# Phishing sites impersonating Bitvavo

PhishDestroy has recorded 12 phishing domains impersonating Bitvavo since 2025-11-19, 1 of them in the last 30 days. The most used registrars are Dynadot and ENOM; the most common TLDs are .top and .com. Open Bitvavo only from its official app or a saved bookmark.

12Domains, all time

1Last 30 days

2Online at last check

6Confirmed takedowns

## New domains in the last 90 days

Bitvavo phishing domains detected per day: 1 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Bitvavo site

Words most often added to the brand in reported domains: services, cbz, poe, temporary, rqlmxutj, mnhbtcafqabattx, yxxmnyhaabxpwpguuegzzem, niyikolawole, bitvavodesktop, bitvavoton.
- Type the address yourself or use a bookmark; phishing links for Bitvavo arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Bitvavo will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Bitvavo phishing domains

The 12 most recently detected domains impersonating Bitvavo
Domain | First detected | Status at last check | Registrar | 
[bitvavo.fun](https://phishdestroy.io/domain/bitvavo.fun/) | 2026-10-01 | Online | Dynadot | 
[recruitsingapore.com](https://phishdestroy.io/domain/recruitsingapore.com/) | 2026-07-06 | Offline | GoDaddy.com | 
[sample-painting.com](https://phishdestroy.io/domain/sample-painting.com/) | 2026-06-20 | Online | ENOM | 
[bitvavonvs.top](https://phishdestroy.io/domain/bitvavonvs.top/) | 2026-02-26 | Taken down | Dynadot | 
[bitvavoihd.top](https://phishdestroy.io/domain/bitvavoihd.top/) | 2026-02-26 | Taken down | Dynadot | 
[bitvavoxso.top](https://phishdestroy.io/domain/bitvavoxso.top/) | 2026-02-26 | Taken down | Dynadot | 
[bitvavonud.top](https://phishdestroy.io/domain/bitvavonud.top/) | 2026-02-26 | Taken down | Dynadot | 
[bitvavownm.top](https://phishdestroy.io/domain/bitvavownm.top/) | 2026-02-26 | Taken down | Dynadot | 
[bitvavoton.top](https://phishdestroy.io/domain/bitvavoton.top/) | 2026-02-26 | Offline | Dynadot | 
[bitvavodesktop.app](https://phishdestroy.io/domain/bitvavodesktop.app/) | 2026-02-25 | Offline | Vercel | 
[bitvavo.com.nl.services.l46rqlmxutj18mnhbtcafqabattx5yxxmnyhaabxpwpguuegzzem.niyikolawole.com](https://phishdestroy.io/domain/bitvavo.com.nl.services.l46rqlmxutj18mnhbtcafqabattx5yxxmnyhaabxpwpguuegzzem.niyikolawole.com/) | 2025-12-05 | Offline | NameCheap | 
[bitvavo.com.nl.services.cbz.poe.temporary.site](https://phishdestroy.io/domain/bitvavo.com.nl.services.cbz.poe.temporary.site/) | 2025-11-19 | Taken down | ENOM | 

[All 12 Bitvavo reports](https://phishdestroy.io/domain/?brand=Bitvavo)

## Where they are registered and hosted

### Registrars

- [Dynadot](https://phishdestroy.io/registrar/dynadot/)6
- [ENOM](https://phishdestroy.io/registrar/enom/)2
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)1
- Vercel1
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)1

### Top-level domains

- [.top](https://phishdestroy.io/tld/top/)6
- [.com](https://phishdestroy.io/tld/com/)3
- [.site](https://phishdestroy.io/tld/site/)1
- [.app](https://phishdestroy.io/tld/app/)1
- [.fun](https://phishdestroy.io/tld/fun/)1

### Hosting networks

- NETSEC-HK Netsec Limited, HK6
- NETWORK-SOLUTIONS-HOSTING, US1
- UNIFIEDLAYER-AS-1, US1
- Amazon.com, Inc.1
- ORACLE-BMC-31898 - Oracle Corporation, US1
- WHG-LON WHG Hosting Services Ltd, GB1
- AS13335 Cloudflare, Inc.1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bitvavo; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/bitvavo/