In this article
You spot a fake crypto OTC desk by checking it only through sources the desk does not control: a regulator's register, a company registry, a known custodian or bank, and references you find yourself. A genuine desk passes those checks without difficulty; an impersonator can only offer sources it controls, meaning its own documents, its own website and the contacts it supplies.
An OTC desk (over-the-counter desk) is a firm that buys or sells large amounts of crypto directly with a client, at a price quoted for that client, instead of through the public order book of an exchange. The business runs on bilateral trust: two parties agree a price by message or phone, then each sends its side. That is exactly why verification matters more here than on an exchange, where the venue stands between the two sides.
This article is written for the party doing the checking: a fund, a corporate treasury, a family office, a broker or a private holder dealing in size who has received an approach, or found a desk, and must decide whether the firm is what it says it is. It is general information and not legal advice; registration regimes differ from one country to the next.
FBI Internet Crime Complaint Center, 2024 Internet Crime Report. The figures cover every complaint involving cryptocurrency filed with the centre, not OTC trading alone.
What separates a genuine OTC desk from a fake one?
A genuine OTC desk can be confirmed through records it has no power to edit, and a fake one cannot. Every check in this article is an application of that single test: who controls the source that confirms the claim?
Sort every piece of evidence you receive into two piles. The first pile holds what the desk controls: its website, its pitch deck, a certificate of incorporation sent as a file, a licence shown as an image, a "compliance officer" introduced by the salesperson, a reference client whose phone number came from the desk, a screenshot of a wallet balance. The second pile holds what the desk does not control: the entry in a financial regulator's public register, the filing history at the company registry of the country of incorporation, the regulator's warning list, a bank or custodian that you contact through its own published switchboard, and people in your own network who have traded with the firm.
The test has a useful corollary. A real desk expects to be checked, because it runs the same checks on you. A regulated desk has to identify its clients, ask about the source of funds and keep records, so a counterparty that asks you nothing at all about who you are, while pressing you to send money, is behaving unlike the firm it claims to be.
What are the warning signs of a fake OTC desk, and how do you check each one?
The warning signs of a fake OTC desk are claims you cannot confirm independently, combined with pressure to send value before you have confirmed them. Each signal below is paired with the check that settles it, and none of the checks relies on anything the desk hands you.
| Signal | Why it matters | Independent check |
|---|---|---|
| A registration or licence is claimed | A licence number is easy to quote and easy to copy from a real firm | Search the regulator's public register yourself, by name and by number, and read the permissions listed |
| The name matches or resembles a real firm | Borrowing an established name transfers its reputation | Compare the legal name, registered address and number with the registry and the regulator's entry, letter by letter |
| Contact details differ from the official ones | A changed phone number or email is how a borrowed identity is operated | Use only the contact details shown on the regulator's register or the registry filing, never the ones in the approach |
| Pre-funding, or an upfront "release" or "compliance" fee | Value leaves you before anything is confirmed or delivered | Decline; ask for the fee to be netted from the trade and for the terms in a signed agreement |
| A price far better than the market | A real desk earns a spread; a large discount has no commercial reason | Ask two or three other desks for a quote on the same size at the same time |
| A small first trade is refused | A test trade is a routine control for a new relationship | Propose a small trade first and note the answer |
| The wallet address changes at the last minute | A late change is the classic sign of a redirected payment | Confirm any change by calling back a number you sourced yourself; otherwise do not pay |
| Communication only through chat handles | A handle proves control of an account, not membership of a firm | Ask for an email from the firm's verified address and a call to its registered switchboard |
Read the table as a set, not as a scorecard. One signal with an innocent explanation does not condemn a desk: plenty of small, real firms are informal, and some real desks do ask new clients to pre-fund. What settles the matter is the outcome of the independent check. A real desk that asks for pre-funding still appears on the register, still answers on its registered number and still accepts being verified. A firm that fails the independent check is not rescued by any amount of professionalism elsewhere.
