Moon.com scam check: how to know you are on the real site

Why lookalikes exist

A new betting product with a reported link to the founders of Stake is exactly the kind of launch that attracts imitators. During our research on Moon we saw a domain that combined “moon” and “stake” showing up in search results with a malware warning attached. It has nothing to do with Moon.com. There will be more like it: typo domains, sites on other extensions, and social accounts that copy Moon’s name and imagery.

Add to that the ordinary confusion around a short word. Several unrelated businesses are called Moon, and the domain itself was the home of Moon Travel Guides until 2025, so old links and old reviews about other companies still surface. None of that is the betting site.

How to confirm you are on the real Moon.com

Read the address bar. The genuine site is moon.com. Not moon-anything.com, not moon.something-else, not a longer name with “moon” inside it. The help centre lives at help.moon.com, a subdomain of the same name. If the address is anything else, close the tab.

Arrive by a route you control. Type the address yourself, use a bookmark you made after a real login, or use our referral link, which routes to moon.com with our code attached. Do not follow links sent by direct message, dropped in a group chat, or shown in an advert you cannot verify.

Check the padlock and the name together. A padlock only tells you the connection is encrypted. Scam sites have padlocks too. What matters is the padlock on the right domain.

Cross-check announcements. Moon’s official X account is @getonmoon. A bonus, giveaway or “important security update” that does not appear there did not come from Moon.

Look for what the real site asks for. The real Moon wants an email, a password, and then a government ID and proof of address before your first deposit. It never asks for a wallet seed phrase, a private key, or a “test transaction” to unlock funds.

Never enter a seed phrase. Anywhere.

This is the rule that saves the most money. Moon is a website with an account and a crypto cashier. You deposit by sending coins to an address Moon gives you, and you withdraw by giving Moon an address of yours. At no point does a legitimate process need the seed phrase or private key of your wallet. Anyone who asks for it, whether on a page that looks like Moon, in a support chat, or in a DM from an account with Moon’s logo, is trying to empty your wallet. Close the window.

The scripts to recognise

Scams around a product like Moon follow a few patterns. Knowing the shapes is most of the defence.

• The fake support agent. Someone replies to your public post or messages you first, offering to fix a withdrawal or verification problem. They ask for your login, a code, or a seed phrase. Real support does not slide into your DMs.
• The verification bonus. “Send a small amount to confirm your wallet and receive a bonus.” There is no such mechanic. Moon has no welcome bonus at the time of writing; the reward that exists is rakeback on fees, inside the account.
• The giveaway. A copy of Moon’s branding promising to double whatever you send. Nobody doubles crypto.
• The urgent security update. A link telling you to re-verify or lose access. Go to moon.com yourself, log in, and see whether anything is actually wrong.

If you think you have been caught

Move fast and in this order. Change the password on your real Moon account if you reused it anywhere. Move any crypto out of a wallet whose seed phrase you typed into a suspicious page, because that wallet is no longer yours. Report the fake account on the platform where you saw it. Then, once you are calm, go back through the safety checklist.

The genuine Moon in one paragraph

It is at moon.com, operated by Moon International Limited (Comoros, registration 16151), with a help centre at help.moon.com and an X account at @getonmoon. It takes email and password to register, wants ID and proof of address before a deposit, accepts crypto only, and offers a play-money mode. Anything that departs from that description is not it. When you are ready, use our link below so the referral is attached and the domain is right.