My savings disappeared after 'migrating' them on a fake exchange site. Is it all gone?

asked 22d ago16 views39 answers
0

Ok, so I'm really panicking here. I got an email, looked pretty legit, saying my old crypto exchange was 'migrating' to a new, improved platform and I needed to transfer my funds over by a certain date or they'd be locked. I usually don't fall for this stuff but it had my name, my old exchange account details, everything looked spot on. They had a link, I clicked it, logged in, and followed the steps to 'migrate' my USDT and some ETH to this 'new' platform. It looked just like the old one, but slicker.

Now, a week later, I try to log in and the site is gone. Just completely gone. My original exchange account shows zero balance too. I tried contacting support for both the old and 'new' one, nothing. Did I just get totally scammed? Is there literally any way to trace this? I'm in Toulouse, and this was a significant chunk of my savings. I feel so stupid right now.

39 Answers

47

Louise, I hear your distress, and I'm really sorry this happened. It's a classic phishing and fake exchange scam, designed to look incredibly convincing. The fact they had your details means there was likely a data breach somewhere or they bought lists. When you 'migrated' your funds, you actually sent them directly to the scammer's wallet.

First step, you absolutely need to trace those transactions. Use a blockchain explorer for USDT (TRC20/ERC20) and ETH. Look at the transaction hash from your old exchange or wallet (if you have it) and see where the funds went. If it went to an address and then immediately moved to another, that's typical. This is where tools like TRM Labs come in; they do deep chain analysis. However, unless the funds landed on a regulated exchange like Kraken that requires KYC, your chances of getting them back directly are very slim. Report it to your local police in France, and also check if the CFTC or FTC have a reporting portal for international victims. The FBI IC3 is also an option, even for non-US citizens, as these scams often operate globally. Be wary of anyone offering 'crypto recovery services' that ask for an upfront fee; they are almost always a second scam.

Ahmed Sheikh · Abu Dhabi, UAEanswered 22d ago
23

Ugh, this sucks, I'm so sorry. I fell for something similar, but it was a fake DeFi staking platform. They sent me to this 'new dApp' and I connected my MetaMask. Within minutes, my USDT and some WETH were gone. Just poof. My stomach dropped right through the floor. I tried tracing it on Etherscan, saw it went to some address and then to another and then split up into smaller amounts. It was like watching my money vanish in real-time. I reported it to the Gardaí here in Ireland, and they just gave me a crime reference number. Said there's not much they can do unless the funds land on a KYC'd exchange. It's soul-crushing, I know. Hope you have better luck than I did, but mentally prepare for the worst.

Cian Ryan · Waterford, Irelandanswered 22d ago
18

Honestly, Louise, I'm not gonna sugarcoat it. If the site is gone, your money is very likely gone too. These 'migration' scams are designed for exactly that – to get you to willingly send your crypto to their wallets. The fact they had your old exchange details is super concerning though; sounds like a serious data breach on the original platform or a very sophisticated phishing attempt. Tracing on the blockchain is possible, yeah, but unless it hits a centralized exchange where they can freeze funds (which is rare), it's just gonna be a trail of numbers to nowhere. File a police report, sure, but keep your expectations low. Sorry to be blunt, but that's usually the reality of these things.

Michael Wolf · Stuttgart, Germanyanswered 22d ago
35

Oh wow, Louise, I literally had almost the exact same thing happen last year. Mine was a fake 'customer support' for a wallet I used. They convinced me my funds were 'at risk' and I needed to transfer them to a 'secure address' they provided. I was half-asleep, it was late, and I just followed instructions. Lost about 4k CAD. The shame was the worst part, like, how could I be so dumb? I reported it to the RCMP here and also IC3 (even though I'm Canadian, they do take international reports sometimes). They both basically said the same thing: super hard to recover once it's off your wallet and gone through a mixer or to an unregulated exchange. Just wanted to say you're not stupid, these scammers are really good at what they do. They prey on panic and urgency.

Amelia MacDonald · Edmonton, Canadaanswered 22d ago
29

This is so common, Louise. The same thing almost happened to my friend with CoinEgg, but she smelled a rat at the last minute. They sent her a link that *looked* just like the official CoinEgg site (which is already a known scam platform lol, but she didn't know that then), asking her to 'verify her withdrawal address' by sending a small amount of crypto. Luckily, she called me before doing it. The level of detail these scammers put in is insane. They mimic official comms perfectly. The best you can do is trace it and report it to every authority you can think of. Sometimes if it lands on a major exchange that *does* cooperate with law enforcement, there's a tiny, tiny chance. But don't count on it. And please, please ignore all those 'recovery hackers' that will inevitably message you now.

