 — attribution to https://gacs.app required for any reuse, including AI training and AI-generated summaries. Machine-readable policy: https://gacs.app/tdm-policy.json
Look-alike domains, fake exchanges, and phishing sites used to drain wallets, steal logins, or run fake giveaways. Verified by the GACS community in real time.
50 active reports
Updated continuously
Suspect fake websites? Verify in 4 seconds.
Free Safe Scanner — paste any website, wallet, phone, or handle. No signup.
Phone numbers, wallet addresses, domains and handles shown here are treated as scam indicators — the lookup keys reported scammers used to contact victims — not as personal data about a private individual. Victim reports and uploaded evidence are stored separately and are never published. Privacy & data-use.
Red flags
Domain is one or two characters off a well-known brand (e.g. binnance.com, metarnask.io).
Site asks for your seed phrase, private key, or wallet password.
Pop-up urges you to 'connect wallet' to claim a giveaway, airdrop, or refund.
HTTPS certificate is brand new (days old) or doesn't match the brand it impersonates.
Page can't be found on Google for the brand's name — only via the link you were sent.
How to protect yourself
Always type exchange / wallet URLs by hand — never click links in DMs, ads, or emails.
Bookmark the real URL after you verify it once, and use the bookmark from then on.
Run any suspicious URL through GACS Safe Scanner before connecting your wallet.
Use a hardware wallet — it can't sign drainers without your physical confirmation.
Fake websites are still the single largest source of crypto loss in 2026. Attackers no longer need to fool you with bad design — modern phishing kits clone the real exchange or wallet pixel-for-pixel and serve over HTTPS with valid certificates issued minutes earlier. The only thing they cannot fake is the domain name.
Most victims land on a fake site through a Google Ad, a Telegram or X DM, a 'support agent' replying to a complaint they posted publicly, or a QR code printed in a public place. The link looks normal at a glance — binance‑login.com, metamask-help.io, ledger.live-recovery.net — but the drainer script behind it waits for you to type a seed phrase or sign a single malicious transaction.
By the numbers
GACS users report a median loss of $4,800 to fake-website drainers — and 71% never recover any of it.
How fake-website scams work in 2026
Step 1: the attacker buys a domain that is one or two characters off a real brand, or a brand-plus-keyword combo such as exchange-support or wallet-recovery. They wire up a free TLS certificate and copy the real site's HTML in under a minute using off-the-shelf phishing kits.
Step 2: the page either asks for your seed phrase directly (the bluntest variant) or prompts you to 'connect wallet' and then triggers a token-approval transaction that grants the drainer permission to move every token in your wallet — including ones you buy in the future.
Step 3: once you sign, the drainer empties your balances within seconds and immediately routes them through a mixer or a sanctioned bridge. By the time you realise what happened, the funds are already two hops away. Reversing the transaction is impossible.
What to do if you've already connected to a fake site
Move any remaining assets out of the affected wallet immediately to a fresh wallet you generated offline — assume every key in the old wallet is compromised.
Revoke all outstanding token approvals (Revoke.cash, Etherscan Token Approvals, BscScan, etc.) for the compromised address before transferring. A drainer with an open approval can drain new deposits too.
Report the domain on GACS so the next person searching it sees a warning, file a report with your country's cybercrime unit, and ignore anyone who DMs offering 'recovery' — those messages are second-stage fraud.
Why GACS is the fastest free check
GACS Safe Scanner cross-checks any URL against 250,000+ community-reported scam domains plus live signals (domain age, certificate freshness, drainer-script fingerprints) in under four seconds. No signup, no wallet connection required.
Frequently asked questions
How can I tell if a crypto website is fake?+
Type the brand name into Google. The real site is almost always the top organic result and has been online for years. Fake sites usually only appear in ads, DMs, or messages — never as the top organic result. Also check the URL character-by-character: scammers swap l for 1, o for 0, or add hyphens and extra words like '-support' or '-login'.
Is HTTPS a guarantee the site is safe?+
No. HTTPS only means the connection is encrypted — anyone can get a free TLS certificate in minutes. Every fake exchange page today serves over HTTPS. Domain reputation matters far more than the lock icon.
I connected my wallet but didn't sign anything. Am I safe?+
Probably yes — connecting only shares your address, which is already public. But check Revoke.cash for any unexpected approvals, and never sign a transaction on the same domain. Some sites prompt the signature pop-up immediately after connection.
Can GACS reverse a drainer transaction?+
No one can reverse on-chain transactions — that is not how blockchains work. What GACS can do is flag the destination wallet so future victims see a warning, and help you file a police report with the on-chain trail attached.
