Quick answer
Yes, cashing out crypto is safe when four things check out every time: the service is a named company that shows its fee before you send, your seed phrase and passwords never leave your hands, the coin, network and address match your order, and the payout details are typed correctly. Most money is lost to scams and impersonators that reach people before the cashout, not to the sale itself.
So the useful question isn't only "is cashing out safe?" It's "how do I know I'm dealing with the real thing?"
This guide answers it with four checkpoints, a last-look checklist for the moment before you press Send, and a plan for the first hour if something goes wrong.
Is cashing out crypto safe?
Yes. Selling crypto for everyday money is safe when you check four things: who is paying you, who holds your keys, what you send, and where the money lands.
Why do the checks come first? A crypto transfer usually can't be pulled back. The FTC warns that crypto payments "typically are not reversible", so there's no chargeback to fall back on.
Picture every cashout as four checkpoints in a row. Pass all four and you've shut the doors most losses come through.
Where do people actually lose money?
Most crypto losses come from fraud that finds people through messages, ads and copycat sites. The FBI's 2025 Internet Crime Report breaks it down by crime type:
Reported 2025 losses in FBI complaints with a crypto link, by crime type
Now look at the second bar. Fake tech and customer support desks took $1.23 billion in crypto. That's the scam most likely to show up mid-cashout, when you're waiting on a payment and searching for help.
Where does each loss begin? Usually at one of five moments:
A "support agent", a recruiter or a new friend who brings up crypto first.
One letter off in the address bar, often reached through an ad or a link.
A seed phrase, password or screen share given to someone who asked nicely.
Malware or a planted lookalike in your history quietly redirects the coins.
A wrong letter in an email or IBAN sends real money to a stranger.
Every one of these tricks is taken apart in 9 crypto cashout scams and how to spot each one. This guide sticks to the checks that block them.
How can you tell a cashout service is real?
A real cashout service tells you who runs it, what it charges and where your coins go before you send a single coin. If any of those answers is missing, walk away.
Check these before your first order
- A legal company name, with the country it is registered in and a registration number.
- A fee page, and the same fee repeated inside your quote.
- An order page that shows the coin, the network, the exact amount and an order reference.
- A support channel listed on its own website, not one that turned up in your messages.
- Written terms and an AML policy that say what gets refused and which records are kept.
Here are the same questions put to Zilligo, so you can see what clear answers look like:
| Question | A clear answer looks like | Zilligo |
|---|---|---|
| Who runs it? | Legal name, country, registration number | Zilligo Payments LTD, registered in Mauritius, file C215482 |
| What does it cost? | Published fees, repeated in the quote | 1% to 2% by payout, added on top. See fees. |
| What do I send? | Coin, network, amount and reference before you pay | A one-time address and a rate held for 20 minutes |
| How do I get help? | A channel listed on the official site | Telegram, linked from the contact page. Support never messages you first. |
| What are the rules? | Terms and an AML policy in writing | The terms and the AML policy |
| How much can I move? | Limits published for each payout | $50 up to $15,000 per order, by payout. See limits. |
Put the same six questions to any service before you trust it with your coins.
Fees are the fastest test. A number you can compare beats any promise of the "best rate".
Zilligo's fee by payout
Signs of a real service
- A company name you can look up
- Fees you can read before signing up
- An order page with the exact amount
- Support you contact, never support that contacts you
- Asks only for the details your payout needs
Signs of a fake
- No company named anywhere
- A rate well above the market price
- "No fees" with no rate in sight
- Wants your seed phrase, a password or your screen
- Charges a fee to "release" your money
How do you keep your wallet and accounts locked?
Your crypto is only as safe as the secrets that control it. Keep the seed phrase offline, switch on two-factor authentication, and treat anyone who asks for a secret as a thief.
| Item | What it lets someone do | Safe to share? |
|---|---|---|
| Wallet address | Send coins to you and view that address's history | Yes |
| Transaction ID (hash) | Look up one transfer on a block explorer | Yes, with support |
| Order reference | Find your order | Yes, with support you contacted yourself |
| Seed phrase (recovery phrase) | Empty the whole wallet, from anywhere | Never |
| Private key | Spend from that address | Never |
| Exchange password or 2FA code | Sign in and withdraw your balance | Never |
| Zilligo sign-in key or recovery code | Open your account and your saved payout details | Never |
Anyone asking for something in a "Never" row is not support, whatever logo they use.
Write it down and store it offline. Never type it into a website, a chat or a photo.
Use an authenticator app instead of text messages where you can, so a stolen password isn't enough.
Update your phone, computer and wallet app, and install wallets only from official stores.
Keep the 4-word sign-in key and the recovery code private. Turn on two-factor authentication and sign out any device you don't recognise.
That's why the address check happens after you paste, on the screen you're about to confirm. The copy can be right while the paste is wrong.
How do you send the coins without a costly mistake?
Send the exact coin, on the exact network, to an address copied fresh from your order. Get any one of those wrong and the whole payment can go missing.
Why copy fresh every time? Because of address poisoning. A scammer sends you a tiny transfer from a lookalike address so it sits in your history, waiting for you to copy it by mistake.
