Bitcoin Forum

Economy => Scam Accusations => Topic started by: Zwei on March 17, 2025, 02:38:08 AM



Title: phishing pm
Post by: Zwei on March 17, 2025, 02:38:08 AM
shortly after starting a topic on the Bitcoin Technical Support (https://bitcointalk.org/index.php?topic=5535445) board to get some help fix a problem with a bitcoin node, i got the following PM from a brand new account.

https://www.talkimg.com/images/2025/03/17/04qUq.png

Code:
https://chainrectification-dapps.pages.dev <---- phishing link, do not open
https://chainrectification-dapps.pages.dev/syncwalletnew/secured <---- phishing link, do not open

the link will send you to a fake website hosted on cloudflare pages that appears to offer support for a bunch of crypto stuff.

https://www.talkimg.com/images/2025/03/17/05ayZ.png

playing the perfect victim, i started a conversation and sent them the ticket number (also to waste their time playing dumb).
they will ask you a bunch of questions to appear as if they are trying to help you so they can finally suggest their "method" on how you can fix your issue.

https://www.talkimg.com/images/2025/03/17/05A79.png

following the steps, you will end up on a page asking you to connect your wallet, and you guessed it, they will ask you to manually connect by entering your seed phrase/private keys.

https://www.talkimg.com/images/2025/03/17/05My1.png https://www.talkimg.com/images/2025/03/17/05mbm.png https://www.talkimg.com/images/2025/03/17/05PHW.png

bitcointalk account: GargeTechh (https://bitcointalk.org/index.php?action=profile;u=3696507)

i already reported the PM with this topic as reference, so he will be banned soon.

if you can spare a few minutes, please report the website to cloudflare (they ask for name and email, but you can use fake info): https://abuse.cloudflare.com/phishing
you can use this topic as reference for the evidence field.

stay safe everyone ;)


Title: Re: phishing pm
Post by: Zwei on March 17, 2025, 03:05:35 AM
damn, cloudflare is fast, they took down the wallet phishing page in just a few minutes of me reporting it.
i also been trolling the scammer for the past hour or so, i bet he is so mad right now, lol

https://www.talkimg.com/images/2025/03/17/05T9C.png


Title: Re: phishing pm
Post by: albon on March 18, 2025, 09:02:20 PM
damn, cloudflare is fast, they took down the wallet phishing page in just a few minutes of me reporting it.
i also been trolling the scammer for the past hour or so, i bet he is so mad right now, lol
Good job, man!

A cheap scam where they relied on the free subdomain pages.dev provided by Cloudflare, they didn't even bother to buy a paid domain. :D

Phishing sites have become increasingly common, so it is everyone's responsibility not to trust any link sent by strangers without doing their own research.

I have come across many of these new accounts created by scammers to promote their traps and I usually report them and it is the role of each of us to strive to expose scammers and stop their traps no matter how dangerous they are, to keep the crypto community clean.


Title: Re: phishing pm
Post by: NeuroticFish on March 19, 2025, 06:49:16 PM
Sadly, on Bitcointalk, like in any other public place, as soon as you complain of a problem, there's a good chance some scammers will come and pretend to help you in order to scam you.

I'm happy to see you didn't fall for it and, even more, knew what to do.


Title: Re: phishing pm
Post by: dkbit98 on March 19, 2025, 07:05:41 PM
bitcointalk account: GargeTechh (https://bitcointalk.org/index.php?action=profile;u=3696507)
This member didn't even create a single post in forum, this is obviously alt account of some scammer ::)
I know this could sound a bit restrictive to some people, but I wouldn't allow brand new accounts to send PM's to other forum members.
Another milder alternative is to get big red warning every time you receive PM from brand new registered members.
This probably won't stop them from scamming, but it's going to slow them a bit.


Title: Re: phishing pm
Post by: Zwei on March 19, 2025, 08:33:26 PM
bitcointalk account: GargeTechh (https://bitcointalk.org/index.php?action=profile;u=3696507)
This member didn't even create a single post in forum, this is obviously alt account of some scammer ::)
it's obv a throwaway account. the scammers are not going to waste their time posting shit.
they make an account, send two PMs per day, get banned, move on to the next one untill they find someone who would fall for it.

Another milder alternative is to get big red warning every time you receive PM from brand new registered members.
the forum already has a warning for phishing in PMs.

https://www.talkimg.com/images/2025/03/19/0DPjc.png

not sure why it didn't catch this one. probably because the link was from cloudflare.