KOL Partnerships · Due Diligence Playbook · 2026
The Crypto KOL Due Diligence Checklist: Seven Checks Before You Promote Any Trading Bot
This one is for signal providers, channel owners, and content creators — everyone whose business runs on trust. An audience takes a decade to build, and one bad promotion can wipe it out overnight, and it's always you, not the platform that vanished, who absorbs the backlash. So this isn't a pitch dressed up as an article — it's a due diligence checklist you can run against any platform — including us. We answer every item against ourselves at the end.
I. Why due diligence is a survival question for you
The risk between a KOL and a platform is asymmetric: a platform that exit-scams can spin up a new shell and start over — you cannot swap out your channel or your name. When a user loses money, the first person called out is whoever brought them in. Every blowup cycle of the past few years has taken down not just the scheme itself, but a batch of creators who "just ran one ad."
Reputational risk: non-renewable
Trust builds linearly and collapses instantly. The cost of one bad promotion isn't lost followers — it's that everything you say afterward gets discounted. It's the one position in the content business you can never stop-loss out of.
Compliance risk: possible joint liability
In most jurisdictions, a promoter who guarantees returns or downplays risk in their marketing can be held jointly liable. "I was just sharing a post" holds up less and less with regulators — the messaging discipline in section V isn't a moral nicety, it's self-protection.
II. Three structural questions to rule out a Ponzi scheme first
Due diligence works in two layers. The first is the structural layer — three questions where a wrong answer to even one means an automatic reject, no need to look any further at its returns, team background, or endorsements:
Question 1: Where is the user's principal held?
There's only one correct answer: it stays in the user's own exchange account, and the platform only places orders through the API, with no withdrawal permission. Any platform that asks users to transfer principal into a platform account, a platform wallet, or a "custody address" can walk off with that principal the day it exit-scams — this isn't a question of ethics, it's a question of structure: a structure that can touch the money eventually will. For how to verify a custody structure, see why non-custodial bots are safer.
Question 2: Where do the returns actually come from?
Real trading profit and loss, or new users' deposits? The second one is the textbook definition of a Ponzi structure. Warning signs: a fixed return rate that has nothing to do with the market (like "1% daily, rain or shine"), withdrawals that need to be "queued" or "unlocked," and returns paid out in the platform's own token or points. Real trading returns move with the market — some losing months is the normal, healthy pattern.
Question 3: Is the commission one layer, or multiple?
You refer users and get a cut of the real value they generate — that's normal business. You still earn a cut when your recruits recruit their own recruits, and the more layers, the more you earn — that's an MLM structure, illegal in most places, and its mere existence tells you something: the platform grows by recruiting people, not by having a good product.
Only once all three questions clear do you move to the second layer — the seven-check due diligence on the product and the partnership details.
III. The seven-check due diligence checklist
Each check lists what to ask the platform for and what response should set off alarm bells. Only talk pricing after all seven clear.
Check 1: Live results you can verify
Ask for: live results you can check item by item — a public leaderboard, real accounts visible in the app, numbers that actually line up. Red flag: only profit screenshots (which can be Photoshopped), a backtest curve (a martingale-style structure's backtest looks flawlessly like an ad right up until it blows up, see The Martingale Strategy Guide), or "internal data we can't share." For the verification methodology, see Auditing KOL Signal Providers.
Check 2: Custody structure and free withdrawal
Ask for: a non-custodial structure (API order placement, no withdrawal permission), with users able to revoke the API and withdraw anytime, no lock-up period. Red flag: any form of "funds locked," "withdrawal review," or "minimum custody period."
Check 3: Fee structure and where incentives point
Ask for: a written fee explanation, ideally a structure that only charges when the user profits — so the platform's incentives point the same way as the user's. Red flag: a platform that earns from trading-volume rebates or deposit size has an incentive to push users into bigger positions and longer unrealised losses; it profits from turnover, not from your gains. For a fee-model comparison, see our fee structure comparison.
Check 4: How honest is the risk disclosure
Ask for: a worst-case explanation in black and white — not a line of fine print in the footer, but something proactive, prominent, and specific. Check whether the high-risk product line is labeled separately, rather than sold mixed in with the stable ones. Red flag: you can't find the word "loss" anywhere on the site, or risk gets acknowledged verbally while everything in writing is about returns. For a benchmark you can hold this against: the risk document we wrote for our own highest-risk product, written to talk you out of it first.
Check 5: Its track record through extreme markets
Ask: straight up, "What happened to your users during 3/12, LUNA, or FTX?" Any platform that's been running more than a year has been through an extreme market, and the answer should be specific — what mechanism kicked in, what users actually gained or lost. Red flag: "our system sailed through every market perfectly" — in this industry, "perfect" is the loudest alarm there is.
Check 6: The operating entity and compliance boundaries
Ask for: a verifiable operating entity with clear contact and complaint channels; the platform should clearly tell you which regions you cannot promote in and what language you cannot use. Red flag: the entity doesn't check out, or the platform encourages you to "say whatever gets people in the door" — a platform that won't draw your compliance boundaries for you is planning to put you in the front row when the bullets start flying.
Check 7: Transparent partnership terms
Ask for: written terms that spell out the attribution mechanism (how a user brought in by you is counted, and for how long), the settlement schedule and method, and a data dashboard you can actually see. Red flag: a commission rate promised only verbally, a black-box attribution system ("whatever our backend says"), and settlement that keeps getting pushed back.
