Bitcoin Forum

Currently there are many scammers present in the forum so everyone should be careful at this moment. Recently, a close friend of mine worked on a project called Spin2Earn. They enticed him to give him some spins and asked him to connect his wallet. If the wallet is connected as he said, they take all the money in the wallet.

After that, I can check and see that they are really scammers. They have provided some wrong KYC report as screenshots on their website, I went to all the platforms where they said to KYC their project and found that no projector named Spin2Earn was verified there.


 According to Spin2Earn they have done these KYCs:

1. https://app.spin2earn.io/build/images/KYC_Cyberscope.7dd1d587.png
2. https://app.spin2earn.io/build/images/KYC_InterFi.cda91dfa.png
3. https://app.spin2earn.io/build/images/company-certificate.743103a9.png


Links to all the platforms where they claim to have done KYC:

1. https://t.me/coinscope_announce
2. https://t.me/InterFiNetwork

But as of here speaking no KYC verification of Spin2Earn project has been found.


 ( https://spin2earn.io/ ) is a full scamming project.
So everyone will stay away from the fraud of this project.

And be take care with your wallet.

We should not connect our wallets to an unknown website at all because it's very dangerous and may be a scam trap where many beginners will fall. So always we should research before connecting our wallets and we can use a new wallet if someone fell the website is risky.

Is it like how you import the MetaMask and connect it to the website like with the Web 3.0? I didn’t know that it could be used when you just connect or something. I know that you can control permissions or something like that would that be effective enough?

Better not to put the links here, you can put a "code" on those links you provided in the opening post, there's a chance people might accidentally click it. Always verify things before connecting your wallet, most importantly is checking if the dApp is already audited or not, that's more like safe if you knew it or checking their code.

Good plan, but even better if we can identify all those projects and ban their projects from the forum.
I think they should analyze their projects well before allowing them to promote them on forums

I am even more doubtful than you man. I did not know that someone can pull your balance if you just connect your wallet with their sites. I don’t think that this is really possible from other end to fetch our balance since we still need a password to be entered for final transaction broadcasting. There is no way possible that third party can do it without having a password. In addition to this wallet can not be so open ended as to alter the permissions from other end or initiate a transaction just like that.

I am pretty sure the website mentioned in OP is scam and there are thousand more like it but I’m not able to digest the fact that money can be pulled out of our wallet when it’s connected to third party !

That's a dangerous thing if they are not audited and you're already interacting with them, that really has risk on it. Scammers these days are too versatile and even more knowledgeable on stuffs like hacking and frauds. You can ask a friend or post it on forums like Reddit where there are lot of communities for developers that may help you. There should be a code that can sweep an entire balance just by interacting on their dApp.

Fraud on the forum is not moderated; no one will check the legitimacy of projects for you. You yourself must understand what kind of scam you are getting into, especially when it comes to trust in telegram channels. So you shouldn't complain, especially since the OP himself is also a scammer and is currently breaking Rule Number 25.
https://bitcointalk.org/index.php?topic=5094661.msg61028113#msg61028113

Lot of reasons you should not do this

First, why do you have to visit an unknown website? It is the rule #1, say no to strange links from strangers. Don't click, don't visit such strange websites. It is a best prevention.

Second, even if you visit an unknown website, what is reason forces you to connect your wallet to that one?
Another prevention, don't arbitrarily connect your wallet.

Lastly, remember to revoke access to your wallet. Use this one https://app.unrekt.net/

He already said the scammer offer free spins to his friend, this is why his friend is interested and want to connect his wallet. The thing his close friend is a part of the scam project, when someone really trust his close friend, he will think if the project is genuine and he will not afraid.

But as we know in this crypto space, there's no one we can trust including our wife, parents, son etc since you wouldn't know what their mind. They could act good in front of you, but it could be different when it's behind of you.

That's why before you connect and you are unsure, then you just have to make sure that you're using a test wallet that has no funds so that you'll just be able to connect if they're requiring a user to login and connect.
Don't use your wallets that has your funds wholly so that you can avoid any possible scam or hacking through that wallet of yours.
If you don't trust the website then it's better to just avoid them and leave them alone.

After the information provided by the OP about the possible loss of cryptocurrency, I also have no desire to test this site) Obviously, when connecting the wallet, there was also a request for permission to withdraw funds, which the OP does not mention in his message.

Trust or not, it is not important. Even you trust someone, you must protect yourself. It is not because that one intends to scam you but maybe he only shills a scam website and does not know about that risk.

