yes so many exchanges is hard and so many fake url is spreading and easy to get the user accounts or private keys , then trying to scam the people funds they disappear the exchange ,  so hard to trust because many times exchanges had been hacked , some phishing attacks also come from virus files send by other guys in the name of exchanges.