IV. Red lines: reject on sight
If any single one of the following shows up, reject it outright no matter how good the money is — these aren't risks, they're ticking time bombs:
🚫 Asks you to promise returns or guaranteed principal in your promotion ("guaranteed profit," "X% daily," "zero risk")
🚫 Requires users' principal to be transferred into the platform or a "custody account"
🚫 Multi-level recruitment commissions (MLM), with income mainly coming from recruiting downlines
🚫 Asks you to collect funds from your followers directly, or to register or operate accounts on their behalf
🚫 Due diligence materials are nothing but backtest curves and profit screenshots, with live results "not convenient to share"
🚫 States or implies that you should downplay or hide risk disclosures
V. Your messaging discipline: protecting yourself
Once you decide to partner up, what actually protects you is every single sentence you say. Four rules:
1. Never promise returns
Saying "over the past X months, my account result was..." is fine; saying "you'll make this much too" is not. Any statement about returns should always come with a risk disclosure — make "trade at your own risk" a permanent fixture of your content.
2. Always cite your source when quoting data
State clearly where every number comes from (a public leaderboard, your own account, platform documentation) — only data your audience can verify for themselves is worth citing. This also forces you to only partner with platforms whose data can actually be verified.
3. Separate your personal experience from general results
Your capital size, risk settings, and entry timing are all different from your audience's. Say explicitly, "this is my own setup and result, not what you should expect to earn" — one sentence turns misleading marketing into honest sharing.
4. Keep everything the platform tells you in writing
Keep a written record of every piece of promotional material, every data claim, and every commitment the platform gives you. If something goes wrong later, "what the platform told me to say" and "what I improvised myself" carry completely different levels of liability.
VI. Running this checklist against CoinTech2u
Checklist done — as promised, here we go putting ourselves through it. The three structural questions: principal stays in the user's own exchange (API order placement, no withdrawal permission); returns come from real futures trading, moving with the market, including losing periods; the referral commission is single-layer attribution, with no multi-level structure. Now the seven checks, point by point:
| Check | Our answer (all verifiable) |
|---|---|
| 1. Live results | The live results page and profit leaderboard — every number can be checked item by item in the app |
| 2. Custody | Non-custodial API structure — users can revoke the API and withdraw anytime (details) |
| 3. Fees | Only takes a cut when you profit, no charge on a loss (fee structure) |
| 4. Risk disclosure | The highest-risk product line has its own risk document written to talk you out of it first, labeled and sold separately from the stable products |
| 5. Extreme markets | The worst case for slippage and liquidation is spelled out in writing (Scenario 4 in the risk document) — we don't market "sailing through perfectly" |
| 6. Compliance boundaries | We spell out the messaging red lines up front when partnering (no promising returns, risk disclosure always required) — sections IV and V of this article are our public position |
| 7. Partnership terms | Invite-code attribution (link with ?ic=your code, 30-day window), commission settled against users' real profit, written terms |
One incentive structure worth spelling out: the platform only earns from profit-sharing, and your commission likewise comes from users' real profit — when users lose money, neither the platform nor you earns anything. So we have no incentive to get you to oversell this: users who come in with the wrong expectations leave with losses, and that's a loss for all three parties. Honesty is the only strategy that actually pays in this model.
KOL Partnership Portal →
Partnership terms, the attribution mechanism, and contact channels are all on the KOL partnership page — bring this checklist to the conversation, we welcome being put under the microscope.
VII. FAQ
Q: The platform's offer is great, but it fails one or two checks — can I still take it?
The three structural questions and the red-line list are one-strike disqualifiers — no price is worth taking that deal, because you'd really be pricing your own reputation. Within the seven checks, Check 6 and Check 7 (compliance boundaries, contract details) can be negotiated and improved; Checks 1 through 5 reflect what the platform fundamentally is, and that's not something you can negotiate your way out of.
Q: Can I promote a product I don't use myself?
Technically, yes — but you give up your most powerful content asset (a real usage record), and your ability to catch problems first. We'd suggest running it for real with a small amount you can afford, at minimum — that's due diligence and content at the same time.
Q: A platform I'm already promoting just blew up. What do I do?
Make a public statement immediately (covering it up only doubles the backlash), stop all related promotion, help your followers cut their losses and pursue whatever recourse exists, and go back through which check you missed — then publish that post-mortem. Handled well, a blowup can actually build trust — your audience remembers how you showed up in the crisis.
Q: My following isn't that big — is this much due diligence really worth it?
The smaller your following, the more each unit of trust is worth. A top-tier creator has scale to absorb one bad call; a small channel gets wiped out by a single one. And once you're used to running this checklist, one full pass takes half a day — relative to what it protects, that's the best-value half-day in the entire industry.
Further reading
- • Auditing KOL Signal Providers: 5 Verifiable Dimensions to Judge Whether a Call-Out Influencer Is Worth Following
- • Crypto KOL Monetization Complete Guide: 7 Stable Revenue Models In-depth Analysis
- • Is an AI Trading Bot a Scam? 6 Red Flags to Spot a Rug-Pull Platform
- • How Much Can an AI Trading Bot Make? The Data From 300 Real Accounts
- • The Martingale Strategy Guide: The Math, the Variant Map, and How to Spot a Dangerous Martingale Bot