Check a crypto trading bot offer by independently verifying the operator, the destination of your money, the access requested and the records behind performance claims. Stop at guaranteed profits, requests for account secrets or surprise payments to unlock funds. Keep unresolved claims on hold; a polished dashboard, a testimonial or one small withdrawal cannot establish trustworthiness.
An offer can use the language of real automation while giving you no reliable way to inspect what happens. The useful question is whether each important claim survives a check outside the seller's own website, chat group and screenshots.
The CFTC warns specifically about fraudsters using AI, trading bots and signal services to advertise unreasonable or guaranteed returns. AI branding does not supply evidence for those promises. This checklist turns that warning into a sequence you can use before paying or connecting an account. CFTC guidance on AI trading bots.
Use a decision tree with three outcomes
Review the offer in this order. Do not award points for attractive features and use the total to excuse an unresolved request for money or access.
First, check for a reason to stop. Decline an offer promising guaranteed trading profits or asking you to send a seed phrase, primary wallet private key, exchange password or login verification code to a person. Pause any unfamiliar wallet transaction or contract approval until you understand the authority it grants. Do not follow instructions to lower account protections merely to complete onboarding. Ethereum wallet security guidance.
A demand for a new payment to release supposed investment profits is another stop signal. The SEC and CFTC describe schemes in which fake returns are followed by demands for additional costs, including purported taxes. Check any published exchange withdrawal charge in the exchange's own official interface; a promoter's message cannot establish that a separate payment is required. SEC and CFTC alert on fraudulent crypto trading websites.
Second, put unanswered claims on hold. If you cannot identify the operator, explain the money destination or reconcile the performance record, do not pay or grant access while investigating. Record the exact missing fact. An unanswered question is sufficient to withhold authorization, even when it does not establish fraud.
Third, move to technical validation only after the claims are documented. You still need to understand order behavior, fees, loss limits and stopping procedures. Use the trading bot launch checklist for that later acceptance process. Passing this fraud screen does not establish a profitable strategy or remove exchange and execution risks.
This sequence produces a specific decision: stop, hold for named evidence, or proceed to a separate validation stage. It never produces a certificate of safety.
Draw the money and authority map
Before reviewing returns, write down who holds the assets and who can change them. Separate a software subscription payment from trading capital. For each requested transfer, record the recipient, purpose and evidence connecting that recipient to the named business.
Ask the provider to explain the full route: your bank or wallet, the exchange or custodian, any bot-controlled address, and the withdrawal destination. Open the exchange through a known official route. A real exchange appearing at the start of the route does not verify a platform receiving money later.
The FBI's IC3 describes investment scams that first direct victims to a reputable exchange and then instruct them to move cryptocurrency to a fraudulent investment platform. It also describes professional-looking sites and apparent happy clients in group chats. Treat the final destination and operator as separate verification tasks. IC3 investment-fraud guidance.
For an API connection, inspect permissions at the exchange. Binance Spot documentation, for example, distinguishes trading authority, which includes placing and canceling orders, from access to private account and trading-history information. Other venues use different controls. Binance Spot request security.
Disabled withdrawals leave trading authority to review: unwanted orders can still create losses. Use the detailed exchange API-key permission guide to identify the exact account, markets and actions exposed. A key's friendly name tells you less than its effective settings.
Verify the operator outside the pitch
Save the exact domain, legal entity name, business contact details and claimed credentials. Check whether the terms, invoice and payment recipient identify the same organization. Investigate discrepancies before accepting a salesperson's explanation.
If the offer claims a registration or authorization, find the relevant regulator's official register independently. Match the entity, stated activity and contact information. Record incorporation and claimed financial authorization separately. This checklist cannot determine which permissions every business needs in every country, and a search result containing a similar name cannot settle the question.
The SEC and CFTC alert recommends checking backgrounds and claimed registration status, and warns about unsolicited approaches and pressure to act immediately. Use official records reached independently of the pitch. A logo copied into a sales page is a claim awaiting verification. SEC and CFTC investor-verification guidance.
Keep the same discipline with referrals. A friend can describe an experience, but that experience cannot verify the operator's other accounts, custody arrangements or future ability to pay. Record any referral incentive alongside the recommendation so you understand its context.
