A crypto swap becomes difficult to correct the moment funds leave your wallet. The practical goal is not to prove that an exchange is perfectly safe. It is to catch domain spoofing, unsupported networks, altered addresses, unclear terms and mismatched amounts before an irreversible action turns a small inconsistency into a loss.
The pre-transaction check below uses two passes. The first establishes whether the exchange route and its source data make sense. The second repeats the critical fields immediately before you approve the transfer. No checklist removes volatility, operational failure, fraud or blockchain risk, but a disciplined pause can expose many avoidable errors.
Sixty-second stop-signal scan
Do not start by comparing rates. First look for reasons not to proceed.
- The website address is unfamiliar or slightly misspelled. Close the page instead of correcting the address inside the same tab. Reopen the exchange through a previously verified bookmark or an independently obtained official channel.
- A message, advertisement or support account supplied the deposit address. Treat it as unverified until the same address appears inside the corresponding order on the independently opened exchange website.
- The asset name matches, but the network does not. “USDT” alone is not sufficient information because Tether tokens exist on multiple blockchains. The sending and receiving sides must support the same protocol for that operation. [1]
- The destination address changes after copying and pasting. Stop. Clipboard-manipulation malware can replace a copied crypto address, which is why the complete destination should be checked rather than only its first and last characters. [2]
- Someone asks for a seed phrase, private key or wallet backup. Do not provide it. Those secrets are not required to receive an ordinary blockchain transfer or investigate its public transaction ID.
- The offer guarantees profit, eliminates risk or promises to multiply deposited crypto. The FTC identifies guaranteed returns and similar promises as characteristic crypto-scam signals. [3]
- The terms change under time pressure. A countdown, urgent support message or claim that an account must be “protected” by sending crypto is a reason to leave the transaction, not accelerate it.
- The order does not clearly show what you send and what you receive. Do not infer the direction from a rate or asset pair written without labels.
If any of these signals remains unresolved, do not create or fund the order.
Pre-Transaction Verification Card: Pass One
Pass One checks the context of the operation before any transfer is authorized. For every item, record mentally or in a non-sensitive note: what must match, where the independent confirmation comes from, and what a discrepancy means.
1. Website identity and access path
What to verify: Check the full hostname character by character. Look for extra words, substituted letters, unusual hyphens, deceptive subdomains and unexpected redirects. A padlock indicates an encrypted connection; it does not by itself establish that the operator is genuine.
Independent confirmation: Compare the hostname with a bookmark you previously verified, an official profile reached independently, or established public references found without following the link that brought you to the page. Search the operator’s name together with terms such as “scam,” “complaint” and “review,” while remembering that both positive and negative posts can be manipulated. The FTC recommends researching a crypto business before paying it. [3]
What a mismatch means: One unexplained character is enough to stop. Do not log in, connect a wallet, download software or enter personal information on the disputed page.
2. Exchange direction
What to verify: Read the direction as a sentence: “I send [asset] and receive [asset].” Confirm which side provides the deposit address and which side requests your receiving address.
Independent confirmation: Compare the order form, preview screen and any order summary. All three should describe the same direction. Do not rely on the visual position of tokens alone because interfaces may place “buy,” “sell,” “send” and “receive” fields differently.
What a mismatch means: A reversed direction can produce an unusable order or an address intended for a different asset. Cancel the draft and rebuild it rather than trying to reinterpret the existing instructions.
3. Asset and current route availability
What to verify: Confirm that the exact source asset, destination asset and direction are currently selectable. The service works with assets including BTC, ETH and USDT, as well as DAI, LTC, BNB, XMR and TRX, while its asset list is being expanded. That does not mean every pair, network or direction is available at every moment.
Independent confirmation: Use the live order interface and current transaction conditions, not an old screenshot, cached search result or third-party list. If the route involves rubles and a bank card, do not assume it is operational: that function is planned rather than currently established as available.
What a mismatch means: If an asset appears in a general list but not in the chosen order direction, treat the route as unavailable until the exchange confirms otherwise through an independently verified support channel.
4. Blockchain network and token identity
What to verify: Match the network on the sending wallet with the network specified by the order. For ETH, distinguish Ethereum from similarly named assets or representations on other chains. For USDT, verify the precise blockchain rather than assuming that all USDT deposits share one address format or route.
