# Phishing sites impersonating MoonPay

PhishDestroy has recorded 13 phishing domains impersonating MoonPay since 2025-11-28, 0 of them in the last 30 days. The most used registrars are Vercel and Vercel; the most common TLDs are .app and .com. Open MoonPay only from its official app or a saved bookmark.

13Domains, all time

0Last 30 days

13Online at last check

1Confirmed takedowns

## New domains in the last 90 days

MoonPay phishing domains detected per day: 4 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake MoonPay site

Words most often added to the brand in reported domains: commerce, heliofi, git, henryharris, guide, help, desk, support, number, daftpage.
- Type the address yourself or use a bookmark; phishing links for MoonPay arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- MoonPay does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest MoonPay phishing domains

The 13 most recently detected domains impersonating MoonPay
Domain | First detected | Status at last check | Registrar | 
[inputmoonpay-8.vercel.app](https://phishdestroy.io/domain/inputmoonpay-8.vercel.app/) | 2026-08-26 | Online | Vercel | 
[moonpay-paybox-guide.vercel.app](https://phishdestroy.io/domain/moonpay-paybox-guide.vercel.app/) | 2026-08-15 | Online | Vercel | 
[moonpay-and-pay-box-guide.vercel.app](https://phishdestroy.io/domain/moonpay-and-pay-box-guide.vercel.app/) | 2026-08-13 | Online | Vercel | 
[moonpaycooked.com](https://phishdestroy.io/domain/moonpaycooked.com/) | 2026-08-12 | Online | Spaceship | 
[moonpay-commerce-61iaa4ldn-heliofi.vercel.app](https://phishdestroy.io/domain/moonpay-commerce-61iaa4ldn-heliofi.vercel.app/) | 2026-07-04 | Online | Vercel | 
[moonpay-commerce-jql3k2i1g-heliofi.vercel.app](https://phishdestroy.io/domain/moonpay-commerce-jql3k2i1g-heliofi.vercel.app/) | 2026-07-04 | Online | Vercel | 
[moonpay-commerce-git-fix-com2-1700-deposit-preset-dedup-heliofi.vercel.app](https://phishdestroy.io/domain/moonpay-commerce-git-fix-com2-1700-deposit-preset-dedup-heliofi.vercel.app/) | 2026-07-04 | Online | Vercel | 
[moonpay-commerce-8nbxkcgb9-heliofi.vercel.app](https://phishdestroy.io/domain/moonpay-commerce-8nbxkcgb9-heliofi.vercel.app/) | 2026-07-04 | Online | Vercel | 
[moonpay-commerce-git-henryharris-com2-1363-heliofi.vercel.app](https://phishdestroy.io/domain/moonpay-commerce-git-henryharris-com2-1363-heliofi.vercel.app/) | 2026-07-04 | Online | Vercel | 
[moonpay-commerce-git-henryharris-com2-1748-heliofi.vercel.app](https://phishdestroy.io/domain/moonpay-commerce-git-henryharris-com2-1748-heliofi.vercel.app/) | 2026-07-04 | Online | Vercel | 
[moonpay.ai](https://phishdestroy.io/domain/moonpay.ai/) | 2025-12-14 | Taken down | GoDaddy.com | 
[moonpay-support-number.daftpage.com](https://phishdestroy.io/domain/moonpay-support-number.daftpage.com/) | 2025-12-06 | Online | OVH | 
[moonpay-help-desk.blogspot.com](https://phishdestroy.io/domain/moonpay-help-desk.blogspot.com/) | 2025-11-28 | Online | MarkMonitor | 

[All 13 MoonPay reports](https://phishdestroy.io/domain/?brand=MoonPay)

## Where they are registered and hosted

### Registrars

- Vercel6
- Vercel3
- [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)1
- [OVH](https://phishdestroy.io/registrar/ovh/)1
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)1

### Top-level domains

- [.app](https://phishdestroy.io/tld/app/)9
- [.com](https://phishdestroy.io/tld/com/)3
- [.ai](https://phishdestroy.io/tld/ai/)1

### Hosting networks

- AMAZON-02 - Amazon.com, Inc., US6
- Amazon.com, Inc.4
- AMAZON-02, US2
- GOOGLE, US1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is MoonPay; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/moonpay/