Bitcoin Forum

It was expected, sooner or later scammers would try to take advantage of such a terrible situation. I'm sick to my stomach that there are people who are genuinely interested in taking advantage of people who are suffering from war, whose life may be at stake at any possible time.

I stumbled upon this following website, which is being advertised on Facebook as we speak.
Archived for security
https://web.archive.org/web/20220301212845/https://www.donationukraine.io/

The advertised BTC address is the following: bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t

A quick check on Blockchain explorer shows that it's likely a brand-new address, with zero balance.

https://www.blockchain.com/btc/address/bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t

According to the official Ukrainian Twitter account, the legitimate BTC donation address is the following, 357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
which is also proven on the Blockchain Explorer

https://www.blockchain.com/btc/address/357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P

Also seen on Twitter, of course.

https://twitter.com/Ukraine/status/1497594592438497282?s=20&t=GNC2gtKdKwnb0IXHepyIjQ

This is merely a petty attempt in scamming people out of their generosity, we're definitely bound to see these on a daily basis. Scammers have no consciousness, even if we're talking about something as awful as war casualties.

Edit:
According to Whois Lookup, the domain address is one day old.
https://whois.domaintools.com/donationukraine.io

Edit2: Found a phising/scam website? Learn how to report it yourself as well

It is unfortunate how scammers use such sad moments to scam off people who would be willing to help the victims. I think I remember a spike of Fake donation site and tokens when COVID19 broke out too

I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them

Unfortunately, after clicking on the advertisement on Facebook, the page refreshed and couldn't see who posted it, to proceed and report the page and the post itself.

Found this page promoting the scam website in one of their posts, not sure if they share something in common, or it was coincidental.

https://www.facebook.com/I-want-war-against-Ukraine-to-STOP-101864409114010

Because of your thread, I stumbled upon someone else's tweets in regards to similar websites ^{[credit goes to @JCyberSec_ (https://twitter.com/JCyberSec_)]}: Tweets <sup>[#1 (https://twitter.com/JCyberSec_/status/1498655746237640704) and #2 (https://twitter.com/JCyberSec_/status/1498655739220578304)]
- Please take a few minutes to "also" report them to their registrars.</sup>

• ukrainedonation.org (https://www.ukrainedonation.org/donate) ^{[archived (https://ghostarchive.org/archive/qR40n)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukrainedonation.org
  Registrar URL: http://www.networksolutions.com
  
  
• ukrainebitcoin.online (https://www.ukrainebitcoin.online/) ^{[archived (https://ghostarchive.org/archive/wRhQB)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukrainebitcoin.online
  Registrar URL: https://www.godaddy.com
  
  
• help-ukraine-compaign.com (https://www.help-ukraine-compaign.com/shop) ^{[archived (http://web.archive.org/web/20220302150926/https://www.help-ukraine-compaign.com/shop)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=help-ukraine-compaign.com
  Registrar URL: https://www.godaddy.com
  
  
• unitedhelpukraine.kiev.ua (https://unitedhelpukraine.kiev.ua/) ^{[archived (https://ghostarchive.org/archive/KhwRn)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=unitedhelpukraine.kiev.ua
  registrar:        ua.ukrnames
  
  
• ukrainedonate.today (https://ukrainedonate.today/) ^{[archived (https://ghostarchive.org/archive/QbkmG)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukrainedonate.today
  Registrar URL: www.publicdomainregistry.com
  
  
• ukraine-save.com (http://ukraine-save.com/) ^{[archived (https://ghostarchive.org/archive/YzFjk)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukraine-save.com
  Registrar URL: https://www.reg.com
  
  
• supportukraine.org.ua (https://supportukraine.org.ua/) ^{[archived (https://ghostarchive.org/archive/TprKH)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=supportukraine.org.ua
  registrar:        ua.nic
  
  
• saveukraine.help (https://saveukraine.help/) ^{[archived (https://ghostarchive.org/archive/rptRW)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=saveukraine.help
  Registrar URL: http://www.automattic.com
  
