How to Avoid Phishing Scams in the Crypto Space
The crypto space is plagued by phishing scams. This page will be frequently updated with tips on how to prevent becoming a victim of these scams.
Tip 1 – Do Your Own Due Diligence
Nothing beats doing your own due diligence. E.g. knowing when a project is going to have its pre-sale, whitelist and public sale might help you to spot a phishing scam right away when a scam offer is sent on an odd date.
Tip 2 – Check the Spelling
Ross Law posted the following tip in the #general channel of the Bowhead Health Slack:
“When you hover your mouse over suspect email links (suspect ALL are phishing emails until proved otherwise), you’ll see in the hover text that myetherwallet is invariably spelled incorrectly. For anyone not familiar with this simple check you can perform in a second when reading an email, please familiarise yourself with learning it. It will save you giving away your entire crypto portfolio to some scumbag who doesn’t have a real job. Example in the latest phishing email, the spelling for myetherwallet was instead myetherwaltet. Now, unless you’re really bad at spelling, you’ll immediately realise it’s a phishing email sent by a scumbag, and delete it. Personally I hope a swat team kicks their door down one day when justice comes looking for them.”
Tip 3 – Cross Check the Contribution Address
Always cross check multiple official outlets before sending tokens to a contribution address. Always assume that one or more of the official sources could be hacked. Be especially careful of phishing attempts launched via social media platforms with promises of discounts and what not.
Tip 4 – Private Keys
Scammers like to pretend that they are concerned about the security of your crypto wallet. They will normally request that you reveal or submit your private keys in order to ‘secure’ your wallet (while the exact opposite is true). It is best to ignore any such requests, even if it comes from a legitimate source. A third party has no business having your private keys, just like a third party has no business having the pin of your debit or credit card.
Tip 4 – Slack Private Messages and Slackbot
Davidp: “Please be aware that there are numerous phishing attempts taking place on Cryptocurrency Slack groups. Official announcements will only be sent by moderators and not through private message or slackbot.”