Two of the signals deserve a note, because they are the ones where value actually leaves you. The upfront fee is described under many names: a release fee, a compliance fee, an anti-money-laundering deposit, a tax, an insurance premium, a wallet activation charge. The US Securities and Exchange Commission and the Commodity Futures Trading Commission, in a joint investor alert on fraudulent digital asset trading websites, describe this pattern as an advance fee fraud, in which the party is asked to pay a fee before receiving proceeds. The Federal Trade Commission's consumer guidance on cryptocurrency puts the general rule in one line: no legitimate business is going to demand that you send cryptocurrency in advance. Real costs exist in OTC trading, but they are set out in a signed agreement and are normally built into the quoted price or deducted from the proceeds.
The price signal is the other one. A desk quotes a price a little worse than the reference price for the client, and that difference, the spread, is how it earns its living. A desk that offers to sell well below the market, or to buy well above it, is offering to lose money on the trade. The joint alert of the two US agencies lists "too good to be true" among its warning signs, and the comparison is easy to make: a simultaneous quote from other desks tells you within minutes whether the price is plausible.
How are real OTC firms impersonated?
A real OTC firm is impersonated by borrowing its public identity and changing only the contact details. The name, the registered address and the registration number are genuine and belong to the real firm; the phone number, the email address and the wallet belong to someone else.
The UK Financial Conduct Authority calls this a clone firm and describes the pattern in its consumer guidance. According to the FCA, clone firms often use the name and address of a genuine firm, or copy its firm reference number; they may copy the website of an authorised firm while making small changes, for example to the phone number; and they use email addresses that look similar to the genuine firm's. The FCA adds a detail worth remembering: a clone may even claim that the firm's contact details on the register are out of date.
This is what makes the borrowed identity effective against an incomplete check. If you look up the number you were given, the register shows a real, authorised firm with a clean record. The check appears to pass. It has confirmed that the firm exists; it has not confirmed that the person writing to you works there.
The same method is applied to people. A named employee of a real desk, with a real professional profile, may be presented as your contact. The name checks out everywhere, yet the chat account or email address you are dealing with is not theirs. Verifying a firm therefore has two parts: that the firm is real and permitted to do this business, and that your contact is reachable inside that firm through a channel the firm itself publishes.
How do you defeat impersonation of a real firm?
You defeat impersonation by reaching the firm through contact details taken from the regulator's register or the company registry, and never through the details in the approach. If the person you have been speaking to is known at the number the regulator lists, the identity is confirmed; if not, the approach has failed.
The method is called a call-back, and it is the same control that banks and finance teams use before changing payment instructions. It has three rules.
- You source the number. Take the phone number and email address from the regulator's register entry or from the firm's filing at the company registry. The FCA's guidance is to check that the contact details listed for the firm match the ones you were given, and to contact the regulator if none are listed or if the firm says they are out of date.
- You place the call. A call that arrives "from the compliance department" a few minutes after you ask for one proves nothing. Hang up, and dial the number you sourced.
- You ask a closed question. Ask the switchboard whether the named person works there, whether the firm runs an OTC desk, and whether the firm uses the email address and the chat account you have been dealing with. Then ask them to confirm the settlement details through that channel.
Check the route to the register as well. The FCA warns that the address of the register page itself should be checked for small changes that would make it a copy. Reach a regulator's register by typing the regulator's name into a search engine and opening its official site, not by following a link sent by the desk.
A real firm treats a call-back as normal. Its own operations staff do the same to you before they send funds.
What is a step-by-step routine for verifying an OTC desk?
A routine for verifying an OTC desk has seven steps, done in order, before any money or crypto moves. The first three establish that the firm exists and is permitted to trade; the next three establish that you are really dealing with it; the last one limits what a mistake would cost.
- Write down the claimsRecord the legal name, country of incorporation, registration or licence number, regulator named, and every contact detail and wallet address given. You are going to test each line, so it must be fixed in writing first.
- Check the company registrySearch the official registry of the country of incorporation yourself. Confirm the legal name, the registered address, the date of incorporation, the directors and that the company is active. A firm incorporated a few weeks ago that claims a ten-year record has contradicted itself.
- Check the regulator's register and its warning listSearch the named regulator's public register by name and by number. Read which activities are permitted, since a firm can be registered for something other than what it is offering. Then search the same regulator's warning list for the name and its near variants.