Those figures come from a Carnegie Mellon study presented at USENIX Security 2025. Only a tiny share of attempts succeeds, so attackers make up for it with volume.
Zilligo gives every order its own receiving address. There's no "usual" address to reuse, so the only right source is the order page in front of you.
- Step 1Copy from the order page
Use its copy button. Don't retype it, and don't pick an address from your history.
- Step 2Pick the network first
Choose the network the order names before you paste anything.
- Step 3Check both ends
The first six and last six characters must match the order.
- Step 4Check the middle
Lookalikes copy the ends, so compare a few characters in the middle as well.
Tron (TRC-20)Compare the first and last six characters with your order before you send.
Send| Coin | Network on the order | The address | The trap |
|---|---|---|---|
| Bitcoin | Bitcoin | Starts with bc1, 3 or 1 | The lowest fee setting can leave it unconfirmed for hours |
| USDT | Tron (TRC-20) | Starts with T | Exchanges list several USDT networks; choose TRC-20 |
| USDT or ETH | Ethereum (ERC-20) | Starts with 0x | BNB Chain, Polygon and Arbitrum addresses start with 0x too |
| BNB | BNB Smart Chain (BEP-20) | Starts with 0x | Pick BEP-20, not another network that uses 0x |
| XRP | XRP Ledger | Starts with r, plus a destination tag | Leave out the tag and the payment can't be matched to your order |
A 0x address looks identical on several networks, so the network you pick in your wallet is what decides where the coins go.
Last look before you press Send
- The coin in your wallet is the coin on the order.
- The network you chose is the network on the order.
- The address matches at the start, in the middle and at the end.
- For XRP, the destination tag is filled in.
- The amount that will arrive equals the order, after any exchange withdrawal fee.
- The timer still has minutes left.
First time, and a little nervous? A test order costs very little and walks you through every step:
Example: A $50 test order to PayPal, sent as Solana
Illustrative example. The same test sent as USDT on Tron would carry a network cost of about $2 to $4 instead.
Already sent on the wrong network? Read sent USDT on the wrong network before you try anything else, and TRC-20 vs ERC-20 so it doesn't happen twice.
Is the receiving side safe: your bank, PayPal or gift card?
The money end carries its own risk. One wrong character in an email or an IBAN can pay someone else, so read every payout detail back before you confirm.
| Payout | What you enter | What to double-check |
|---|---|---|
| PayPal, Wise, Skrill, Neteller, Payoneer | The email on your account | The exact email that account uses, not a similar one |
| SEPA or N26 | IBAN and account holder name | Every character of the IBAN, and the name as your bank holds it |
| ACH or Chime | Account number and 9-digit routing number | Both numbers, copied from your bank or the Chime app |
| Cash App, Venmo, Revolut | $Cashtag, username or Revtag | The spelling, so the money doesn't land with a lookalike |
| Amazon and other gift cards, the virtual Visa | An email for the code or card details | An inbox only you can open, because the code spends like cash |
| Western Union, MoneyGram | The collector's full name and pickup country | The name exactly as the collector will give it at the counter |
| Mobile top-up | Phone number with country code | The country code and every digit |
What each payout asks for. Each one needs only the details required to deliver it.
Before you confirm the payout
- The account is yours, or belongs to someone you mean to pay.
- It's verified and can receive the amount (check the limits).
- You've read the detail back, character by character.
- You've kept a record of where the crypto came from, in case your bank or app asks.
Banks and payment apps run their own checks on money coming in. If one asks where a payment came from, your order page and transaction ID are the answer.
PayPalnow
You received $200.00The money is now in your PayPal balance.What happens to your order after you send?
Once you send, your order page names each step as it happens. Know the real statuses and a fake "your funds are frozen" message stands out at once.
- Waiting for your paymentThe order is open
Send the exact amount before the 20-minute timer runs out.
- Payment received, confirmingThe network has seen your coins
Nothing to do. How long it takes depends on the coin.
- Payout on its wayYour coins are confirmed
The payout is going to the details you entered.
- Payout sentDone
Keep the order reference and transaction ID with your records.
203.00USDT on Tron (TRC-20)- Send crypto
- Confirming
- Payout sent
Payout: $200.00 to your PayPal email
Some orders take a detour. A team member reviews every order before it's paid, and the terms allow Zilligo to hold, delay, refuse or cancel an order when risk indicators appear. These are the other statuses you might see:
| Status | What it means | What you do |
|---|---|---|
| On hold for review | The team is checking the order | Wait; the page changes when the order moves on |
| Expired | No payment arrived before the timer ended | Already sent? Contact support with the order reference; a payment within 24 hours can still be matched |
| Cancelled | The order is closed | Don't send any crypto to it |
| Refunded | Your crypto was sent back | Look for the return in your wallet |
The statuses outside the usual path, and what each asks of you.
