Before depositing, download letter_of_guarante and then verify the signature to ensure you are depositing to an eXch address. I wonder why eXch doesn't add it to the Q&A to avoid phishing links or at least help reduce them.