Reconcile a performance claim before debating the strategy
Ask what the record represents: live funds, a simulation, a backtest or a selected demonstration. Request its dates, account boundary, deposits, withdrawals, fees, open positions and method for valuing remaining holdings. Protect personal information and credentials when sharing records; verification never requires publishing a secret.
A screenshot of a rising balance does not supply these inputs. A trade list alone can also omit deposits, losing open positions or charges recorded elsewhere. When records are available, match account identifiers and time cutoffs before calculating anything.
Consider this original hypothetical example. An isolated account starts with $1,000. During the period, its owner adds $300 and withdraws $100. Trading generates $20 before $8 of fees. All holdings are sold before the closing snapshot, and there are no other cash flows or valuation changes.
| Account item | Effect on equity | What to verify |
|---|---|---|
| Opening equity | $1,000 | Statement at the starting cutoff |
| Additional deposit | +$300 | Deposit history for the same account |
| Withdrawal | −$100 | Completed withdrawal record |
| Trading result before fees | +$20 | Matched executions and account records |
| Trading fees | −$8 | Fee records, already included in closing equity |
| Closing equity | $1,212 | Statement at the ending cutoff |
The account identity is $1,000 + $300 − $100 + $20 − $8 = $1,212. The net trading result is $1,212 − $1,000 − $300 + $100 = $12.
A claim of “$212 profit” based on closing equity minus opening equity includes $200 of net new funding. The discrepancy is $212 − $12 = $200. Do not subtract the $8 fee again: closing equity already reflects it. Cash-flow dates are unspecified, so this example does not calculate a percentage investment return.
This mismatch requires an explanation and a corrected record. It could reflect a reporting mistake, a misunderstood metric or a deceptive claim; the arithmetic alone cannot decide intent. Even a fully reconciled $12 result would establish only what happened in this example's period.
Write the proposed entry, sizing, exits and halt rules in a crypto trading plan before evaluating whether the observed behavior matches the offered strategy. A performance number without rules cannot tell you which risks produced it.
Keep a worksheet that preserves unanswered questions
Use one row per material claim. Include a dated link or private record reference so a later review can repeat the check.
| Claim to verify | Evidence to obtain independently | Decision if missing |
|---|---|---|
| “This is the operator” | Matching entity, domain, terms and payment recipient | Hold payment and access |
| “Funds stay in your account” | Actual destination and account ownership | Hold transfers |
| “Access is limited” | Effective permissions in the exchange's official controls | Hold connection |
| “The bot earned this result” | Reconciled equity, cash flows, fees and holdings | Treat performance as unverified |
| “You can stop and leave” | Documented revocation, account access and withdrawal procedure | Hold authorization |
Add a short explanation beside each decision. “Need the recipient's relationship to the legal entity” is actionable. “Looks legitimate” is not a reproducible check. A deadline imposed by the seller does not resolve an empty evidence field.
If you already paid or connected
Stop sending additional money to resolve an unexplained restriction. Preserve the domain, messages, payment destination, transaction hashes, dates, amounts and relevant account records. Store sensitive evidence securely and redact secrets from support copies.
A small successful withdrawal does not complete verification. IC3 documents scammers allowing early withdrawals to build confidence before freezing access and demanding more money. Keep that observation in the evidence record without using it to dismiss later warning signs. IC3 withdrawal and unlock-fee warning.
If a credential may be compromised, act through the exchange's official controls and inspect orders, balances and positions. Follow the credential incident-response worksheet. Revoking access does not reverse accepted trades, so account exposure still needs review.
Contact the exchange or payment provider through its official channel promptly. The FTC lists the sending exchange and U.S. reporting routes including the FTC, CFTC, SEC and IC3. Use appropriate local authorities for your location; filing a report does not guarantee recovery. FTC cryptocurrency reporting guidance.
Be alert to a second approach offering to recover the loss for an upfront fee. The FTC describes recovery scammers impersonating agencies, law firms or other organizations and seeking money or financial information. Verify contact independently and do not pay an unsolicited recovery demand. FTC refund and recovery scam guidance.
Before granting any new authority, finish one sentence in writing: “I verified this claim using this independent record.” Leave the connection or payment on hold wherever you cannot complete it.