They could show “trades” with out order IDs, change fills, blockchain transactions, or verifiable data. A platform asking for withdrawal-enabled API access ought to raise concern. If the bot can withdraw, the user is trusting the platform with direct entry
