phishing

PHISHING SCAM ALERT: YOUR SEED PHRASE IS TARGETED!

Scammers are mailing fake letters to Ledger and Trezor users. They demand your recovery phrase. This attack exploits data leaks from the last 6 years. The letters have QR codes. These lead to fake setup websites. They are designed to steal your phrase. This is a new level of deception. Protect your assets now.

DISCLAIMER: This is not financial advice.

#CryptoScam #HardwareWallet #SecurityAlert #Phishing 🚨

WARNING: MILLIONS VANISHING!

Scam Sniffer uncovers a terrifying trend. January saw a $12.25 million loss from a single copied address error. Last month, another victim lost a staggering $50 million the same way. Signature phishing attacks exploded by 207% in January, costing 4741 victims $6.27 million. This is a silent epidemic draining wallets. Protect your assets NOW.

Disclaimer: This is not financial advice.

#CryptoSecuri #ScamAlert #Phishing #Web3 🚨

According to security firm Web3 Scam Sniffer, over $127 million in #Criptomonedas was stolen from investors in Q3 2024, with approximately $46 million lost in September to phishing attacks.

In phishing attacks, scammers trick investors into linking their crypto wallets, such as #MetaMask , to fraudulent services. Linking crypto wallets to #phishing websites allows scammers to withdraw#cryptocurrenciesfrom users without further authentication.

🚨 I want to share something that happened to me so that no one else falls into this trap...

Recently, I received a message with a link that looked official, claiming to be from Binance. I thought it was normal because I always receive notifications. However, that link was a phishing attack.

Without realizing it, I entered my details and within minutes, I lost 300USDT💸 from my wallet. It was a hard blow, not only because of the money but also because I realized how easy it is to fall into these traps if you're not alert.

Since then, I learned three key things to protect myself:
✔️ Never click on links that you do not verify yourself.
✔️ Always check that the URL is the official and secure one.
✔️ Enable two-factor authentication (2FA) for added security.

I tell you this because I want you to be cautious and not make the same mistake. Phishing is one of the most common scams, and the best defense is prevention.

Share this story so that more people do not fall into these traps.
$PEPE

#phishing #SeguridadCripto #CryptoTips #BinanceSquare #dyor

#ScrollCoFounderXAccountHacked ​🚨 SECURITY ALERT: Scroll co-founder has had their account hacked!
.
​The hashtag #ScrollCoFounderXAccountHacked is dominating the trends and serves as a brutal reminder: in the crypto world, no one is 100% immune. On January 25, 2026, Kenneth Shen's official account was targeted in a sophisticated phishing attack.
.
​🛡️ What happened?
.
​Hackers took control of the profile to spread malicious links, attempting to drain unsuspecting users' wallets through false promises of airdrops or urgent support alerts.
.
​💡 How to protect yourself now:
.
​Beware of Urgency: If a founder posts a link "click now or lose your account", stop and breathe. It’s the favorite trigger of scammers.
.
​Verify Sources: Before interacting, check the project's official channels (Discord, Telegram, Official Site).
.
​Review Permissions: Never connect your main wallet to unknown sites. Use a "burner wallet" for suspicious interactions.
.
​Hardware 2FA: Use physical keys (like Yubikey) whenever possible, they are much more secure than SMS or authentication apps.
.
✅ ​The Scroll ecosystem remains strong, but individual security depends on our constant attention. Stay alert!
.
🤔 ​What do you think of this breach? Do you think social networks need extra layers of security for public crypto figures? 👇
.
​#Scroll #SecurityAlert #Phishing

A whale (or possible institution) that suffered a phishing attack involving US$ 50 million in USDT attempted direct contact with the responsible party through an on-chain message.

According to ChainCatcher, the victim even offered US$ 1 million as a reward for the return of the funds. So far, there has been no response from the scammer.

The chance of recovery is considered low, as the amounts were converted to ETH and passed through Tornado Cash, making tracking and reversing the transaction difficult.

#USDT #defi #phishing #whalealerts #blockchain $ETH $USDT

Stay #SAFU on X and other socials.

@JasonYanowitz on X narrates his #hack odeal.

