What is the biggest red flag of a fake virtual Visa card?

A claim of 'anonymous' issuance with 'no KYC'. Every real Visa card is issued by a bank that operates under FATF AML rules; KYC is not optional. Any vendor that brags about skipping it is, by definition, not issuing a real Visa card.

Why is being asked for a wallet passphrase a red flag?

A wallet passphrase (seed phrase) gives full, irrevocable control over the wallet. No legitimate service ever needs it. Anyone asking for it is preparing to drain the wallet.

Is a 'small fee to activate withdrawals' ever legitimate?

No. Real exchanges deduct withdrawal fees from the withdrawal amount on-chain. Demanding a separate top-up before a withdrawal will 'work' is a standard advance-fee pattern.

Checklist · Updated 26 May 2026

10 red flags of virtual Visa card & Telegram crypto scams

These ten patterns recur across the REX · Virtual Visa Card exchange and across the majority of crypto-card and Telegram scams documented by IC3, FTC, and Chainabuse over the last several years. If you spot two or more of them in a single conversation, the safe call is to walk away.

Unsolicited Telegram "support"

A search result or ad sends you straight to a Telegram operator instead of a regulated customer-service portal. Telegram is the operator's destination, not yours.

"No KYC" anonymous Visa card

Real Visa cards are issued by banks under FATF AML rules. KYC is not optional. A "no-KYC anonymous Visa card" is not a real product.

Wallet passphrase request

You are asked to "log in" with your seed phrase, recovery phrase, or 12/24-word passphrase. Never enter a seed phrase anywhere outside the wallet app itself. This is the single most dangerous request in crypto.

QR-code "activation"

You're asked to scan a QR code to confirm a tiny fee. In documented drainer attacks the underlying transaction approves unlimited token spending to a malicious smart contract.

Withdrawals need a deposit

You can deposit instantly but can't withdraw without sending an additional "activation" or "network" fee. Real exchanges deduct fees on-chain from the withdrawal itself.

Locked "bonus"

A surprise bonus appears in your balance and is then locked behind "wagering", "staking", or "trading" requirements. That is a casino mechanic, smuggled into a supposed payments product.

Escalating fees

10 TRX becomes 30 TRX becomes $10,000 USDT for "Private Access". Each refusal is followed by a new variant of the same demand.

No proof of withdrawal

Despite claims of hundreds of thousands of users, the operator cannot or will not produce a single on-chain transaction hash showing a real customer withdrawal.

Appeals to authority

"300,000 users", "30,000 reviews", "we value our reputation", "we operate with the utmost integrity" — used as a substitute for verifiable proof. Auditable numbers, not adjectives, are what real businesses provide.

Pressure and urgency

"Just 5 minutes", "the QR will expire", "top up now and we'll process immediately". Urgency is a manipulation tactic; legitimate services don't need it to operate.

If you matched two or more

What to do next

Stop sending crypto. Any new "fee" or "release" payment is part of the scam.
Revoke wallet approvals at revoke.cash.
If you entered a seed phrase, move all remaining assets to a fresh wallet on a clean device immediately.
Save dated screenshots of every chat, every screen, every fee request.
Work through the full six-phase reporting tutorial — local police, national cybercrime, on-chain channels, platform takedowns, public awareness.
If the operator was the REX · Virtual Visa Card / @Rexchangebot / @Rexchanges, email beware@rexscammers.com so your case can be added to the public record.

Right of reply & disclaimer

Public-interest publishing

This page is general guidance based on documented crypto-fraud playbooks. It is not legal advice. See the full Right of Reply for the editorial policy.