Crypto scam / wallet-drainer
Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.
Is p2p.cryptomus.com legit or a scam?
Official P2P crypto exchange subdomain of Cryptomus; parent company hit with record FINTRAC fine for AML violations; mixed user complaints about fund theft and withdrawal failures.
These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
Analysis Summary
MT Intelligence
Cryptomus operates as a legitimate, FinCEN-registered Money Services Business incorporated in British Columbia. However, the parent company Xeltox Enterprises Ltd. received a record CAD $176.96 million penalty from FINTRAC in October 2025 for 2,593 anti-money-laundering violations, including failure to report suspicious transactions linked to fraud, ransomware, and sanctions evasion. independent review aggregator shows a 2.7/5 rating from 503 reviews with multiple recent complaints of stolen funds and failed withdrawals, though the company responds to some disputes. Independent reviewers on Cryptwerk and ProductHunt report positive experiences with escrow and dispute resolution, suggesting the platform itself has functional safeguards. The subdomain p2p.cryptomus.com is not a clone and appears to be the official P2P section. The combination of a major regulatory fine, mixed user complaints, and Russia-linked operational ties creates elevated risk despite legitimate registration and some positive user feedback.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for p2p.cryptomus.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- p2p.cryptomus.com is the official P2P trading subdomain of cryptomus.com, offering peer-to-peer crypto trades (BTC, USDT, etc.) with low fees (0.1% taker).
- Parent company Xeltox Enterprises Ltd. received a record CAD $176.96 million FINTRAC fine in Oct 2025 for 2,593 AML violations, including failure to report suspicious transactions linked to fraud, ransomware, CSAM, and sanctions evasion; co
- Trustpilot shows mixed reviews (2.7/5 from 503 reviews) with multiple recent complaints of stolen funds, failed withdrawals, and "scam" accusations; company responds to some.
- Older scam associations exist with a prior Cryptomus ICO (unrelated per some reviews); current platform has positive P2P feedback on Cryptwerk and ProductHunt citing reliable escrow and dispute resolution.
- Registered as MSB with FinCEN; incorporated in Canada (BC) but uses virtual Vancouver address and has no physical Canadian staff per FINTRAC findings; Russia-linked operations noted by TRM Labs and Krebs on Security.
- Review sites like CryptoRadar note past scam reports under the name but deem current operations separate and legitimate with CertiK audits and security features; ScamDoc/Gridinsoft give moderate/low trust scores.
- Platform publishes its own guides on avoiding P2P scams; no direct scam reports found specifically targeting the p2p.cryptomus.com subdomain.
- Trustpilotopen
"This people are scammers stay away, they took my 500 USDT, I made a withdrawal to my trust wallet but it never arrived"
- Trustpilotopen
"They stole my money. I have sent them everything. 5 months and they keep saying ur case under investigation"
- Trustpilotopen
"Guys n gals this is a scam website take care"
- Redditopen
"Cryptomus SCAM going live again. REMINDER. Im a guy who was scammed by a company called CRYPTOMUS back to 4 years ago."
- Bitcointalkopen
"I can confirm that cryptomus.com is shady at best and that they think that having a company registration is enough to make them a legitimate business."
- Cryptwerkopen
"The platform is reliable, and there are always plenty of offers available. I’ve never run into scammers, and all the coins have been clean."
- Cryptwerkopen
"I often use this P2P exchange... Recently, I encountered a scammer who faked the payment proof. I opened a dispute, and it was resolved quickly — they returned my funds."
- ProductHuntopen
"I like that they're a legit, serious company. They've already saved us a couple of times from scammers trying to launder money through our service."
- 0xProcessingopen
"Yes, Cryptomus is an official and legitimate payment gateway. The company is registered as a Money Services Business (MSB) with FinCEN."
Xeltox Enterprises Ltd. (operating as Cryptomus, formerly Certa Payments Ltd.), incorporated in British Columbia with Vancouver address (mailbox service). Registered MSB with FinCEN. Primary operations appear Russia-linked/Eastern Europe (Uzbekistan/Spain reps). Appealing record FINTRAC fine.
Our research found 5 scam reports and 4 positive reviews across independent platforms. independent review aggregator complaints allege stolen funds, failed withdrawals, and unresolved cases lasting months; the company responds to some disputes. Reddit and Bitcointalk posts reference scam associations, though some distinguish between an older ICO and current operations. Cryptwerk and ProductHunt reviewers report positive experiences with escrow and dispute resolution. The parent company Xeltox Enterprises Ltd. received a record CAD $176.96 million FINTRAC fine in October 2025 for 2,593 anti-money-laundering violations, including failure to report suspicious transactions linked to fraud, ransomware, CSAM, and sanctions evasion. Business registration confirms the company is incorporated in British Columbia, Canada, and registered as a Money Services Business with FinCEN, though operations are linked to Russia and Eastern Europe with a virtual Vancouver address and no physical Canadian staff per FINTRAC findings.
Scam Network Intelligence
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
- Links to 7 social profiles.
Domain & Encryption
Server Reputation
Scam-Type Likelihood
2 scam-type patterns detected
0 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as crypto fraud / wallet-drainer.
- AI analyst categorised the site as crypto-themed.
- Referral-program structure detected.
0 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as crypto fraud / wallet-drainer.
- AI analyst categorised the site as crypto-themed.
- Referral-program structure detected.
Crypto scam / wallet-drainer indicators
The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.
- Do not interact with p2p.cryptomus.com
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
- Never paste your seed phrase anywhere
Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.
- If you already connected a wallet
Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.
- OpenReport the wallet and URL
File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.
- Our automated security review flags p2p.cryptomus.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
- No — p2p.cryptomus.com scored 25/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
- Yes. p2p.cryptomus.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 55 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- p2p.cryptomus.com is 8.8 years old, registered on 8/31/2017 through NameCheap, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 91 antivirus engines in our malware network report p2p.cryptomus.com as clean.
- No. p2p.cryptomus.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- p2p.cryptomus.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Independent trust-rating sites currently show the following for p2p.cryptomus.com: ScamAdviser: 2/100. Those scores come from user reviews and their own heuristics, so they are worth comparing against our verdict.
Final Verdict
p2p.cryptomus.com is the official P2P trading subdomain of Cryptomus, a Canadian-registered crypto exchange. The parent company faced a record CAD $176.96 million FINTRAC fine in October 2025 for 2,593 AML violations including failure to report suspicious transactions tied to fraud and ransomware. Multiple independent review aggregator complaints allege stolen funds and failed withdrawals, though some independent reviewers cite working dispute resolution. Do not deposit funds without understandi
Other Dangerous reports
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.