Exodus never uses a hyphenated domain. Scammers do.

A website named eng-exoduswallet.com looks like it belongs to Exodus, but the name alone shows it does not. Exodus lists every domain it uses, and this one is not on the list.

Is eng-exoduswallet.com an official Exodus website?

No. eng-exoduswallet.com is not an Exodus domain. Exodus's main website is exodus.com and its help center is under exodus.com/support. Most wallet services connect to *.exodus.io or *.a.exodus.io, according to Exodus's published domain list . Any address outside those patterns is not run by Exodus Movement, Inc., even if it has "exodus" in the name. So treat it as unofficial, and never enter your 12-word recovery phrase or private keys on it.

Quick Answer: eng-exoduswallet.com is not an official Exodus site. Exodus uses exodus.com, exodus.com/support, and *.exodus.io or *.a.exodus.io for wallet services . Hyphenated names with extra words copy a common wallet-impersonation pattern. Download only from exodus.com/download, and never type your recovery phrase into any website.

When SpotedCrypto checked the domain on 2026-10-12, it did not resolve. A direct request returned a DNS error (getaddrinfo ENOTFOUND), which means no server answered at that address. A web search for the exact string found no pages that mention it. The domain does not appear among the domains Exodus says it operates .

That result has limits. We have no record of what eng-exoduswallet.com hosted, or whether it ever hosted anything. This article does not claim that this domain stole funds. What we can say is narrower: the domain is unofficial, Exodus does not operate it, and its name follows a pattern you should not trust.

The pattern is easy to spot once you know it. Lookalike wallet sites usually:

• Add a prefix or suffix such as "eng-", "app-", "-wallet" or "-support" to the real brand name.
• Use hyphens to make the address look like an official sub-page or a regional version.
• Use a .com ending so the address looks normal at a glance in the browser bar.
• Show up through sponsored ads or manipulated search results. Exodus warns that scammers use both tactics to push clones above the real site .

A domain that doesn't load today can still be dangerous. Scam domains are often registered, used briefly, and dropped, and the same name or a close variant can come back later. The safer habit is to stop judging each suspicious address and check every address against Exodus's own list. If it isn't on the list, close the tab.

The rest of this guide covers which domains Exodus actually uses, how a documented lookalike site tricked users, how to verify a genuine download, and what to do if you have already typed your phrase into a site you now doubt.

Which domains does Exodus actually use?

Exodus lists the web addresses it controls on its own help center. Its main website is exodus.com, its help center is under exodus.com/support, and most wallet services connect to *.exodus.io or *.a.exodus.io . Treat any address that doesn't match one of these exactly as unofficial, no matter how professional the page looks. This includes hyphenated names such as eng-exoduswallet.com. The full list is in the Exodus support article on official domains. It is the one reference worth bookmarking.

Downloads come from one place only. Exodus names exodus.com/download as the only official source for Exodus Mobile, Exodus Desktop and the Exodus Web3 Wallet. On phones, it tells users to install only from the official Apple App Store or Google Play listing . Any download link on a forum, a social media post, a sponsored search result or a mirror site falls outside that list, even if the file name looks right.

The table below matches each official address or channel with its purpose and with the lookalike patterns most often used to copy it. The patterns are general warning signs drawn from how wallet-impersonation domains are usually built. They are not a list of confirmed malicious sites.

The domain list and the download list are sources ①–② in the table . The support channels come from Exodus's contact page .

Support follows the same rule. According to the Exodus contact page, the only real support channels are support@exodus.com and the purple chat icon on exodus.com . Exodus also says it has no phone support and no Telegram support, and that emails can be spoofed to look like they come from @exodus.com or @exodus.io . A message showing an Exodus sender address does not prove it came from Exodus.

In practice, a quick check against this list covers most cases:

• Read the domain from right to left. The part just before .com or .io is the real owner. In wallet.exodus.com.example.net, the owner is example.net, not Exodus.
• Reject hyphens and extra words. No domain on the official list has a hyphen or words like "wallet" or "eng" added to the brand name.
• Type or bookmark the address. Exodus warns that scammers buy sponsored ads and manipulate search rankings so clones show up first .
• Start support contact yourself. Only use support@exodus.com or the chat icon on exodus.com. Don't reply to links or contacts you didn't start.