  
• help-fund-ukraine.org (https://help-fund-ukraine.org/) ^{[archived (https://ghostarchive.org/archive/FU0Bs)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=help-fund-ukraine.org
  Registrar URL: http://www.namecheap.com
  
  
• fightforukraine.xyz (https://fightforukraine.xyz/) ^{[archived (https://ghostarchive.org/archive/v0T0Q)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=fightforukraine.xyz
  Registrar URL: http://www.namecheap.com
  
  
• donate-ukraine.info (https://donate-ukraine.info/) ^{[archived (https://ghostarchive.org/archive/l9ZUV)]}
  
  Quote from: https://www.namecheap.com/domains/whois/result?domain=donate-ukraine.info
  Registrar URL: http://apiname.com

Thank you for sharing these scam sites and I will report them all ASAP, Anyone who wants to donate must go to the official verified accounts of the government of the country concerned on social media and donate only to the addresses of the wallets that they posted, without paying attention to any site that demands a donation because scammers take advantage of crises and circumstances to deceive the innocent.

@SFR10 you did an amazing job, thanks for doing in depth research. the same thing as when covid was at its peak, many fake fundraisers appeared.. hopefully, the fraudsters who take advantage of this moment die in torment.

Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.

I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.

Now there will definitely be more scams about Ukrainian donations that are being used by fraudsters, the most important thing is that we have to be careful when we see suspicious sites or advertisements on Facebook because basically they are not official about donations but are looking for prey on behalf of the Ukrainian victims, I also looked at there is a facebook ad like this but I forgot to archive and report it.
One day if I find it I will report it as soon as possible so that their ad is immediately closed or removed.

I've seen a Youtube asking for donations on behalf of Ukraine and they are showing the Ukrainian president speaking with English subtitles, but checking the past videos to confirm if they really are from Ukrain I was surprised to see that they are showing dancing coming from Latin countries, you can easily figure out that it's not the official Ukrain Youtube channel, the channel is now disabled.
So if you stumble one be sure to check past videos from there you can verify if it's the official channel, you cannot make a Ukrainian channel showing other materials coming from other countries.

If we see something like this promoted and the source is unknown then its good for people to do their own diligence to research about the legitimacy of the said campaign since anyone could really create the same thing since many scammers are now using Ukraine incident to scam people and they grab this opportunity since many people sympathize this country due to war happening on their country.

For donations we should always go to legitimate channels since anything outside with unknown people asking for this is quite suspicious.

I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.

Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.

unfortunately, scammers are not confused by anything, neither human grief, nor the situation in this country, you need to be vigilant and always check such information on official sources, it's a pity that such people are found and transfer money to scam accounts...

It became full scale for Discord and Telegram to be a place for them to take action because not only ukraine donations but other scams there also exist but what is rife now is that donations to ukraine are always misused and of course they want to take advantage under any circumstances because of what fraudsters want is the money in the get.
Make sure on social media we have to be vigilant and do research about it, if you want to donate just go to the official ukraine twitter if you want to donate to them.

Not long ago (probably 2-3 months from now), I fell for one of Discord scams. I was sleepy, dizzy and tired from work and typed my private key on some phising website. I was fortunate enough that I immediately understood my stupid move and withdraw all my funds ASAP to another wallet. What surprised me was that when I asked for support/assistance on a Discord group shortly after, another scammer tried to trick me into "securing my wallet" by providing the seed phrase.

What a bunch of pathetic idiots.

Thanks to both of you for also reporting them, but it seems that none of the registrars in question have done anything yet ^{[based on the nature of these scams, I was expecting to see some results already]}.

Thank you for the compliment, but I only relisted them in here ^{[@JCyberSec_ (https://twitter.com/JCyberSec_) deserves all the credit]} :)

Exactly, but I was more surprised at the fact that I couldn't find any of them prior to the creation of this thread ^{[I thought they didn't exist, but I was wrong]}.

