[WARNING] exch2.cx is an imposter site! (copycat)

[Trêvoid]

A new fraudulent website, exch2.cx, has emerged!



exch2.cx is an imposter site (https://archive.is/Rk166) mimicking the legitimate exch.cx (which is shut down by German authorities) If you encounter exch2.cx, avoid interacting with it! Always verify the domain and legitimacy of any crypto platform before engaging.

Note:

Always double check URLs for subtle differences (example, exch2.cx vs. exch.cx) to avoid imposter sites.
Avoid downloading wallet softwares or updates from unofficial sources or links.

Domain Name: exch2.cx

Registry Domain ID: 2062183-CoCCA
Updated Date: 2025-05-12T12:04:14Z
Creation Date: 2025-05-07T10:46:03Z
Registry Expiry Date: 2026-05-07T10:46:06Z
Registrar Registration Expiration Date: 2026-05-07T10:46:06Z
Registrar: CentralNic Ltd
Registrar Street Address: 35-39 Moorgate London EC2R 6AR
Registrar Country: GB
Registrar Phone: +44 (0)20 33 88 0600
Registrar Fax: +44 (0)20 33 88 0601
Registrar Email: registry@key-systems.net
Registrar Abuse Contact Email: abuse@key-systems.net
Registrar Abuse Contact Phone:
Domain Status: active https://icann.org/epp#active
Registry Registrant ID: 1866066-CoCCA
Registry Admin ID: 1866066-CoCCA
Admin Street: Arthur L. Evelyn Building
Admin City: Charlestown
Admin State/Province: Charlestown
Admin Postal Code: KN0802
Admin Country:
Registry Tech ID: 1866066-CoCCA
Tech Street: Arthur L. Evelyn Building
Tech City: Charlestown
Tech State/Province: Charlestown
Tech Postal Code: KN0802
Tech Country:
Registry Billing ID: 1866066-CoCCA
Billing Street: Arthur L. Evelyn Building
Billing City: Charlestown
Billing State/Province: Charlestown
Billing Postal Code: KN0802
Billing Country:
Name Server: ns3.administers.net
Name Server: ns4.administers.net

I want to make sure everyone is informed and protected from getting scammed.

[Oshosondy]

The original site which is exch.cx has been shut down but scammers are still have similar domain of the site to scam people. Thanks for posting about this but it will be good if the scam site is reported. I hope you follow what is on the eXch Anti-Phishing Campaign]other thread and I hope many people will report the site also so that it can be taken down.

[CryptSafe]

You have done well by bringing this up here to the knowledge and awareness of the community, and I believe seeing this would make members take caution, and also inform other members to take caution whenever they come across this website. I am not surprised seeing that scammers will be quick to act this way because they already know the real exch already shut down its operation, and many people who have no idea would think that this is their new site, so they would be quick to use the services unknown to them that they are scammers.With the link provided by Oshosondy, members  can see where to report them to  so that the site will be taken down immediately to prevent any occurrences in the near future.

[Trêvoid]

The original site which is exch.cx has been shut down but scammers are still have similar domain of the site to scam people. Thanks for posting about this but it will be good if the scam site is reported. I hope you follow what is on the eXch Anti-Phishing Campaign]other thread and I hope many people will report the site also so that it can be taken down.

I have already emailed several scam reporting sites and shared the information on eXch Anti-Phishing Campaign thread.

I want to make sure everyone is informed and protected from getting scammed.

[coupable]

The original site which is exch.cx has been shut down but scammers are still have similar domain of the site to scam people. Thanks for posting about this but it will be good if the scam site is reported. I hope you follow what is on the eXch Anti-Phishing Campaign]other thread and I hope many people will report the site also so that it can be taken down.

I suggest adding this new domain to the list of phishing domains in that thread for reporting to the host and domain service provider. I remember that the exch team had offered a generous reward for each domain shut down, and the community actually succeeded in shutting down some domains, and first batch of the rewards has been sent.

OP, thank you for sharing these important notes. I've been reading your posts for a while and appreciate everything you do as a good forum user to help the community. Keep up the good work.

[Trêvoid]

The original site which is exch.cx has been shut down but scammers are still have similar domain of the site to scam people. Thanks for posting about this but it will be good if the scam site is reported. I hope you follow what is on the eXch Anti-Phishing Campaign]other thread and I hope many people will report the site also so that it can be taken down.