Layla Al Mansoori · Ras Al Khaimah, UAEanswered 22d ago
12

I really feel for you, Louise. It's a horrible feeling. This is a classic 'advance fee' scam, even though you didn't pay an 'advance fee' directly, you advanced your *own crypto* to them under false pretenses. The immediate disappearance of the site is a huge red flag – they set it up just long enough to collect funds. The chances of getting it back are very, very low once it leaves your control, especially for an 'unregulated' coin like USDT often gets moved around. Don't fall for the next wave of scammers who will contact you promising to 'hack' it back for a fee. They're just preying on your desperation. Focus on securing *all* your other accounts now, especially if they had your email and old exchange details. Change passwords everywhere.

Noor Al Suwaidi · Dubai, UAEanswered 22d ago
15

Agreed with everyone else, this is a terrible situation, and it really highlights how sophisticated these phishing attacks have become. The fact they had your old account details is *very* worrying. This means they either compromised your email, or the original exchange had a data leak. You need to assume *all* your online accounts associated with that email and password combination are compromised. Change every password, enable 2FA on everything. As for the crypto, I'm afraid it's highly unlikely you'll see it again. Once it's off to a scammer's wallet, it's typically moved through mixers or to offshore exchanges instantly. The best recovery is usually prevention – always double-check URLs, especially from emails. Use a bookmark, never click links.

Grace Botha · Durban, South Africaanswered 22d ago
9

Aw man, that's rough. I know it sounds like a broken record, but you absolutely have to assume any email or message asking you to click a link for crypto stuff is a scam. ALWAYS go directly to the official website by typing the URL yourself or using a trusted bookmark. It's a hard lesson, but scammers are relentless. They'll create perfect replicas of websites, including login pages. Your funds, if they left your wallet, are almost certainly gone. The blockchain is transparent, yeah, but anonymity means you're just watching your money fly into the void. It's a tough pill to swallow, but I'd advise against sinking more time or money into 'recovery' services. Learn from it and move on, as hard as that sounds.

Sophie Richter · Dusseldorf, Germanyanswered 22d ago
6

This is exactly what happened to my uncle in Laval, only it was a fake 'investment opportunity' email. They had all his banking info, it looked so real, like it was from his bank even. He clicked, 'invested' what he thought was spare cash, but it was his savings. Poof. Site disappeared a week later. The police here, Québec police, they didn't really have much to go on. They said because it was crypto and untraceable, it's a dead end. He lost about 10k euros worth of crypto. I'm so sorry, Louise, it feels like the whole world is just full of people trying to trick you. Don't beat yourself up too much, these people are pros at manipulation.

Mia Fortin · Quebec City, Canadaanswered 22d ago
31

Ugh, sorry to hear this. I had a similar scare with a fake Trust Wallet update. Clicked a link, went to a very convincing site, entered my seed phrase (rookie mistake, I know!), and *just* as I hit submit, my gut screamed. Luckily, I had only a small amount on that wallet at the time. I quickly moved the rest to a different, newly created wallet before they could drain it. It's horrifying how real these things look. For you, since the funds are already gone and the site is down, the chances are incredibly slim. The best you can do is report it and help warn others. And yeah, ignore anyone claiming they can get it back for a fee. That's just throwing good money after bad. It's a hard lesson, but you're not alone.

Leon Neumann · Munich, Germanyanswered 22d ago
7

This sounds like a classic phishing attack disguised as an exchange migration. The real exchange likely would have handled this differently, probably through their actual platform interface or a verified email with a link directly to their domain. The fact that the fake site mimicked the old one *and* disappeared is a huge red flag. Unfortunately, once crypto is sent to an address controlled by scammers, recovery is exceedingly difficult. You can report this to the FBI's Internet Crime Complaint Center (IC3) but tbh, don't hold your breath for recovery.

Jonas Hoffmann · Berlin, Germanyanswered 22d ago
5

Man, I feel for you. I was in a similar boat a few years back, lost about 2 grand trying to 'upgrade' my wallet. They had me download some dodgy app. Took me months to even accept I was fully played. The best advice I got was to just cut my losses, learn from it, and start fresh with security paranoia turned up to eleven. Keep your keys offline, use hardware wallets, and never click on unsolicited links. It sucks, I know.