• Found a couple of more fake ^[active] donation websites from @DdmrDdmr (https://bitcointalk.org/index.php?topic=5388167.msg59417081#msg59417081)'s post on another thread:
  
  
  • supportukraine.today (https://www.supportukraine.today/) ^{[archived (https://ghostarchive.org/archive/cF1bh)]}
    
    Quote from: https://www.namecheap.com/domains/whois/result?domain=supportukraine.today
    Registrar URL: https://www.godaddy.com
    
    
  • tokenukraine.com (https://tokenukraine.com/) ^{[archived (http://web.archive.org/web/20220303221449/https://tokenukraine.com/)]}
    
    Quote from: https://www.namecheap.com/domains/whois/result?domain=tokenukraine.com
    Registrar URL: http://www.1api.net

Unfortunately, only the first website exposed in OP has been taken down (most likely by the hosting provider). All the other websites are still active except the last two that are active but blocked by Google Safe Browsing. Meaning that they will not appear in search results and if someone tries to visit them, he wil get a warning page that they are not safe.

I checked all the bitcoin addresses on those websites and all of them are empty and didn't receive a single donation meaning there are no victims so far, which is a good thing.

Thank God for that, I think there are other scammers out there that might've got away with their scams. There's also one where they hacked into the Ukrainian's official website and change the donation link or they've probably impersonated their website to create a legitimately looking donation platform.

Scammers will not stop their activities, it has failed but they will create more new websites for the purpose of scamming people willing to donate. Because we have seen in recent times that as many trending news has come out, scammers have tried to scam people by creating one website after another.

So it is assumed that more websites will be created by scammers, using Ukraine's name. So those who are willing to donate should be careful before making any kind of transaction.

I agree with that statement and I think that we should continue this never ending battle by educating people how to spot a scam and how to report them so it gets shut down immediately, I think that we should improve in that department because people nowadays are gullible and at the same time, don't take the time to do some research before believing something.

My antiphishing is working fine, some of the sites mentioned in this thread have been blocked from my browser. And 2 of them, seem to also include the identity of their fiat service account and the bitcoin address that has been used. Maybe someone can uncover something here:
https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS (https://blockchair.com/bitcoin/address/15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS)
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd (https://blockchair.com/bitcoin/address/1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd)

 By the way, Op can also add a link to the "how to report a scam site (https://bitcointalk.org/index.php?topic=5281378)" thread so that anyone including non forum members reading this thread can participate in reporting these sites.

Good riddance, will do. Unfortunately, more of those will keep popping up, hoping to earn a quick buck or two. I'll be on the lookout to report each and one of them and also post them here, the more reports, the better, increasing our chances of taking them down. It's astonishing what measure some people take in an effort to earn money, scamming people instead of working.

For how huge the donation accumulater by legit instutiom asking donation to help Ukrain for sure many scammers will try to adopt the situation and conduct a scam campaign by using this sadden events. For many scams already pointed out its best for donater to check always what they are going since verification is so important so that it will go to the right hand and not with those faulty greedy scammers.

this is not the first time this has happened, I am still curious about all the collected covid 19 funds, whether all the funds are right on target! scammers won't stop doing their dirty work, this moment is perfect for them to try to make a profit, hopefully there are no victims, hope everyone donate to an official trusted account.

Similar to the COVID crisis, there has been an increase in fake websites using the Ukrainian crisis to scam people. There are websites designed to look like pages of the legitimate non-profit organizations, such as the Red Cross and UNHCR. There are also websites designed to look like they're official portals for established Ukrainian government institutions.

According to security researchers, It is to be expected that scammers will take advantage of such crises as they use emotional triggers, like a sense of urgency, as a means to steal money from people. As always, the golden rule remains: Do your due diligence and double check all information before sending any money or personal information to the shady website.

These scammers are ruthless they will even use the destruction of one country for their scams, I'm sure there are still many of these in many social media and other channels it's better to be aware of this and always report this to their domain registrar or host you can use this tool to trace their registrar or host https://www.whois.com/whois/