How do lookalike Exodus sites work? A documented case

A lookalike Exodus site copies the look of exodus.com on a different domain, then gets you to type your wallet's secret phrase into it. Whoever has that phrase controls the funds. One documented case is the "Exodus Clear Signing Activation" scam. It ran on exodus-clearsinging[.]com, which PCRisk describes as a close visual copy of the real site, in a guide last updated in April 2025 . This case shows how an ordinary-looking page can lead you to give up your recovery phrase.

The domain itself is the first clue. "exodus-clearsinging" uses the same tricks as "eng-exoduswallet": a hyphen, extra words, and in this case a misspelling ("singing" instead of "signing") that is easy to miss. At a quick glance, the brand name at the front is all most people check.

According to PCRisk's analysis, the scam works in three steps :

1. A believable reason to act. The page offers to "activate" a security feature called clear signing. The idea sounds technical and responsible, so you feel careful clicking it, not reckless.
2. A staged failure. Clicking the "ENABLE CLEAR SIGNING" button produces a fake error. Nothing actually broke. The error exists to make the next step look like troubleshooting.
3. The harvest. After the "error," the site asks you to type your wallet passphrase in by hand. This is the only thing the page was built to collect.

The fake error is the key step. If a site asked for your 12-word phrase right away, many people would get suspicious. Showing a failure first makes typing the phrase feel like a fix. Exodus never asks for your phrase to enable, fix, verify or validate anything. A real feature does not need it.

Getting people to the page is the other half of the scheme. Exodus says scammers buy sponsored ads and manipulate search rankings so that clone sites appear above the real one . If you search "Exodus wallet" and click the first result, you may land on a clone. Its scam-awareness guidance recommends a bookmark for this reason: your own saved link can't be outbid by an ad.

PCRisk's assessment of the Clear Signing scam warns that crypto theft is generally irreversible. Once the passphrase is submitted and the wallet is drained, there is usually no way to get the funds back. (source: PCRisk, Exodus Clear Signing Activation Scam guide, paraphrased)

Irreversibility is the reason prevention matters more than recovery. With a card payment, you can call the bank and dispute the charge. A blockchain transfer signed with your keys has no chargeback and no central party who can reverse it. A self-custody wallet like Exodus has no "forgot password" option either, because the 12-word phrase is the wallet.

The general lesson is broader than this one domain. Clone sites are often taken down and come back under new names, so a list of known bad URLs will always be out of date. Use a rule instead: if any website, pop-up or form asks for your secret phrase, stop. That rule caught the Clear Signing scam, and it will catch the next lookalike no matter what domain it uses.

How can you verify an Exodus download is authentic?

To check that an Exodus download is real, look at where it came from and then at the file itself. Exodus says the only official source for Exodus Mobile, Exodus Desktop and the Exodus Web3 Wallet is exodus.com/download. On phones, install only from the official Apple App Store or Google Play listing . A link in an email, ad, Telegram message or forum post does not count as an official source, however convincing it looks. Once the file is on your device, the operating system can confirm who signed it. Advanced users can also compare a cryptographic hash. Both checks take about a minute (source: Exodus Support).

An app-store listing also needs a second look. Exodus warns that fake apps sometimes get past Apple and Google review. They use screenshots copied from the real app and pad their ratings with fake reviews . A high star rating and a familiar logo do not prove anything. The safer way in is to start at exodus.com/download and follow its link to the store, so you land on the listing Exodus itself points to.

After the file is downloaded, check it against these signals before you open it:

• Windows: Right-click the installer, open Properties, then the Digital Signatures tab. The signer should be "Exodus Movement, Inc." If the tab is missing, or shows any other name, delete the file .
• macOS: If macOS warns that the app is from an unidentified developer, do not open it. Do not override Gatekeeper to "get it working." That warning is the check doing its job .
• Advanced (any OS): Work out the hash of the file you downloaded and compare it with the release hashes listed on the download page. That list is signed by the "exodusmovement" account on keybase.io, so you can confirm it wasn't changed . A hash that doesn't match means the file isn't the one Exodus published.

The hash check is the strictest of the three. A signature check shows who signed a file. A hash check shows the file is byte-for-byte the same as the official release. For traders who keep a meaningful balance in a hot wallet, it is worth the few extra steps on each new install or major update.

The habit that prevents most problems starts before any download: bookmark the real site and stop searching for it. Exodus notes that scammers buy sponsored search ads and manipulate rankings so that clone sites show up above the real one (source: Exodus Support — domains; Exodus Support — scams). A typed search for "Exodus wallet download" is exactly where a hyphenated lookalike can get in front of you. A saved bookmark to exodus.com skips that risk completely.

