yes so many exchanges is hard and so many fake url is spreading and easy to get the user accounts or private keys , then trying to scam the people funds they disappear the exchange , so hard to trust because many times exchanges had been hacked , some phishing attacks also come from virus files send by other guys in the name of exchanges.