Scammers occasionally impersonate BoomFi to steal funds. Use this checklist before you send any payment.
Things to verify on every checkout
The URL starts with https://pay.boomfi.xyz/ (or https://pay-test.boomfi.xyz/ for merchant test environments). Anything else such as pay-boomfi.com, boomfi-pay.io, boomfipayments.xyz, etc. is NOT us.
The browser shows a valid HTTPS lock icon.
The merchant name on the checkout matches the merchant you intended to pay.
The wallet address shown is generated by the page — do not use an address copied from an email, screenshot, or chat message.
Red flags that should make you stop
Anyone asking you to send crypto to "verify" your account.
A "support agent" reaching out to you first via DM, Telegram, or WhatsApp.
A page urging urgency ("act in 5 minutes or your funds are lost").
An address that looks similar to a real BoomFi address but with one or two characters changed.
If you suspect a scam, report it immediately to [email protected] with screenshots. BoomFi will never ask you to send extra funds to "release" a stuck payment back to you.