Signs that should stop an install right away:

• The download link came from a domain other than exodus.com, or from a store listing you reached without going through exodus.com/download.
• The Windows signer is not "Exodus Movement, Inc.", or there is no signature at all.
• macOS flags the app as coming from an unidentified developer.
• The file's hash does not match the keybase-signed list.
• The installer, or a page around it, asks for your 12-word recovery phrase before the wallet has even been created.

What scam patterns does Exodus say to watch for?

Exodus says its support staff will never ask for your 12-word recovery phrase, your sync QR code or your private keys. They will also never ask you to "verify" or "validate" a wallet . That one rule covers most attacks on Exodus users. A message that asks for any of these items is not from Exodus, however official it looks (source: Exodus Support, 2026-10).

The reason is simple. Exodus is a self-custody wallet, so the recovery phrase alone controls the funds. Whoever has the phrase can rebuild the wallet on any device. Nobody at the company has a reason to ask for it, and nobody needs it to fix a problem.

Exodus also lists the channels it does not use. It has no phone support and no Telegram support. According to Exodus's contact page, the only real support channels are email to support@exodus.com and the purple chat icon on exodus.com . Two rules follow from that:

• A "support agent" who contacts you first is probably a scammer. Exodus says contact you did not start is probably a scam. This includes direct messages on X, Discord or Telegram, and calls from someone claiming to work at Exodus.
• The sender's address is not proof. Emails can be spoofed to look like they come from @exodus.com or @exodus.io. A real-looking sender line tells you nothing about who sent the email .

Exodus's scam guidance names specific message types as red flags. If you see any of these wording patterns, close the message without clicking anything:

• "Your wallet is linked to another platform." Exodus calls this a scam. It is usually followed by a request to "unlink," "resync" or "re-verify" by entering your phrase.
• Urgent "act now" warnings. Countdown timers, threats that the account will be suspended, and "final notice" subject lines are meant to make you act before you think.
• Payment demanded to unlock a wallet. Exodus cannot freeze a self-custody wallet, so a fee to "unlock" one is a scam.

Some scams pretend to come from an Exodus partner instead of Exodus itself. Exodus documents a case where a fake email claiming to be from Gemini told users to restore a wallet using a recovery phrase that it supplied. The scammers already controlled that phrase, so any funds sent to the restored wallet went straight to them (source: Exodus Support, 2026-10) . This lure works in the opposite direction from most phishing. It does not ask for your phrase. It gives you one, and gets you to deposit into a wallet the attacker can already drain. Only use a recovery phrase that your own device generated while you set up the wallet.

To check any message about your Exodus wallet, ask three questions. Did I start this conversation? Is it reaching me through support@exodus.com or the chat icon on exodus.com? Does it ask me to type, scan, share or import a phrase, QR code or key? If the answers are no, no and yes, it is a scam.

Real Exodus changes scammers could exploit as 'migration' lures

Exodus made two real product changes in late 2026, and both could make a fake "migrate your wallet" message sound believable. The mobile app lost WalletConnect and its in-app dApp browser on September 13, 2026. The Web3 browser extension was discontinued and stopped working on October 1, 2026 . Neither change requires you to enter your 12-word phrase anywhere. Any message that asks for it is not from Exodus, no matter which real change it mentions.

According to CryptoSlate's Exodus review (updated October 2026), the changes were:

• September 13, 2026: WalletConnect and the in-app dApp browser were removed from Exodus Mobile .
• October 1, 2026: the Exodus Web3 browser extension was discontinued. It no longer shows balances or processes transactions .

These changes matter for security because they are real. If you used the extension, you have probably already noticed that it went blank. A scammer does not need to invent a reason to contact you. They can point to something you can check yourself. A message that says your extension "has been retired, so import your wallet into the new version to keep your funds" fits what you have seen. So does "reactivate your mobile wallet to restore dApp access." In both cases, the true part of the story is there to make you trust the false part.

We need to be clear about one thing. In our research up to October 12, 2026, we found no reported phishing campaign that uses these specific changes. This section describes a risk to watch for, not a confirmed attack. Still, the method has a precedent. Exodus has documented a fake partnership email that told users to restore a wallet whose phrase the attackers already controlled (source: Exodus Support, scam guide). The "Exodus Clear Signing Activation" scam also presented itself as a feature you had to enable (source: PCRisk, 2025-04). A "migration" or "reactivation" lure would follow the same pattern.

