Bitcoin Forum

I decided to post this here because its for the newbies and I know this might probably help anyone. So, let me Say, as I've seen so far.

I've known about bitcoin and some other Altcoins since 2016 and since then, I've signed up in several websites because of free BTC or ETH and this have made my previous email address common and shared with different kind of people. Although I stopped now but they already got one of my email. So i received many scam emails from scammers

Many scam mails or emails are being sent by scammers to steal your coins.
Be careful of these kind of email if you are a type whom email address is being shared to people and the same email is being used on several exchanges or any wallet.

These emails include
* you should change your password, follow this link
* follow this link below to change your password
* your password needs to be changed. Click here.
*  you need to change your password to be able to access your account
And so on.
See an example here : https://ibb.co/ygkHQS7

What will happen when you click on the link?
You will be directed to a compromised version of the site and any details you enter and click submit will be revealed to the scammer.
This will give the scammer access to your account and be able to withdraw your funds or steal your funds.

Also, giving out your email address anyhow isn't safe too because thus could give hackers chance to get to any account connected to that email easily.

Beware of all these

Thankyou for sharing this information, I will be careful before clicking any unknown link from someone now. But if you didn't change any password from your wallet, this trick will never work and you will safe

Good advice. Email address should be carefully handled, but your someone having access to your email alone can't make them transfer your funds in your wallet they would still need your password or private keys for import of wallet,
When creating a wallet Is better documenting private material down than making a screenshot or saving it as a message in your email or saving it at all on your phone.
Also get 2fa authenticator

Proper safety measures have been discussed many times in the past. One of these is using different email accounts for different purposes. Your personal and private email accounts that you have for your banking, financial, and private needs should never be connected to the same email address that you use for ICOs, giveaways, and stuff like that.

You can categorize your needs in different ways and have anywhere between 5-10 email accounts that should never intersect.

This is the reason why you should use different emails when you create an account on an exchange for example and in that way you won't receive scam emails on your primary email. Sites like that are called phishing sites where they will get all the details you submitted. To stay safe from this kind of scam you should also check the sender's email and compare it to the original if you have received one. If you haven't received one yet then you should search first or the best bet is to never open the email sent in the first place.

Yes, you are 100% right.. I use different emails now and I have up to 5 emails for different purposes because of this.

This is very old way to scam people, you shouldn't use your main email for such as suspicious site like ICO, Airdrop and other free money website. When you will receive such as greedy offer via mail, just use unsubscribe button from bottom of mail. So that you will not receive such as suspicious mail unless they add you manually once again. One of the most reason why we are gatting scam is greed, when we see any greedy offer then we fall into it. So try to be realistic, nothing is free in the world. We might avoid such as scam attempt by avoiding our greedy behaviour.

Phishing and emails are one of the oldest ways of scamming people and still, there are a lot of people getting victims regarding with this kind of business please it is already in the age of technology all of the people must need to adopt this kind of technology and be aware of this kind of stealing of information.

Most of the time the people getting hacked or cause of stealing of information because of the emails and one of the most popular spamming of emails is the love you virus that someone is sending you an email specifically a love letter of course with the use of your curiosity you will now open this email and free access on your account.

If you don't expect any kind of email on your account don't open any link or message included with that to avoid future problems.

One of my mistakes when I was a newbie and didn't care too much about my privacy is using my main email to register on different platforms. I even used the same password  :-\

Many of those platforms were hacked and their databases were leaked. My credentials became available publicly all over the Internet! Then, I started receiving similar phishing emails on a daily basis.
You can use this website to see if your email has been leaked too:
https://haveibeenpwned.com

Some emails are too good to be true such as having a good documented and well designed body with a simple link that opens a new tab yet instantly closes, in which it would simply send a script written by the attacker and sends information to his server. Even a simple pdf file or an image can contain an exploit to a person's device.

What information? Anything he wanted! He can even use undetectable payloads on your device and the rest would still be unknown. To simply avoid such emails, better use secured email servers such as Google, which detects emails with malicious content. And never ever trust anything unrelated or unexpected emails/links online.

One scam email type is this airdrop scam (https://bitcointalk.org/index.php?topic=5249020.0).

These scammers probably bought a database that includes most of those registrants from an old airdrop or any bounty that you had before. That's why never click any link that you are unaware of. And if it's obvious that you have never joined any of them at the current time, ignore and simply delete those emails so that you won't be able to see them or if curiosity comes to you, you don't have something to click.

I am 90% sure that those email addresses they are using are from those forms or activities that happened before, like for airdrops around bull run 2017- 2018. Which a lot of scam airdrop spreading especially in the Altcoin section, they will just leave a google form and you will fill it up with your personal information especially the email address.
Either we create a new email address for this or just ignore those emails (report or mark as spam).

