Security before, during and after a crypto exchange
Most irreversible losses begin before the provider converts anything: a copied address, wrong network, fake support message or exposed wallet secret. Security is a sequence of checks, not one badge.
Reviewed September 1, 2026 · Swapario product reference
Never share
Seed phrase or private key
No exchange or support flow needs wallet control.
Always match
Asset, network and address
A familiar ticker or prefix is not enough.
Keep private
Order tracking link
It is a recovery reference, not a public receipt.
01
Public addresses route funds; wallet secrets control them
An exchange needs a destination address, refund address and sometimes a memo or tag. Those values do not authorize spending. A seed phrase, private key, keystore password or remote-control session gives control and must never be provided to a website or support agent.
- Reject any request to “verify” a seed phrase.
- Do not import a stranger’s recovery file or browser extension.
- Use a hardware wallet screen to verify addresses when possible.
02
Treat the network as part of the address
Ethereum, Base and BNB Smart Chain can show the same 0x account. USDT can appear on many chains. The receiving service must monitor the exact network and token contract used. Copying an address correctly does not fix a wrong chain.
- Read the full network label in both interfaces.
- Match token contract or native-asset identity.
- Include the memo or tag supplied by a custodial receiver.
03
One order, one current deposit instruction
Create a new order for each exchange and use only its generated payment details. Clipboard malware can replace addresses, so compare the beginning, middle and end or verify on a trusted device. Save the tracker before broadcasting.
- Do not reuse a previous deposit address.
- Compare the wallet screen with the order screen.
- Avoid public screenshots containing the private tracking token.
04
Real support asks for evidence, not control
Useful evidence includes the order ID, transaction hash, actual network, amount and public addresses. A legitimate investigation does not require a seed phrase or an unsolicited payment to a recovery wallet. Use only support routes presented by the official product or provider.
- Prepare public transaction evidence.
- Ignore direct messages claiming guaranteed recovery.
- Do not send a second payment to prove wallet ownership.
WORKING CHECKLIST
The last review happens before broadcast
- Correct site and current order are open.
- Asset, network, address and memo match.
- No wallet secret has been entered or shared.
- Tracker and transaction evidence will be stored privately.
FAQ
Questions about this reference
Can support ask for a transaction hash?
Yes. A transaction hash is public evidence. It is fundamentally different from a private key or seed phrase.
Is a small test transaction always safe?
It can validate a wallet destination, but it should not be sent to an order that expects one exact amount unless the order instructions allow split deposits.
What if the copied address changes?
Stop. Close the flow, inspect the device for clipboard malware and verify the intended address through a trusted wallet or device.
Does No KYC remove blockchain risk?
No. Account friction and transaction safety are separate concerns. Wrong-network transfers and exposed wallet secrets remain dangerous.
CONTINUE THE RESEARCH