- Call back on registered detailsTake the phone number and email address from the register or the registry, call the firm, and confirm that your contact works there and that the channel you have been using belongs to the firm.
- Find your own referencesAsk people in your own network, your custodian, your bank, your lawyer or your auditor whether they know the firm. A reference supplied by the desk belongs with the desk's own documents.
- Compare the price and read the termsRequest quotes for the same size from two or three other desks at the same moment. Ask for the terms of business in writing, including every fee, and confirm that no fee is payable before the trade.
- Start small and fix the detailsPropose a first trade small enough that its loss would not matter. Agree the wallet addresses and bank details in the signed terms, and treat any later change as a new verification to be confirmed by call-back.
The routine is the same for a desk you found and for a desk that found you, and it does not expire: repeat the call-back whenever a contact person, an email address or a settlement detail changes, even years into a relationship.
What do regulators and official bodies publish about fake crypto firms?
Regulators publish two kinds of record that matter for this check: registers of the firms they have authorised or registered, and warning lists of the firms and clones they have identified. Neither is complete, and both are free to search.
| Body | What it publishes | What it tells you |
|---|---|---|
| UK Financial Conduct Authority | The Financial Services Register, a list of registered cryptoasset firms, and a Warning List of unauthorised firms | Whether a firm is authorised or registered in the UK, its official contact details, and whether a warning names it or a clone of it |
| US Commodity Futures Trading Commission | Customer advisories on digital asset fraud and the RED List of unregistered entities | The patterns the agency sees and the entities it has listed as operating without registration |
| US Securities and Exchange Commission | Investor alerts, issued with the CFTC, and search tools for registered firms and individuals | Whether a firm or person is registered and whether a court judgment or order names them |
| US Federal Trade Commission | Consumer guidance on cryptocurrency and a fraud reporting service | Plain rules on upfront payments, guarantees and impersonation |
| FBI Internet Crime Complaint Center | An annual Internet Crime Report and a complaint service | The scale of reported losses and the channel for reporting a loss or an attempt |
| International Organization of Securities Commissions | An international alerts network gathering warnings from member regulators | A single place to search warnings issued in many countries |
Two cautions apply when reading these records. First, absence from a warning list is not a clearance. A list holds only the firms a regulator has already identified, and a new clone can operate for some time before anyone reports it. The positive check, the firm's presence on the register with matching contact details, is the one that counts.
Second, registration is not the same in every regime. In some countries a crypto firm is registered only for anti-money-laundering supervision, which means the regulator checks its controls against financial crime and does not vouch for its solvency or its conduct towards clients. In the United States, a business that exchanges or transmits virtual currency generally registers as a money services business with the Financial Crimes Enforcement Network, and that registration is not an endorsement of the business by a government agency. Read what the entry actually covers before treating it as assurance.
The scale of the problem is documented. The FBI's Internet Crime Complaint Center reports that it received 859,532 complaints of all kinds in 2024, with reported losses of $16.6 billion. Complaints involving cryptocurrency accounted for more than half of those losses by value, and investment fraud was the largest category within them. These figures count what victims reported to one agency in one country; they do not isolate OTC trading, and they do not capture what went unreported.
What does a check on a suspicious OTC approach look like in practice?
A check on a suspicious approach takes a few hours and usually fails at the call-back or at the price comparison. The following worked example is fiction, built to show what each check returns; no real firm is described, and the figures are illustrative.
A corporate treasury wants to buy $4,000,000 of bitcoin. Its treasurer receives a message on a professional network from a person who presents himself as a senior trader at an established trading firm with an OTC desk. He offers the full size at 3.0% below the reference price, which would save $120,000. He sends an onboarding pack carrying the firm's legal name, registered address and registration number. The conditions arrive two days later, on a chat application: the treasury must pre-fund the full amount to a wallet, and pay a "compliance release fee" of 0.5%, or $20,000, before the bitcoin can be released. The offer is said to expire the same evening.
