Fake wallet apps and sites are built to look identical to the real thing, so appearance proves nothing. These checks focus on what a copy cannot easily fake: where you came from and what it asks of you.
Published September 30, 2026 · 3 min read
A fake app or site copies a real wallet's look for one of two purposes. It either captures your login details when you type them in, or it persuades you to send funds somewhere the attacker controls. Because the screen can look the same as the original, the difference lies elsewhere: in the address you reached it from and in what it asks you to do. Blockchain transfers are irreversible, so a payment sent to the wrong place cannot be brought back by anyone.
Look-alike imitations usually differ from the real address by one small detail, such as a swapped, added or missing character. Read the address of the site or the Telegram bot slowly, character by character, and compare it with the official address you got from a trusted source. Do not rely on the display name or the logo, since both can be copied. If anything differs, even slightly, close it and do not enter any data.
A wallet that opens through an official Telegram bot and site has a known, fixed entry point. A link that arrives in a message, a group chat or an advert takes the choice away from you, and it may lead to an imitation. The safer habit is to go to the official address yourself instead of following a link. Save the correct address once, from an official source, and use only that.
| What to check | Consistent with the real wallet | Warning sign |
|---|---|---|
| Address of the site or bot | Matches the official address exactly, character by character | A swapped, added or missing character |
| How you got there | From the official address you saved yourself | From a link sent to you in a message |
| Seed phrase | Never requested by a custodial wallet | A screen asks you to type it in |
| Look of the interface | Not proof by itself, since it can be copied | A perfect copy used to gain trust |
| Deposit address | Issued inside the app for a specific network | An address sent to you by someone else |
A custodial wallet never asks for a seed phrase, so a request to type one in is itself a red flag. Someone who has your seed phrase can control the funds, and a transfer made with it cannot be reversed. If a screen, a message or a supposed support agent asks for it, stop and leave. The rule is simple: a custodial wallet has no reason to ask, so anything that does is not behaving like one.
Nexus Pay is opened inside Telegram through the bot @nexuspaymybot, and a Google login can be linked as a second way in. The app also has an optional four-digit access code, and that is the extent of the access steps it describes. Type the bot's address yourself or compare it character by character with the one above before you start. Any deposit address should be issued inside the app for a specific network, because sending a coin through a different network than the address was issued for will not arrive and cannot be reversed.
Stop at once: do not send any funds, and do not try again on the same page. Return to the wallet only through the official address, and if you have a card, remember that a Nexus Pay card can be frozen and unfrozen in the app in one tap. Because transfers are irreversible, prevention matters more than any fix afterwards. This article is general information, not legal or financial advice.
Opening…