I got hacked yesterday. At the risk of looking foolish, I'll share how it happened so you can avoid this nightmare. For the past few weeks, people have been trying to get into my accounts. #Crypto accounts, email, twitter, etc... every few days I get an email that someone is trying to access one of my accounts. Thankfully I have non-text #2FA set up for everything so nothing got hacked. So when I got back from dinner last night and saw this email, I panicked.
Someone in North Cyprus had finally managed to hack into my account. I guess my security wasn't strong enough and they found a loophole.
I clicked the link to "secure my account". I entered my username and password, updated to a new password, and voila: I'm back in. Crisis averted. Or so I thought. Moments later, I got an email saying my email address had been changed.

This was the real hack.

I was now officially locked out of my account. So how did this happen? It turns out the original email, which looks incredibly real, was not so real. Most email clients hide the actual address.
But when you expand it, you can see that this email was sent from "verify@x-notify.com" Fake address. I got phished. Very foolish mistake. I don't open Google Docs when they're sent to me. I don't click links. I typically check addresses. But Friday 8pm after a long week, they got me. I am aware this thread exposes a pretty dumb mistake but if I can save one person from this same mistake, it's worth it.

Some takeaways:
- Don't click links
- If you do click a link, review the actual email address
- Set up non-text 2FA on everything
- If you've done that, trust your own security process
- If you think you've been hacked, slow down and think about how this could have happened
Big thank you to @KeithGrossman and some folks at X for helping me get my account back so quickly.
If you're still reading, go read the self-audit series from @samczsun.
And this best practices from @bobbyong.
Lot more you can do but start there. #phishing

🚨 ALERT: ENS founder Nick Johnson warns of an "extremely sophisticated" Google phishing scam targeting users with fake subpoena notices. 🛑

⚠️ The emails pass DKIM checks and appear as legit Gmail security alerts.

📩 Stay sharp — even your inbox isn’t safe.

#Phishing #Crypto #CyberSecurity #ENS #Web3

What's the first thing I do - and You should too - when received an #email from #Binance ?

I check my anti- #phishing code ✅

Did you set it up?

Cheers 🥂

#CryptoScamSurge
The crypto community facing scams: how to recognize, prevent, and act.

The rise in cryptocurrency prices has brought with it a concerning increase in increasingly elaborate frauds, threatening the credibility of the crypto environment and opening the door to greater regulatory controls.

How can the crypto ecosystem respond?
🔹 Continuous education: It is vital to share information about frauds such as rug pulls, phishing, misleading giveaways, and emotional scams. Workshops, educational threads, and open resources can make a difference.
🔹 Real transparency: Encourage projects to present clear documentation, verifiable teams, and publicly available audits.
🔹 Joint action: Platforms, wallets, and users must work together by sharing lists of scammers and reporting suspicious activities.
🔹 Analytical tools: Promote the use of services like Token Sniffer or DEXTools to evaluate contracts and tokens before investing.
🔹 Active support for victims: Create spaces where users can report scams and share alerts to prevent others from falling victim.

Main crypto scams in 2025
⚠️ Deepfakes: Manipulated videos or audios where supposed celebrities promote false investments.
⚠️ Pig Butchering: Emotional scams that build false relationships to later steal funds.
⚠️ Rug pulls and pump & dump schemes: Projects that inflate their value and disappear with the money.
⚠️ Phishing and wallet draining: Malicious sites and apps designed to steal keys and crypto assets.
⚠️ Malware on Telegram or direct messages: Disguised applications and bots that install spyware or extract sensitive data.

The best defense remains knowledge and teamwork. Share this information with your community and stay vigilant.

#CriptoEstafasAumen #CriptoSeguridad #BinanceSquare #CriptoEducación #DeFi #phishing #RugPull

🚨 SCAM ALERT: New Fake Customer Support Scams Target Binance Users 🚨

⚠️ Scammers are leveraging face-videos and QR codes to
impersonate official support.

🚫 Stay vigilant and never scan suspicious codes or share personal data with unverified accounts.

#CryptoScam #Phishing #BinanceSecurity #Write2Earn #BinanceSquare

🚨 WLFI Blacklists 272 Wallets Amid Rising Phishing Threats

World Liberty Financial Inc. (WLFI) has announced the blacklisting of 272 crypto wallets in response to a surge of phishing attacks and wallet compromises.

🔐 WLFI emphasized this move is protective, not punitive—aimed at shielding users from malicious activity, not restricting legitimate trading.

📊 Breakdown of actions:

215 wallets linked to phishing attacks

50 wallets blacklisted at user requests after compromise

5 wallets flagged for high-risk exposure

1 wallet under investigation for misappropriating funds

✅ WLFI assured affected users it is working directly with rightful owners to secure and relocate assets, while maintaining transparency by sharing investigation outcomes publicly.

