Home › Knowledge Hub › Cloned sites and fake proof
Cloned websites and fake social proof
A cloned website is a near-perfect copy of a real exchange, wallet, or project, built to take your login, your seed phrase, or your deposit. Fake social proof is the layer around it: invented reviews, bought followers, fake trading volume, and paid promoters that make the clone look trusted. The design can be flawless, so the thing you actually verify is the address and the source, never the look. This guide shows how.
A cloned website is a copy of a real one, built to look identical so you act as if it is genuine. Because the appearance can be perfect, the only reliable checks are the ones that look past the appearance.
How clones reach you
A clone is only dangerous if you land on it. The usual routes are a link in a phishing email or message, a paid search advert sitting above the real result, a lookalike web address, or a link posted by a fake support account. The page you reach can be pixel-for-pixel identical to the real exchange or wallet, down to the logo and the login box.
What it wants is one of three things: your password and two-factor code, your seed phrase or private key, or a deposit sent to the attacker's address.
The address is the thing to check
Look-alike domains. Clones use addresses that read almost right: an extra word, a different ending, a swapped letter, or a hyphen. "brand-support.com", "brand-wallet.app", "brand.security-login.com". The real brand name appearing in the address is not proof; what matters is the exact, full domain.
Reach the site yourself. Type the address you already know, or use a bookmark you saved earlier. Do not arrive through a link in a message, and be wary of search adverts, which scammers buy to sit above the genuine result.
A padlock is not safety. The lock icon only means the connection is encrypted, not that the site is honest. Clones have padlocks too. It tells you nothing about who runs the page.
Our guide on how to verify a crypto platform covers this check in full.
Fake social proof: the trust layer
A clone or a fake project rarely stands alone. Around it sits manufactured credibility designed to answer your doubt before you voice it:
- Invented reviews and testimonials. Glowing, specific, and often repeated word for word across sites. Review scores can be bought or botted.
- Bought followers and engagement. A large follower count with little genuine interaction, or comments that are generic praise and nothing else.
- Fake volume and fake balances. Numbers on a dashboard that are simply displayed, not real. A busy-looking exchange can be entirely staged.
- Paid promoters. Influencers or "news" posts paid to endorse, presented as independent coverage.
- Borrowed logos. Real company logos shown as "partners", "as seen on", or "trusted by", with no actual relationship.
None of this is evidence. It is the part of the scam built to look like evidence. Treat endorsements, counts, and reviews as claims to verify, not reasons to trust.
How to verify you are on the real thing
- Go to the source. Find the official site and accounts through the company's own verified channels, not through a link you were sent.
- Cross-check the address against one you already trust, character by character.
- Confirm support channels on the official site before using them. Scammers run fake support on every platform; our guide on fake support on Telegram and Discord explains how.
- Be suspicious of anything urgent. "Verify now or lose access" is pressure, and pressure is designed to skip the checks above.
If you already entered details on a clone
Move quickly, in this order:
- Change the password for that account and any account sharing it, from a device you trust.
- Review and reset two-factor. Check for new devices, sessions, or app connections you did not add.
- If you entered a seed phrase, assume the wallet is compromised. Move any remaining assets to a new wallet created on a trusted device, and never reuse that phrase. Our guide on a compromised wallet covers the steps.
- Contact the real platform through its official channel and report the clone.
- Preserve evidence: the fake address, screenshots, the message or advert that led you there, and any transaction you made.
- Report it at ic3.gov in the US, and to the brand being impersonated so they can request a takedown.
Red flags
- A web address that is almost, but not exactly, the official one
- You arrived through an email, advert, or message link rather than a known bookmark
- Urgent warnings to log in or "verify" to avoid losing access
- Any site or "support agent" asking for your seed phrase or private key
- Reviews, follower counts, volume, or partner logos used as the main reason to trust
- A support channel found through search or a social reply rather than the official site
What this guide cannot do
It cannot tell you a specific site is genuine from a screenshot, because a good clone is visually identical to the real thing. What it can do is give you checks that do not depend on appearance: the exact address, reached through your own bookmark, and sources confirmed on official channels. Those are what a clone cannot fake.
This is general information, not legal or security advice.
Use Chain Pursuit's free tools to understand your options, preserve evidence, and identify possible recovery scams. Never enter your seed phrase or private key into a website, and do not share them with anyone.
Sources
Cybersecurity and Infrastructure Security Agency, Avoiding Social Engineering and Phishing Attacks. https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks, on spoofed sites, deceptive links, and verifying a source independently.
Federal Trade Commission, How To Recognize and Avoid Phishing Scams. https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams, on fake sites, look-alike messages, and checking before you click.
Federal Trade Commission, Fake Reviews and Testimonials. https://www.ftc.gov/news-events/topics/truth-advertising/fake-reviews, on manufactured reviews and endorsements presented as genuine.
The verification steps draw on this guidance; the point that a clone can be visually perfect, so appearance is not a check, is consistent across all three. Reviewed quarterly.
Frequently asked questions
How can a cloned site look exactly like the real one?
Copying a website's appearance is trivial; the design, logo, and login box can be reproduced perfectly. That is why appearance is not a check. The genuine signal is the exact web address, reached through a bookmark or source you already trust.
The site had a padlock icon. Doesn't that mean it is safe?
No. The padlock only means the connection is encrypted, not that the owner is honest. Cloned and phishing sites routinely have padlocks. It tells you nothing about who is behind the page.
I found the site through a search advert. Is that risky?
It can be. Scammers buy adverts that sit above the real result for well-known brands. Prefer a bookmark you saved or the address you already know, and check the full domain carefully before logging in.
What is fake social proof?
It is manufactured credibility: invented reviews, bought followers, fake trading volume, paid promoters, and borrowed "partner" logos. It is built to look like evidence of trust. Treat all of it as claims to verify, not reasons to trust.
I entered my password on a site I now think was fake. What do I do?
Change that password immediately from a device you trust, reset two-factor, and check for unfamiliar sessions or devices. If you entered a seed phrase, treat the wallet as compromised and move remaining assets to a new one. Then report the clone.
How do I find a company's real support channel?
Only through its official website, reached directly. Scammers run fake support on search results and social media. Confirm the channel on the official site before using it, and never trust a support account that contacts you first.
Where do I report a cloned website?
In the US, report at ic3.gov, and notify the real company being impersonated so they can request a takedown. Keep the fake address, screenshots, and the message or advert that led you there.
Think you entered details on a fake site?
Eleven questions that show which security and reporting steps still apply to you.
Check my case