Use etherscan and look for contract numbers in exchange, because some people want to try cheating you with the same coin name but the contract number is different
yes, scams are everywhere.
we have to be careful, we can find forum link, twitter link, and etc if that contract address is real project from dev not scammer.