Crypto Impersonation: Verify the Contact, Not Just the Company

A genuine name can be borrowed

Recognising a company does not establish that the person messaging you represents it. An impersonator can reuse a name, logo or genuine registration detail. A joint SEC and FBI investor alert describes such tactics and advises independently verifying contact information. ^[1] The useful distinction is between the existence of an organisation and the authenticity of this particular communication. The alert is general investor education, not a determination about any named UAE business in this article.

Create a second route to the organisation

Do not make the incoming message the sole source of the verification channel. Locate an independently established official route and ask whether the person, proposal and requested action are authentic. A hypothetical sender might quote an accurate company number while supplying a different payment destination. The correct number does not answer the payment question. Keep the original communication and the independent response separate in your record, without sharing passwords, private keys or recovery phrases.

Check authority and contact identity separately

A licence check asks which legal entity may perform which activity. Contact verification asks whether you are dealing with that entity through an authentic channel. Neither should be skipped because the other appears satisfactory. In Dubai, consult VARA’s current official notices and register where relevant to the jurisdiction and activity. ^[2] This article reports no new enforcement action and does not infer that a particular provider is safe from the absence of a warning.

Resist the demand to collapse the checks

A message demanding immediate action can make independent verification feel like an obstacle. Treat it as a separate requirement, not a courtesy owed to the sender. Custody responsibilities and Transfer risks remain unresolved even after contact identity is confirmed. Crypto in the UAE is the related book for regional reading. If authenticity cannot be established, do not treat polished presentation or familiarity with your name as a replacement for evidence.