Phishing sites impersonating Bitcoin

PhishDestroy has recorded 1,202 phishing domains impersonating Bitcoin since 2025-02-06, 40 of them in the last 30 days. The most used registrars are Cloudflare and NiceNIC; the most common TLDs are .com and .dev. The official Bitcoin domain is bitcoin.org: any other site asking for your login or wallet is not Bitcoin.

1,202
Domains, all time
40
Last 30 days
592
Online at last check
123
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 22026-07-26: 12026-07-27: 382026-07-28: 32026-07-29: 22026-07-30: 12026-07-31: 12026-08-01: 02026-08-02: 42026-08-03: 22026-08-04: 22026-08-05: 22026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 42026-08-10: 42026-08-11: 02026-08-12: 52026-08-13: 32026-08-14: 12026-08-15: 12026-08-16: 12026-08-17: 12026-08-18: 42026-08-19: 62026-08-20: 42026-08-21: 12026-08-22: 32026-08-23: 22026-08-24: 02026-08-25: 22026-08-26: 82026-08-27: 02026-08-28: 62026-08-29: 92026-08-30: 02026-08-31: 32026-09-01: 12026-09-02: 12026-09-03: 52026-09-04: 12026-09-05: 52026-09-06: 12026-09-07: 32026-09-08: 32026-09-09: 32026-09-10: 22026-09-11: 42026-09-12: 32026-09-13: 02026-09-14: 02026-09-15: 32026-09-16: 02026-09-17: 22026-09-18: 02026-09-19: 12026-09-20: 22026-09-21: 02026-09-22: 12026-09-23: 22026-09-24: 02026-09-25: 12026-09-26: 02026-09-27: 42026-09-28: 02026-09-29: 12026-09-30: 12026-10-01: 22026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 12026-10-06: 02026-10-07: 102026-10-08: 32026-10-09: 22026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 52026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 22026-10-20: 32026-10-21: 22026-10-22: 1
Bitcoin phishing domains detected per day: 207 from 2026-07-25 to 2026-10-22; peak 38.

How to tell a fake Bitcoin site

Official domain: bitcoin.org.

Words most often added to the brand in reported domains: bitcoinhyper, wallet, btc, mixer, claim, paybis, coin, whir, the, greenbitcoin.

  • Type the address yourself or use a bookmark; phishing links for Bitcoin arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Bitcoin will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Bitcoin phishing domains

The 50 most recently detected domains impersonating Bitcoin
DomainFirst detectedStatus at last checkRegistrar
playrainbet.cc2026-10-22OnlineEranet
bitrefill.com-gift-esim-ag04.com2026-10-21OnlineNICENIC
bitrefill.com-gift-esim-ad04.com2026-10-21OnlineNICENIC
profitdexpro.com2026-10-20OnlineRegistrar.eu
stacksbtc.net2026-10-20OnlineNICENIC
web-netcoins-login-doc.typedream.app2026-10-20Online—
sitemvewd4w0tngj.cfd2026-10-19OfflineSpaceship
sitemvdm66xf9twc.cfd2026-10-19OnlineSpaceship
launch-bitcoineverlight.site2026-10-13OnlineNameSilo
swanbitcoinreports.live2026-10-13OnlineNICENIC
sitemv5o2p6w9rqm.cfd2026-10-13OnlineSpaceship
sitemv5kuz5lhbtf.cfd2026-10-13OnlineSpaceship
sitemv4c57e5h81k.cfd2026-10-13OnlineSpaceship
coinexsi.ink2026-10-09OnlineNameMart
mixer.money2026-10-09OnlineNameCheap
zcashmixer.com2026-10-08OnlineSOLLUTIUM
eth-mixer.org2026-10-08OnlineSOLLUTIUM
chipmixer.pro2026-10-08OnlineGlobal Domain
mixero.digital2026-10-07OnlineNICENIC
bitcoinirapolicy.com2026-10-07OnlineNICENIC
otc-claim.xyz2026-10-07UnknownNICENIC
otc-claims.xyz2026-10-07UnknownNICENIC
bitcoin-qrcode-generators.com2026-10-07OnlineNICENIC
bitcoinirabrief.com2026-10-07OnlineNICENIC
bitcoinhyper-live.xyz2026-10-07OnlineNICENIC
profitfurnace.com2026-10-07OnlineGlobal Domain
bestvalueinves.com2026-10-07OnlineCosmotown
bitcoin-tumbler.com2026-10-07OnlineNICENIC
cryptomixer.digital2026-10-05OnlineNICENIC
bitcoingenerator.me2026-10-01OnlineCommuniGal Communication
primetradingnz.org2026-10-01OnlineDYNADOT
dxvwb3.cc2026-09-30OnlineDominet (HK)
bitcoin-fund-manager.cc2026-09-29OnlinePorkbun
mixermoney.org2026-09-27OnlineGlobal Domain
btcmixer.xyz2026-09-27OnlineSOLLUTIUM
cryptocurrency-tumbler.com2026-09-27OnlineSOLLUTIUM
freelitecoin.online2026-09-27OnlineOnlineNIC
tumbler.cc2026-09-25OnlineNICENIC
ascendeex.com2026-09-23OnlineInternet Domain Service BS
remitmargin.com2026-09-23OfflineNAMECHEAP
the-bitcoinfuture.org2026-09-22OnlineInternet Domain Service BS
xbitcoin-club.io2026-09-20OnlineTLD Registrar Solutions
xbitcoinapp.org2026-09-20OnlineInternet Domain Service BS
notrace.exchange2026-09-19OnlineNameCheap
bmix.io2026-09-17OnlineNAMECHEAP
coinomize.fun2026-09-17OnlineTrustname.com
sso--netcoins-com-cdn-n-auuth.webflow.io2026-09-15OnlineWebflow
cryptomixer.site2026-09-15UnknownNICENIC
mixero.site2026-09-15OnlineNICENIC
crestforlding.org2026-09-12OnlineCosmotown

All 1,202 Bitcoin reports

Where they are registered and hosted

Registrars

  1. Cloudflare181
  2. NiceNIC140
  3. NICENIC113
  4. NameCheap63
  5. GoDaddy.com45
  6. NameSilo40
  7. PublicDomainRegistry.com37
  8. Porkbun30

Top-level domains

  1. .com438
  2. .dev174
  3. .org60
  4. .io58
  5. .live50
  6. .app43
  7. .net42
  8. .xyz38

Hosting networks

  1. Cloudflare, Inc.517
  2. CLOUDFLARENET, US143
  3. CLOUDFLARENET - Cloudflare, Inc., US103
  4. Amazon.com, Inc.60
  5. Hostinger International Limited21
  6. AMAZON-02, US16
  7. Ideal Hosting Teknoloji A.S.16
  8. AS-COLOCROSSING, US15

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bitcoin; share of all PhishDestroy reports: 0.53%.