A real review hold
- Shows on your own order page
- Never asks for a fee or a second payment
- Never asks for your seed phrase or wallet password
- You can check it by opening the order yourself
A fake "frozen funds" message
- Arrives by chat, email or text
- Says the money is lost unless you act now
- Wants a tax, a fee or an "unlock" payment
- Comes from an account that wrote to you first
What does a cashout reveal, and what is kept?
A cashout is not anonymous, yet your name never appears on the blockchain. Here's who can see what once the money has landed:
| Who | What they can see | For how long |
|---|---|---|
| Anyone with a block explorer | The addresses, amount and time of the transfer (Monero hides the addresses and amount) | For good |
| Zilligo | Order amount, payout destination, times and transaction references | 5 years |
| Your payout provider | The incoming payment to your account | Under its own rules |
| Your exchange, if you sent from one | The withdrawal and the address it went to | Under its own rules |
Zilligo does not collect identity documents in its standard service. The privacy policy has the full detail.
Why keep records at all? They let support find an old order, and the AML policy relies on them to keep fraud, stolen funds and sanctions evasion out.
Your own notes matter too, because selling crypto is usually taxable. What to keep is in crypto tax when you cash out; what stays private is in anonymous crypto payments.
What should you do if something goes wrong?
Stop sending, gather the proof, reach support yourself and report any fraud. The order of those steps matters more than speed, and paying someone to fix it is never one of them.
- Minute 1Stop
Send nothing more, whatever a message says about fees, taxes or unlocking.
- Minutes 2 to 10Gather the proof
Order reference, transaction ID, the address, amount and time, plus screenshots of any chats.
- NextReach support yourself
Type the official site into your browser and use the support link listed there. For Zilligo, that's Telegram, from the contact page.
- If a secret leakedMove what's left
Set up a new wallet on a clean device and move the remaining coins. Change exchange passwords and get a new Zilligo sign-in key.
- Same dayReport it
Tell the police or your national fraud service, and the exchange on either end of the transfer.
| Where you live | Where to report crypto fraud |
|---|---|
| United States | The FBI at ic3.gov and the FTC at ReportFraud.ftc.gov |
| United Kingdom | Report Fraud at reportfraud.police.uk, which replaced Action Fraud in December 2025; in Scotland, Police Scotland on 101 |
| Anywhere else | Your local police or national fraud reporting service |
| Wherever you live | The exchange or wallet provider that sent or received the coins |
What to put in a report is covered in crypto cashout scams.
If the trouble is with a Zilligo order rather than a scam, here's what to expect:
| What happened | What to expect |
|---|---|
| You haven't sent yet and want out | Cancel the order; nothing has moved |
| The timer ran out while you were sending | Contact support with the order reference; a payment within 24 hours can still be matched |
| You sent a different amount | Contact support; the team checks what arrived and explains your options |
| You used a network the order doesn't name | The coins may never arrive; contact support at once with the transaction ID |
| You paid a scammer, not a Zilligo order | Zilligo can't reverse a transfer it never received; report it straight away |
Blockchain payments are generally final, as the terms explain. Every status is described on how it works.
Now it is your turn
A safe cashout isn't luck. It's four checkpoints, done the same way every time.
Check the service, keep your keys to yourself, check the send, and read back the payout.
Do that, and the tricks behind those FBI numbers have far fewer ways in. Which checkpoint will you add to your next cashout?
Start a cashoutFrequently asked questions
Can someone steal my crypto if they know my wallet address?
No. An address only lets people send to you and view its public history. Spending needs your seed phrase or private key, which is why those never leave your hands.
Is an exchange safer than a cashout service?
Neither is safe or unsafe by type. What matters is that the business names its company, shows the full price before you send and pays out to an account you control. A well-known exchange you already use is a fine route too.
How do I know I'm on the real Zilligo site?
Type zilligo.com into the address bar yourself or use a bookmark, rather than a link from a message or an ad. Check the spelling before you enter any payout details.
Can Zilligo hold or refuse my order?
Yes. A team member reviews every order, and the terms let Zilligo hold, delay, refuse or cancel an order when risk indicators appear. Your order page then shows On hold for review.
Will my bank or PayPal ask where the money came from?
It might. Banks and payment apps run their own checks on incoming money. Keep the order page and the transaction ID, and you have the answer ready.
Can a crypto payment be reversed if I'm scammed?
Usually not. Crypto transfers are generally final, so report the fraud at once and tell the exchange on either end. Never pay anyone who promises to get the coins back.
Is it safe to cash out on public Wi-Fi?
Your own mobile data or home network is the better choice. If you must use public Wi-Fi, only use sites you typed in yourself and never enter a seed phrase anywhere.
Do I need a hardware wallet?
Not for small amounts. For larger holdings it keeps your keys off your everyday phone and computer, and it shows the receiving address on its own screen. Buy it directly from the maker.
Sources
- 2025 IC3 Annual ReportFBI Internet Crime Complaint Center
- What To Know About Cryptocurrency and ScamsFederal Trade Commission
- Blockchain Address Poisoning (USENIX Security 2025)Carnegie Mellon University, via USENIX
- Report Fraud: New service from City of London PoliceGOV.UK
- Internet Crime Complaint Center (IC3)FBI
