Fraudulent websites

We have encountered websites fraudulently misusing our brand or explicitly or implicitly associating with our company. These websites are designed to draw you into providing personal information or engaging in potentially fraudulent financial transactions, particularly involving cryptocurrency or cryptomining.

Hoax emails (phishing) with escrow scams

These hoax emails use the Galaxy Digital name and may contain links to a website purported to be a Galaxy Digital website or purported to be associated with Galaxy digital or its staff. The emails may suggest that Galaxy Digital will serve as an escrow provider in a cryptocurrency transaction. By clicking on a link in the email, you are taken to a website that appears to be a genuine Galaxy Digital website (but is not) and requested to enter data in an attempt to fraudulently obtain your personal information and/or cryptocurrency. Please note that Galaxy Digital does not provide any sort of escrow service.

Cons claiming to “Double your money”

The accounts or likenesses of public figures, organizations, and financial institutions have been impersonated or compromised to solicit payments to cryptocurrency accounts. They sometimes claim funds sent to a wallet address will be doubled and returned to the sender. If you receive or encounter one of these solicitations, it’s critical to independently verify the authenticity of the source and claims before sending money or providing personal or confidential information. Neither Galaxy Digital nor any employee of Galaxy Digital (including Michael Novogratz) makes public solicitations to send cryptocurrency to any account. If you see such solicitations, this is an attempt to defraud you. Please report it to your local authorities and [email protected].

Phony cryptocurrency mining services

Unauthorized websites and fraudulent communications (e.g., on social media) may have been used to offer services related to cryptocurrency mining. Please utilize our formally published contact information to independently verify the source of all official company business.

Spoofed unauthorized emails

Emails from unauthorized sources specifying the from [email protected]or [email protected]. or other domains that appear to be legitimately associated with Galaxy Digital have been reported to us. These emails may be forged or spoofed or fail the sender validation check SPF (sender policy framework) and are not from Galaxy Digital. Using an email system that honors SPF is highly recommended. Additionally, when receiving an email, the SPF status can typically be confirmed via email headers, but it’s critical to independently verify the sender of any email with unexpected or unsolicited information or email attachment via independent means such as telephone call, a new email to a trusted address, or other communications channel.

Imposters on social media and decentralized chat systems

A variety of free and decentralized chat systems are popular in the cryptocurrency industry but proceed with a high degree of caution. We’ve encountered fake identities and associations with Galaxy Digital on many widely used platforms. We recommend that you separately and independently verify who you’re communicating with.

Authentic Galaxy Digital websites and email communications

Galaxy Digital website’s address is https://www.galaxy.com. To verify you are visiting our website, ensure you see the entire address above, including https://. Click on the lock and you should see “Connection Is Secure” and “Certificate is Valid.” If you do not see a lock icon and cannot see that the certificate and connection are secure, you may be visiting a spoofed website. Email addresses from Galaxy Digital use the format [email protected]. When you hover over a link in email application or a web browser, a small window usually pops up with the true destination. If the real link doesn’t match the sender or does not match what you expect, assume it may be fraudulent and do not click it. Automated emails may come from [email protected] or [email protected]. This subdomain is not used by Galaxy Digital for individual, person-to-person email communication. Additional affiliated websites and domains include https://galaxyfundmanagement.com/ and https://galaxyinteractive.io/.

If you think you've received a suspicious email or communication, but you haven't acted on it, please forward it to [email protected]

If you think you've discovered a fake Galaxy Digital related website or online identity, please report it to [email protected].

Contacting Galaxy Digital

Contact information is provided at https://galaxy.com/contact and on some of our other website pages.

Report issues with our site

To report a bug or cybersecurity concern with our site please email [email protected].

Additional resources on phishing and how to avoid it (list last updated Aug 25, 2020):

https://www.us-cert.gov/security-publications/recognizing-and-avoiding-email-scams

https://us-cert.cisa.gov/ncas/tips/ST06-003

https://www.us-cert.gov/ncas/tips/ST04-010

https://www.us-cert.gov/ncas/tips/ST04-014

https://www.consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams

https://www.ftc.gov/tips-advice/business-center/small-businesses/cybersecurity/phishing