The rule does not change: no legitimate Exodus update ever requires you to type your recovery phrase into a website, form or pop-up. When Exodus changes the product, you update the app from exodus.com/download or the official app-store listing. Your existing keys stay on your device. Exodus Support also says it will never ask you to "verify" or "validate" a wallet. If you are unsure about any notice about the extension shutdown or the mobile changes, check it through support@exodus.com or the chat icon on exodus.com. Do not follow the link in the message.

Is the real Exodus wallet right for you? Decision framework

The real Exodus wallet is a free, self-custody wallet made by Exodus Movement, Inc. of Omaha, Nebraska . It fits users who want to hold their own keys across several chains through one simple interface. It fits less well if you need fully open-source code or the lowest possible trading costs. "Self-custody" means only you control the private keys. There is no account sign-up, and the keys are generated locally on your device, according to CryptoSlate's Exodus review (updated 2026-10). It follows that nobody at Exodus can recover your funds if you lose your recovery phrase. It also means nobody at Exodus will ever need that phrase from you.

The product details below come from CryptoSlate's October 2026 review and Exodus's own tutorials. Use them to judge fit before you think about convenience. Note that some features in older Exodus videos are no longer part of the product.

Setup is designed for beginners. Exodus's mobile tutorial shows the 12-word phrase revealed by pressing and holding on the screen, and Exodus warns never to screenshot it. Bitcoin and Ether are active by default. The app can be locked with a PIN and biometrics, and swaps cover 50+ assets (video: Exodus). An older desktop tutorial shows apps such as Compound Finance for DAI interest, SportX betting and ATOM staking, plus Trezor hardware-wallet support (video: Exodus). Treat those as older features that may not match the current wallet.

The company's finances are also relevant to how much you trust the provider. According to CoinDesk (2026-05), Exodus (EXOD) is shifting toward payments:

• In Q1 2026 it cut its bitcoin holdings from 1,704 to 628 BTC, worth $42.8M .
• Cash, cash equivalents and stablecoins rose to $74.4M from $5.2M .
• Revenue fell 36.8% year over year to $22.7M, and the net loss was $32.1M .
• The acquisition of Monavate and Baanx closed on May 1, 2026 .
• On December 16, 2025, OFAC announced a $3,103,360 settlement with Exodus over apparent sanctions violations from 2017–2019 .

In a self-custody wallet, the company never holds your coins, so these figures do not put your balance at risk. They do affect how long the product is likely to be supported and which features it focuses on.

Fit by profile:

• Beginner: A good fit if you can store a 12-word phrase offline. The guided setup and in-app buying lower the learning curve.
• Mobile-first user: Workable for holding, swapping and buying. Note that WalletConnect and the dApp browser were removed from mobile in September 2026.
• Multichain trader: Convenient for spreading funds across about 10 major networks. Compare swap spreads with exchange prices before large trades.
• Hardware-wallet user: Before you rely on Trezor pairing, check that it is still supported in the current version. Keep large holdings on the hardware device.

What to do if you entered your phrase on a fake site

If you typed your Exodus recovery phrase into an unofficial site, assume the wallet is compromised. Act right away: create a new wallet with a fresh 12-word phrase, move every remaining asset into it, and then contact Exodus through its official channels . Changing your PIN or password won't help. Anyone who has the phrase can rebuild the wallet on their own device, and they can do it without your knowledge. Your best chance is to move funds before they do.

Because Exodus is a self-custody wallet, your private keys are generated on your own device. No account is involved, so no central party can freeze or reverse a transfer . PCRisk's analysis of a similar Exodus phishing page notes that crypto theft is generally irreversible . Every minute counts.

Immediate recovery steps

1. Create a new wallet with a brand-new phrase. Do this from an Exodus install you know is genuine, downloaded from exodus.com/download or the official App Store or Google Play listing .
2. Move your funds right away. Send each asset from the exposed wallet to the new one. Start with the largest balances. Keep enough of each network's native coin to pay the transaction fees.
3. Stop using the exposed phrase for good. Don't restore it, don't import it, and don't fund it again. Treat any wallet created from that phrase as belonging to someone else.
4. Report it only through official channels. Email support@exodus.com or use the purple chat icon on exodus.com. Exodus has no phone support and no Telegram support . Anyone who contacts you claiming to be an Exodus "recovery agent" is running a second scam.

