Fakes are the real problem

People lose more to fake copies of the market than to any problem inside it. A fake is a copy of the login and storefront that changes two things only. The address in your bar, and the wallet you deposit to. The rest looks exactly right, which is the whole trick.

How it plays out

1. Someone stands up a copy at a look-alike address and pushes it through search ads and fake "official link" pages.
2. You log in. The copy grabs your username and password and passes them to the real market, so your session seems to work.
3. You deposit. The wallet shown is theirs. The coins are gone and the real market never saw them.

How to shut it out

• Only copy addresses from a place you trust. This directory over its onion, or the signed list.
• Match the address on the login page to your bar. Every single time.
• Never give your recovery words to log in. A page that asks is a fake.

Typing an address from memory is how you land one character off, on a copy. Copy it, do not type it.

Updated 2026-07-17 · Security