Bitcoin Forum

What happened:: I have received an email which title is "Surprise! We have a gift for you!".
PM/Chat Logs: https://img001.prntscr.com/file/img001/z1nEEucZRcWzLSQrxB4X0A.png
https://img001.prntscr.com/file/img001/rLesb92TRFmRuhy0zkaWVg.png
https://img001.prntscr.com/file/img001/Dh6BGU2lQ9SsCUPDQ9JaWg.png

Additional Notes: While I have kept my mouse on claim voucher it shows me
Which seems to me that it will redirect m to login page and steal my login credentials.[/color][/b]

Yeah, that's the idea of it. That's why the redeem instructions ask you to log in to your Binance account and they made a big yellow claim button to make it easier for the victims. Ideally, even if you fall for this phishing attempt, there should still be a 2nd factor that protects you in the form of a code that is sent to Authy, Google Authenticator, or a similar app. And if you aren't using the same password across multiple sites/services, all the hackers would get is a password they can't do anything with.

The fake site could also have malware that infects your device and that's another concern. But I believe we are just talking about a simple phishing site here.   

The email address I used to buy Ledger Nano and to subscribed few crypto related sites and later those were hacked, I receive these kind of emails all the day. You need to learn to delete the emails.

Unfortunately, the hackers are making money from it from the amature internet users.

I am very particular on the email I've received I see to it to check the domain extension they are using on your post it shows the domain extension Binance.com which is surprising if this is a phishing email it makes me wonder why they've used the official domain, I just want to clear things to enlighten all of us I have bookmarked the real Binance domain and checking the link you posted it redirected to the real Binance.com which I bookmarked.

It seems it's a tracking code that many sites are using if they send newsletters I also want to be enlightened on this is this just a tracking code or a phishing email that redirected I want to read members' opinions so we can double-check and we all be educated on this.
Maybe it's better if we can ask Binance if they own this redirection link
I also check about emails to whitelist and the email is not mentioned in their address to whitelist

https://www.binance.com/en/support/faq/360000444531

I'm not saying our brother Shasan is wrong he is a trusted member here with a great contribution to busting scams and I have huge respect for him.

If the URL takes to the real Binance domain then there are nothing wrong with it. In email marketing of any kind of marketing using tracking link even with having an external domain is a regular practice. Reading the domain "bntrace", I can translate it to "Binance Trace".

May be this is not a phishing case. OP overlooked at it.

Upon checking, I don't think it's phishing as well. According to binance's handles authenticator, see: https://www.binance.com/en/official-verification both <do_not_reply@mailersp1.binance.com> and <bntrace.com> are theirs + as robelneo pointed out, the final link is indeed binance.com which can be checked in any URL redirect checker.

Still, I would only click link/s in emails when necessary and this time, it's not.

Thank you for verifying my investigation Shahan might have overlooked it as @BitcoinGirl.Club stated there's no mistake on this I still encourage Shahan to keep posting phishing emails and scams, the link verifier you posted will also help us to check communication coming from Binance I have bookmarked it for future reference, I encourage members to do the same. 

I might be a victim on this kind of scam if I don’t see this post warning. I’m regularly receiving this kind of email from official binance email address and claiming it without any further verification. I’m not aware that there is scam scheme like this that copies Binance promotion email. I sometimes encounter re-login once I click Binance promotion but so far my account is still safe.

I think I should start resetting now my account credentials and check my emails just to make sure I’m receiving official email. Thanks

So did you get your gift or not?

The answer is obvious he treats that email as a phishing email so he declines to login coming from that link,
based on the conversation we need to know if the validity of the emails really comes from legit sources we can always bookmark the site or just login directly without using the link or ask support if they own the link.
There's too much hacking and phishing going on, we need to protect ourselves by educating ourselves.

The purpose of the sender of this email is to steal the account information of the binance user through phishing links. So there is no question here of getting the gift, rather the op realized it at the right time and saved himself from this scam. Before opening any email, verifying the email address is more important than the sender's name. And if you analyze the information of the op, you will see that email address is not of binance.

It was not a phishing email after all. OP was overlooking at like some of us did before but later it was clear that the link was tracking to real Binance account. It was just a different domain to help them tracking the marketing.

I also checked and you are correct. But it is surprising why binance will do this kind of activity officially, because it will confuse crypto users. I myself would not be interested in clicking any such link. However, after reading the details, I realized that it is not dangerous for crypto users.

It's a normal thing for digital marketing. It's us bitcointalkers who are kind of paranoid LOL. But it's good to be careful though especially when you are a crypto user and you wallet is in the same device which you are using all the time.

