Swap safely on xswap.to

xswap.to never asks for a seed phrase or private key and never messages you first. Before you send, check that you are on https://xswap.to, that the deposit address and network match the order page, and that you add the memo when the order shows one. The only support account is @xswap_to on Telegram.

What xswap.to never asks for

• Your seed phrase (recovery phrase), private key or wallet password, or a photo or screenshot of them.
• A wallet connection or a signed message. You send the deposit yourself, as a normal transfer from your wallet.
• A payment to "release", "activate" or "speed up" a swap. The only coins you send are the deposit shown on your order page.

Anyone who asks for these is not xswap.to. A seed phrase gives full control of a wallet: if you typed yours into a site or a chat, treat that wallet as exposed and move what is left to a new wallet with a new seed phrase.

Check the site and the support account

• Use only https://xswap.to. Type it yourself or use a bookmark, and read the address bar before you paste an address. Lookalike domains change a letter or add a word. Links from strangers, ads or direct messages can lead to copies that show their own deposit addresses.
• Support is only @xswap_to on Telegram, the same account the Telegram Support button on every order page opens. Check the username letter by letter, not only the name and the picture.
• Support never messages you first, on Telegram, email or social media, and it replies only in your chat with @xswap_to. xswap.to has no email or phone number of yours. A message "from xswap.to" from any other account is fake, even if it comes after you contacted support.

Check the order before you send

1. Your payout address. Copy it from your wallet's receive screen, not from your transaction history, and compare the start, the end and a few characters in the middle before you press Exchange Now. The order page shows only the start of it under Recipient; tap or click it to copy the full address if you want to check again.
2. The deposit network. Next to the deposit address the order page names the network, such as TRX Network for TRON or BSC Network for BNB Smart Chain. Send on that network only. An address that starts with 0x is valid on Ethereum, BNB Smart Chain, Polygon and other EVM networks, so the address alone does not tell you which network the order expects. The TRON, BNB Smart Chain and Ethereum pages show what each address looks like.
3. The coin. One coin can be listed on many networks: USDT, for example, is listed here on Ethereum (usdterc20), TRON (usdttrc20), BNB Smart Chain (usdtbsc), Solana (usdtsol), Polygon PoS (usdtmatic), Avalanche C-Chain (usdtarc20), Arbitrum One (usdtarb), OP Mainnet (Optimism) (usdtop), TON (usdtton), Celo (usdtcelo), Aptos (usdtapt). USDT sent on BNB Smart Chain to an order that expects USDT on Ethereum lands on the wrong network for that order, even though both use 0x addresses.
4. The memo. If the order page shows "This deposit needs a memo", enter it in your wallet's Memo, Tag or Comment field. Without it the deposit cannot be matched to your order and the swap will not start. Listings that use a memo include XRP, Stellar (XLM), Gram (TON), USDT on TON, Cosmos (ATOM) and Hedera (HBAR).
5. The deposit address. Use the copy button or the QR code on the order page, then compare the whole address in your wallet before you confirm.

Address poisoning and clipboard malware

In address poisoning, a scammer sends a tiny or zero-value transfer, or a fake token, from an address whose first and last characters match an address you have used, so it shows up in your history. Copy from that history later and you paste their address. Etherscan explains the method in its guide to address poisoning. Clipboard malware does the same on your device: it swaps a copied wallet address for the attacker's when you paste, as Microsoft's security team has documented.

• Never copy a deposit address from your wallet history. Each order has its own address, so take it from the current order page every time.
• After pasting, compare the whole address, not only the first and last characters.
• Copy your payout address from your wallet's receive screen or a saved contact, then check the whole address in the swap form before you create the order.

Not sure? Start with a small swap

If a coin, network or wallet is new to you, make a first swap a little above the minimum shown on the pair page, for example USDT on TRON to BTC. When it arrives, create a new order for the rest. Never send a second deposit to the first order's address, because each order gets its own one-time address. Each order pays its own network fees.

If something goes wrong

1. Stop. Do not send more coins to fix it, and do not send coins to anyone who offers help.
2. Open the order page and read the status. Waiting means no deposit has been seen yet; confirming means the network is still confirming it. If the page only says Checking, Track Order shows the status by name. Swap statuses explained covers each one.
3. Write to @xswap_to with the transaction ID (Ref. ID on the order page), the coins and networks, and your deposit hash. Contact lists what else helps.
4. Sent on the wrong network or without the memo? Read sent crypto to the wrong network or memo and destination tags, then contact support. Some cases can be sorted out and some cannot, so no outcome can be promised.
5. Ignore anyone who offers to recover lost crypto for an upfront fee. The US Commodity Futures Trading Commission describes this as recovery fraud, a form of advance-fee fraud aimed at people who already lost money.

Questions people ask

More guides

Start a swap →