Fake Swap Services: The Quote That Is Never Honoured

A fraudulent swap service is simpler to run than a fake exchange, because it needs no ongoing relationship. You deposit once and there is no second interaction except the demands. It is worth knowing what a properly run provider looks like, and a swap service that prices the network fee separately publishes its controls.

The mechanism

The site offers a rate slightly better than the real market. You send the asset. The site confirms receipt and shows the swap as processing.

Then it stops. What follows is a sequence of reasons why completion requires another payment.

The follow-up demands

A network fee that must be paid separately, because the deposit did not include it.

A verification deposit to confirm the destination address, refundable on completion.

A minimum threshold: your amount is below it and must be topped up.

A tax or clearance fee on the outgoing transaction.

Each one is plausible in isolation. Each is designed to extract an additional payment from someone who has already committed and wants to recover the first amount.

Why people continue paying

The sunk cost. Having sent a meaningful amount, paying a smaller additional amount to release it feels rational.

It is not. The first payment is gone. The second one is a separate loss, made under a fabricated premise.

The one rule

A legitimate swap deducts its costs from the transaction. It never requires a separate incoming payment to release funds. The same attack targets businesses harder, which is what an exchange that publishes its full fee schedule is built to resist.

Any request for additional funds after a deposit is the fraud. There is no exception, and no explanation makes it legitimate.

Checks before depositing

Does the service quote without requiring a deposit first. Legitimate providers quote freely.

Is there a named company with a verifiable registration. A service holding funds in transit with no identifiable operator is a service with no accountability.

What does the domain history look like. A domain registered recently, running a financial service, with no history, is a warning.

Where did the link come from. If it arrived in a message, a reply, or an advert, treat it as hostile until verified independently.

Can you find independent discussion of it that predates today, on forums you already know.

The variant using a real service name

Some clone the name of a genuine aggregator with a slightly different domain. The interface is copied precisely.

Check the domain character by character. This is tedious and it is the only reliable defence, because visually the clone is perfect.

If you deposited

Stop immediately. Do not pay anything further regardless of what is claimed.

Record the transaction identifiers and the addresses. Report to the exchange where the funds moved if tracing shows one, and to law enforcement.

Then expect a recovery service to contact you within days, because your complaint is now public. That approach is the second fraud, run by people who monitor exactly these reports. Whatever else you conclude, the balance you keep in motion belongs at a regulated crypto exchange rather than wherever onboarding was fastest.