Protection Plans About Contact Contact Us
Crypto

Every lookalike domain is built to drain a wallet before you know it's live.

Lookalike domains, fake wallet extensions, and impersonating support accounts are built to drain your users' funds and put your brand on the story. We find them and take them down before that happens.

What's targeting your brand

Four ways exchanges and platforms get impersonated.

Lookalike exchange domains

Near-identical domains served through paid search ads or single-character URL typos, harvesting real login credentials and draining wallets directly - the highest-volume threat by funds lost.

Fake wallet browser extensions

Extensions disguised as legitimate tools that inject malicious code and alter transactions once connected to a wallet.

Airdrop & project impersonation phishing

Fake airdrop campaigns and impersonated project accounts luring a wallet connect or seed phrase.

Fake support & deepfake impersonation

Fake support accounts and AI-swapped face and voice on Telegram or Zoom calls - fewer users hit, but the reputational damage travels fast once one goes public.

What it costs you

This isn't just a fake website problem.

$12B+
Stolen or scammed on-chain in 2024 alone, on pace to hit $14-17B in 2025 - drained through exactly the lookalike domains and fake wallets built to pass as you.*
253%
Year-over-year jump in the average payout a scammer pulls from a single victim before anyone catches it.*
4.5x
More profitable AI-enhanced scams are than manual ones - the impersonators targeting your users are getting faster and harder to catch.*

User fund loss going viral

One user losing funds to a fake support account and posting about it can do lasting reputational damage in a way few industries experience.

Executive & staff social engineering

Deepfake calls used to pressure your own team into wire transfers or fake partnership approvals.

Regulatory scrutiny

Exchanges already operate under growing regulatory attention. Association with scams, even via impersonation, invites more of it.

Banking & liquidity partner risk

Fraud reports tied to your brand name can strain the banking and liquidity relationships exchanges depend on.

How CloneGuard protects you

Six services, one team, built for how exchanges actually get attacked.

Included in every plan

24/7 Monitoring

Threats across domains, wallet extensions, app stores, and support channels surface before a user loses funds.

Learn more about Monitoring →
Included in Growth Plan

Verified Takedowns

Every case confirmed by an analyst first, so hosts and registrars act fast because the evidence is solid.

Learn more about Takedowns →
30% off in Scale Plan

Trademark Registration

Turns every takedown and cease and desist request into a legal action with real standing behind it.

Learn more about Trademark Registration →
On request

Brand Enforcement

Escalates when a takedown request alone doesn't work: cease and desist letters, domain disputes, legal pressure.

Learn more about Brand Enforcement →
On request

Executive Protection

Protects your team from the deepfake and live-injection social engineering used to compromise exchanges from the inside.

Learn more about Executive Protection →
On request

Domain & IP Strategy

Closes the gaps in your domain portfolio before someone else fills them.

Learn more about Domain & IP Strategy →

Most exchanges land on Scale, which bundles monitoring and a monthly takedown allowance under one contract, plus a discount on trademark filing. See Protection Plans →

A representative example of how we work

Exchange A: from active threat to standing protection.

The threat

Users already losing funds

Exchange A came to us after users reported losing funds to a fake support account impersonating them on Telegram, alongside a cloned trading site running paid search ads under their name.

24/7 Monitoring
Enforcement

Stop the bleeding first

We took down the phishing domain and the fake support account immediately, and issued a cease and desist to the ad network running the clone's search campaign.

Verified TakedownsBrand Enforcement
Protection

Make sure it doesn't happen unnoticed again

We filed their trademark for legal standing and moved them onto 24/7 monitoring across domains, app stores, and support channels, so new impersonators are caught before draining more users.

Trademark Registration

Exchange A needed each of these built individually. Our Protection Plans deliver 24/7 monitoring and takedowns as standing protection from day one, with discounted trademark filing built in. See Protection Plans →

FAQ

Crypto brand protection, answered plainly.

How do I know if someone is impersonating my exchange?

Lookalike domains showing up in search ads, fake support accounts on Telegram or Discord, and unfamiliar browser extensions using your name are the most common signs. Continuous monitoring catches these before users report fund loss to you.

Can a phishing domain impersonating my exchange be taken down?

Yes. Registrars, hosts, and ad networks will act on a properly evidenced takedown request, and a registered trademark strengthens that request considerably.

What can be done about fake support accounts on Telegram or Discord?

Platform impersonation reports plus evidenced takedown requests get fake accounts removed, typically within a day of confirmation once verified.

Does trademark registration help against on-chain or wallet-based impersonation?

Indirectly. It doesn't stop on-chain activity, but it strengthens takedown requests against the phishing domains, fake extensions, and impersonating accounts that drive users toward wallet-draining scams in the first place.

How fast can a fake exchange app or browser extension be removed?

Verified cases are typically actioned within 24 hours of confirmation, though app store and extension marketplace review times vary by platform.

How much does crypto brand protection cost?

Plans start at Monitor, pay-as-you-go, and scale up with your takedown volume across domains, extensions, and support channels. See Protection Plans for full pricing.

Do you monitor Telegram and Discord as well as the web?

Yes. Fake support accounts and impersonating admins on Telegram and Discord are covered by continuous monitoring, alongside domains, extensions, and app stores.

What do you need from us to get started?

Your brand name, primary domain, and any trademarks you already hold. We can start scanning from that alone.

Get started

See what's already targeting your exchange.

Monitor is pay-as-you-go with no minimum commitment. Get live coverage of your brand from day one.

Start Monitoring