If you want to experience a new website, create a new wallet and use it. Scammers can not steal any money in that empty wallet.

We should never connect our wallets to any unknown website. There are many scammer websites that will take all your money under their control if you connect a wallet.You should always refrain from such activities as these are very dangerous.Do not connect your wallet anywhere, as doing so may put you in danger.I have seen many people fall for this kind of scam and they lost a lot of their money. Always research and do your due diligence before connecting. thank you

I saw the pre sale campaign of this project where they were showing it graph of BNB collection via bot. There I saw that BNB accumulates after a certain period of time. And those who through spin used to display the winning reward. I was shocked to see how it was possible to get a big reward one after another? Then I was pretty sure it was a scam project. Moreover, they did not have any social media accounts or any information. At the end, that came true.

Some site already have this before but as far as I know if you will just connect it, you are still safe since they can’t make any transactions with your wallet if you didn’t approve it and since this is just connecting wallet, they still have no access with your private keys. Anyway, just to be sure and be safe if you think the site might put you on bigger risk by just connecting your wallet then I suggest not to do it, try to look for other good site where you can find peace and security.

Seems like even the bounty project in the forum has been stopped? Didn't see any explanation but the thread title got changed to "DISCONNECT YOUR WALLETS SCAM PROJECT!!" so I'm assuming there's really a problem with the wallet connection thing that they can take advantage of, not that I'm aware of the hows. And even if they weren't, I'd still stay away from it for now, any projects that have the word scam surrounding them always have some form of reason for happening.

Technically, just connecting your wallet to an unknown website doesn't mean they will freely control your money there. Most cases are totally done thru pishing wherein the user is inputting their passphrase or seed into a third party where the user thinks that's the original wallet interface.

I don't see how scammers can go thru our coins just by connecting our wallets with them. They need our passphrase to do it.

I just assume that nothing is safe, and therefore would never trust anyone with my password or anything. Stay safe and don't give your wallet info to strange websites! But as others have said, they need your password right? I don't know, I would never connect my wallet to a site like that.

The first thing we should avoid is connecting our wallet to these unknown sites and then grant them permission to our wallets and some are ignorant enough to connect their main account only.When you do this you are already at risk that wallet will be drained out easily with all your savings and collectibles in it.But why should you to these sites and connect your wallet if you are aware about the consequences?

You can if you use an empty wallet for it. However, even so, it still contains risk because your device can be infected with dangerous threats.


You are right but I did noted that it is still risky.

A best practice is ignore all DMs from strangers and especially if it contains strange links, has request for something relates to your wallet, seeds, password, connection, and so on. Skip it and you can even go further by reporting.

Whenever there's a "free" money on a certain faucet or whatsoever, always make a new wallet and use that to connect on them, that is the safest way if you're really hoping that you could get the "free" money without risking anything in return. You just have to outsmart them, simple as that. If you don't really know the site and it's smells fishy, just don't do KYC just to finally get your "free" money.

I saw the project pre sale also, when I saw the amount the raised I was thinking the project was legit but after they claimed that they have already reached soft cap but haven't gotten to hard cap yet so they extended their presale by 24 hours, immediately the extended their presale I was suspecting scam, I knew they were just buying time to cover everything they did. They designed their website in a way that people will believe their presale was going smoothly, if you see the amount raised during this bear market, you will think the project is legit and it will encourage everyone to invest in the project, but everything is scam.

This is a good suggestion since it’s easy to create wallet you just need to save the details and it can be good already, connecting wallet will be more safe if you have a new wallet intended only to that project. I’m doing this in some of the bounty before and It’s really safe. I just don’t know if its worth the time and effort, but as you can see you’ll lose nothing if you try that. If you feel you are not safe, then don’t participate simple as that.

It is always important to do some research before buying or joining a project,
we know for ourselves that crypto cannot be separated from scams, therefore it is better to prevent it,
although actually doing research is not a guarantee but at least it can minimize the risk

Those who consciously connect their wallets to unknown websites that are not deemed as safe should take the loss. I mean, it's 2022 and people still fall prey to these obvious scamming techniques employed by some crooks. It takes less than a minute to check the legitimacy of a service nowadays, and if you can't be bothered searching for something on Google then I guess you deserve to lose your money. I check the site, and upon watching the video, I cringed at how the man explained how easy it is to earn tokens just by doing what he says. Also, lots of videos on YouTube claiming that this project is indeed a scam. Didn't take me 2 minutes to search, read, confirm, and type these things regarding the said website.

