Is padre.gg Safe? Why the Scanners Contradict Each Other (2026)

If you search "is padre.gg safe" you get a set of automated trust scores that flatly disagree with each other, several of them about the same company. That is not a useful answer, so here is a real one, including the parts that are genuinely unflattering.

The contradiction, laid out

These are the results that rank for trust queries about this product, as of 6 August 2026.

Two separate contradictions sit in that table. ScamAdviser rates one company's apex domain safe and its own application subdomain as bad as its scale allows. And on padre.gg specifically, ScamAdviser says "Very Likely Safe" while Scam Detector says "High-Risk," which are not close to the same claim.

Meanwhile Gridinsoft calls it phishing at 19/100, and the five engines that maintain actual phishing and malware blocklists return Clean. Those engines are the ones your browser and your antivirus consult. If trade.padre.gg were running a credential harvester, Google Safebrowsing would be the first to know and Chrome would show you a red interstitial. It does not.

Why heuristic scanners produce results like this

Your concern is reasonable. A trust score of 0 is alarming and you should not have to be a domain forensics hobbyist to interpret it. But it helps to know what these tools are measuring, which is almost never the content of the site.

ScamAdviser, Scam Detector and Gridinsoft are automated scoring services. They rank well for "is X safe" queries because they generate a page for every domain in existence. The inputs are things like WHOIS registration age, registrar and hosting reputation, TLD reputation, SSL configuration, whether the operator hides contact details, keyword categories on the page, and the shape of the backlink profile. There is usually no human involved.

Terminal trips several of those signals for reasons unrelated to whether it will steal from you:

Subdomains get scored on their own. trade.padre.gg has no independent WHOIS record, no independent age, and a thin link profile compared with the apex. Score the apex and the subdomain with the same algorithm and you get different numbers from identical underlying reality. That single quirk explains the "Very Likely Safe" versus "Very Likely Unsafe" split better than anything else.

Crypto keywords carry a penalty. Any page combining wallet, trading and token terminology sits in a category where the base rate of real fraud is high. Scanners weight that heavily and they are not wrong to, but the penalty lands on legitimate crypto products and fraudulent ones alike. The .gg suffix does not help either. It is Guernsey's country code, popular with gaming and crypto projects, and it carries worse baseline statistics than .com.

Then there is the backlink profile, which is probably the largest factor and the one nobody explains. Roughly 70 to 80% of the Padre and Terminal material on Reddit is referral link spam, and the same pattern runs through YouTube descriptions, throwaway blogs and comment sections. Link-based reputation systems read a mention profile made mostly of low-quality sites pushing an identical tracking link as a spam signature, because for most domains that is exactly what it is. Terminal's referral program pays 35% of trading fees, which is generous enough to have produced an enormous volume of that footprint.

Settling it with evidence instead

Here is what can actually be verified about who runs this thing.

The app is one application behind several addresses. As of 6 August 2026, terminal.pump.fun and trade.padre.gg serve a byte-identical JavaScript bundle, down to the filename (assets/index-ox6lYmnW.js, about 4.5 MB; the filename changes on each redeploy). A phishing clone does not serve the operator's own build. Two front doors, one product.

The company is registered and identifiable. Terminal is operated by Baton Corporation Ltd, trading as Pump.Fun, UK company number 14743013, a private limited company incorporated in England and Wales on 20 March 2023. Its directors are Alon Cohen, Dylan Kerler and Noah Tweedale, all named publicly and all filed at Companies House. This is not an anonymous operation.

Custody is non-custodial and third party verifiable. Wallet keys are managed through Turnkey, built by Coinbase's custody team, and Turnkey's involvement shows up in the site's own content security policy (export.turnkey.com, import.turnkey.com) rather than only in marketing copy. Our Terminal custody and private key guide covers how that works and where it stops protecting you.

The acquisition itself is on the record too. Pump.fun bought Padre on 24 October 2025 and renamed it Terminal, reported by The Block and CryptoBriefing among others and announced by both companies on X. What changed and what did not is covered in our Terminal formerly Padre article.

And nothing has gone wrong that anyone has documented. We found no reported breach, exploit or user fund loss affecting Terminal, padre.gg or trade.padre.gg in 2026.

The four official domains

All four are live, all four serve official product, and none of them redirects to a single canonical address. That is the actual root of the confusion, and it is pump.fun's doing rather than an attacker's. The one to use is terminal.pump.fun, because it is the address pump.fun is standing behind.

Anything else is not official.

