Bitcoin Forum

it's .co not .com. Unfortunately one of the signature payment participant got scammed earlier. He sent me the btc address via privnote but instead of .com he someone managed to send it via .co

The .co guys changed the BTC address. None of us were aware and the coins went to the wrong address as I thought it was the address given by the campaign participants.

Please use privnote carefully. Don't send payment addresses using privnote.

Sorry for that user’s fund that was lost.

It’s not just the .co, there are several other privnote sites that are used for phising, and if you use it to send wallet addresses it will change it to a different address which then leads to the lost of funds.

For this that are interested you can check this thread for the others.  [INFO} Be aware of https://privnote.co/ (https://bitcointalk.org/index.php?topic=5478237.0) (check replies for the others).

I am sorry about that person's loss, I think it's also good for that person report this to privnote.com that there are copycats that are roaming and scamming their users so they'll put a note on their landing page to beware of the fake ones.

I agree but those that have done it found it comfortable.  :-\

It is better not to even use privnote.com, the service is closed source. They did not mention that they encrypt data, and there is no guarantee that they might do the same thing that happened with .co, in addition to the fact that the service depends on Cloudflare, where they can record some data related to you.

There are open source tools ---> https://www.fortinet.com/resources/cyberglossary/pgp-encryption#:~:text=PGP%20uses%20the%20public%20key,it%20with%20their%20private%20key


It can be used to encrypt messages and the public key can be shared via PM or SimpleX Chat.

Yes, there have been a lot of cases like this before,

https://krebsonsecurity.com/2020/06/privnotes-com-is-phishing-bitcoin-from-users-of-private-messaging-service-privnote-com/


Just look at the date, it's 4 years ago and this criminals is still using it. I felt sorry for your campaign participants. Hopefully he will learn his lessons very well not to trust this kind of services. And for those who read this, double check everything, don't trust but verify.

I'm sorry to hear it @AB de Royse777. Way back, I gave this warning to the community,

The dangers and threat of using Self destruct Private Notes. (https://bitcointalk.org/index.php?topic=5255690.0)

And then we also have this:

• Fake Private-note -- pirvnota.com (https://bitcointalk.org/index.php?topic=5456205.0/)
• PSA: Make sure you NEVER use privnotes.com!! (https://bitcointalk.org/index.php?topic=5256113.0)

There are several warnings posted about phishing privnote websites, but this can be applied to any other fake website.
It is best to bookmark websites you are often using, and don't blindly trust any search engine results that are full of scams.
Use your brain people and dont try to invent wheels all over again... even logo is clearly saying pIRVnote, not privnote. :P

scam:
https://www.talkimg.com/images/2023/12/16/E1RyD.jpeg

legit:
https://www.talkimg.com/images/2023/12/16/E1PMG.jpeg

More and more people fallen to scams related to privacy.

In this case if someone really concerned with their privacy, it's better to use decentralized messaging apps e.g. nostrchat.io or just use telegram for easier navigation. Verify the telegram account by linking to this forum and sign a message, post the address in telegram and then delete it when the receiver has received the coins.

When you placed these two side by side or up and down you can easily notice the difference but if you were looking at it in different time line even navigating from one window to another, you will have difficulties to figure out the difference unless you are using it regularly and closely related to the service. Scammers are very cleaver. I saw many fake companies who copied well known brands but fake logo is very close to the original that you can easily buy the fake product by thinking you are buying the original product.

People who insist on using Privnote for some reason should at least encrypt the messages using EncDec (https://encdec.zenulabidin.com) to thwart this kind of scam.