How do I verify a swap deposit address is real and not a phishing copy

05 September 2026

You verify a deposit address by checking it against the source you originally copied it from, then checking it again, and then sending a tiny test amount before the full sum. That is the entire method, and it works because phishing copies rely on you skipping one of those steps.

The reason this matters is that the address itself is not the weak point. The weak point is your own attention. A phishing copy is not a fake address that looks like a real one; it is a real address that you are tricked into using. The scammer does not need to forge anything. They only need to get you to look at their string of characters instead of the one the exchanger actually generated.

So the first check is provenance. Open the exchanger's official page yourself, from a bookmark you created earlier or by typing the domain directly. Do not click a link from an email, a social media message, or a search result. Do not use a saved tab that has been sitting open for days. Get to the deposit screen fresh, from a source you control. Then copy the address from that screen.

The second check is comparison. Paste the address you copied into a plain text editor, not into the send field yet. Compare it character by character to the address shown on the deposit screen. Many wallets show the full address; some show a shortened version with an option to expand it. Expand it. Look for lookalike characters: zero versus the letter O, one versus lowercase L, uppercase I. Scammers have generated addresses that differ by one character from a common exchanger address. One character is enough to lose everything, and no error message will catch it because the address is valid, just wrong.

The third check is the test transfer. Send a small amount first. Wait for it to appear in your destination account. Confirm the arrival before sending the rest. This is not paranoia; it is standard practice among people who move money regularly. The test amount should be small enough that losing it would not hurt, but large enough that a transaction fee does not eat it entirely. If the test arrives, the address is almost certainly correct. If it does not arrive within a reasonable time, stop and investigate before sending anything else.

There are two additional checks that cost nothing and catch most phishing attempts. First, look at the deposit screen for a padlock icon in the browser bar and check the domain spelling in the address bar. Phishing pages often use a domain that is a typo of the real one, like exchangerr instead of exchanger. Second, check whether the page asks you for anything beyond the deposit address itself. A genuine deposit screen asks for the address and possibly a network selection. It does not ask for your private keys, your seed phrase, or your password. Any page that asks for those is not the exchanger.

When something goes wrong, do not panic and do not rush. If your test transfer has not arrived after a reasonable period, check the block explorer for that network using the transaction ID. That will show whether the funds left your wallet and where they went. If they left and landed on an address that is not the one you intended, the funds are unrecoverable in practice, and you should report the incident to the exchanger's support anyway, because they may have a fraud team that tracks such addresses. If the funds never left your wallet, the problem is on your side: the transaction was not broadcast, or you set a fee too low, or you chose the wrong network. Fix those before retrying.

The broader subject here is swapping crypto safely, and that hub page covers the other checks you should make before moving money, such as network selection and fee verification. This particular check, the address verification, is the one that prevents the most common and most permanent loss. There is no shortcut. There is no tool that makes the address trustworthy by itself. There is only the habit of checking, rechecking, and testing.

Phishing works because it exploits the gap between what you intend to do and what you actually do. Close that gap. It takes three minutes and costs you one small transaction fee. The alternative costs you everything.

Back to nft markets