The lookalikes that are live right now

These exist, they rank in search, and some of them surfaced organically while we were researching this page:

• padregg.org is a full clone of the Padre marketing site. Its social links point at the wrong handles entirely, discord.gg/padre rather than the real discord.gg/padreapp, and its "Launch App" buttons go nowhere. The mismatched Discord invite is the clearest tell.
• padre-trade.com
• padre.cash
• padre-terminal.xyz

The risks that are actually worth your attention

If you came here worried about phishing, that is the wrong worry. Here are the right ones, and they are the reason this page is not a puff piece.

The 20% default slippage setting

This is the one that empties small accounts, and it is not hypothetical. A user on r/solana in February 2026 watched their balance drift from $40 to $30 and posted "somehow it says I bought $16 worth and sold it all for $2 how is that even possible." The next day they worked it out themselves: "the starting slippage is automatically 20% so change it if you are using low amounts of money." A second user hit the same wall a month later. Support never appeared in either thread and the official docs never mention it. Full write-up: why small trades lose money on Terminal.

No password recovery, at all

Your private keys are encrypted with a password that Terminal does not store, which is good for custody and unforgiving for you. There is no reset flow anywhere in the app. Padre's documentation stated it directly: there is no way to recover a forgotten password, and the recommendation is to export your private keys and store them offline. Nobody complains about this in public yet, because the failure is silent right up until it is total.

The PADRE token precedent

When pump.fun acquired Padre, the PADRE token lost all platform utility with no replacement and fell roughly 80%. Holders called it a rug pull. Pump.fun took a snapshot on 24 October 2025 and let holders claim PUMP as compensation, and that window closed on 30 December 2025. Judge it how you like, but it is a data point about how this company treats a token when a corporate decision makes it inconvenient, and the promised pump.fun community airdrop still had not arrived a year after it was announced.

The RICO class action

Aguilar v. Baton Corporation Ltd, case 1:25-cv-00880-CM in the Southern District of New York, is an active consolidated class action. The second amended complaint was filed on 7 January 2026. It names Baton, its three founders, Solana Labs, the Solana Foundation, several Solana executives, and 25 anonymous influencer defendants, alleging RICO violations, Securities Act claims under sections 12(a)(1) and 15, and unjust enrichment, under the theory of a "Solana-Pump.Fun Racketeering Enterprise." Alleged aggregate retail losses run to $4 billion to $5.5 billion. Relief sought includes treble damages and the appointment of a federal equity receiver over Baton's operations.

To be clear: these are allegations, nothing has been proven, no trial date is set, and the most recent docket activity was 14 April 2026. But a receiver over the operating company is the kind of outcome that would matter to anyone holding a balance on the platform, and you should know the request is on the table.

Corporate housekeeping

Baton's accounts at Companies House are overdue. The last filed accounts cover the period ending 31 March 2024, and the next set, for the year to 30 September 2025, was due on 30 June 2026 and had not been filed as of 6 August 2026. For a company that raised $1.3 billion, that is a compliance flag worth noting. Separately, the UK FCA geo-blocked pump.fun in December 2024, and reports of two layoff waves during 2026 have gone unanswered by the company.

Do not use coinproven.com as a source

It ranks for these queries and it should not be trusted. Its review of this product asserts that 32% of trades fail, with no citation of any kind and no methodology. It cites a Trustpilot rating for a page that does not exist. Its comment section is signed with names like "Kathy Wood." The whole thing reads as generated rather than researched, and the fake statistic in particular is now being repeated elsewhere as though someone measured it. Nobody did.

That is the wider problem with this entire query. Between synthetic review sites, contradictory automated scores and Reddit threads that are 70 to 80% referral spam, the honest answer to "is padre.gg safe" is buried under content that was never written to answer it.

The bottom line

padre.gg is real, it is Terminal, and it is run by a UK registered company with named directors on infrastructure you can verify from the browser. The scanner scores warning you off are heuristic outputs that contradict each other, and the phishing risk they gesture at is not where this platform will cost you money.

What will cost you money is a 20% slippage default nobody warns you about, a password with no recovery path, and the ordinary business of trading memecoins on a platform whose parent is defending a racketeering suit. Trade from a dedicated wallet with an amount you accept losing, fix the slippage setting before your first buy, export your keys the day you create them, and bookmark terminal.pump.fun so a search result never gets the chance to send you somewhere else.

If you are signing up, the cashback rate is set permanently at signup by whether a referral code was stored, which is worth understanding before you click anything. Our fees guide covers the 1% trading fee and how it stacks with pump.fun's own 1.25%, and the referral page explains the 10% versus 35% split. If a trade fails while you are getting set up, the error message guide has the full catalog of what the app's warnings actually mean.