Bitcoin Forum

This time, the scammers are banking on the bitcoin halving event in May and using it to lure potential victims.



It will ask you to input your 24 mnemonic phase so just be careful, don't believed on this so called discounts as well, or even thinking of putting your email addresses. This is just another trick, don't fall for it.

Its as if its safer to not put all your eggs in one basket with a hardware wallet.  :-\

How did you find that scam website, googling "ledger" and the official ledger website appears at the first line.No way to enter such scam link as that

I tried opening the link but it was blocked by the Metamask wallet extension with a warning.

"This domain is currently on the MetaMask domain warning list. This means that based on information available to us, MetaMask believes this domain could currently compromise your security and, as an added safety feature, MetaMask has restricted access to the site. To override this, please read the rest of this warning for instructions on how to continue at your own risk."

There are also a lot fake Trezor websites that are still active. They're also blocked by Metamask.
trezorsafebestvault.press/
‎ceske-trezory.com/
‎
‎

‎

Is this phishing website advertised by google ads or what? where did you find it so that everyone will be aware? If on google ads I suggest installing Ads Blockers like uBlock Origin. Always bookmarked the important site and if found a suspicious phishing link help us report it here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

Hardware wallet has one weak link, and it's about the human factor. No one can control this, although we are constantly warned about the importance to not import/type our seed words nowhere except in the hardware wallet itself. (Ledger recovery sheet warning (https://bitcointalk.org/index.php?topic=5207484.0))

There are many ways to protect your wallet hardware wallet, from storing it in safe place, but also to keep your backup (seed) also in safe place (different place then hardware wallet) and to add passphrase as extra protection to seed.

If after all warnings someone does a stupid thing like the one mentioned in the OP, then unfortunately it does not deserve any empathy. I would put something like this in the category of giving someone your ATM card along with PIN because he promised to increase your account for some extra money. Would you do that?

The site was created ten days ago, and uses within many links to the original Ledger site, as is a custom on these scam sites. What it does is ask for the 24 word mnemonic, without even bothering to provide a proper credible excuse other. Additionally, it keeps on displaying a pop-up that asks you for your email to join an alleged crypto community. The programming logic is pretty bad, and makes one wonder why they bothered to make such a poor attempt instead of polishing it further to make it slightly credible.

You got it wrong, it's safer to use hardware wallet, all you have to do is keep your private key safe and you are good to go, even if the wallet get damaged, with your private key you still get access to your coins

Every hardware wallet gives you a mnemonic phrase from which you can obtain the private key. While the private key is not exposed to the computer, hardware wallets themselves might be somehow vulnerable to seed extraction (unfixable Trezor vulnerability (https://www.finder.com.au/kraken-reveals-trezors-secret-surprise-vulnerability)).

Good catch @OP it seems like they now know where most of the crypto users are holding majority of their crypto and is now trying to gain access on it. The fortunate thing about this one is most hardware wallet users are more educated when it comes to phishing sites like this one so they are less likely to fall in this kinds of traps, they aren't like the ones who are giving fake giveaways where a lot of people are getting victimized.


This does not apply to desktop and hardware wallets, they are already good investments for the protection of your crypto in the first place so really the only thing you worry about is always these phishing sites trying to still your mnemonic phrases and private keys which you always have to be openly aware of.

Perhaps the scammers behind is too lazy to make it credible and just think of people who are going to fall for their gimmick. As much as we always pitch people to really be careful on every site their visited, many are still falling for this simply but effective trick in scammers book.

I check for the backlinks and see where these guys are advertising, again, maybe they don't really bother at all, they are just waiting for someone to fall for it. Another good catch from the OP.