How To Find a Real or Fake Crypto Company
A guide about finding real versus fake companies
Investor Education Notice
Real or Fake?
How to Tell a Real Crypto Company from a Counterfeit One
Anyone can build a website that looks like a bank and a token that looks like a fortune. In crypto the polish is cheap and the transfer is final, so the work that protects you happens before you trust anyone with a cent. This guide shows you how to find a company, take it apart, and decide for yourself whether it is real, using the same checks a careful professional runs: the registry, the people, the website, the contract, the promises, and the record.
Public Education Advisory · Verify Before You Trust
The mindset: trust is verified, never assumed
A real company invites scrutiny and survives it. A fake one rushes you past it, with urgency, flattery, and a deadline. That single difference is the thread that runs through everything below. When someone needs you to act before you check, the need to hurry is the warning.
A real company can be checked. A fake one needs you not to.
Nothing here requires special tools or expertise. It requires the discipline to verify each layer in turn, and the patience to walk away when one of them fails. A single hard red flag, a contract you cannot sell out of, a demand to pay before you withdraw, ends the matter on its own, whatever else looks good.
Run the checks in order. Each one is cheap. Losing everything is not.
Legal existence: is the company even real?
Before anything else, find out whether a real, accountable entity stands behind the brand, or only a logo and a payment address.
A real business is registered somewhere, with a legal name and a number. Look it up in the official registry of the country it claims, and confirm the number resolves to this exact company.
If it claims to be regulated or licensed, that claim lives on the regulator's own public register. Verify the licence number there. An honest firm with no licence says so plainly.
Look for a verifiable business address that stays consistent everywhere it appears. Be wary of a virtual office, a prestige address shared by hundreds, or one that turns up on unrelated sites.
The legal entity, the website, the app, and the bank or payment details should all point to the same company. Mismatched names are a sign that one of them is borrowed.
The people: real names, real histories
Money is run by people. Find out who they are, and whether they exist as claimed.
Real founders have a past you can trace: prior roles, talks, writing, and colleagues who confirm them. Profiles that predate the project and connect to a consistent history are a good sign.
Drop each team photo into a reverse image search. Stolen faces, stock models, and AI-generated portraits fall apart the moment you do.
An anonymous team is not always a fraud, but anonymity paired with guaranteed profit and a request for your money is a combination to run from.
Fakes borrow credibility by listing famous advisors, partners, or backers. Check the claim from the other side; real partners confirm it, invented ones cannot.
The website: cloned, typosquatted, or genuine?
The website is the easiest thing to fake and the first thing you touch. Treat the address bar as the most important part of the page.
Know the official domain and reach it by typing it yourself. Compare it letter by letter; a single changed or added character is a different site with a different owner.
A site claiming a long, trusted history but registered weeks ago is lying about one of the two. A quick domain-age lookup often settles it.
HTTPS and the padlock only mean the connection is encrypted, not that the company is honest. Scammers get the padlock too. It is necessary, never sufficient.
The most dangerous fake is a pixel-perfect copy of a real site at a lookalike address, reached through an ad, email, or message. The look is identical; only the domain gives it away.
Look for genuine terms, a privacy policy, and a real way to reach a human, all consistent with the named company. Empty links and a lone contact form are warnings.
Most clone victims are delivered to the fake by a link in an ad, email, or DM. Bookmark the real site and use the bookmark. Never log in through a link someone gave you.
The same page, two different addresses. The clone copies every pixel; it cannot copy the domain.
Read the address like a forensic
The official domain, spelled exactly, with nothing added before the final '.com'.
Extra words bolted on. A real brand never needs 'secure', 'login', or 'verify' tacked onto its own name.
One letter is a look-alike from another alphabet. To the eye it is identical; it is a different site entirely.
The whitepaper and documentation
Documents reveal whether there is engineering behind the marketing, or only marketing.
Real documentation explains how the thing actually works, in checkable detail. Vague, buzzword-heavy text that avoids mechanism is hiding the absence of one.
A serious project states what can go wrong and what you can lose. Documents that promise only upside are selling, not informing.
Paste distinctive sentences into a search engine. Whitepapers copied word for word from other projects are common, and a clear sign of a shell.
No honest document guarantees returns. Where you see 'guaranteed', 'risk-free', or fixed profit, the rest of the page does not matter.
The smart contract: reading the code for traps
If a company sells a token or holds funds on-chain, the contract is the truth, above any promise on the website. You do not need to write code to spot the traps.