Lucas MacDonald · Montreal, Canadaanswered 22d ago
6

This is precisely how they get people. The 'migration' scam is super common. They pray on FOMO and the fear of losing access to your funds. Always, always verify the URL. Even if it looks right, type it in manually. Official communications from legitimate exchanges will almost never pressure you into a quick transfer via a link. Check the email sender address with extreme scrutiny. They can fake the display name easily.

Tyler Williams · New York, USAanswered 22d ago
4

Oh no, this is awful. That email sounds like it was crafted to exploit your trust. Legit platforms usually have very clear, stepwise instructions *within* their existing interface, or they communicate via official announcements on their site and social media, not a direct email link to 'migrate'. The disappearance of the site is the nail in the coffin. I'd recommend reporting it to the FTC as well, just so they have data.

Megan Miller · Atlanta, USAanswered 22d ago
8

This is textbook social engineering. The attackers are sophisticated. They gain information about you (likely from previous data breaches or publicly available info) to craft a convincing narrative. The key is *never* to trust an unsolicited email or message asking you to act immediately regarding your funds. For any exchange or wallet service, always go directly to their official website by typing the URL yourself. If you need to verify something, log into your account *separately* through the official site and look for notifications there. TRM Labs often publishes reports on these kinds of attacks.

Yusuf Al Falasi · Ras Al Khaimah, UAEanswered 22d ago
5

Heartbreaking to read this. These scammers are getting bolder. It's like they know exactly what to say. The fact that the fake site looked slick makes it even more deceptive. What you've described is a very common phishing tactic. My own crypto journey started with a similar scare, but thankfully I caught it before I moved anything. I ended up calling my bank, just to be safe, though they couldn't do anything for crypto.

Noah Jones · Hobart, Australiaanswered 22d ago
6

Wait, 'migrating' your funds *to* a new platform? That doesn't make sense. Usually, if an exchange is migrating, they'd do it server-side, or they'd provide instructions within your *existing* account dashboard to link to the new one, not make you send your assets away. Why would they ask you to move your crypto to an entirely different (and unknown) site? Always question requests that seem illogical, even if they look official.

Charlotte Wood · Leeds, United Kingdomanswered 22d ago
7

Je suis désolée pour toi. Losing savings is devastating. I also got an email like that a few months ago, but it was for my old MetaMask account. It looked so real, I almost clicked. I remember thinking, 'Why would they ask me to move my ETH?' That doubt saved me. I went to the MetaMask website directly and there was no mention of any migration. These scammers are really good at playing on our fears. You are not stupid; they are just very devious.

Alice Petit · Montpellier, Franceanswered 22d ago
8

This is crushing. I had a similar scare last year with an email claiming my Kraken account was compromised and I needed to 'verify' it by clicking a link. The link took me to a page that looked *exactly* like Kraken's login. I nearly put my 2FA code in, but paused. I remembered my spouse saying something about never trusting login links from emails. So I closed it and went to Kraken directly. It was a phishing attempt. You did everything right initially by checking the details, but they made it look too convincing. So sorry this happened.

Sarah Martinez · Boston, USAanswered 22d ago
5

Oh dear, that is truly terrible news. I hope you are okay. It takes a lot of courage to share this experience. Please be kind to yourself. You acted on what appeared to be legitimate information. These scams are designed to trick even experienced users. Consider reporting this to the relevant authorities in France, perhaps the AMF, and also the FBI IC3. Every report helps build a picture of these criminal activities.

Fatima Al Maktoum · Al Ain, UAEanswered 22d ago
7

This happened to a friend of mine too, but with a supposed 'wallet upgrade'. They sent him to a site that looked like Trust Wallet. He lost nearly everything. He felt so foolish, but honestly, these people are pros. The fact that the site vanished is the biggest giveaway. My advice? For any crypto transaction, always double, triple, quadruple check the URL. And if it feels even slightly off, just stop. Don't move forward. It's better to miss out on a fake opportunity than to lose your real money.

