Scam patterns
Exchange API-key theft
A fake portfolio or bot collects exchange API credentials.
Research articles and reference entries are published in English. Navigation is available in seven languages.
In this article
Overview
A fake portfolio or bot collects exchange API credentials.
Why it matters
Even withdrawal-disabled keys can manipulate illiquid markets or destroy positions.
What to check
Use minimum scopes and IP restrictions; preserve API and trade logs before revocation.