On the block explorer, a legitimate contract shows its verified source code. If the source is not published, you are trusting a black box; treat that alone as a serious warning.
Confirm any audit on the auditing firm's own website, matching the contract address, date, and scope. A logo with no report behind it means nothing.
Check who controls the contract and what they can do. Renounced ownership, or tightly limited powers, is far safer than an owner who can change the rules at will.
A honeypot lets money flow in and quietly blocks it from leaving, through a sell that always fails or a hidden allow-list. The funds go in and never come out.
A mint function with no cap lets the owner create unlimited new tokens at will, diluting yours toward zero in a single transaction.
A tax that reads as zero today can often be raised by the owner to near 100 percent, taking almost everything the moment you trade.
A blacklist or pause function lets the owner freeze chosen wallets, or all of them, so you cannot move your own tokens when it matters.
For a token, check that liquidity is locked. Unlocked liquidity lets the team withdraw the pool and vanish, the classic rug pull.
Reading the contract
Source verified on the explorer. Ownership renounced, liquidity locked. The rules are fixed and apply to everyone, including the team.
Source unverified, owner not renounced, liquidity not locked. Every highlighted line is a lever to take your money or trap it.
What each flagged line means
- 🚩Blacklist / block: the owner can freeze any wallet, including yours, so your tokens can be stopped from moving.
- 🚩Adjustable tax: a fee that looks like zero today can be raised to near 100 percent the instant you try to sell.
- 🚩Open mint: the owner can create unlimited new tokens at will, crushing the value of yours.
- 🚩Honeypot: the code lets you buy but blocks selling. Money goes in and never comes out.
The promises: how the math gives them away
Fraud has a shape, and it shows up in the numbers long before it shows up in the losses.
No real investment guarantees a return, because real markets carry risk. The word 'guaranteed' attached to profit is, by itself, proof you are being lied to.
A steady one or two percent a day, paid like clockwork regardless of markets, is the signature of a Ponzi: early exits are paid with later deposits until it collapses.
When the reward comes from bringing in other people, tiers, and downlines, you are looking at a pyramid. The product is the recruitment.
Countdown timers, 'limited spots', and pressure to deposit now exist to stop you checking. A real opportunity survives a night's sleep.
Reputation and regulators: what the record says
Other people and official bodies have often met this company already. Read what they found.
Financial regulators publish lists of firms they have flagged or warned about. Search the major ones for the company name before you act.
Search the company alongside 'scam', 'withdrawal', 'review', and 'fraud'. Patterns of people unable to withdraw are the loudest signal there is.
Fake reviews, paid promoters, and bot-filled chat groups manufacture trust. Weigh detailed, dated, critical accounts over a wall of identical five-star praise.
A track record that is long, public, and consistent is hard to fake. One that appeared last month, or changes its story, is not a record at all.
The contact and the trap
The final layer is how a company reaches out, and the single demand that unmasks the fraud every time.
No company, app, or support agent ever needs your recovery phrase or private keys. Anyone who asks is trying to empty your wallet, with no exception.
Real firms do not slide into your direct messages offering profit or help. 'Support agents' who DM you, often impersonating staff, are the attack itself.
You will never need to send crypto to an address to 'verify', 'unlock', 'activate', or 'sync' your wallet. That instruction exists only to take your funds.
A common scam shows fake profits, allows a tiny withdrawal to build trust, then demands a 'tax', 'fee', or 'deposit' to release the rest. That demand is the proof of fraud; paying it only invites more.
The red-flag matrix
The signals that actually expose a fake, what the fraud does, and the check that catches it. Learn the row, and you can read almost any company.
Score the company
Legitimacy Scorecard
Tick only what you have genuinely verified.
Be honest; an unchecked box is an unanswered question. The items marked Essential are the ones a single failure can sink you on, whatever the total.
A real company is built to be checked and is not afraid of the work. A fake one is built to be trusted quickly and to be gone before you look. Do the checking, in order, every time, and the counterfeit has nowhere left to hide.
EWC INVESTMENTS · INVESTOR EDUCATION
This guide is general educational information about identifying fraudulent cryptocurrency companies and projects. It is not financial, investment, legal, or security advice, and EWC Investments is not a financial adviser or a law firm. It names no real company, and nothing here is an accusation against, or an endorsement of, any specific business. Fraud tactics change constantly, and passing these checks is not a guarantee of safety. You alone are responsible for your own due diligence and decisions. Verify every company, website, contract, and claim independently, and never share your recovery phrase with anyone.
