Security & official addresses

Scammers copy trading sites. Use this page to check that you are talking to the real X Desk.

Our official website

The only official address is . Look for the padlock, and read the address letter by letter. Do not click payment links from chats, ads or direct messages.

Official crypto receiving addresses

We only accept crypto at the addresses below. Any other address claiming to be X Desk is fraud.

We will never

ask for your password, 2FA codes, exchange API keys or seed phrase, by email, chat or phone;
ask you to send crypto to a personal address or to "verify" a wallet;
pressure you to pay within minutes, or offer a "special" price outside this website;
need withdrawal permission on your exchange keys. Use read-only keys.

Spot a fake email

Set an anti-phishing code in your account. Every email from us shows it. If an email says it is from X Desk and the code is missing or wrong, delete it.

How we block scammers at sign-up

Email confirmation: no one can use an account until the email is proven with a one-time link or 6-digit code.
Automated-signup defence: a short invisible computation and a hidden trap field stop bots without puzzles.
Rate limits and temporary-email blocking.
Risk scoring: suspicious sign-ups are held for a person to review.
Passwords are stored as salted scrypt hashes and checked against common-password lists. The admin back office requires two-factor codes.
Changing our payout addresses needs a password plus a 2FA code, and every change is emailed to the owner.

Report a problem

Think you found a fake site, a phishing message or a vulnerability? Email our support address with a link or screenshot. We respond to security reports first.