In September 2025 a YouTube-style cash-out guide pushed viewers toward swopbel.com (also branded SWAPBEL / swopbel.app). WHOIS data put the .com registration around 5 September 2025; the .app twin appeared days later. Threat feeds and scam checkers later flagged the domain as crypto phishing infrastructure. That is enough of a pattern: unknown desk, brand-new domain, instructions to register, pick a crypto-to-fiat route, and send coins to an address the site generates.
Legitimate large exchanges do not materialise overnight with privacy WHOIS and a video tutorial as their main trust signal. If a guide needs a VPN plus a site you have never heard of, pause. Prefer venues you chose when calm, with a track record and a support path that is not a disappearing Telegram admin. Never connect a wallet or paste a seed phrase because a swap page asked you to “verify”.
If funds already went to an address from that flow, export the TXIDs and report via Get help. Anyone offering a paid “unlock” is usually the second act of the same play — see Fake recovery.
If this pattern matches something you’ve been offered, start at Get help. If someone is already pitching “recovery”, read Fake recovery before you pay another fee.
This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.