Bitcoin Forum

Hey gang, not sure if this has already been passed around but thought I'd highlight a spam email I got attempting to hijack MEW.  I think the site's already down but the email looks really legit and the link in the email is accurate, but it doesn't link to the official MEW site.  I was already suspicious so I went through trying to spot the issues... it actually took me awhile but it shows up in the email address.

As I said, I believe the site is already down but I sent this up to notify just in case, but also to show others how difficult to spot scam.  When you read people complaining about their MEW being 'hacked' it's likely that someone clicked on an email link like the one I got.


https://image.ibb.co/kpo6Dw/ether_wallet.jpg

thanks for the heads up. these guys were particularly sloppy; they didn't even properly spoof the email address. it's fairly trivial to do so, so these phishers are aiming at the lowest hanging fruit.

i would hope that nobody would ever click a link purporting to be from MEW anyway. users don't link email addresses to MEW wallets at any point, so that alone should immediately tip anyone receiving these emails that a scam is happening. MEW never sends out emails, and what email list would they even have access to? people are just using the bitcointalk/btc-e/other database leaks and sending phishing emails to those email addresses.

Thanks for that noticed and warning to all of the myetherwallet user. This is not the first time that a phisher tries out to get some victim, I have seen before that they are also using SEO and advertising through google by misspelling the middle letters of myetherwallet. Most of the people that are becoming victim of these phishing links / emails are the ones that are lazy to read on what they are visiting.

Thanks a lot for the heads up. It's indeed extremely important to be careful when dealing with links to wallets.

Honestly those people who scam  to us are those  people who are living in china. and people who are doing internet marketing since they are not successful in scamming to someone when dealing they are making new lander for email marketing  and  other they are doing blackhat strategy to promote their fake site..
So beware for this guys there are lots of scammers out there russia and india are almost who are doing scam these days base on what i experience and research from some forum..  since the price of bitcoin is really high they are doing anyway just to got bitcoin since the price of bitcoin is really increase fast and high..

Please stop generalizing people as not all internet marketers are scammers and not all people who are living in china are gonna scam us in fact the location has nothing to do with it but its the skills of of looking like a legit. What we should look after is the content itself, Make reading a habit and take time to think and analyze the data before doing something particularly if it involves money. Take the op for example as the content is definitely suspicious this is probably why op looked into it as something is definitely wrong.

Thank you for posting this, but people that will be caught or will be tricked fron this are the ones who's not reading and observing the email especially the header. And checking links are the most important.
So just be careful always.

Thank you for giving and bringing us this up mate. I recently had read someone posted at reddit that his ETH was hacked, he has 2FA and other security features for his wallet but still he got hacked.


I don't know on where these scammers are coming from, I don't want to guess or give any country because it's quite bias though I'm not protecting them and I'm not even supporting China. But before going to any conclusion if they are from China we should have proof and fact about it.

We really need to be careful. I recently read that the same MEW spam emails began to spread over one of the airdrop that advertised on the forum. Thank you for opening this topic, it will certainly help many to be more cautious.

These days, MEW scam email really true concerns. As mew getting popular there's opening many phishing site. Eventually, I've received same kinds of scam mails. Thanks for your effort and heads up.

Thanks for sharing. Though I never got an email like this (fortunately), thinking about it is quite bothersome. There were so many reported/posted phishing sites of MEW and so as victims, maybe this is due to a lot of ICO's using ERC20 tokens popping up these days. Desperate people who wants to earn quick and have a skill are taking advantage so all we can do is be VIGILANT.

PS. Installing the EAL Chrome Extension (https://chrome.google.com/webstore/detail/etheraddresslookup/pdknmigbbbhmllnmgdfalmedcmcefdfn) or the MetaMask Chrome Extension (https://chrome.google.com/webstore/detail/metamask/nkbihfbeogaeaoehlefnkodbefgpgknn) might help as well as they give a warning when you landed on a crypto-phishing site BUT still ALWAYS DOUBLE CHECK THE URL.

Hackers discover new tricky tactics everyday. Never open this kind of "security" emails directly.I always run virus scan before downloading something from unknown sources. Always check certificate of wallet site and pay attention to "dots". This tactics bring new victims everyday without realizing truth behind that idea.

Nice catch for this OP, it's a big help and bumped to the community especially us who are keep on reading and makes ourselves updated when it comes to bitcoin and other stuffs about crypto.

---

Exactly, only those people that will be fooled by this tricked are the ones that are not really checking out the email's and websites that they are visiting but still this is a big heads up to all of us, those hackers are really always in action and never stops.

It's easy to avoid these type of scams, just every time you check out your email make sure that it is coming from the real, legit provider or exchange or any wallet provider. You know that nowadays the price of bitcoin is increasing and other alts as well so this is pulling the interest of hackers to pursue their job, yes it's their job to scam people, to make phishing links but if you are vigilant enough about this thing you'll not become a victim of it. Thanks for the notice OP.

