TrueFiat is an exchange service that claims to handle swaps between cryptocurrencies, stablecoins, e-payment systems, bank transfers, and cash. The site runs on Nuxt (a single-page app), comes in two language versions — English and Russian — and has a personal account area, a referral program, a partner API for monitoring sites, and a separate offer for merchants (accepting payments).

Technical and registration details

• The domain was registered on August 3, 2025 and is paid up through August 3, 2027 (so they paid for two full years up front).
• The registrar is Dynadot Inc., and Cloudflare handles the DNS.
• The registrant's details aren't revealed in the public WHOIS: all you can see is the registrar and their abuse-contact info. There's no way to tell from WHOIS who's actually behind the domain.
• According to Kurs.Expert monitoring: the service has been around for about a year and a month, it's based in Ukraine, the total reserve is claimed to be $46,015,822, and there's no cashback.

Exchange directions

The list is wide and clearly aimed at the Russian-speaking market and CIS/Europe:

• cryptocurrencies: BTC, ETH, USDT (ERC20, TRC20, SOL, etc.), USDC (several networks), TRX, XRP, DOGE, ADA, PEPE, and more;
• Ukrainian banks: Privat24, Monobank, Oschadbank, Raiffeisen, PUMB, A-Bank, Sense Bank, Ukrsibbank, OTP Bank, IZI Bank, Ukrainian Bank IBAN;
• Kazakhstan: Kaspi Bank, Visa/MasterCard in KZT;
• Europe/other: SEPA, Revolut, Wise, PayPal, Bank of Georgia (GEL), cash shekels (CASH ILS).

Claimed working hours and speed

• On the "About the service" page and in the promo thread on the forum: they work every day from 10:00 to 22:00 UTC+2.
• Same there and on the homepage: "exchanges are completed within 24 business hours."
• In the promo thread on the kurs.expert forum, they claim the average order processing time is 10–20 minutes, 60 minutes max, and that registration isn't required for a one-off exchange.
• The reserves shown on the site are massive: for example, PEPE — about 9.9 trillion coins, cash shekels — 100.1 million ILS, several bank balances sitting at perfectly round amounts (1,000,000 KZT, 90,000 UAH, 90,000 EUR), and USDC stablecoins across different networks showing nearly identical values (50,545 / 50,433 / 50,405). At the very least, it partly looks like numbers "for show," though there's no actual reason to say they're fake.

Contacts and jurisdiction

• The site only lists an email. The promo thread on the forum additionally mentions Telegram and Instagram.
• There's no legal entity, country of registration, license, physical address, phone number, or tax ID/registration numbers anywhere — not in the contacts, not in the terms, not in the AML policy.
• The contacts page has a useful warning: "Attention! Exchanges are made only through the website" — a typical defense against fake "operators" on messengers. That's more of a plus.

2. Regulatory approach, terms and conditions

The terms are set up as a public offer: under clause 1.5, the agreement counts as accepted the moment you submit an order, and under clause 5.13 it's additionally confirmed with the "I have read and agree to the terms" button. The document consists of a "Parties to the Agreement" section and sections 1–8, plus a separate KYC/AML policy.

On its own, this is a decent set of documents for an exchanger: there's the subject of the agreement, the parties' obligations, exchange procedures, liability, force majeure, and two AML policies. But the quality and balance of these documents is exactly where the service raises the most questions.

2.1. What counts in their favor

• Clause 5.1 — the exchange must be completed within 24 business hours, otherwise the client has the right to demand a refund. That's a concrete, verifiable benchmark.
• Clause 4.1.5 — complaints are reviewed within three days, and if a complaint is upheld, the funds are credited to the client's account. Plenty of exchangers don't commit to any timeframe like this at all.
• Clauses 5.1.1–5.1.2 — if the funds don't arrive, the order is automatically canceled and can be reactivated within 24 hours. Makes sense and doesn't look like a trap.
• Clause 4.1.3 — confidentiality with a caveat about lawful government requests: standard wording.

