OctoSwap

⚠ SCAM CLASSIFICATION + PEER-DIRECTORY REMOVAL (2026-07-19) — GRADE DROPPED B → D. Two independent peer privacy directories have taken action against OctoSwap: (1) one has publicly classified it as Scam on its listing status; (2) OrangeFren.com has removed OctoSwap from its aggregator, cutting real user-routing traffic to the service, and publicly stated on Bitcointalk (posting as an OF Sr Member, Merit 807) that they *'confronted them'* — the operator's on-record response was that *'no such swap ever took place'*. Both directories join a call by BTT Hero Member Trvoid (Merit 654, opened a 'Be Cautious: OctoSwap Scam Warning' thread on 2026-07-18) for the loss-victim to publish a tx-hash so the deposit can be verified on-chain. The claim on record is that a user lost $30,000 with funds stuck in 'processing' for weeks and support unresponsive across Telegram + email. xmr.club has not first-party-verified the $30k loss on-chain, and the operator disputes it — so this is Grade D with an open incident rather than Grade F, but readers should treat any deposit against OctoSwap as materially at-risk until at least (a) an operator statement + refund evidence lands, (b) a tx-hash surfaces that confirms the deposit was received, or (c) both peer-directory classifications are retracted. See the Incident block below for the full timeline.

What it is. Instant crypto-to-crypto swap service. No account and no email required for a standard swap: pick a pair, enter your receive address, send to the one-time deposit address, receive on confirmation. An optional account can be created to unlock a fee discount, but it is not required and no swap is gated behind signup.

Peer position. Two independent privacy-focused directories have carried a listing for OctoSwap on a community-contributed basis, one of them at a notably higher score than the peer batch we typically see for this vintage. Neither has published a team-authored review yet. Operating since March 1, 2025 per the peer-directory record — fifteen months of live operation.

Legal surface. All four expected footer-linked pages exist and render: `/terms`, `/privacy`, `/faq`, `/about`. No template placeholders, no `[e.g. Vercel]` residue like TokensFund had. `/about` reads as team-authored — *"We are a team of experts… crypto traders prioritize three main factors when choosing an exchange platform: fees, transaction speed, and reliability. We've made the decision not to collect or store personal information from our users."* Published policy language matches the site's marketing.

API. Public API documented at `api.octoswap.io/api/docs` — surface is thin but real, useful for integrators and cross-checkable in a way brochure-only sites are not.

Why Grade B (not C). Four data points pull this off the default C for new exchange-class listings: (a) 15 months of live operation observed by an outside privacy directory — the tenure rule's asymmetric-loss concern is meaningfully reduced by that history, (b) the peer-directory score for OctoSwap is the highest I've seen this batch even acknowledging it's community-contributed, (c) full legal surface published without gaps, and (d) the no-account-required posture is honored on the site — the fee discount is a positive incentive to register, not a shotgun-KYC lever. Grade A withheld pending: a team-authored (rather than community-contributed) peer-directory verdict, disclosed fees on the homepage or FAQ (only the *"no extra fees"* marketing line is up), and a first-hand end-to-end swap walk-through by the curator.

Reader caveats. Fees are not published upfront in a table — homepage says *"no extra fees"* but doesn't quantify the spread or floor-fee. Recommended to compare rate quoted at the swap step against a peer aggregator (kyc.rip, Trocador, SideShift) for meaningful volume. The optional account is described as unlocking a discount; readers who care about not having a login trail should stick with the default no-account flow.

Tenure. Publicly verified on xmr.club since 2026-07-03 — 1 days as of this note. The current Grade B rests on structural signals (published trust framing, working onion mirror, direct operator responsiveness), not on tenure. A 90-day re-check is scheduled (2026-10-01); a sustained clean track record over that window is a prerequisite for any lift above B.

Path to A. A team-authored peer-directory review + fee disclosure on FAQ or homepage + an independent user-thread on monero.town or Reddit corroborating that the no-account flow works as advertised for XMR swaps.

Observed outage — 2026-07-02 to 2026-07-03. During the initial listing walk-through on 2026-07-02, the registration endpoint at `api.octoswap.io/auth/register` was returning a backend error and we pulled the listing back to draft while the endpoint was unreachable. Re-probed on 2026-07-03: the endpoint now responds with an expected validation-error to an empty POST, which is the shape of a live API rejecting missing required fields. Registration is healthy again. The optional-account flow (which is what triggered the 500) is off the critical path for standard swaps, but the incident is worth surfacing because it hit within 24 hours of publication and readers should know the service isn't immune to backend hiccups.

Follow-up 2026-08-02 — kycnot published a full three-part warning; three new structural signals folded in. On 2026-07-29 kycnot.me/service/octoswap published a top-of-page warning box titled *"Fake partner claims and an unresolved \$30,000 report"* that hardens the case with three additional signals beyond the original BTT thread and the OrangeFren cluster tweet:

• Fake partner claims. OctoSwap's homepage advertises Trezor, SatoshiLabs, CoinMarketCap, Monero, Pirate Chain, Monerujo, OrangeFren and others as partners. "Monero" is a decentralised project with no company to partner with. Trezor and SatoshiLabs are the same firm listed twice. OrangeFren has publicly delisted OctoSwap over these concerns. Thirteen of the fourteen partner logos link nowhere. Deliberate misrepresentation of institutional endorsement.
• Structural test-impossibility. Minimum order size is 0.108 BTC (~\$6,983) per OctoSwap's own public rate feed. No cheap test swap is possible — the smallest amount you can lose is about seven thousand dollars. Combined with the unresolved \$30k loss report, this is the shape of a service designed to defeat due-diligence-by-small-order — a hallmark of the pump-and-drain playbook.
• Monerica explicitly labeled "Scam" — named at the peer-directory level. Combined with kycnot's 2026-07-29 warning box and OrangeFren's delisting + cluster attribution, three independent peer directories now converge on the same classification.

No refund evidence and no operator statement has surfaced in the 14 days since the original report. Operator's on-record response to OrangeFren remains *"no such swap ever took place"* with no transaction ID or order number produced by either side. Grade F stands. Curator continues to monitor at 7-day intervals for either (a) operator producing verifiable refund evidence + tx-hash, or (b) additional first-party loss reports that would harden the classification further.