Crypto security check
Paste a wallet address, a link or the whole message you were sent. DechoNet finds the wallet addresses in it, tells you which chain each belongs to and whether it is on a sanctions list, and checks a link against the official addresses of the exchange it names.
What you pasted, split upExample
Example message: "Your Upbit withdrawal is on hold. Send the 0.2 ETH deposit to unlock it: …"
0x7a2b9c4d5e6f708192a3b4c5d6e7f8091a2b3c4d TQx7Ka2bW9cD4eF6gH8jK1mN3pR5sT7uVw https://withdraw-hold.example/release What you can check
Wallet address check
Which chain the address belongs to, whether its checksum is right, whether it is on the US Treasury OFAC sanctions list, and whether it appeared on a page DechoNet judged dangerous.
Official exchange address
Whether a site is an address a Korean or global exchange, wallet or dApp publishes itself, or a new domain borrowing the name. A domain using the name gets its front page opened by the phishing check.
Exchange impersonation domains
How many new domains carrying an exchange, wallet or dApp name show up in certificate transparency logs, and how many of them DechoNet judged dangerous — counted per name.
Crypto scams we see most
| Withdrawal hold and deposit | "Your withdrawal is on hold — pay the tax or deposit first and it is released", with an address to send it to. A demand to send to a personal wallet to release a withdrawal is the classic scam. |
|---|---|
| Fake exchanges and investment apps | A new domain with a real exchange's name, or one close to it, shows big returns and then asks for a fee when you withdraw. Comparing it with the official address catches many of them. |
| Airdrop and wallet-connect bait | Free tokens, if you connect your wallet and sign — and one signature hands over permission to move your tokens. Do not sign on a site you have never seen. |
| Address swapping | A fake address sharing the first and last characters is planted in your transaction history, or a copied address is quietly replaced. Compare the whole address before you send. |
What we look at, and what we do not
- Address format, chain and checksum, and public sanctions lists
- The official addresses exchanges, wallets and dApps publish themselves
- Domain age, certificates and DechoNet's phishing verdicts
Not checked
- Balances and transaction history
- Who actually owns an address
- Whether a token contract is honest
- What a page asks your wallet to sign (the dApp check is in preparation)
DechoNet never holds or moves assets and gives no investment opinion. It does not ask for a seed phrase or private key — anyone who does is not us.