Bitcoin Forum

So about a week ago someone sent something to my coinbase wallet ethereum address via the polygon network. I got a message saying i had received 10 cookies. I was confused so i went into my wallet. Things immediately felt a little different. There was a different wallet picture in the corner that said wallet one. The app asked me for my code in weird spots. I never put my code in. I could bypass it with the back button. There they were, 10 cookies sitting in my wallet. Not sure what i should do with them, or even what they are. Not even really sure if their malicious or not. Just weird. I guess i could send them back to the sender. Im not really concerned about my funds at this point. Im more concerned that something like this can happen to an address without fault of the owner. You dont have to click a link,  they just show up. Are all ethereum based addresses at risk? Suggestions or any insight into this would be helpful. This exceeds my scope of computer knowledge. Thank you in advance computer ninjas

https://i.postimg.cc/tZKGcMLj/Screenshot-20221110-161902-Wallet.jpg (https://postimg.cc/tZKGcMLj)
 

Pretty common on Eth network and with NFTs. There’s malicious code in the smart contract that can usually drain your wallet if you sell. Not really sure how it works but I’ve seen it plenty and had many such tokens appear on Eth, Polygon, and BSC

It is normal, even my wallet address has lots of spam tokens.  But on a serious note, it is possibly a dusting attack.  It is an attack where a hacker try to know the real identity of the address owner.[1].

You can follow these tips written on this article[1]

Simple Ways To Keep Your Wallet Safe
The good news is that there are simple ways you can protect yourself from these types of attacks:

• Do not click on any unknown links. If it’s too good to be true, it usually is.
• Do not interact (swap, trade, sell, or use) with any unknown tokens you didn’t verify
• Do not attempt to connect your wallet to a Decentralized Exchange to collect free airdrop tokens or swap the unknown tokens. The moment you connect, you’ve given it permission to drain 100% of the crypto funds in your wallet
• Avoid posting any identifying information in tandem with your wallet address

You can read more information about dusting attack in the link below.

---

[1] https://anchain.ai/blog/crypto-dusting-attack/

If I'm in your case, wouldn't touch that token,

And as per

https://coincodex.com/convert/cookiesale/bitcoin/?amount=10

10 cookies = 0.00000781 BTC

So it doesn't have any value at all, and as @serjent05 said, this could just be a dusting attack.

This is pretty common with ethereum wallets I have tons of those cheat tokens seating dormant in my wallets for God knows how long and sometimes I consider them to be spam tokens, and these tokens are never worth anything, ethereum network with its smart contract feature have open us all up to a lot of this spam where random tokens are dropped in addresses in the network.

I don't usually take them seriously since they can't amount to anything and they can be a threat to my wallet security unless I click on any link.

Just don't bother with it and move on.

I also got it on my BSC smart contract address, full of troll tokens that worth nothing without any liquidity at all. If you find those, just don't click any links provided by those tokens, don't interact with the tokens as they will drain your money with the fees, etc. One way to check this is to check the discussion on bscscan or any block explorers of your choice, they will tell you if it's scam or not because so many people have faced this shill tokens.

This is an old way to hack your wallet, the moment you touch that money you are done.
Just ignore it and hide it because you can’t do anything about it anymore, I have a lot of scam tokens as well under polygon network and bsc, this has been their way to scam or hack newbies and those who are not familiar with this scheme. Again, Don’t ever touch it or better try to have a new wallet and don’t expose it in public.

If you are not expecting someone to send you any token in any way, better ignore it and never touch it. But, you will expect someone to message you on social media or in your BTT account for that matter. But be careful with the links that might send to you.

However, until nobody had able to reach you with that, we can't say whether it was a scam attempt or not. Since you have an idea already, you know what the next step you do. This might be a common issue for scam attempt asking for money that is why you should be careful in dealing this.

The network is overrun by spam tokens. I also have lots of them and do not even bother to check what they are. In your case, the "different wallet picture in the corner" asking you for a code could have been a way of getting your code and eventually leading your wallet to be drained. So, sending the token back to its owner could trigger the same reaction.

The best course of action with any unwanted tokens appearing in your wallet is to simply ignore it.

Anyway, here (https://help.1inch.io/en/articles/5363502-5-tools-to-identify-a-defi-scam-token) you can find 5 simple tips to identify spam\scam Tokens!

Same here, even in 2018 or 2019, this is already prevalent, a lot of scam tokens landing on your wallet. The thing is, maybe you have exposed your wallet publicly and this scammers try to lure you by depositing some in your wallet and who knows, they could follow you and then set a trap later.