2.2. Clauses that look one-sided or deserve attention

2.3. Inconsistencies and contradictions in the documents and on the site

1. The service name on the "About" page doesn't match the actual service. In both the English and Russian versions, the "About the service" page is titled "Air-Buy.EXchange — "ABEX"", and the text describes "Air-Buy.EXchange" as an exchange service. Meanwhile, the site itself is TrueFiat. It looks like a copy-paste from a template or reused text from another project: Air-Buy.EXchange is a real exchanger (air-buy.exchange) that, judging by its BestChange page, has a warning saying the monitoring service can't recommend it. We haven't established any direct link between the projects — maybe a shared developer, template, or owner — but it looks sloppy and undermines trust in the site's content.
2. Support hours. The homepage promises: "polite tech support around the clock, ready to help with any issue." The "About the service" page and the promo thread say 10:00–22:00 UTC+2. One of the two is wrong; looks like they simply never updated the homepage text.
3. Two different AML documents. There's section 8 "AML Policy" and a separate "KYC/AML Policy" page. The texts are different, there are no cross-references and no indication of which document takes priority; section 8, meanwhile, has no clause numbering at all, unlike sections 1–7. The question of "which document rules" in a disputed situation remains open.
4. Localization quality. The English homepage says "100% translation guarantee" — clearly machine-translated; the meaning calls for "transaction" (transaction guarantee). A small thing, but it shows the texts don't get much careful proofreading.
5. An absolute privacy promise vs. AML procedures. On the homepage: "we don't store or share your personal data with third parties." In the KYC/AML policy: they collect passport photos, selfies with your passport and a piece of paper, screenshots of your banking app, and the data "may be handed over to law enforcement upon their request or by court order." Formally, that's normal AML logic, but the marketing promise is phrased as absolute and doesn't match reality.
6. Timeframes in marketing vs. in the contract. The forum ad promises 10–20 minutes on average and 60 minutes max, while the terms (clauses 5.1 and 5.15) reserve up to 24 business hours for themselves. It's not a contradiction — the terms describe the upper limit — but it sets very different client expectations.
7. No legal entity or jurisdiction. Not a single document lists a company name, country of registration, license, or address. The contracting party is a faceless "Service Provider" / the www.truefiat.pro service. Formally, it's a contract with an anonymous party: in a dispute, there's no one to file claims with beyond an email.

3. What third-party sites, monitoring services, and reviews say about the service

Reviews and discussions

• The site's own "Reviews" section is empty.
• The only notable outward activity is the official thread on the kurs.expert forum, run by the Service.Pro account. The content is promo posts from the team itself (service descriptions, announcements of the "Reviews" section, appearances on CryptoScout, Instagram, etc.), dated August 2026. These aren't client reviews — it's self-promotion.
• At the time of checking, we couldn't find any real user reviews, blogger write-ups, threads on bits.media, complaints, scam accusations, or blacklist mentions in open sources.
• An important caveat: the absence of complaints here is more about the absence of signals than proof of reliability. The service is young and low-profile: it has almost no public history, so there's hardly anywhere or anyone to complain to just yet.

4. Conclusion and recommendations

Here's the picture: the service works, has a clear set of exchange directions, a public offer, and an AML policy. There's no evidence of bad faith, no complaints, and it's never landed on any blacklists.

But there's very little transparency: no legal entity, jurisdiction, license, or address; hidden WHOIS; reserves that look like window dressing; an "About" page describing someone else's brand; and several contract clauses clearly tilted in the operator's favor ("stuck" funds becoming the service's property under clause 5.14, 5% withholdings under clause 5.6 and in the KYC/AML policy, refusal without explanation under clause 4.3.4, one-sided changes under clause 6.6).

What would improve the assessment: disclosing the legal entity and jurisdiction, fixing the "About the service" page, real client reviews showing up, and a few months of clean history on independent monitoring services.

The service doesn't look outright scammy and it does work, but all things considered — no legal entity, zero public reputation, questionable contract clauses, and sloppy texts — you should treat it with caution and not send large sums there without checking it out first.