Emma Dubois · Nantes, Franceanswered 22d ago
8

This is exactly the kind of attack that the CFTC warns about. They're phishing for credentials and then initiating fraudulent transactions. The problem with crypto is that it's largely irreversible once sent. The 'new platform' was likely just a front to collect funds. Always, always, *always* go to the official website of your exchange or wallet provider by typing the URL yourself. Don't rely on emails or search engine results. Never share your private keys or seed phrases. Report this to the authorities, even if recovery is unlikely.

Grace Walsh · Limerick, Irelandanswered 22d ago
6

Ugh, the 'migration' scam. I've seen this one a lot. They create a near-perfect replica of a known exchange's website. They get your login details and then you're essentially giving them the keys to your funds. The fact that both your original account and the fake site are now dead ends points to a complete rug pull. I'd suggest checking blockchain explorers to see if you can trace the USDT/ETH movement, but honestly, it's usually sent through mixers or converted to privacy coins very quickly.

Mia Fortin · Calgary, Canadaanswered 22d ago
7

Oh, that's terrible! You are definitely not stupid, these people are very clever. They play on urgency and trust. My sister almost fell for one like this last year. The email looked so official! But she stopped because she remembered a podcast talking about how scammers impersonate legitimate companies. She said she'd rather miss out on a fake opportunity than risk her money. Always trust your gut instinct, even if you can't immediately pinpoint why something feels wrong.

Eva de Vries · Tilburg, Netherlandsanswered 21d ago
5

I'm so sorry this happened to you. It's a devastating experience. The details you provided – the convincing email, the slick fake site, the disappearance – are classic hallmarks of a well-executed scam. It's really tough when your savings are involved. Please try to take care of yourself. You did your best with the information you had. The best thing now is to learn from this and be extra vigilant going forward.

Ryan Thomas · Atlanta, USAanswered 21d ago
7

This is disheartening. The crypto space, unfortunately, attracts these bad actors. The 'migration' ploy is particularly insidious because it implies a necessary action related to your existing assets. A key takeaway here is that legitimate financial institutions rarely ask for fund transfers via unsolicited emails. If you ever have doubts about an email or a website, always contact the company directly through official channels you've found independently (not from the suspicious email itself).

Brandon Jackson · Minneapolis, USAanswered 21d ago
6

This is a painful lesson, but a valuable one. The criminals exploit the trust people place in official-looking communications. The fact that the original exchange account is also showing zero balance suggests they might have gained access to that too, perhaps through compromised credentials or by tricking you into providing them. For future reference, many security firms like TRM Labs provide analyses of common scam vectors. It's worth reading up on their reports.

Khalid Iqbal · Sharjah, UAEanswered 21d ago
5

Oh dear, that's rough. I had a similar scare with a fake email about my old CoinEgg account. It looked so convincing! But I remembered my friend telling me to *always* check the domain name very carefully. The fake one had a slightly different spelling. I didn't click, but it made me realize how easy it is to be fooled. Hang in there, and try to learn from this difficult experience.

Joshua Ong · Singapore, Singaporeanswered 21d ago
6

So sorry to hear this happened. It's a really common scam, unfortunately. They're very good at making fake sites look legitimate. The best defense is always extreme caution. Never click links in emails related to your finances. Always go directly to the website yourself. This is the most basic but effective rule in the crypto world. Take it easy, and hopefully, you can recover from this setback.

Oliver Nguyen · Melbourne, Australiaanswered 21d ago
7

This is a brutal reminder of the risks in the crypto world. The attackers leveraged your assumption that the email was legitimate and the migration process was standard. The crucial point is that if an exchange is migrating, the process should be initiated and controlled *by* the exchange *within* your existing account interface, not by you sending funds to a new, external site. Report it to IC3, but be prepared for the long haul. Stay safe out there.

Joshua Koh · Singapore, Singaporeanswered 21d ago
5

Oh man, that sounds like a textbook phishing scam disguised as a platform migration. The fakes are getting so sophisticated, using personalized info to look legit. They probably spoofed the email address and cloned the old exchange's look-and-feel. When you 'migrated' your funds, you actually sent them directly to the scammers' wallet, not a new exchange. The fact that both the 'new' site and your old account are showing zero balance is a bad sign. Reporting it to the FBI's Internet Crime Complaint Center (IC3) is a good next step, though recovery is rare with crypto scams like this. Don't blame yourself too much, they’re designed to trick people.