So in any case don't be bother by them, ignore it.

And if you are paranoid or something, just create another clean address.

Just leave it alone in your wallet and you shall never touch it. It's probably dusting attack and that token being sent by scammers to your wallet. I have received bunch of these garbage tokens and i did nothing and i never encounter any problem with my wallet. You shall never try to access it via dex.


Yuor ethereum address was not at the risk if you did nothing with it as it's used another blockchain like polygon which has a very cheap fees. Just forget it. Focus in your asset. You will be fine. There are so many dusting tokens created by scammers.

As you've said, there's nothing to do with it and there's also no need for you to interact with it. Usually, they're just spam tokens, dust attack and a smart contract per se.

It's not just happening only with Ethereum addresses but even in other networks like TRX/trc20, it also happens. Just ignore them and don't spend any tiny fee of sending it back to the sender.

Nothing to do with those tokens, they are only shits. Never think to send back tot hem ebcuase this may also open tanotehr scam process by them. This may be also a trap.
However, you may become one of the types of scams, so, beware, and better to stay away from whatever they order from you. If you follow what they instruct, you may be trapped in their scam cycle as well. This is very common to happen.

Actually, people or especially scammers can easily send shit tokens into Ethereum wallets or whatever wallet address because it is easy to create such tokens. This is one of the ways why scammers commonly will use this trick to trap the victims. Once more, whatever they want or instruct, never follow. Just ignore it. But, if you are so worried becuse you have been a target of scammer, you may no need to save many assets in your account. This is not safe to save your inevstment in online wallet or exchanges.

actually you don't need to be confused or don't need to do anything if you don't know the coin. indeed at this time a lot of unknown spam coins that enter our wallet by itself.
and if we're not careful it can become one of the dusting attacks. if at any time you touch the coin it is tantamount to you giving full access to the hacker.
so from now on if there are coins or tokens that enter your wallet and you don't know about it, it's better to just let it go and never touch it

Do you have another picture where it asking the code? and Are you sure you opened up your wallet application, not any link from the message?

I doubt that the particular difference is happening inside the application, only a sophisticated attack could alter how the app behaves, and even if it is probable, the attacker would simply direct the hack toward directly compromising the wallet, not sending or asking for such code.


Since some further detailed explanation already addressed above, and yes it is widely known. My take is simply not to interact with any unknown coin or token or message that you did not aware of.

This is very common and if you have a big enough amount of money in a single address that can be more than enough for you to become a target of scammers and hackers, after all we must remember that transactions are public and anyone can see how much money is allocated to each address.

So as it as been recommended by other users the best thing you can do is to ignore those tokens and to never open any link or try to interact with those tokens at all, or you could lose the money you have at that address.

This usually happens with BSC or ETH addresses, usually if tokens that have been registered or are already on the DEX or CEX, the value usually appears when we scan the smart contract.

Conversely, if you feel you have never bought or traded other tokens, just ignore it. One more thing, do not connect your wallet MetaMask or Trust Wallet to unknown websites or networks.

This is just a dusting attack and this is pretty common, not a new thing anymore. You should not curiously click them or need to return them to someone, just ignore them and never touch such tokens, otherwise your property will be hacked at any time. Maybe your wallet address is already public on social network so you will see more such junk tokens sent to your wallet in near future.

My advice to you is if you have a lot of assets in this wallet, it's best to move them to another wallet and never share your main wallet address with anyone or make it public on social media.

The new rules with crypto wallets now is never sell any coins and tokens that doesn't belong to you or you get for free.

No new and old wallets are safe from this bad actors in crypto space, once you purchase and make your first transaction your wallet address will be revealed to the world ( through Etherscan ) and this actors will copy all the addresses they can find and send them fake/malicious tokens.

Only deal with the coins and tokens you buy with your money.

This is not new, it's quite an old method used by scammers to steal people's funds.

This is how they scam.

1) They'll send you a token ( just like you received it) And when you check the information of the token, there you'll get a website name. And that website contains some malicious codes where you are asked to connect your web3 wallet ( metamask for e.g)

When you connect your wallet, then you will be asked permission that permission will actually be for token spending, once you click "ALLOW" he/ scammers will have permission to spend your tokens.

https://i.ibb.co/WsVP49p/Screenshot-2022-1119-192419.png

2) they'll send you tokens that have some malicious codes in their smart contacts. When you try to swap, the native token of that blockchain (where you are swapping) will automatically be transferred to the scammer's wallet.