I usually keep a file for all the service sites I use and always visit their website from the links. I avoid any form of emails and links from any other channels. If I need to check the service offer then I login using my saved link and try to check the appropriate section of the site. This way I feel safer.

Thank you for posting about this. The only reason the scammers use these types of email scams is because somewhere along the line there are a sizeable number of gullible people who end up clicking the links and enter their credentials. This will inevitably lead to their account getting hacked.

Is your question really to be taken seriously?

Yes these time this question should be taken seriously ;D just because It's not an email scam... I have just verified and the url redirect to binance.com as already pointed out by @robelneo.


However they can just "confuse" people by sending email with such strange url domain. People can make errors and maybe trust the wrong message :(
It would useful if they will add some sensitive information (like Name or Surname) of account owner or/and clear instructions to login directly in OFFICIAL URL! without using these secondary urls... there are pixels that can track emails, I don't think they need even special URLs....

Yes, I seriously ask him! I also receive letters from the Bybit exchange and that also uses a third -party domain to track and they don't even include HTTPS, use HTTP to track. Why is he afraid to receive this gift, because the letter came from the official Binance domain. It can't be faked in any way means all the links that they sent can't be malicious

Well if the email sender is using a different domain or suspicious looking subdomain then it raises questions  ;D

About pixels and tracking, this technique is used widely by businesses but many people are not even aware such a tracking mechanism even exists. The amount of data being generated then sent to the tracker whenever the email is opened must be important to them otherwise they would not bother.

Did you collect your free gift, if you did what was it?

They are not the only ones doing this, all sites with memberships and affiliates have this, the tracking is a means to track the behaviors of their users, the tracking can tell them how many of their members received their emails open and accept the offers, it's for future reference so they can update or upgrade their service to better serve their members and their clients.

No Bybit exchange isn't as generous as Binance, they only send advertising e-mail's (we added a new futures contract)

What sort of emails do you receive from Bybit, are they just standard newsletter updates and how often do you receive them? Why did you decide to open an account with them and not say for example Binance or any other exchange?

are you perhaps curious about the voucher? it's just some dust amount like cents. As per the disclaimer, the 500BUSD isn't spendable, you will only get the interest. If you're interested, check your reward center. My account was actually being showered by the same voucher and I didn't notice until I went to see my reward center lol but this was more than a year ago so it's possible binance slowed down.

These e-mails are mixed (Crypto news, new futures contracts added and an invitation to trade them and maybe win something). I opened a Bybit account because Carl The Moon said he trades there!

Most of the times, the email we enter in crypto related sites to get updates about crypto news etc are being sold by these companies. These emails may also reach to hackers who attempt targeted a phishing attempts to get users password by impersonating the famous site.

However, in case of binance, the hacker won't be able to hack the account because binance have the 2fa feature. So if anyone got your binance password, your account is still save unless the hacker get hold of your 2fa also.

The whole premise for the emails is to generate interest for those users to keep returning to the exchange in order to keep trading and with each trade the exchange makes money in transaction fees. They will offer all sorts of deals in the hope of retaining their customer (you).

This is the reason why it's good for people to understand and be familiar with how their exchange operates because there's no e-mail sent by Binance that you won't have a copy of it in your Binance account inbox.

Good security, customer service, and a user friendly ecosystem are what is important not the generosity of an exchange

No, I can't see the OP's message but based on the other replies I can say 100% is not pishing, how can you just think of being pishing if it links straight to binance.com, not a mirror, nothing.

The campaigns are a scam, that's true, last week I have done a payment with my binance card and I won 0.1$ as one of their giveaways  :P :'( , these are scams to make people interested in Binance and giving away nothing, but the email is not pishing.

If you received a promotion from Binance and you take their call to action and you think its a scam then created a thread on this and prove that its really a scam, so those who will receive promotions from Binance will just decline the invitation, if you received promotions it's not that you are a winner right away you are entering a competition where participants of the promotion are vying for rewards.

Op could have done this really easily, and this is the best way to do it for everybody who doesn't trust emails or links.
Open your Binance app and go to the rewards center, all! the offers that they are sending you emails for are listed there, you don't have to click and links in the emails, you can simply activate them from the app. Funny enough it's actually mentioned in the first email OP has posted.
I got the same offer last month:

https://talkimg.com/images/2023/05/20/blob480579787533455d.jpeg

The only case of sold or giving access to data was Coinbase. But others were like Ledger were hacked database.

It's still possible even if you have 2FA enabled. Hasn't it happen last year? Hacker hacked Binance and stole coins. However fortunately the insurance covered the loss.