
A convincing double
Everything matches except the two things that matter: the domain and where the deposit goes.
Gives it away: Confirm the domain before anything else.
Read the breakdown →Know the Scam is the fraud documentation project SimpleSwap publishes. This page arranges its patterns by the sequence an attack follows: how it reaches you, how it builds a reason, and what it finally asks for.
Read that way, the twelve patterns stop being a list to memorise and become three moments to recognise.
Six markers that show up whichever point of the sequence you are at.
Each links to its full write-up in Know Scam on the SimpleSwap blog.

Everything matches except the two things that matter: the domain and where the deposit goes.
Gives it away: Confirm the domain before anything else.
Read the breakdown →
The warning signs people learned to look for stopped appearing years ago.
Gives it away: Go there yourself rather than following a link.
Read the breakdown →
Weeks of attention, then a platform where balances rise and withdrawals fail.
Gives it away: Test the withdrawal early, not late.
Read the breakdown →
A fabricated clip of someone recognisable, promising to return twice what you send.
Gives it away: Legitimate offers never take payment first.
Read the breakdown →
They watch public channels and answer before the real team can.
Gives it away: Genuine help does not arrive unrequested.
Read the breakdown →
The purchase clears. The sale is blocked or the pool is drained first.
Gives it away: Look for other people's completed sales.
Read the breakdown →
Scripts promising rewards while collecting what they need to drain you.
Gives it away: Rewards do not require pasting code anywhere.
Read the breakdown →
An unexpected balance, a claim page, a signature, an empty wallet.
Gives it away: Do not touch what you did not request.
Read the breakdown →
What reads as a routine confirmation authorises ongoing token movement.
Gives it away: Know what you are approving, then revoke it later.
Read the breakdown →
Pending orders are public; bots arrange themselves around yours.
Gives it away: Slippage limits are the available control.
Read the breakdown →
An address matching yours at both ends, waiting to be copied from history.
Gives it away: Verify the characters between the ends.
Read the breakdown →
The address changes between the copy and the paste, silently.
Gives it away: Read the pasted value back in full.
Read the breakdown →Any other domain carrying the name is a copy, however exact the interface.
Logos, colours and layout clone in minutes. The domain does not.
HTTPS encrypts the connection. Phishing sites hold valid certificates too.
Standard swaps never require one, and never a seed phrase.
An account that contacts you first did not come from SimpleSwap.
Once confirmed there is no chargeback, so the check belongs before you send.
These condense the SimpleSwap Safety Academy, where each pattern carries current examples.