If you receive a message like that, just ignore it, do not open it as long you don't know who messages you, you don't need to bother on not opening the message. Email is one of the ways of scammers to contact other people, that is the common techniques they are using to fool other people. Do not also publicize your personal information because I think that person who messages you get you information from somewhere you have posted your information.

Always keep your personal information on your own. Keep your accounts safe and use a strong password, there are many scammers and hackers in this crypto world so we need to secure our account.

Thanks for this
I will check..   ;)

There were sales offer in the past that contains email addresses of people and that could be one of those collectors.

For bounty hunters, they'll sign up to those because they treat it as a free money although there will be no assurance that the token they are about to receive will have value. They go with the promises that turns out to be a failed project. Us, who are aware of such, we tend to ignore them but these scams are targeting newbies.

Such mail comes to my email (generally I use it for testing) Everyday. But I don't care it. Sometimes these type of fake emails force me to distrust some original email from trusted site. Better to avoid visiting spam folder.

So we should be aware of it. Generally when we try to test any new sites, airdrop, subscribe email for notification, we should not input our personal emails there. We say always that evil people sale users personal Information to others, these type of emails is the big example for that.   

I get such messages even to email which have zero connections with crypto - I've never used it to signup on crypto related websites.
Best thing what you can do - just don't click on links that you got in email, even if it looks 100% legit.
Another thing - make few email addresses. First - main which is used to for most important websites like PayPal or your bank account and other stuff. Don't use it for crypto related websites.
Another - for main crypto related websites - trading platforms, Bitcointalk and etc.
And the last one - for less important signups which may send you spam - bounties, airdrops, giveaways, faucets, less reputed exchanges and etc.
These steps will prevent your main inbox from being compromissed  and getting lot of spam and scam messages.

Oh, I also forgot this, bounty hunters especially in Altcoin sections are also vulnerable to this kind of attack.
I think some of the bounty campaigns there require you to fill up some forms, and maybe some of those asking for your personal information, like email addresses or links of some of your social media accounts.

Something to add, use two emails one for services you know are legit and other for the opposite. You would be able to filter most of spam/scam messages this way.

They do ask for it.

And that's why the bounty hunters should be aware of what they're signing up so that they wouldn't be surprised if someone emails them with an unusual promotion or advertisement through their email. If they can remember that they didn't signed up for any other thing except the bounty, that's where the conclusion starts.

If you participate in bounty programs, you must make a separate email address for this purpose. In addition, never click on the links that are specified in the emails. Use only those sites that you have previously added to your favorites for your work.

I don't think just two emails will be enough. For example if you use use the same email address for banking and social media, you will get bombarded with crappy emails from your social media-related activities. They are both legit services, but I don't think they should be connected.

But for sure, some of the bounty hunter veterans already aware of this, they have some solution for it, like they are creating separate email addresses for their bounty campaigns, separate from their personal or whatever. The difficulty here if some newbie started to join some bounty campaigns and entered their email addresses, then that's the start they got some scam emails and fall for it.

They use a variety of emails to join Bounty and the number of scams increases More emails are hacked at Bounty That's why we need to keep the keys well to keep our email safe No one can easily scam without knowing the key. Also, avoid new links or sites. The sites need to be monitored closely In case of doubt, it is better to use a new email instead of personal mail No one will be able to easily scam it.

It is something that many still practice today, one e-mail and only one password on all sites. And what the bad guys realized a long time ago is that there is a very simple way to hack someone's e-mail account. They simply create eye-pleasing pages where they organize some giveaways/competitions, and all you have to do is register with your e-mail. In case the user uses the same password, the hacker invisibly logs in to the victim's e-mail and tries to do as much damage as possible in the shortest possible time. If there is no 2FA or other way to fix it, the hacker gets full control over the email and all other services related to it.

---

Just to learn not to click on links that look suspicious, or at least to copy and analyze them on pages like virustotal before clicking on them.

I often get SPAM messages from scammers like this. Usually the message will go to the SPAM folder so it is very easy to know that the email is a phishing email that will trap us to click on it.
Although there are several emails that come in the main message, but still must be vigilant and pay attention to the intended link.
Most importantly do not publish personal emails that are very important for your account. Use a backup email address if you have to include email in a few posts and airdrop, bounty and other projects.

I don't think that listing 4 possible email templates will help protect people.
There are limitless ways of creating email that people will click. Often using natural disasters or world-known events also. But possibilities are endless, so no point listing them.

I would say not only beware scam emails but also fake sites (phishing).
In general everyone involved in Bitcoin should study computer security a bit. Read basic articles, then more advanced ones, anything you will do will help here, you set the limit how much u want to learn.

Yes, they might be but out of desperation and luck they can still do it with those methods that you have said.

That's the problem that most newbies did, they are not aware of who's the receiver of their emails and what's next after signing up. They don't know that it's being passed to another people or group that earns or benefits with those emails

Great reminders for the newbies ,p
Other people with more experienced in this space are more aware of these things and cannot be fooled easily with the style that you've said.