Fake Exchanges and Fake Apps: A Checklist, From Domain to Developer Name

Bottom line first: The damage from fake exchanges and fake apps isn't the market — it's that you handed your login credentials or a transfer address to a counterfeit entry point. Nearly all of these scams can be filtered out in the minute before you download or log in; the trick is to replace "it looks the same" with "I verified it item by item."

1. Check the domain (not the one you reached through a search box)

Scammers register domains that closely resemble the real one and buy search-engine ads to rank ahead of the official site. The correct move is to type the official address yourself, not to jump in from search results.

• Trust the official domain itself — not search ranking, not a "sponsored" label.
• Before logging in, glance at the address bar: is it https, and is the domain spelling neither missing nor adding letters?
• The official help page's approach is worth copying directly: enter the official site address manually, rather than arriving via a search engine or an unfamiliar link.

2. Then check the app's developer name and category

Fake apps are skilled at disguising themselves in app stores:

• The genuine official iOS app is signed under the official company name (for example, the developer of the official OKX app is "OKX Inc.") — if the developer name is wrong, it's fake.
• Fake apps are often filed under categories like "Tools / Productivity / Lifestyle" instead of the real category.
• The official app is only downloaded from the official website or official app stores; never install it via a search engine, an unfamiliar link, or a third-party store.

One concrete consequence: a fake messenger downloaded through a search engine can carry a trojan that tampers with the deposit and withdrawal addresses you copy and paste — the money goes to the altered address and is gone.

3. Support lives only inside the site and official channels

• Official support is reachable only through in-app or official-website entry points (e.g. in the app: Menu → Get help → chat).
• Anyone who messages you off-platform claiming to be "official support" should be treated as a scammer first; official staff will never ask for your verification codes.
• Turn on the anti-phishing code: once set, official emails will include the code you chose; an email without it is a fake.

4. What our tools can and can't do

They can help you:

• The transfer self-check verifies chain, memo, minimum, and address format before a transfer;
• Four things to check before any transfer lays out the four most common ways to lose money in an operation.

They can't do this for you:

• We can't confirm whether a given domain is genuine. The final call on a domain or app belongs to your own address bar and the official app store page.
• We don't touch your funds and won't log in to any account for you.
• We can't stand in for official support: KYC, recovery, and freezes are handled only through the platform's official channels.

Next steps

• Go through the four fatal transfer mistakes first: Four things to check before any transfer
• Work out the hidden costs of depositing and switching: total cost ledger

---

Data source and fetch time: the fake app's developer name and category, the search-engine ad trap, the support-verification method, and the anti-phishing code mechanism are all taken from official help pages (OKX Help Center, fetched 2026-10-12T15:32:51Z). This page only restates facts already stated on official security pages.

Disclaimer: This site provides education and tools, is not investment advice, and does not provide trading signals.