I suggest adding this new domain to the list of phishing domains in that thread for reporting to the host and domain service provider. I remember that the exch team had offered a generous reward for each domain shut down, and the community actually succeeded in shutting down some domains, and first batch of the rewards has been sent.

OP, thank you for sharing these important notes. I've been reading your posts for a while and appreciate everything you do as a good forum user to help the community. Keep up the good work.

Thank you @coupable for your words! Unfortunately, scammers are everywhere and constantly come up with new tactics.

That’s why it’s so important for us to stay vigilant and keep each other informed on everything. I do my best to contribute, and I hope it helps everyone stay safe.

[albon]

I found someone on their private Telegram group saying, "Please don’t shut down your service again, I don’t know what to do without you guys." It’s clear that there are still some naive people or others who are simply not aware that the exch service has officially ended. Alternatively, this comment might have been written by the team behind the scam domain to deceive people into thinking the service is still active under a different domain. Unfortunately, many will lose their money because of these shameless scammers.

It is the responsibility of each of us to expose and report any scheme that could harm investors and the crypto community whenever we come across it, and to raise awareness about it. Well done, OP.

[Trêvoid]

I found someone on their private Telegram group saying, "Please don’t shut down your service again, I don’t know what to do without you guys." It’s clear that there are still some naive people or others who are simply not aware that the exch service has officially ended. Alternatively, this comment might have been written by the team behind the scam domain to deceive people into thinking the service is still active under a different domain. Unfortunately, many will lose their money because of these shameless scammers.

It is the responsibility of each of us to expose and report any scheme that could harm investors and the crypto community whenever we come across it, and to raise awareness about it. Well done, OP.

Thank you!

I have reported phishing site to here, https://safebrowsing.google.com/safebrowsing/report_phish/

Status of submission
Submission was successful.

[Zwei]

to add to the OP, this website is listed on kycnot.me as a scam.
apparently they "Uses a single fund address, tracks and shares user IP geolocation with crypto addresses on their Telegram group, and order URLs disappear once the transaction is completed."

https://kycnot.me/service/exch2cx


so much for claiming to have a strict no-log policy, lol.

I suggest adding this new domain to the list of phishing domains in that thread for reporting to the host and domain service provider. I remember that the exch team had offered a generous reward for each domain shut down, and the community actually succeeded in shutting down some domains, and first batch of the rewards has been sent.

besides piggybacking on eXch name and reputation, it's not exactly a phishing website per say, so that approach won't really work to get it shut down.
but they for sure should not be trusted with a single sat.

[Moreno233]

When will this scammers stop riding on the reputation of exch? I thought that the shutting down of exch services will mark an end to these scam websites but it seems that is not happening.  Its just a shame that some registrars do not verify the activities of their client, neither do they care about maintaining any form of reputation else a single report of these scam sites is enough for them to investigate and ban these fraudulent domains.

[Woodie]

First it was the phishing websites now this , I don't get it why would someone want to ride on the success of another brand...unless the traffic is still good and people aren't aware that the original genuine business is gone

Btw not really a carbon copy of the original eXch but you can tell that 95% of this is from the closed down business. And why would someone want to still ride on the success of another business which is on record that they closed and in the unfortunate circumstances lost millions when server was seized by the German authorities  🚨. Anyway their funeral awaits...

[Trêvoid]

When will this scammers stop riding on the reputation of exch? I thought that the shutting down of exch services will mark an end to these scam websites but it seems that is not happening.  Its just a shame that some registrars do not verify the activities of their client, neither do they care about maintaining any form of reputation else a single report of these scam sites is enough for them to investigate and ban these fraudulent domains.

Scammers wont stop, and always coming with new thing. Thats the important for us to stay vigilant and keep each other informed. As you can see there are users on their telegram channel which really believes that , they are exch. We need to make them aware.

[Pmalek]

I suggest adding this new domain to the list of phishing domains in that thread for reporting to the host and domain service provider. I remember that the exch team had offered a generous reward for each domain shut down, and the community actually succeeded in shutting down some domains, and first batch of the rewards has been sent.

The real team from eXch is the only one that can make the decision of adding a new phishing site to the campaign and have people report it but they seem to have disappeared from the forum.
Regarding the rewards and taking down phishing sites. The domains you report have to be approved by eXch. You can't take down any one you find and expect a reward. eXch has made it clear that only those sites on the list should be targeted and are part of the campaign. Also, two batches of rewards were paid and I think that's it.

[Trêvoid]

I suggest adding this new domain to the list of phishing domains in that thread for reporting to the host and domain service provider. I remember that the exch team had offered a generous reward for each domain shut down, and the community actually succeeded in shutting down some domains, and first batch of the rewards has been sent.