⚡ Key takeaway: User safety remains the top priority as WLFI strengthens protections against evolving threats in the crypto space.

---

#CryptoSecurity #Phishing #BlockchainSafety #WLF I #CryptoNews

🔐 Do you have crypto? Then you need to protect it.

The market does not forgive those who are distracted. Here are the 3 basics to know:

1️⃣ Use a secure wallet

Start with a non-custodial (e.g., Metamask, Trust Wallet)

If you invest significant amounts, consider a hardware wallet

2️⃣ Never share the seed phrase

Not even with friends, not even as a joke

Write it down offline. Better on paper, in multiple copies

3️⃣ Watch out for phishing

Don't click on strange links

Always check that the site is the real one

🧠 Crypto is freedom, but it requires responsibility.

🔁 Follow me to learn how to manage it without getting scammed.

$BTC

#CryptoSicurezza #SeedPhras #Phishing #CryptoMindset

🚨 Beware of Phishing!

🎣 Criminals try to imitate official websites and apps to steal your data.
✅ Always check the website address.
✅ Enable two-factor authentication (2FA).
❌ Never click on suspicious links received via email, SMS, or social media.

🔒 Security is a priority: protect your access and your cryptocurrencies.

📌 Golden rule: if it seems strange, it's a scam.

#CriptoSeguro #Phishing #SegurançaDigital #ProtejaSeusAtivos #BitcoinBrasil

Serenity : 🧠 You Are the Final Firewall

A major cyberattack has just compromised over 184 million user credentials, affecting global tech giants including Google, Apple, and Microsoft. The hackers exploited multiple systems and leaked login #data across the dark web — exposing the alarming fragility of password based #security models.

🔐 The attackers broke through every wall – but sAxess ensures there’s one they can’t cross:

Your fingerprint.

✅ No more passwords to steal
✅ No #phishing traps to fall into
✅ No central databases to breach
✅ Your identity, secured by biometrics + blockchain

#Serenity #sAxess isn’t just a wallet. It’s a personal firewall. A biometric, self-custodial solution that removes traditional vulnerabilities and gives you total control over your digital access.

With sAxess, you become the key.

And hackers can’t steal what they can’t replicate.

#PeckShieldAlert
A #phishingscam address labeled "Fake_Phishing442897," which stole $55.4M in #DAI from a whale's account, has swapped 250K $DAI for 102.6 $ETH & transferred them to a new address 0x2751...fC12
The #phishing address currently holds ~$40.5m worth of cryptos, including ~15.18K $ETH , ~2.8M $DAI & ~327.3 $stETH

🔴 URGENT ALERT: Phishing by "Tax Authority" is back!

Here’s how to protect your Crypto.

The scam is back: Crooks are targeting crypto holders by posing as official organizations (taxes, central banks) or even agents from the Bank of France/ACPR (source: news from 28/11/2025).
Their goal? To make you panic and click on a fraudulent link to "declare" or "regularize" crypto transactions. It’s pure Phishing, aimed at stealing your credentials or your funds.

🛡️ Your IMMEDIATE Line of Defense:

1. Check the Domain: Official organizations NEVER send SMS or emails for urgent actions with short links. Legitimate addresses always end with an official domain (e.g., gouv.fr or banque-france.fr).

2. Never Urgent: Any communication demanding "immediate" action to avoid a "penalty" is a giant red flag. Always take the time to verify.

3. Direct Access: If you receive an alert, do not use the provided link. Go directly to the official site (e.g., Binance.com or the tax portal) by typing it yourself in your browser.

Protect yourself: the cost of a click is often the price of your entire wallet.
#CryptoSecurite #AlerteScam #Phishing

Twenty malicious #npm packages impersonating the #Hardhat #Ethereum✅ development environment have targeted private keys and sensitive data. These packages, downloaded over 1,000 times, were uploaded by three accounts using #typosquatting techniques to trick developers. Once installed, the packages steal private keys, mnemonics, and configuration files, encrypt them with a hardcoded AES key, and send them to attackers. This exposes developers to risks like unauthorized transactions, compromised production systems, #phishing , and malicious dApps.

Mitigation tips: Developers should verify package authenticity, avoid typosquatting, inspect source code, store private keys securely, and minimize dependency usage. Using lock files and defining specific versions can also reduce risks.
$ETH