---

The only thing you need to do is ignore these tokens if you don't want to lose your funds.

This is not quite new in crypto again, receiving an unknown token in your eth or polygon wallet. I received tons of it, a year back(not having them again though cos I have deleted them).

I know how I feel when I first receive unknown tokens. I was kinda asking questions about how to sell them off cos seeing the tokens in my wallet made me think that am rich, not knowing that they are all scam tokens. As time proceeded I get to know that the tokens are scams.

In other words, just ignore the token. Tokens that enter your wallet without your knowledge are to be ignored with passion

Not that something new,how much more if you do make yourself get involved with BSC? Try to make use of some instant exchange or swap sites like
Pancakeswap or similar sites and try to check out with the address you had been using on said transactions.

You would eventually be seeing lots of tokens been sent out on your own address which it would really be boggling you on what the heck on where these coins came from.
Due to become paranoid when it comes to potential scams or modus then it would really be better to ignore all of these things.
If you arent expecting something like payment or transfers then dont deal up anything which is outside of it.

Don't be a prey someone trying to take control of our wallet. This is common with myetherwallet, quite often we can see different tokens in good volume sitting in our wallet. We know what should be in the wallet, so just look for those tokens in the wallet. Don't be happy on seeing good volume of tokens that doesn't belong to you. Whenever you encounter such situation keep yourself on the safer side.

As the market keeps widening we need to be very cautious. More people try to make something out of the beginners and the Crypto users, as everything is online. Participating into trusted airdrops is good and be careful with the rewards received.

That may be a spam token or unwanted coin which most of the creators do use them as text run and also partially very harmful to you because whenever you tends to swap or trade any of those spam token you ended up being hack because of the authorization of your wallet could give them automatic access to your address and then within few seconds or minutes your account will get compromised, so I advised you from today to try and ignore most of those spam token and coin sent to you.
It mostly occurs whenever you execute a trade or transaction which is very common with Binance smart Chain.

I'm not into altcoin anymore but having this kind of scam threat is like a way of hacker to know more about your address and what's left or something. It couldn't be just coincidence that they happen to know your address and sending a token that has no value or something is just a shit coin and I have tons of them in my wallet.

Just sell some coins that you own or you know you owned and never the other who's just new to you which has no nothing of information you find on the internet or do your own research to know what these coins do if you try to sell. And fortunately, you did what's best you could by asking and spreading awareness to the crypto community about these potential scam.

  - Like those who gave you comments in the answers to your question dude, that's normal and you're not the only one who experienced it, as long as the important thing is that you don't just click on something that tells you to do this or that, and the important thing is At all, don't just connect the wallet address to a platform that you don't know is a phishing site or malware.

This way your wallet address won't be at risk dude. Good day to you

There are thousands of scam coins that scammers create and send to thousands of wallets to trap people, you should not try to sell these scam coins because you will lose your wallet fees, if you have not participated in one of the airdrops/bounties and received these coins from them then I advise you to ignore them, and you can through the coin contract To know if this coin is a scam or not and you will be able to sell it or not, and through coinmarketcap you can also know if the coin you received is the official or the fake coin. for me, my wallet contains thousands of scam coins and I never cared about them.

Problem is the belief of easy money or free tokens. There are indeed air drops but atleast, there is a process with that and as well, community you could ask informations from. Those investors or users who are easily being fooled by these scam projects might not be aware of the risks giving informations that may link their wallets into that particular site. If something is unrealistic or 'fishy' avoid engaging into it. There are comminties such as this one wherein clarification won't be expensive. It will just cost you time asking, but not any amount such as losing your assets when you got scammed. Be vigilant as well to help those who are at risk of losing assets, everyone should share their opinion if it would help someone.

It's a common thing that Ethereum BSC and Polygon network have various spam tokens from time to time and they can never be sold or transferred but what has happened to you is your Coinbase wallet which is a custodial wallet but nothing to fear because it's what you want to use and  Also can't transfer anyone so take away your eyes from it.
on the other hand , may be some hacker can give you a bait to hack your wallet so beware of it and avoid clicking or trying to transfer it.

Same things happens to me, yesterday I received 1$ of polygon in free claim and play to my trust wallet, but I didn't understand that what I can do with the 1$ , whether can i use it? or it is not usable? or something that may be dangerous for my security (wallet). That would be better to revoke the wallet on time. Risk of losing will be low.