Safety is evidence, not a badge in the footer

01

The six-part verification test

1. Legal entityA real name, jurisdiction and registration that can be independently checked.
2. Domain controlA primary source connecting that entity to the exact hostname.
3. Permission to operateEvidence relevant to the user’s location and the actual activity offered.
4. Complete termsPayments, verification, disputes, closures and privacy explained consistently.
5. Secure distributionNo unknown APK, disabled safeguards or chat-sent update.
6. Traceable supportA route tied to the entity, not merely a changing message handle.

02

What we observed in search results

Several domains use the 99exchange/99exch name and call themselves official. Their public claims vary across user counts, bonuses, payment methods, support details, app distribution and licensing. This fragmented footprint prevents a reliable identity conclusion.

We did not treat rankings, repeated phrases or HTTPS as proof of ownership.

03

High-risk requests

04

If you think you were targeted

Stop contact, preserve messages and URLs, notify your bank or payment provider, secure email and mobile accounts, and report suspected cybercrime through official channels. Do not hire a recovery service that asks for an upfront payment.

05

A cautious conclusion

Without verifiable identity, lawful availability and consistent terms, the safe decision is not to send data or money. That conclusion does not allege wrongdoing by a particular entity; it reflects an evidence gap.