I received the same scam attempt some time ago but it was from someone on slack, he sent me more than 10 personal messages in a day which is so annoying but that's make me being skeptical. There are just too many scam attempts on MEW, probably it is becauce MEW is the most used ethereum wallet in this world. That's why many bad people try to scam us on it.
Always be careful is the best thing to do to avoid this kind of scam attempts. Better to be save than sorry.

Not just China. Shits like this have been happening even before cryptocurrency came into existence. As long as it has to do with dealing with assets and funds online, these guys are really planning an attack every now and then and there is nothing we can do, we just have to always be on the watch out. I am not saying though that they can be involved but we can't really just point fingers.

A lot of people have really fallen for scams like this and it is just quite unfortunate they just could not read more in between the lines and check the email information properly. These hackers are really damn crazy switching ether to ehter, it is just getting really crazy. Everyone should just be smart and always question everything until they are sure even if it is from the right source. Thanks for sharing that mate!

That is just it! We just have to be careful and make sure we analyze every tiny details so we don’t fall into scams like this. This is really why so many old folks are always skeptical about getting involved in the internet age as things can really get messy within few seconds and it just takes too much toll on them monitoring their every movements.

As long as you will be referring with this community for cross checking then you will be into safer side. Yes, double checking the information from unreliable resources will safe guard us.

I got the same email and i figured it was a scam. The best way to not get scammed is to never click on a link and always use bookmarks. Bookmark the legit site and use that site and that site only.

I'm getting tired of these emails from these scumbags. My email is now flooded with their garbage phishing attempts. Slack has been also the main hunting ground of these scammers. They are all over the place sending PMs to every individual in every crypto channel in an attempt to get some coins from newbies. I just can't believe that the Slack team is not taking any countermeasure against these guys. They're just allowing this to happen.

Thanks to this topic I was cautious and today when I saw a suspicious mail I did not respond. Unfortunately, my friend seems to made an mistake. Damage is not big because he did not have ETH in his wallet. Just some tokens. As far as I see on MEW site, there is now a recommendation to install EAL or to use MetaMask in order to protect your self from phishers.

Sorry about your friend's loss, it could have been big if he had a lot of funds or tokens in his wallet. The most important way of protecting yourself is just to make sure you are not clicking any external link from your mail as long as it is not a verifiable operation directly from the site itself, which I believe MEW doesn't even do.

Also, though still under little development, but still very usable, there is an application (at least, I know that of android), that allows you to have access to your private key and you can also view your token and transact directly without having to use your PK all the time to login via the web wallet. Work is still being done to allow sending of tokens anyway, but it has been good for safety. Ether wallet is the name for those who may care.

Its really to trace or find out the difference on the legit site and the fake (phishing one) If you do really have always on doubts on what you are recieving then make it always a habit on making such investigations regarding if its a legit email or not and as you can found on the email being used.If you do try to see it on first time and you are on a rush then most likely you wont really notice this one but on your second check for sure you will really able to tell the difference. These kind of phishing attempts isnt new anymore and people should really be aware on this one.Always check and review.

Just had this today and I'm not even sure how they got my email as I'm not used it on any websites related to Bitcoin.

I must say the email content does look pretty good to fool anyone, hope people take precautions to be on the lookout for any errors like the email domain which given them out that this is a phishing attempt.

This is why most people do really easily be fooled into this phishing sites which they do really look legit and the real one.If you do see the templates and the format being used which those scammers did really prepare on the stuff they would use to scam people and for those fellas who don't have much idea on the exact links on the services that they do use will definitely got to logged in on this phish sites.

Maybe you did signed up through different websites and they've bought it somewhere through email marketers. This is what's happening right now, a lot of people are into MEW scam email and not only through them. If you know that you never signed up to any websites then just ignore them because it's better not to waste your time reading those emails that you never did signed up or register for their notifications and update so make sure you don't also click any suspicious links.

That slack phishing attempt is becoming unbearable and I really don’t know why slack is not doing anything about it. Scammers have been using this platform to get a lot of people scammed but the complaints to slack is falling on deaf ears. Now, most projects are finding Telegram as the safe ground due to the experience of past projects. Something should really be done about this.

yah, most of the victims of pishing site are just been notify by their emails so better hide your email address on your personal information so that you are not prone to this hackers. There are many pishers that use email to make their mimicking more convincing most pishers send a email like you are notified that you Etherwallet has been log in on different IP address and they are giving a site where you can see the MEW wannabe and by this message most users are been fooled by this and freely give their private keys not knowing that they are already been under scam. So if you receive such mail better double check the site that are given before giving off your private key to avoid such mishap.