How to spot a fake crypto exchange app before you deposit
Most people who lose money to a “crypto exchange” never touched the real one. They installed an app that looked right, or followed a link a friendly “support agent” sent, and deposited into something built to look like Binance, OKX or Bybit. The good news is that all three exchanges now publish a free tool that answers the question “is this really you?”, and the app stores print the publisher’s legal name on every listing. On 5 October 2026 we ran fake-looking links through each exchange’s checker and read the publisher name of each official app on Google Play and in 15 App Store countries. This guide is what we found, in the order you would actually check it.
KEY TAKEAWAYS
- The logo, the screenshots and the star rating can all be copied. The publisher line on the store listing and the domain in the address bar are much harder to fake — check those.
- The publisher name is not simply the brand name, and it differs between stores: the real Binance app is “Binance Switzerland AG” on Apple but “Binance Inc.” on Google Play.
- In 5 of the 12 App Store countries we checked in our readers’ regions, at least one of the three official apps was missing. Where the real app is absent, every app with that name in search results is something else.
- Binance, OKX and Bybit each run a free checker. Bybit’s even checks the page you downloaded the app from.
What does a fake exchange app actually look like?
It looks like the real one, because it is built from the real one’s logo, colours and screenshots. What it cannot copy is who published it and where it lives. A fake usually arrives one of three ways: a search result in an app store, a download link sent to you in a chat, or a website that offers an “APK” file to install by hand on Android.
The giveaway is rarely the design. It is the route. Real exchanges do not ask you to install their app from a link in a Telegram message, do not run “support” through private messages, and do not need you to send coins anywhere to “unlock” a withdrawal. Binance puts it in one line on its own checking page: it “will never request funds or tokens via private communications.” OKX says its channel administrators “will never direct-message you.”
This guide is about the step before you have an account. If you already have one and want to lock it down — 2FA, withdrawal whitelist, anti-phishing code — that is our account security guide. If you are still deciding whether an exchange as a company deserves your money, read choosing a trustworthy exchange.
Who should the publisher be on the App Store and Google Play?
Every store listing shows the legal name of whoever uploaded the app, directly under the app name. That name is tied to a developer account the store has verified, so it is the single most useful line on the page. Here is what the three official apps showed on 5 October 2026.
| Exchange | App Store publisher (Apple) | Google Play developer | Official web domain | Exchange’s own checker |
|---|---|---|---|---|
| Binance | Binance Switzerland AG | Binance Inc. | binance.com | Binance Verify |
| OKX | OKX Inc. | OKX INC. | okx.com | OKX channel verification |
| Bybit | Bybit Fintech Limited | Bybit | bybit.com | Bybit Authenticity Check |
Apple names read from Apple’s public lookup service for app IDs 1436799971 (Binance), 1327268470 (OKX) and 1488296980 (Bybit); Google names read from each Play Store listing (com.binance.dev, com.okinc.okex.gp, com.bybit.app). All checked 5 Oct 2026. Publishers can change their legal entity; if yours differs, confirm it through the exchange’s checker before installing.
Two things in that table surprise most people. The publisher is often not the plain brand name — Binance on Apple is a Swiss company name, not “Binance”. And the same exchange can use a different entity on each store. So the rule is not “the publisher says Binance, so it is fine”. The rule is the publisher matches the table for your store, exactly. A listing from “Binance Global Ltd” or “Binance Support” is not on that list.
Why might the real app not show up in your store?
Because exchanges are not licensed everywhere, and app stores remove listings country by country. When that happens, searching the brand name still returns results — they are just not the app you think.
We asked Apple’s public lookup service whether each official app was listed in the App Store of 12 countries where many of our readers are. The answer on 5 October 2026:
| App Store country | Binance | OKX | Bybit |
|---|---|---|---|
| Nigeria, Ghana, South Africa, Brazil, Canada, New Zealand, Hong Kong | Listed | Listed | Listed |
| India | Listed | Not listed | Listed |
| Singapore | Listed | Listed | Not listed |
| Indonesia | Listed | Not listed | Not listed |
| Philippines | Not listed | Not listed | Not listed |
| Bangladesh | Not listed | Not listed | Not listed |
Our own check, run twice on 5 Oct 2026 with the same results, using the three app IDs above. “Not listed” means Apple returned no listing for that ID in that country’s store. Google Play availability was not checked country by country. Availability changes with licensing; run the check again in your own store.
That is 5 of the 12 countries with at least one gap, and 2 with all three missing. What fills the gap is instructive. In the Philippine App Store, the first result for “binance” was BINANCE TH, published by Gulf Binance Company Limited — a separate, Thailand-licensed exchange, not the global Binance app. In India, searching “okx” put a classifieds app called OLX first. Neither is a scam. Both show how easily the top search result becomes something other than what you typed, which is exactly the space a fake app needs.
The practical rule: if the official publisher from the table above is not in your store’s results, the exchange is not available to you through that store. Do not install a similar-looking app instead, and do not install an APK from a website to “get around” it. Our exchange availability by country page shows which of the big exchanges serve where.
How do you check a link with Binance Verify?
Open binance.com/en/official-verification, pick the type of thing you are checking, paste it, press Search. Binance answers “Verified” or “Unverified” in a pop-up.
The type matters. The dropdown offers 12 choices — Website, Email, Facebook, Instagram, LinkedIn, Phone Number, X(Twitter), Telegram, TikTok, YouTube, Discord and Others — and Binance warns that “incorrect tags will affect verification results”. A real Telegram handle checked under Website can come back unverified.
We typed a made-up but plausible support address, binance-support-desk.com, with the type set to Website. This is the answer:
Run the same search with www.binance.com and the pop-up says “Verified Website”, with a reminder to make a small test withdrawal before a large one. Two things to notice in the screenshot. The pop-up explains why it said no, so you can rule out a typo. And the strip near the top — “URL verification: https://www.binance.com” — is something a copied page can imitate, so treat it as a hint and the address bar as the proof.
