A swap page that pops Connect Wallet is not a Bitsz exchange. Token approve and Permit are spending permissions, not a deposit to an order. The live widget on bitsz.io asks for You send, You receive, the network, and Recipient’s address, then shows a one-time deposit you pay from your own wallet Send screen. Use this crypto swap connect wallet token approve checklist to reject the popup, skip that fake send, and keep the coins.
Quick answer: Bitsz never asks Connect Wallet to swap. On 9 October 2026 the homepage HTML had zero matches for Connect Wallet, WalletConnect, MetaMask, token approve, or Permit. If a “swap” tab wants a wallet session, approve, Permit, or “verify wallet” typed-data, tap Reject or Cancel, close the tab, and do not send coins there. Disconnect is not a revoke. Bitsz cannot cancel a foreign spender.
Bitsz is an instant non-custodial crypto exchange, established in 2023. Non-custodial means the site does not hold, store, or manage your funds. Homepage marketing lists 265 currencies, a 5 minute average exchange time, and $4M last month. Treat those as homepage counters, not a promise.
How to confirm the live Bitsz widget
Live widget shows a deposit address only.
Type bitsz.io in the address bar yourself. The host must be bitsz.io. Do not follow a chat or ad shortcut that already wants a wallet. Live labels: You send, You receive, Network, Floating rate or Fixed rate, Recipient’s address, Exchange. Fixed can be temporarily unavailable. If it is, stay on Floating or wait. Do not jump to a clone that “has Fixed plus Connect Wallet”. The homepage how-to is the whole swap: choose the pair, enter your payout wallet as Recipient’s address, send to the one-time deposit, then track until Finished. One-time means that deposit belongs to this order only. Terms 2.4 assign each transaction a unique address that captures the pair and the recipient wallet. You send from your own wallet. The checkbox asks you to state you are a non-EU/EEA resident and accept Terms, AML, and Privacy.
| Check | Live Bitsz widget | Connect / approve page |
|---|---|---|
| Host | bitsz.io, typed by you | Lookalike host or third-party dApp |
| Main control | Exchange, then a deposit address | Connect Wallet, Approve, Permit |
| What leaves the wallet | A normal Send to the order address | A signature that can grant transferFrom |
| Order ID | Bitsz order after Exchange | None. No Bitsz ticket on that tab |
Verdict: If the page needs a wallet connection to “start the swap”, it is not the Bitsz widget.
Do: Check the host and the widget labels before you press Exchange.
Do not: Press Connect on a tab that “looks like Bitsz, but with a wallet”.
How to stop before you sign Connect, approve, or Permit
Reject approve and skip that deposit.
Stop if the page pops MetaMask, WalletConnect, Approve, Permit, setApprovalForAll, or a “verify wallet” typed-data sheet. WalletConnect is a QR or session that links a mobile wallet to a website. Typed-data is a structured Sign message: it can still set an allowance even when you pay no gas. Connect only shares a public address. Approve and Permit give a spender the right to pull tokens later. That is not a Bitsz deposit Send.
- Check the wallet sheet: function name, spender address, and amount (unlimited is a red flag).
- Tap Reject or Cancel in the wallet. Do not type a seed, private key, or sync QR.
- Close the tab. Do not connect “to see the rate”.
- Type bitsz.io again. Check You send, You receive, Recipient’s address, then Exchange.
- If you still need the swap, create a fresh order and send only to that order’s unique address.
Workflow: First read the wallet sheet, then reject the signature, next close the Connect tab, then open typed bitsz.io, then send only if a real order shows a deposit address.
Connect lets the site see your public address. Malwarebytes (19 August 2026): connect alone is not theft, but it sizes the next transaction. ERC-20 approve (EIP-20) lets a spender withdraw multiple times up to the value; a later approve overwrites it. Unlimited can keep pulling until you revoke. Permit / Permit2 (EIP-2612) writes the same allowance with a typed signature, often with no gas from you. Reject “verify wallet” on a swap tab you did not type as a DEX. Seed or sync QR is key theft: move leftover coins to a new wallet.
Do: Check the function name and the spender in the wallet UI, then reject first.
Do not: Approve an unlimited spend because the site called it a “security check”.
How to split a fake AML Connect from a real Bitsz review
A real Bitsz review never asks Connect Wallet.
A fake AML checker says “scan your wallet” and then asks Connect Wallet. Malwarebytes, 19 August 2026: a basic AML check is a lookup of a public address. Do not connect, approve, or sign. AMLBot states it will never ask you to connect a wallet.