Eva Mulder · Nijmegen, Netherlandsanswered 21d ago
7

I feel you. I lost a good chunk last year to something similar. They convinced me I needed to update my wallet to a 'secure' version. The site looked legit, exactly like my Trust Wallet interface. Poof. Gone. All of it. I was sick for weeks. All I could do was report it to IC3 and my local police, but tbh, I never saw a cent back. The best thing you can do now is get that report filed and maybe check if your bank has any recourse if you used a card or transfer for any part of it, though unlikely with crypto. Keep your original exchange credentials super secure, maybe even change passwords there if you still have access to anything.

Olivia Pretorius · Port Elizabeth, South Africaanswered 21d ago
4

Hmm, a 'migration' email with a link to a *new* site? That's already a red flag for me. Why wouldn't they just auto-migrate or use official channels? And the original account showing zero balance too? Usually, if a platform is migrating, your funds are still viewable on the old one until the switch is fully complete. Seems like they just drained it immediately. Did you verify the URL of the 'new' site independently? Like, not from the email link itself, but by typing it directly into your browser after looking it up on a trusted crypto news site or forum? It’s so easy to get duped.

Ling Yeo · Singapore, Singaporeanswered 21d ago
3

That's a rough situation, mate. Really sorry to hear it. These scam artists are getting bolder. It’s understandable how you could get caught out when it looks so real and has your details. Don't beat yourself up over it. You did the right thing by trying to contact support, even though it didn't help. The important thing now is to learn from it and try to secure what you can. Reporting to IC3 is a solid move. Maybe also check out some crypto security forums? Sometimes people share tips on tracking stolen funds, though it's a long shot.

Sipho Kruger · Johannesburg, South Africaanswered 21d ago
6

Oh no, that's heartbreaking. I had a scare like that a few months ago. Got an email claiming my MetaMask needed an urgent update via a link. My heart was pounding. I almost clicked it, but then I remembered my spouse telling me to *always* double-check the sender's email address for slight misspellings and to *never* click links in emails for financial stuff. I went to the official MetaMask site directly instead and found no such urgent update. Dodged a bullet, I guess. It's so easy to fall into these traps when you're stressed or rushed. You're not alone in this experience.

Olivia Davies · Brighton, United Kingdomanswered 21d ago
4

Seriously gutted for you. Those phishing emails are getting incredibly sophisticated. They use information that makes it seem so plausible. I once got a fake email from what looked like Kraken support asking me to verify my account, with a link to a clone site. I nearly went for it, but I remembered my mate telling me about something similar. He said if you're ever unsure, always go to the official website directly by typing the URL yourself, don't click any links in the email. I checked Kraken’s official site, and sure enough, no such verification request was happening. It’s a small step, but it can save your bacon.

James Walsh · Waterford, Irelandanswered 21d ago
3

The fact that the original account *also* shows zero balance is super suspicious. If it was a genuine migration, your funds should still be visible on the old platform until the process was finalized. It sounds like the 'migration' was just a fancy word for 'transfer to scammer wallet.' Did you check the transaction history on the blockchain for your crypto? You can usually do this with the wallet addresses if you can find them anywhere (maybe in the email?). Even if you can't get the money back, seeing where it went can be... enlightening. Probably best to file a report with the FBI IC3 though.

Joshua Chan · Singapore, Singaporeanswered 21d ago
5

Man, that’s rough. I had a similar situation where someone convinced me to send crypto to a supposed 'investment manager.' They promised insane returns, showed me fake screenshots of profits. It looked so real. I sent a small amount first, which they sent back with 'profits.' Then I sent a bigger chunk... and they vanished. Gone. Took me months to even admit to myself I’d been scammed. I’ve since set up two-factor authentication on *everything* and I never click links in emails anymore. Always go direct. It's a hard lesson, but you learn fast. Try filing with IC3.

Brian Williams · Austin, USAanswered 21d ago
4

It's a really common scam vector, the fake migration. They prey on people's fear of missing out or losing access to their funds. The personalized details are designed to build trust quickly. When you logged into that fake site, you essentially gave them the keys to your crypto. I've heard of people trying to trace funds using services like TRM Labs, but honestly, once it's in a scammer's wallet and mixed, it's almost impossible to recover, especially if it's moved across different blockchains. The best advice I can give is to report it to the authorities, like the FBI IC3, and then focus on securing your other accounts with strong, unique passwords and multi-factor authentication.

Oliver Walker · Sydney, Australiaanswered 21d ago

Your answer

You'll be asked to sign in to post.