One limit Binance states on the page itself: “Binance Verify only assists identity verification. Verification does not grant authorization for any actions or listings.” A verified account telling you to move funds is still a reason to stop and check inside the app.
How do you check a download link with Bybit?
Bybit’s checker is the only one of the three with an App option, and it asks the right question: not “is this app real?” but “is the place you got it real?” Open bybit.com/en/verification, choose App from the channel list, and paste the page address you downloaded from. The box literally says: “Please enter the full URL of the website where you downloaded the Bybit App.”
We pasted a made-up download link of the kind that gets passed around in group chats, https://bybit-app-download.net/bybit.apk. On a phone, this is what came back:
The same list also covers Phone number, Email, Website, Extension (browser extensions), X, Facebook, Instagram, YouTube, Discord and Telegram. Checking a browser extension matters more than it sounds: a fake “Bybit” wallet extension never needs your password, only your approval.
How do you check a channel with OKX?
OKX calls it channel verification, at okx.com/support-center/channel-verification. Choose the channel, type the details, press Verify; a lookalike comes back as “This isn’t an official OKX channel”. The channel list is the longest of the three — 18 types including WhatsApp, Line, WeChat and Telegram — but for websites it offers Company Backup Website, not a general website check. Use it for “mirror” addresses someone tells you are official; for the main site, okx.com is the answer.
The warning OKX shows under the box is the most useful sentence on any of the three pages: be careful of “similar-looking characters such as I (i), L (l), O, and 0”. A handle like 0KX_Support with a zero, or Bybit_OfficiaI with a capital I in place of the l, survives a quick glance. So copy the handle or address exactly as it reached you — do not retype it from memory or “fix” it on the way — and let the checker judge the characters your eyes skip over.
What is the 60-second check before your first deposit?
Do it once, in this order, before any money moves. It takes about a minute and it is the order in which you would actually meet each problem.
- Where did the link come from? If it reached you in a private message, an ad or a group chat, close it. Type the domain yourself instead: binance.com, okx.com or bybit.com.
- Read the publisher line. On the store listing, compare it letter for letter with the table above for your store. Not there? The real app is not available to you through that store.
- Never install an APK from a website to get around a missing listing. That is the one route where no store has checked the publisher at all.
- Paste anything that contacted you into the exchange’s checker — the email address, the phone number, the Telegram handle, the download page. Choose the right type first.
- Send the smallest deposit the exchange accepts first. Then try to withdraw it. An app that takes deposits but invents reasons not to pay out — a “tax”, an “unlock fee” — has told you what it is for the price of a test.
Step 5 is cheap in numbers. If your first real deposit is $500 and the test is $10, the test risks 2% of it and costs nothing beyond the deposit and withdrawal fees. If the app is fake, the test is the whole lesson for $10 instead of $500. Our safe withdrawal guide covers the network and address checks for that first withdrawal.
When do these checks fail you?
They fail in four situations, and it is worth knowing them before you rely on a green tick.
When you check the wrong type. All three checkers match against a list per channel. A real handle checked under the wrong channel comes back “unverified”, which can push you to distrust the real thing and trust a fake that “explains” the error.
When the real account is the one talking. A verified X account or Telegram channel can post a link, but none of the three exchanges will ask you in private to send funds or share a code. Binance says plainly that verification “does not grant authorization for any actions”. The scam is in the request, not the account name.
When the publisher table is out of date. Exchanges restructure, and the legal entity on a listing can change. The table above is a snapshot from one day; if your store shows a different name, check it before you assume either way.
When the fake is already on your phone. These tools check links and accounts. They cannot tell you whether an app you installed last month from somewhere else is genuine. If you are unsure, delete it, install from the store with the right publisher, and change your password and 2FA from the new install.
Common mistakes
Trusting the star rating and download count. Reviews can be bought and screenshots copied. The publisher line is the field that matters.
Expecting the publisher to be just the brand name. It is a legal entity, and it can differ between Apple and Google for the same exchange.
Installing an APK because the app “isn’t available in your country”. That message is the store telling you something true. A file from a website skips every check the store does.
Retyping a handle instead of copying it exactly. If you “correct” a zero to an O as you type, you check the real account, get a green tick, and walk away trusting the fake.
Answering “support” that found you first. Real support is reached from inside the app or the official site. Someone who messages you first about a problem you did not report is the problem.
Skipping the small test because the app looks perfect. A $10 round trip costs little. A fake that looks perfect is the one built well enough to take more.
Frequently asked questions
How can I tell if a Binance app is fake?
Check the publisher line on the store listing. On 5 October 2026 the official Binance app was published by Binance Switzerland AG on Apple’s App Store and by Binance Inc. on Google Play. Then confirm any link, email or support account through Binance Verify at binance.com/en/official-verification.
Is it safe to download a crypto exchange APK from a website?
It is the riskiest way to install one, because no app store has checked who published the file. If the official app is not in your country’s store, treat that as the exchange not being available to you there. Bybit’s Authenticity Check can test the page you downloaded from, but not undo an install.
Why can’t I find the official app in my App Store?
Exchanges remove listings in countries where they are not licensed. In our 5 October 2026 check, all three official apps were missing from the Philippine and Bangladeshi App Stores, OKX was missing in India and Indonesia, and Bybit in Singapore and Indonesia. Results with similar names in those stores are other apps.
Does a “verified” result mean the message is safe?
No. It means the account or website belongs to the exchange. Binance notes that verification does not grant authorization for any actions. A request to send funds, share a code or move coins to a “safe wallet” is a scam signal whoever appears to send it.