Tether’s official protocol information lists USDT deployments across multiple blockchains and publishes protocol-specific identifiers. That is the underlying reason a token ticker cannot replace a network check. [1]
Independent confirmation: Compare three sources: the order instructions, the withdrawal or sending screen in your wallet, and the asset issuer’s or blockchain project’s official documentation. If a token contract is relevant, obtain it from the issuer’s official documentation and inspect it using the explorer for the selected chain.
What a mismatch means: Similar-looking addresses do not establish compatibility. If the wallet labels one network and the order labels another, stop. Do not send funds on the theory that the receiving service can automatically recover or bridge them.
5. Address source and format
What to verify: The deposit address must come from the active order opened on the verified domain. The receiving address you provide should come directly from the wallet in which you intend to receive the selected asset on the selected network.
Independent confirmation: Compare the address displayed in the order with the address pasted into the wallet. Inspect the entire string, preferably on a second trusted display or through a wallet’s hardware-device confirmation screen when available. Bitcoin’s safety guidance specifically warns against checking only a few characters because malware may substitute a destination. [2]
What a mismatch means: Any changed character, unfamiliar address or address refreshed without explanation invalidates the previous comparison. Pause and obtain new instructions from the verified order page.
6. Memo, destination tag or payment identifier
What to verify: Determine whether the receiving side explicitly requires an additional memo, tag, message or payment identifier. If one is shown, verify it separately from the wallet address.
Independent confirmation: Use the receiving service’s deposit instructions for that specific order and asset. A memo or tag can be used by custodial platforms to associate transfers to a shared address with the correct account. Omitting a required value can delay or prevent automatic crediting. [4]
What a mismatch means: If the order shows an identifier but the wallet offers no corresponding field, do not place it in an arbitrary comment box. Stop and clarify whether the selected wallet and network support the required field.
7. Amount, fees and expected result
What to verify: Separate four values that are often confused: the amount sent, any network fee charged by the sending wallet, any exchange-related deduction disclosed in the order, and the estimated or fixed amount to be received. Check whether the quoted result can change and under what stated conditions.
Independent confirmation: Compare the order preview with the wallet’s final authorization screen. Check the asset denomination carefully; a fiat estimate displayed by a wallet is not the same as the number of crypto units being transferred.
What a mismatch means: An unexplained difference requires clarification before payment. Crypto prices can move quickly, so a difference in displayed fiat value is not automatically proof of fraud, but neither should it be ignored. Volatility can materially change the market value of an asset. [3]
8. Limits, timing and compliance conditions
What to verify: Read the current minimum, maximum, payment window, confirmation policy and any conditions that may affect processing. Requirements can depend on the exchange direction and the result of compliance checks.
Independent confirmation: Use the conditions attached to the current order. Older articles, social posts and previous transactions may describe different requirements. If verification is requested, confirm the request inside the independently opened service rather than through an unsolicited direct message.
What a mismatch means: Do not split, enlarge or restructure a transaction to avoid a stated requirement. If the applicable conditions are unclear or conflict across screens, the order is not ready to fund.
9. Evidence source and support channel
What to verify: Identify where each critical instruction originated. The order page, wallet, official project documentation and correct block explorer serve different purposes. A social-media reply or private message should not override them.
Independent confirmation: Open support through the verified service interface. Before sharing an order identifier, check that the conversation belongs to the same official domain or established channel. Legitimate troubleshooting does not require a seed phrase or private key.
What a mismatch means: Conflicting instructions from “support” are a stop signal, especially if they include a replacement address, remote-access request, recovery phrase request or extra transfer described as wallet activation.
Pre-Transaction Verification Card: Pass Two
Complete this pass immediately before clicking the wallet’s final Send, Confirm or Approve control. Do not rely on fields checked several minutes earlier: an order may have expired, a page may have refreshed, or clipboard contents may have changed.
-
Destination address
Verify: Compare the complete address on the wallet authorization screen with the current order.
Independent confirmation: Read it from the verified order page, not from clipboard history, chat or email.
Mismatch: Cancel the wallet action. Never edit only the suspicious characters.
-
Network
Verify: Confirm that the wallet is broadcasting on the same blockchain named in the order.
Independent confirmation: Check the wallet’s network indicator and the order instructions. For tokens, confirm the issuer-recognized token contract when relevant.