Handling your new phrase

Your new phrase only keeps your funds safe if you protect it. Exodus shows the phrase only when you press and hold on the screen, and it tells users never to take a screenshot of it (video: Exodus). Write it down offline. Never type it into any website, form, browser pop-up or chat window. According to Exodus, its support staff will never ask for your recovery phrase, sync QR code or private keys. They will also never ask you to "verify" or "validate" a wallet .

Prevention checklist for next time

• Bookmark exodus.com and open it only from that bookmark. Scammers buy sponsored ads and manipulate search rankings so clone sites show up first .
• Check the domain. Real services run on exodus.com, *.exodus.io or *.a.exodus.io. Any hyphenated variant, such as eng-exoduswallet.com, is not Exodus.
• Verify every installer. On Windows, the signer should read "Exodus Movement, Inc." On macOS, don't open an app that triggers an unidentified-developer warning. Advanced users can check the release hash against the list signed by "exodusmovement" on keybase.io .
• Ignore contact you didn't start. Be suspicious of any message that warns your wallet is "linked to another platform," demands payment to unlock it, or pushes an urgent "migration."
• Treat theft as permanent. Plan as if you will never recover stolen funds, because you almost certainly won't.

The bottom line: Exodus will never ask for your phrase on any domain, so only a scammer would ask for it. If you already gave it out, move your funds to a new wallet within minutes, and contact support afterward.

Frequently Asked Questions

Is eng-exoduswallet.com legit?

No. eng-exoduswallet.com is not an Exodus domain, and Exodus does not operate it. Exodus lists the domains it uses: its main site is exodus.com, its help center is under exodus.com/support, and most wallet services connect to *.exodus.io or *.a.exodus.io . The hyphenated name is not on that list (source: Exodus Support, Which domains does Exodus use?). When we checked on October 12, 2026, the domain did not resolve and returned a DNS error . We have no evidence of what it hosted, if anything. Its naming pattern matches lookalike sites used to impersonate crypto wallets, so don't enter any wallet details on it.

What is the official Exodus website?

The official Exodus website is exodus.com. Exodus says the only official source for Exodus Mobile, Exodus Desktop and the Exodus Web3 Wallet is exodus.com/download. On phones, it says to install only from the official Apple App Store or Google Play listing (source: Exodus Support, verifying your download). Exodus also recommends bookmarking the real site. Scammers buy sponsored search ads and manipulate search rankings so that clone sites appear above the real one (source: Exodus Support, crypto scams to watch for).

Does Exodus Support ever ask for my 12-word phrase?

Never. Exodus Support will never ask for your 12-word recovery phrase, your sync QR code or your private keys. It will also never ask you to "verify" or "validate" your wallet (source: Exodus Support). Exodus has no phone support and no Telegram support. Its only real support channels are support@exodus.com and the purple chat icon on exodus.com (source: How do I contact Exodus Support?). Emails can be faked to look like they come from @exodus.com or @exodus.io. If someone contacts you first and asks for your phrase, treat it as a scam.

How do I check that my Exodus installer is genuine?

Exodus describes three checks (source: Exodus Support):

• Windows: open the installer's properties. The Digital Signatures tab should show "Exodus Movement, Inc." as the signer.
• macOS: if macOS warns that the app is from an unidentified developer, do not open it.
• Advanced users: compare the file's hash with the release hashes listed on the download page. That list is signed by the "exodusmovement" account on keybase.io .

Exodus also warns that fake apps sometimes get past app-store review by using copied screenshots and fake reviews. Even on Apple's or Google's store, check that you are on the official listing.

I typed my recovery phrase on a suspicious site. What now?

Assume the wallet is compromised and act within minutes. Use the official app from exodus.com/download to create a new wallet with a new 12-word phrase. Move all your funds to it right away, then email support@exodus.com (source: Exodus Support). Don't reuse the exposed phrase, and don't import it into another app. Speed matters because crypto theft is generally irreversible, as PCRisk notes in its guide to the "Exodus Clear Signing Activation" phishing scam on exodus-clearsinging[.]com (source: PCRisk, 2025-04).

Enjoyed this article? Subscribe to get new stories by email whenever they're published.

Subscribe