The treasurer runs the routine and records each result.
| Check | Source used | What it returned |
|---|---|---|
| Company registry | Official registry, searched directly | The firm exists, active, incorporated many years ago; the name and address match the pack |
| Regulator's register | Regulator's site, searched by name and number | The firm is registered; the listed phone number and email differ from those in the pack |
| Warning list | The same regulator's list | A warning names a clone of this firm |
| Call-back | Phone number on the register | The switchboard does not know the trader by that name and says the desk never trades over the chat application used |
| Price comparison | Three other desks, same size, same hour | Quotes between 0.15% and 0.40% above the reference price, a cost of $6,000 to $16,000 |
| Test trade | A $10,000 first trade proposed | Refused: "minimum size is the full amount" |
Three points stand out. The first two checks would have passed on their own. The firm is real, long established and registered, and anyone who stopped at "the number is on the register" would have concluded that the approach was sound. The failure appears only when the contact details on the register are compared with those in the pack, and it becomes conclusive at the call-back.
The price told the same story independently. Three desks quoted a cost of $6,000 to $16,000 for the trade; the approach promised a gain of $120,000. A desk does not pay a new client to trade with it.
The test trade measured the exposure. A first trade of $10,000 is 0.25% of the intended size. The terms proposed instead would have put $4,020,000 at risk, the pre-funded amount plus the fee, before a single check had been passed. The treasurer stopped and reported the approach.
Which requests should stop an OTC trade outright?
Two requests should stop an OTC trade outright until they are resolved: a demand to send value before the counterparty is verified, and a change of settlement details that has not been confirmed by call-back. Every other signal calls for a check; these two call for a pause first and a check second.
The reason is that crypto transfers cannot be recalled. The Federal Trade Commission's guidance states that cryptocurrency payments typically are not reversible, and a wire to a bank account is difficult to recover once it has been withdrawn. A mistake about the counterparty's identity therefore has no second stage in which it can be corrected.
Pressure is the common thread. The joint alert of the two US agencies lists pressure to act fast among its warning signs, and it works because it removes the time in which the independent checks would be made. Build the pause into your own procedure so that no individual has to justify it under pressure: a rule that no first payment to a new counterparty is released without a recorded call-back, signed off by a second person, removes the decision from the conversation with the desk.
Once a counterparty has passed verification, the question of how the two legs are exchanged safely is a separate one, covering who sends first, whether an escrow agent or a custodian stands between the parties, and how each side confirms receipt. Verification comes before all of that: no settlement arrangement protects a party that has agreed terms with the wrong counterparty.
What should you do when an OTC desk fails verification?
When an OTC desk fails verification, stop the trade, send nothing further, keep every record, and notify the firm whose name was used together with the relevant regulator. If money or crypto has already been sent, contact your bank or the sending platform and law enforcement immediately, because speed is the main factor in any recovery.
Proceed in this order.
- Stop and say little. End the negotiation without explaining which check failed. You owe no explanation, and describing your controls serves no purpose.
- Preserve the evidence. Keep the messages, the email headers, the documents received, the phone numbers, the chat handles, the wallet addresses and your own check file with its dates. Do not delete the conversation.
- Secure your own side. If you shared identity documents, account details or signatory information during onboarding, tell your bank and your custodian, and review access to the accounts concerned. If anyone installed software or opened a file at the desk's request, involve your security team.
- Tell the real firm. If a genuine firm's name was used, inform it through its registered contact details. Firms want to know that their name is being borrowed, and many publish their own notices.
- Report to the regulator. In the UK, the FCA asks that suspected clone firms be reported to it, and it publishes the warnings that result. In the United States, the Federal Trade Commission's guidance lists four channels: its own fraud reporting service, the CFTC's complaint form, the SEC's tips and complaints form, and the FBI's Internet Crime Complaint Center. Elsewhere, report to the national financial regulator and the national fraud or cybercrime reporting service.
- If value has left, act the same day. Call your bank's fraud team about any wire, tell the exchange or custodian that sent the crypto, and file a report with law enforcement. The FBI's 2024 report notes that its process for freezing funds works best when complaints are filed as quickly as possible.
Reporting a failed approach matters even when you lost nothing. Warning lists are built from reports, and the entry that a later treasurer finds in a regulator's list exists because someone who was approached earlier took ten minutes to file it.
