Spotting fake exchange support messages on WhatsApp and Telegram in Kenya

You post in a community group that your withdrawal seems stuck, and within minutes a friendly stranger sends a direct message. They introduce themselves as an official support agent, use the exchange logo as a profile photo and offer to sort out the issue quickly. This scenario plays out every day across WhatsApp, Telegram and social media, and it is one of the most common ways people in Kenya and elsewhere lose funds. The trick works because it arrives at the exact moment you are anxious and looking for help. Knowing the patterns in advance makes them easy to recognise. This article lists the warning signs, explains where genuine support lives on major exchanges and suggests what to do if you have already engaged with a fake agent.

Real support rarely contacts you first in a chat app

Major exchanges such as Binance, OKX, Bybit and Bitget provide support through their own apps and websites. If someone messages you first on a personal chat app, especially after you mentioned a problem publicly, assume it is not genuine until proven otherwise. Many exchanges offer an official verification tool where you can check whether a contact, email or social account really belongs to them. Use that tool rather than trusting a logo, a confident tone or a long list of official-sounding job titles in someone's profile.

Requests that should end the conversation

Some requests are clear signs of a scam whatever the explanation. Anyone asking for your password, a one-time code, your authenticator backup, your recovery phrase or remote access to your phone is not trying to help. The same applies to requests to send funds to a so-called verification wallet, to pay a release fee or to install an app that is not from the official store. Stop replying, do not click any links they send and block the account. No legitimate process requires you to move money to prove ownership.

Check links and app sources carefully

Phishing often combines a chat message with a look-alike website or a fake login page. Before entering credentials, type the exchange address yourself or open the app you already installed from the official store, rather than following a link. Look out for small spelling changes and extra words in domain names. An anti-phishing code, which some exchanges let you set, appears in genuine emails and helps you tell them apart from forgeries. Bookmark the official site once and use that bookmark every time.

If you already shared something

Act quickly and calmly. Change your exchange password and your email password, reset two-step verification, and check the device and session list for anything you do not recognise. Review your withdrawal address whitelist and remove unknown entries. Then contact the exchange through its official in-app support, explaining what happened and when. If funds were taken, report the incident to the relevant authorities in Kenya as well. Keep screenshots of the conversation and any transaction IDs, since these help support teams and investigators trace what happened.

Risk boundary: Kenya Crypto Guide

Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.

Scenario checkpoint

• Treat any unsolicited chat message from a claimed support agent as suspicious and verify it with the exchange's official tool.
• End the conversation immediately if anyone asks for passwords, one-time codes, recovery phrases or remote access.
• Never send funds to a verification wallet or pay a release fee requested by someone in a chat app.
• Open exchanges only through your own bookmark or the official app rather than links received in messages.
• If you shared details, change passwords, reset two-step verification and contact official in-app support at once.