Mismatch: Stop even if the address format is accepted by the wallet.
-
Asset
Verify: Make sure the wallet is sending BTC, native ETH or the intended USDT token—not a similarly named token, wrapped representation or unrelated contract.
Independent confirmation: Check the wallet’s asset details and official project information.
Mismatch: Return to asset selection and recreate the transfer.
-
Memo or tag
Verify: Recheck every character if the order requires an additional identifier.
Independent confirmation: Compare it only with the active order’s deposit details.
Mismatch: Do not send. A valid address does not compensate for a missing required memo or tag. [5]
-
Amount being sent
Verify: Read the amount in crypto units and confirm decimal placement. Ensure the wallet has not converted a “send all” instruction into a different transferable amount after accounting for its network fee.
Independent confirmation: Compare the wallet preview with the order amount and applicable order limits.
Mismatch: Recalculate before proceeding. Do not assume a materially different amount will be credited or automatically returned.
-
Expected amount to receive
Verify: Check the latest displayed result and whether it is described as estimated, floating, fixed or subject to another stated mechanism.
Independent confirmation: Use the current order summary rather than the initial calculator screen.
Mismatch: Pause if the difference cannot be explained by disclosed conditions, market movement or network costs.
-
Order status and payment window
Verify: Confirm that the order still accepts payment and has not been cancelled, replaced or marked as expired.
Independent confirmation: Refresh only through the verified order page and confirm that the deposit details remain unchanged.
Mismatch: Do not send to an address from an expired order without explicit, independently verified instructions.
-
Wallet authorization details
Verify: Read what the wallet is actually asking you to sign. A normal transfer and a token approval or smart-contract interaction are different actions.
Independent confirmation: Compare the wallet action type with the operation described by the exchange.
Mismatch: Reject unexpected approvals, unlimited permissions or unrelated contract calls.
After completing both passes, a practical next step is to review the currently available exchange conditions before creating the final order.
Classify the result without declaring it “safe”
Continue the verification
This outcome applies when the verified domain, direction, asset, network, address source, amount logic and current order conditions agree. It means the pre-transaction review has not found a blocking discrepancy. It does not guarantee execution, final value, recovery or freedom from counterparty and blockchain risk.
Clarification required
Use this category when information is incomplete rather than clearly false. Examples include an unexplained receiving-amount change, unclear confirmation requirements, uncertainty about a memo field, a temporarily unavailable route or a compliance request that appears only in one channel.
Do not fund the order while clarification is pending. Contact support from the verified website and provide only the minimum non-secret information needed to identify the case.
Stop
Stop when the domain is disputed, an address changes, networks conflict, the order has expired, a seed phrase is requested, support supplies a different deposit address through private chat, or the transaction is tied to promised guaranteed returns. Closing the page is preferable to trying to repair an operation whose instructions cannot be trusted.
Control route before, during and after the exchange
Before sending
- Open the exchange and wallet through trusted access paths.
- Complete both verification passes.
- Preserve the non-secret order identifier and the exact conditions displayed when the order was created.
- Ensure you can access the appropriate block explorer independently.
- Avoid proceeding on a device showing signs of clipboard replacement, unsolicited pop-ups or remote-control activity.
While the transaction is pending
Once the wallet broadcasts the transfer, obtain the transaction ID from the wallet itself. Enter that public identifier into an explorer for the actual network used. An Ethereum explorer, for example, can display the transaction hash, status, sender, recipient, transferred tokens, value and block information. [6]
Distinguish blockchain status from exchange status. “Pending” on-chain means the transaction has not yet reached the relevant inclusion or finality stage. A transaction shown as successful by the explorer may still be awaiting the number of confirmations or internal processing required by the receiving service. Ethereum transactions progress from broadcast and pool entry to block inclusion and later finality. [7]
Do not send a second payment merely because the order interface updates more slowly than the explorer. First establish whether the original transaction exists, whether it went to the exact destination, and whether it succeeded on the intended network.
After the exchange is marked complete
Confirm receipt in the destination wallet or account using both the interface and the correct blockchain explorer where applicable. Match the received asset and network, not only its approximate fiat value.
If the received amount differs, compare crypto units rather than screenshots of changing market prices. Then review disclosed deductions, the quoted-rate mechanism and the original order terms before opening a support request.
