Interrogator guide

How to check if a crypto website is a scam

Fake crypto sites drain more wallets than bad tokens do. They copy a real project's look, buy a lookalike domain, and wait for you to connect. Here's how to catch them.

The rule that beats every scam site

No legitimate website, app, support agent or airdrop will ever ask for your seed phrase or private key. Not to verify, not to sync, not to claim, not to fix an error. If a page asks for it, close the tab. That one rule stops the most common wallet drainers cold.

What to check

1. The domain's age. Scam sites are usually days or weeks old. A domain registered last week claiming to be a big project is a red flag. You can look up registration dates in public RDAP or WHOIS records.
2. The exact spelling. Look for swapped letters, extra words like -claim or -airdrop, and odd endings.
3. HTTPS. Every real site has it. Missing HTTPS is a bad sign, but having it proves nothing, since scammers get certificates for free too.
4. Redirects. A link that bounces you to a different domain is hiding where it really goes.
5. The wording. "Connect wallet to claim", "airdrop", "validate", "sync" and countdown timers are the scripts drainers use.
6. The token links. If a site shows a token contract, check whether that token's official listing points back to the same website. Copycats show a real-looking contract that links somewhere else.

How The Interrogator checks a website

Paste a URL into The Interrogator and it runs a website case from the server, with a timeout and a size limit so it never runs anything from the page. It looks up the domain's registration date in RDAP: under 7 days adds 4 points, under 30 days adds 3, under 180 days adds 1. No working HTTPS adds 2, and a redirect to another domain adds 1.

It scans the page text for seed phrase or private key requests (3 points) and for connect wallet, claim and airdrop wording (1 point each, up to 2). If the page mentions a token contract, it checks DexScreener to see whether that token's listings link to a different website (2 points).

Every flag links to its receipt, like the RDAP record. A brand-new domain isn't proof of a scam. Real projects launch new sites too. That's why it's a finding, not an accusation.

If you already connected

• Move your funds to a fresh wallet with a new seed phrase if you typed your seed phrase anywhere.
• Revoke token approvals you didn't mean to give using a reputable approvals tool for your chain.
• Don't trust "recovery services" that DM you. They're the second scam.

Common scam site patterns

The fake airdrop claim page is the most common. It copies a real project's design, adds a countdown and a "Connect wallet" button, and asks you to sign a transaction that hands over your tokens. The fake support page is next: it says your wallet needs to be "validated" or "synced" and asks for the seed phrase. Fake token launch pages show a contract address that isn't the real one, so you buy the copycat. Fake exchanges let you deposit and never let you withdraw.

All of them share the same tells: a young domain, urgent wording, and a request to connect or reveal something. Slow down whenever a site makes you feel rushed.

Website checker FAQ

Is an old domain always safe? No. Old domains get hacked or bought by scammers. Age is one signal among several.

Does The Interrogator visit the site from my browser? No. The check runs on our server with a short timeout and a size limit, and nothing from the page runs on your device.

Quick habits

• Bookmark the real sites you use and only go through the bookmark.
• Get links from the project's verified X account, not from replies or DMs.
• Use a separate wallet with small balances for new sites.

These are findings, not accusations. Not financial advice. Do your own homework.

← All guides · Open The Interrogator · Play Spot the Rug