Tether Scams at Exchange Offices and How to Prevent Them

Tether has become an everyday tool for exchangers, and scammers know that just as well. The tricks in this article are not theoretical; each one has happened to real exchangers many times. They all share one thing: cash can be traced and reversed, but Tether cannot. Scammers exploit exactly that gap.

If you are not yet familiar with networks, hashes and wallets, first read What every exchanger should know about Tether. The video version of this article:

1. The triangle scam

A WhatsApp message arrives: "I have cash dirhams in Dubai and I want Tether." You quote a rate, they accept. You give them the address of your office in Dubai. Half an hour later, the Dubai office sends a confirmation: the dirhams have been delivered. You send the Tether to the address they gave you on WhatsApp. Everything looks right.

Ten minutes later the Dubai office calls: "There's someone sitting here; he says he handed over the dirhams and never got his Tether, and he won't leave the office."

Here is what happened: the person chatting with you on WhatsApp was talking to someone else at the same time. He had told that person "I have Tether, give me dirhams" and given your office's address as his own office. That customer brought the dirhams thinking he was paying that person; you thought the dirhams came from your own counterparty. The Tether went to the middleman's wallet, and then his phone went dead.

Now two innocent people are left, both owed money. You have to return the customer's dirhams, because they really are his; and the Tether you sent will not come back. In one real case, 10,000 Tether was lost this way and not a single dirham reached the exchange office.

Prevention: whoever delivers the cash must state, at that moment, whom they are paying and for which deal, and must give the destination wallet address themselves. If that address differs from the one given on WhatsApp, the Tether is not released. And do not accept money that someone other than your counterparty brings in on their behalf.

2. Look-alike address (receiving side)

The scammer creates a wallet whose address looks like yours: the first few and last few characters match, and the middle is different. Then he sends real Tether to that wallet of his own and sends you the hash.

You check the hash: the transaction succeeded, the token is real Tether, the amount is right, and the recipient "looks like" your own address. You confirm and hand over the goods — but the money went to his own wallet.

Prevention: compare the recipient address in full, character by character. In Nexto the software does this comparison itself: the full recipient address is compared with the exchange office's registered wallets, and if even one character differs, it shows the message "Neither side of this transaction matches a registered wallet" and the transaction is not recorded as a deposit to your wallet.

3. Address poisoning (sending side)

The same trick works from the other direction too. The scammer creates an address that looks like your fellow exchanger's address, and sends a zero or tiny transfer to your wallet so it sits in your history. Next time you want to send to that exchanger and copy the address from your wallet history, you have copied the scammer's address. They do this with software, for thousands of addresses at once.

Prevention: never copy an address from your wallet history. Take it from your own address book and compare it in full.

4. Fake Tether

An exchanger's eye is used to the word "Tether" and misses small differences. Scammers exploit exactly that: tokens with names like UDST, or U S D T with spaces between the letters, or names resembling USD Coin — and even a token named exactly USDT that is a worthless copy.

In the wallet they all look like Tether and show the right amount, but they are worth nothing. Real Tether is not identified by its name; it is identified by its contract address:

Nexto identifies a token by its contract address, not its name. A token whose contract is not registered in the exchange office's contract list is not recorded as Tether, whatever its name, and gets the warning "the token is likely fake".

More examples of deceptive token names: Fake USDT.

5. Fake crypto exchange

Someone comes in and says: "I have a balance, dollars or Tether, on some foreign crypto exchange. Because I'm Iranian I can't pass identity verification. You sign up and verify, I'll transfer it to your account on that same site, and you pay me for it."

The site is in English and looks exactly like a crypto exchange; you have never heard of it. But the exchanger feels awkward saying "I don't know this site", thinking it would look like he doesn't know the market. You sign up, the transfer goes through, and the balance really shows up in your account. You pay him — but the site was fake from the start and that balance can never be withdrawn. Usually they then ask for more money to "unlock" it.

Prevention: a balance on a site you don't know is zero, until it is withdrawn to your own wallet and confirmed on the network.

6. Frozen wallets and tainted funds

Tether is issued by a private company, and that company can freeze any wallet; the Tether inside becomes effectively worthless.

A fact every exchanger should know: the wallets of almost all Iranian crypto exchanges have been identified and flagged, because they are Iranian and Iran is under sanctions. If Tether from them reaches your wallet, whether directly or through several intermediary wallets, your wallet gets flagged too. Nothing may happen today; but later your wallet may be frozen directly, or when you send funds to an international crypto exchange they may be detected and frozen right there. It makes no difference whether the wallet is yours or your customer's.

Prevention: before accepting a deposit — especially a large one — check the other side's wallet address. In Nexto, the "Crypto address AML check" (from the Nexto Services menu, or the "AML check counterparty" button on the Crypto transaction page) gives a risk score and risk level, plus labels and risk indicators and a full report showing how that wallet has been connected to problematic and sanctions-related wallets. This goes a long way toward avoiding trouble, before the money ever reaches your wallet. (For the overall framework, see AML and KYC for currency exchange.)

Saving money: lower fees by renting energy

Every Tether transfer on TRON needs energy; if your wallet has no energy, the network burns TRX: about $2 per transfer, and double that for a fresh wallet. An exchange office making several transfers a day pays a significant amount every month in fees alone.

The cheaper way is renting energy: before the transfer, you rent the energy needed for that specific wallet.

On Nexto's Crypto Transaction page, once you enter the wallet address you see its energy and TRX status; if there is not enough energy, you rent it with "Check & rent", and for a transfer to a fresh wallet you get the second round with "Rent again (no check)".

Ten golden rules

Screenshot this list and share it in your group with fellow exchangers:

1. Do not accept money that someone other than your counterparty brings in on their behalf.
2. Ask the person delivering the cash for the destination wallet address directly.
3. Do not copy addresses from your history; take them from your own address book.
4. Compare the address in full, character by character.
5. Check the hash on the network yourself: status, token, amount, recipient.
6. A screenshot is not a receipt.
7. Identify Tether by its contract address, not its name.
8. A balance on a site you don't know is zero.
9. Before accepting a large deposit, assess the risk of the other side's wallet.
10. Rates and terms far better than the market, and a few small, smooth deals that come before one big deal, are warning signs in themselves.

Have you seen a scam?

Scammers invent new tricks every day, and the best defense is to warn each other. If you or a colleague have run into a Tether or crypto scam, send it to us — with your permission, we will feature it anonymously in upcoming episodes:

• WhatsApp: wa.me/nextofx
• Telegram: @nextofx
• Email: [email protected]