Recovery path when something does not match
Recovery is diagnosis first. It is not a promise that funds can be returned.
If the status is delayed
- Find the txid in the sending wallet.
- Open the explorer for the network actually used.
- Check whether the transaction is absent, pending, failed or successful.
- If it is successful, compare the explorer’s destination address, token contract and amount with the order.
- Check whether the exchange is waiting for additional confirmations or an internal review.
- Contact verified support with the order ID and txid if the on-chain transfer is correct but the order has not updated.
Confirmation time is not fixed. Network conditions and transaction parameters can affect how long a transfer remains pending; Bitcoin documentation notes that atypical or insufficient-fee transactions may take longer to receive an initial confirmation. [8]
If the amount does not match
Place the original order summary, wallet debit and explorer record side by side. Check the denomination, network fee, amount actually transferred, token contract and amount credited. A difference may reflect disclosed pricing conditions or fees, but an unexplained discrepancy should be documented and raised through verified support.
Do not send an additional “verification,” “unlock” or “tax” payment demanded by an unsolicited recovery agent. The FTC warns that recovery scammers may impersonate organizations and ask for upfront fees or account information. [9]
If the address or terms changed
If the wallet has not broadcast the transfer, cancel the action and start a new order from the verified domain.
If funds have already been sent, preserve the order ID, txid, screenshots of the non-secret order fields and relevant messages. Check the destination on the explorer. Contact the exchange through its verified channel, but do not assume that a confirmed transfer can be reversed. Cryptocurrency payments typically lack the chargeback protections associated with card payments and are generally not reversible without the recipient’s cooperation. [3]
If the wrong network was used
Stop making further transfers. Record the actual network, asset, token contract if applicable, destination and txid. Ask the receiving platform whether it technically controls the destination on that network and whether it has a documented recovery process.
Do not share private keys or import a seed phrase into a website offered by a stranger. Whether recovery is technically possible depends on address control, network compatibility, platform policy and the specific transaction. No outcome should be assumed in advance.
Threats that matter at the point of exchange
Phishing
A phishing page may imitate the exchange closely enough to collect login details, present an attacker’s deposit address or trigger a malicious wallet request. The decisive check is the full domain and the action shown in the wallet—not visual polish, advertising position or a familiar logo.
Unexpected messages should be treated as untrusted entry points. Navigate independently instead of following their buttons, QR codes or shortened links.
Address substitution
Clipboard malware can replace a copied address between the order page and wallet. Address poisoning can also place lookalike destinations in transaction history. Verify the complete current address against the live order rather than selecting a destination from history or comparing only a short prefix and suffix. [2]
Wrong network
Network selection is part of the destination, not a secondary fee preference. The same ticker may exist on several blockchains, while the exchange may accept only one of them for a particular order. An address that passes the wallet’s format check is not proof that the receiving route supports the selected chain.
Seed-phrase exposure
A seed phrase or private key provides control over wallet funds. It should never be entered into an exchange order, support chat, transaction explorer or recovery form. If a wallet secret has already been disclosed, treat the wallet as compromised and seek guidance from the wallet provider’s official documentation using a clean device.
Guaranteed-return claims
An exchange operation should have a defined asset flow, not a promise that sending crypto will produce guaranteed profit. Offers to double deposits, unlock certain earnings or remove all market risk are not ordinary swap conditions. The FTC states that promises of guaranteed crypto returns are scam indicators. [3]
Safe transaction record
Keep a minimal record that allows the transaction to be identified without creating a new security or privacy problem:
- order identifier;
- transaction ID or txid;
- date and approximate time;
- asset and blockchain network;
- amount sent and amount shown as received;
- non-secret order status and relevant condition summary;
- support case identifier, if one was opened.
Do not store seed phrases, private keys, wallet backup files, passwords, authentication codes or unnecessary identity documents with this record. Public blockchain identifiers can reveal transaction activity, so avoid publishing them broadly even though explorers use them for verification. Bitcoin transaction data is publicly recorded and traceable on its ledger. [10]
The final control is deliberately simple: reopen the current order, compare the complete address, network, asset, memo or tag, amount and expected result with the wallet’s authorization screen, then stop if any field has changed without a clear explanation.
