AvvocatoPenalista H24
← Blog

Insight

uniswapv4.com is a scam: the fake domain migration

14 November 2026 · Avvocato Penalista H24

We have already handled a case linked to uniswapv4.com, and we have the email with which the fraudsters announced a "security migration" to a new domain, asking the user to log in again. We reproduce it in full, because it is the document that lets you recognise the trap.

Note: we are a law firm dealing exclusively with online fraud. If you were caught in the same trap and want help, you can write to us using the form at the bottom of this article.

Why we say uniswapv4.com is a scam

We have already handled the case of a client approached, among other ways, through uniswapv4.com, within a chain involving five different domains.

In this case we have a piece of evidence rarely found so clearly: the email with which the fraudsters announced the change of domain. Our client forwarded it to us, and we reproduce it because it is the most useful document we can show anyone about to fall into the same trap.

The name: a real product used as bait

The name uniswapv4.com evokes a well-known decentralised cryptocurrency exchange protocol, and one of its versions in particular. That is a real and very well-known project which has no connection with uniswapv4.com and is in no way involved: the name was used as bait, as happens with many well-known brands.

It is worth explaining why this choice is particularly effective. A decentralised protocol is, by definition, software that runs without a central operator: it has no customer service, it does not open "accounts" for users, it does not hold balances on their behalf and it does not send emails. Anyone receiving a message from what looks like the support desk of such a protocol is receiving, with certainty, a false message. But only those who know the field know that — and these frauds look precisely for those who do not.

One technical fact confirms it all: uniswapv4.com is no longer reachable today. The name was registered on 5 October 2026 with a European registrar and its records were last changed on 5 November 2026. It lasted a few weeks, and there is a lesson here: domains copying a famous brand get reported and taken down quickly, precisely because the brand exists and defends itself. Generic names, by contrast, survive for a long time. In the same chain, other domains are still active.

The "migration" email: the document to recognise

Here is the central point of the uniswapv4.com case.

On 11 November 2026, at 17:54, our client received an email headed with the platform's name, subject "Important Security Update — Platform Address Migration". The text, in careful Italian, explained that "as part of the scheduled upgrade of our infrastructure's security" the platform had completed "migration to an enhanced and more secure domain", and reassured him: "Your account balance, wallet, credentials and all personal data remain entirely unchanged and fully secure. The only difference is the web address you use to access the platform."

Then, highlighted:

the previous address, "no longer active", uniswap-v4.net; the "new secure platform address", uni-swapv4.org; and a six-character "authentication code" to enter on first access.

The instructions were four: visit the new address, enter the code, log in with your existing email and password — "no change necessary" — and update your bookmarks.

It closed with a highlighted reassurance: "Your funds are safe. This migration was carried out without any service interruption and without data loss."

Why that email is false, point by point

Real platforms, unlike uniswapv4.com, do not change domain. The domain name is an operator's asset: it is what customers have in their bookmarks, their emails, their memory. No serious company abandons it and asks users to start again elsewhere. In the very rare cases of a change of name, the old address redirects automatically to the new one for years, and the announcement comes through several channels, not one email.

A security update does not entail a change of address. Strengthening security means working on servers, certificates, authentication: all invisible to the user, who goes on using the same address as always.

The three names are the same name. uniswapv4.com, uniswap-v4.net and uni-swapv4.org contain the very same letters, with a hyphen moved and a different extension. It is not a migration, it is a rotation: each time a name is reported or deactivated, another nearly identical one is activated and the victims are told by email, so that none are lost.

The "authentication code" authenticates nothing. It arrived in the very message containing the link. A code only makes sense if it travels on a channel different from the operation it is meant to protect: a code written next to the address to visit is mere stagecraft, there to make an uncontrolled operation look technical and supervised.

The request to log in "with your existing email and password" is the real objective. When you are asked to enter your credentials at a new address, whoever built that page is collecting them. If those same credentials are used elsewhere — as often happens — the damage extends well beyond the platform.

The rule, in one line

You never log in to a service starting from a link received by email.

You open the browser, type the address you have always used, or open the saved bookmark. If the usual address no longer answers, you do not look for the "new" one: you stop, because the disappearance of a platform is information, not a technical problem to work around.

What we checked

We found no company name, no VAT number, no registered office and no reference to any authorisation or supervisory body connected to uniswapv4.com, and no entry in the registers kept by CONSOB, the Italian market authority, or among the EU intermediaries entitled to operate in Italy.

The domain uniswapv4.com was registered for the minimum term of one year, expiring in October 2027, and as noted is no longer reachable today.

The criminal framework

The conduct amounts to fraud under article 640 of the Italian Criminal Code, aggravated under the second paragraph no. 2-bis for exploiting the circumstance of distance referred to in article 61 no. 5, and by the aggravating circumstance introduced in paragraph 2-ter by law 90/2024, which covers precisely frauds committed with IT tools apt to hinder identification of the perpetrator: domain rotation is its clearest example.

Using the name of a well-known project to mislead amounts to impersonation under article 494. Sending a communication designed to induce the user to enter credentials on a page controlled by third parties is also relevant to unauthorised access to a computer system under article 615-ter and, where financial dispositions followed, to computer fraud under article 640-ter.

The episodes attributable to the various domains must be charged as a continuing offence under article 81, second paragraph. Banking records can be obtained for ten years under article 119, fourth paragraph, of the Consolidated Banking Law; aggravated fraud becomes time-barred after six years, up to seven years and six months with interrupting acts.

What to do if you received an email of this kind

Do not click the link of uniswapv4.com or its successors and do not enter credentials. If you already have, change that password immediately and every identical or similar one used on other services, starting with your email account, and enable two-factor authentication. Keep the email in full, including the technical headers, because they allow the message's route to be reconstructed: do not take a screenshot of it, save it as a file. File a criminal complaint attaching it. And if money was demanded, pay nothing to "recover" what was lost.

We can help you

Our firm deals exclusively with online fraud and has already handled cases entirely comparable to uniswapv4.com: names copying well-known projects, fake migration notices and domain rotations announced by email.

If you have received communications from uniswapv4.com or from a domain working the same way, contact us using the form at the bottom of this page: we will review the documents and tell you honestly what concrete prospects exist in your case.

You can read other comparable cases we have handled:

Free case review

Do you need legal assistance?

Tell us about your case: free assessment, no obligation.

If you lost less than €5000 we cannot proceed · full confidentiality · no obligation.
Available now · 24 hours a day

Tell us about your case.
A lawyer replies — not a call centre.

Fill in the form: a lawyer from our firm assesses your case free of charge and tells you right away how we can help. Day or night, weekends included.