It is a good thing that you are warning the community about this project, however it always surprise me how people do in fact know how to do their due diligence but they refuse to use it at all before they invest in a project, and it is only once they have lost money and it is impossible to recover it when they finally decide to investigate the project which scammed them, so while I am sorry about your friend he needs to change his attitude or something like this will happen to him again.

At first read it sounds like your friend is part of the team but I think he isn't and he is only a normal visitor of this site but it's kinda scary on how his wallet got emptied by the time he connects it and play the game. How is that possible?

Maybe your friend is being asked for his private keys or 12 word phrases to be input in the text box that he sees because I can't think of any other ways except from this for ones wallet to be hacked but anyways thanks for the warning even if many of us are not really new from this tactics but this is still helpful for those who are new in the crypto scene. On your thread you are showing how important is it to do a research because any project can lie easily.

There's no way for your wallet to be emptied out but only via on exposed private keys or seed.Giving out access permission on your wallet wont really put up risk for your funds on getting accessible.
Next, would be someone does have access on your device and wallet of yours had been logged then he do made out such transaction but if there's none, then there's no other way
but with having those known private keys because there's no way on accessing out an wallet but rather only with those seed or keys.
If you are really that paranoid when it comes to wallet connections then its always suggestible to logged out or un-tie or off those permissions.

I was also surprised when people where complaining in the Telegram group that their wallet have been empty, I was thinking how is that possible, but I think maybe they gave the site permission to access their wallet address, most of them connected their wallet to the website thinking they will receive free spin, which at the end they ended up losing all the funds in their wallet address, we all have to be very careful when connecting our wallet to any website, I always discourage that, but if you have to do it make sure you disconnect your wallet immediately you are done or to be at a safer side just create new wallet and use it for anything you want to use it for incase if they will hack your wallet they won't meet any fund their.

Online risks abound and even if you are a little careless you can fall prey to scams. Not only unknown websites, sometimes scammers can also create clones of your known websites to fool you. So it is important to check the website url before sharing important information, and the simple solution is to bookmark the website url you are using.
Newbies should first try to learn about using wallets and how to stay safe from scammers.

But, who will visit to unknown websites anyway? As long as we have a common sense we will avoid it as soon as possible because we know that it might be risky. Also if we are an investors, we already know where to buy coins but we should always bookmark the right url's and won't just type the exchange in google to avoid being phished out.

Setting up 2fa's on the wallet that we are using is also important so that hackers can't easily access them since they will need to have the 2fa code first which you can only be obtained as long your emails and sim cards are still in your possession. It only becomes a problem if both of them are also hacked.

We may have common sense but not everyone. Many experienced investors in the crypto world are also victims of hacking and lose large amounts of funds, which means that even after their security is so high, they are still the target of scammers. We are talking here about newbies, who always believe different types of updates, emails after seeing them and fall victim to scams. Tempting offers attract crypto users the most and often connect wallets to unknown websites to catch them. So we can't say for sure here that everyone has common sense and are not falling victim to hackers/scammers.

You should always be careful and stay away from such activities.Never setup your wallet on any unknown web site.It is very risky. I have seen many people fall into the trap of such fraud. And later saw them completely destitute.There are many fake websites that will tell you to connect your wallet and once connected your full access will go to them.And they will become the owner of your account. Always stay away from such scams and keep yourself safe.

I think sometime last year, I could have almost fell into a trap where I received a token and was told to connect it to a website to swap it to a stablecoin. But good thing that I’ve read an article about honeypot scams, and that’s where I think that the token I have received was a honeypot. So yeah I didn’t connect my wallet there into that scam website.

Then in the middle of this year, there’s someone who reached me out pretending to be a development team member of a platform who wants me to do a review about their project. However, I do my due diligence by just taking time verifying if the website is legit or not. Good thing I found out that the website being shared by the phishing scammer is a fake one because of verifying it to the real admins in their official Telegram, Discord, etc.

This is very common and people need to be aware of this, just to give and example this is the equivalent of someone asking for your wallet on the street because they needed to borrow it for a few hours and you accepted such a thing and then you never see them again, if you were asked to give up your wallet willingly to a stranger on the street will you do it? Because I know I will not and as such we should not do this either with the wallet that is holding our coins.

Connecting your wallet alone isn’t enough to have your coins stolen. Normally they will ask you to approve some smart contract and this is where the trouble begins. Any website that isn’t a well known DEX or dapp shouldn’t require you to approve anything. You should also always make sure you are on the correct website and instead of a phishing site impersonating a DEX.