The real team from eXch is the only one that can make the decision of adding a new phishing site to the campaign and have people report it but they seem to have disappeared from the forum.
Regarding the rewards and taking down phishing sites. The domains you report have to be approved by eXch. You can't take down any one you find and expect a reward. eXch has made it clear that only those sites on the list should be targeted and are part of the campaign. Also, two batches of rewards were paid and I think that's it.

Hi, i want to clarify that my intention is not to receive rewards from eXch or in their campaign. My main goal is to warn users about potential exch2 phishing site so they do not get scammed or lose their funds.

[examplens]

This cannot be called a phishing site, because the design is completely different from the original exch. The report of phishing has no basis except for a very similar domain.
The domain was registered very soon after eXch was closed. It is quite possible that phishing was planned, but the BKA and FIOD process disrupted the plans, and scammers do not want to take such a risk.

Scammers wont stop, and always coming with new thing. Thats the important for us to stay vigilant and keep each other informed. As you can see there are users on their telegram channel which really believes that , they are exch. We need to make them aware.

That the scammers are following what is happening here is their obvious reaction on Telegram. 

[nutildah]

Yeah, definitely pretty lame. eXch had close to 10 years of experience and reputation under their belt, even if they weren't very popular for the first half of their existence. So like a new darknet market copying the name of an older market with a "large" reputation, the new exchanger begins fresh with a new reputation, meaning basically nobody should trust it at first, and nobody should trust it fully for a good 5 years or so. Don't have high hopes for this one.

[coupable]

This cannot be called a phishing site, because the design is completely different from the original exch. The report of phishing has no basis except for a very similar domain.
The domain was registered very soon after eXch was closed. It is quite possible that phishing was planned, but the BKA and FIOD process disrupted the plans, and scammers do not want to take such a risk.

Does this mean that the domain name cannot be reported since it was recently acquired and no one has reported any scams on the site? However, it is clearly a malicious link, and it is easy to conclude that the domain name is a fake phishing version of the original Exch. Besides raising awareness among the community about the dangers of these domains, isn't there another way to shut them down entirely?

[examplens]

Does this mean that the domain name cannot be reported since it was recently acquired and no one has reported any scams on the site? However, it is clearly a malicious link, and it is easy to conclude that the domain name is a fake phishing version of the original Exch. Besides raising awareness among the community about the dangers of these domains, isn't there another way to shut them down entirely?

We had such a case in the Anti-phishing campaign launched by exch.
The scammer had his blog network, where he dealt with the topic of Monero and news about it, but he semi-directly proposed phishing sites for XMR trade. (Phishing sites also belonged to him)
The registrars mostly ignored the reports because they did not recognize the phishing scam at first glance. Only easyDNS did its test and confirmed that they were scammed, yet the scammer somehow managed to transfer the domain to another registry and thus avoid locking the domain.

The safest thing would be if the authorities opened a case, but this is not happening because they are not interested in combating scams of ordinary users. Their priority is the fight against privacy.

[coupable]

The safest thing would be if the authorities opened a case, but this is not happening because they are not interested in combating scams of ordinary users. Their priority is the fight against privacy.

This can only happen if there are victims and losses, and also if it occurs in a country whose laws allow tracking phishing services, such as the United States. But what I mean is that these domains should be shut down before they cause any victims, given the obvious suspicion surrounding the brand name chosen by scammers. For example, can I call a website amazon2 tomorrow and claim that this is a new store, different from the well-known Amazon stores, and no one can hold me accountable until full scam occur?

You're right. Governments, regulatory bodies, and law enforcement agencies are less concerned with user losses than they are with fighting privacy.

[Zwei]

The domain was registered very soon after eXch was closed. It is quite possible that phishing was planned, but the BKA and FIOD process disrupted the plans, and scammers do not want to take such a risk.

looks to me like they are taking a much bigger risk than just running a phishing site.
who's in thier right mind would try to build an exchange using the same name of an exchange that the BKA and FIOD went/going after. real 200 IQ move from those scammers.

but knowing how much law enforcement agencies care about these kinds of scammers, they will probably do nothing to them anyway.

That the scammers are following what is happening here is their obvious reaction on Telegram. 

lol, what do they mean by "if it wasn't obvious"? because it's damn obvious they are just trying to leech off eXch name, they literally just added a 2 to the name with the same domain extension and same logo style ffs.