A real Bitsz review does not start with a third-party dApp. The AML Policy uses TRM Ecosystem, Elliptic, and AMLbot as lookup providers. Preliminary screening is free via support: you give an address in text. KYC, when asked, is email, photo ID, and a selfie-liveness check through AMLBot Forms (Safe3 UAB). Terms 2.7 allow ID and source-of-funds requests. That is forms, not Connect Wallet. A real hold happens after a deposit on a Bitsz order, when risk is above 40% or high-risk labels apply. That path uses the Order ID.
Do: Use the Order ID, the AML Policy, and Live Chat on bitsz.io. Type an address to support if you want the free pre-check.
Do not: Connect on a third domain “so the exchange will allow the swap”.
How to disconnect or revoke after you already signed
If you connected but did not sign a spend: disconnect the site in the wallet and reject leftover prompts. MetaMask: disconnect stops that site viewing the address. It does not wipe an allowance.
If you already signed approve or Permit, Bitsz cannot revoke that foreign spender. Revoke is a separate on-chain transaction (you pay network gas) on the same network as the token. ethereum.org (updated 6 June 2026): unlimited access can still be spent after you leave the dApp; permissions do not expire; disconnect is not revoke. MetaMask Help points to Portfolio checkers on Ethereum Mainnet, Polygon, and BNB Chain. A common tool is the Etherscan Token Approval Checker. Type the host yourself. Do not follow a “revoke helper” from the phishing tab. Do not send coins to the Connect page. If you typed a seed, move leftover coins to a new wallet. A “recovery for a fee” is a second scam (Malwarebytes). Write Bitsz support (support@bitsz.io) only when a real bitsz.io Order ID exists.
Do: Check unknown unlimited spenders on a typed checker, then revoke them.
Do not: Ask Bitsz to “return” a foreign allowance, and do not pay an unlock fee.
How to pick another checklist if this is not Connect Wallet
Stay on this island only when the swap-looking page itself asks for Connect, approve, Permit, or typed-data. A chat that asks Connect, seed, or an unlock fee: use the fake exchange support checklist. The official Telegram channel is a showcase, not a ticket inbox. Host is not bitsz.io before you copy a deposit: use the official domain checklist. Pasted To does not match the order UI: use the clipboard hijack checklist. Deposit already sent and the order is not Finished: use the stuck swap status checklist. A legacy Uniswap article on the blog teaches Connect on a DEX. That is not the Bitsz widget. There is no clawback for a foreign spender signature.
Do: Match the prompt you saw to one island, then follow that checklist only.
Do not: Send “anyway” because you already connected.
After you reject Connect Wallet, finish in this order. Then, if you still need the exchange, open a new order on the Bitsz widget and send only to that unique deposit.
- Reject every pending wallet prompt, then disconnect the site.
- If you signed approve or Permit, revoke the spender on a typed checker.
- If you still need the swap, create a new order on bitsz.io and send only to that unique deposit.
- If a real bitsz.io Order ID exists, contact official support with that ID only.
- If the problem was a chat, a wrong host, a pasted To, or a stuck order, switch checklists.
FAQ
Does Bitsz ever ask Connect Wallet to swap?
No. The live widget uses You send, You receive, Recipient’s address, and Exchange, then a one-time deposit you send from your own wallet. Homepage HTML on 9 October 2026 has no Connect Wallet control.
Is a token approve the same as sending to a deposit address?
No. Approve writes a spender allowance (EIP-20) so transferFrom can pull tokens later. A Bitsz deposit is a normal Send to the unique address on that order (Terms 2.4).
What if a page says AML check then Connect Wallet?
Treat it as a fake checker (Malwarebytes, 19 August 2026). A real Bitsz review uses the Order ID, Live Chat on bitsz.io, or AMLBot Forms. Preliminary screening is an address you type to support, not a dApp.
Does disconnecting revoke allowances?
No. Disconnect hides your address; the allowance stays until you revoke on-chain and pay gas. Use a typed Token Approval Checker on the same network.
Should I still send coins after connecting?
No. Close the tab. Open a fresh order only on bitsz.io if you still want the exchange, and copy the deposit from that order screen.
Can Bitsz revoke a spender I approved on another site?
No. Use Etherscan Token Approval Checker or your wallet’s allowance tools. Write Bitsz only when a real bitsz.io Order ID exists. Do not send a seed or an unlock fee.
Disclaimer: The material in this article is not financial or investment advice. Everything stated here reflects the author's personal view and should not be treated as a recommendation to trade or invest. We make no warranties regarding the accuracy, reliability or completeness of the information presented. Cryptocurrency markets are highly volatile and can move unpredictably. Before committing any funds, every investor, trader or crypto user should study several independent sources and check the regulations that apply in their own jurisdiction.