Bitcoin Forum

Yesterday, I bump into this thread,  (https://bitcointalk.org/index.php?topic=5282253.0) the member was complaining how Bounty cheaters used ones details to register on campaign without their knowledge. This is mostly carried out in social campaigns ( Twitter, Facebook, LinkedIn....... and the worst one is Telegram)
I have been a victim of this people and I have complain several times, I don't want to receive a negative trust from DT member, it's difficult to convince them when they sight two addresses participating on a Bounty.
I came across a thread that suggested to give negative trust and feed back when one cheat and used your account details but little did I know that scammers are smart individuals.

The first one I dig into was this Bounty (https://bitcointalk.org/index.php?topic=5281069.0) that is currently managed by Wapinter.
I am participating on social Bounty but to my surprise someone already used Bitcointalk (Princejebs) account to registered for Telegram campaign.
Another cheater registered my Alts account (Gurujebs) that has been last seen February to register with different address that's not own by me.
See the images below.

https://i.ibb.co/rpDcKPN/Screenshot-20201016-174041.png
The above image, the cheater used my account to register with his/her own address and Telegram Username.

https://i.ibb.co/2yDMsg3/Screenshot-20201016-174108.png
The image shows my own registration

https://i.ibb.co/Y2FQSZc/Screenshot-20201016-174131.png
Another cheater using my Alts to register Bounty. Isn't this a problem for me already, I never registered the first and the last.
Here is link to the spreadsheetclick here (https://docs.google.com/spreadsheets/d/1SL0SC4SoBeMhaHIFJKlf6A3P1zeJqQq11iyTqanqQO8/edit?usp=drivesdk)
Bounty managers are also responsible for this actions, they failed to used #Proof of Registration for social Bounties because they only care about raising a large community, I mean how can Telegram campaign have  registered participants of 10k in just 3 hour of Bounty launch?
Now, it will be difficult to trace this cheater and it will look funny to give my self negative trust.

---

---

Here is another spreadsheet from DEGO (https://bitcointalk.org/index.php?topic=5272474.0) concluded campaign, the cheater used my account, I have complained to the manager to delete the second entry, I'm still waiting for the her action.
https://i.ibb.co/g42cvDn/Screenshot-20201016-174236.png
My entry registration.

https://i.ibb.co/92SPBH4/Screenshot-20201016-174307.png
Cheater entry.
Link to spreadsheet, click here (https://docs.google.com/spreadsheets/d/1tzocPq-0bJKR7d3ZFxkjrY2iJjjP5Y9EQOQtK6rDVQE/edit?usp=drivesdk)
There are other spreadsheet I'm still digging and I wouldn't be surprised if I see the same thing.

As suggested on this thread (https://bitcointalk.org/index.php?topic=5282253.0) to always look out for this cheaters, Bounty managers should find an alternative way to submit works, provide proof of registration in every campaign. I know how busy it's to be a campaign manager but please don't ignored participants when they complain about multiple registrations.

Like you said they only care about raising a large community and marketing of the project. If the project will receive funds from investors, they will continue to do it without issue. Calling them out for "post of authentication" will just be ignored.

What you can do so they will take time to look at your concerns is to find fault in the project and you create a scam accusation or plagiarism thread. When that happen, you just wait til DT gives negative feedback to their account.

Proof of authentication post can easily solve this problem because the original account and time can be tracked and confirmed with timestamp as well. So all other entries can simply be deleted by the bounty manager. It is really a big problem for campaigns that do not enforce proof of authentication post requirement, usually such campaigns are bombarded by fake, multi account and bot entries.

This is so painful. It was few months ago that i experienced this issue in a different way. It seems my information was not complete on the spreadsheet, so i sent a message to the bounty manager to rectify it. I waited for weeks without any response. the project came to an end without the allotment of my stake.

Well, I braced up and encouraged myself. I advise bounty manager to respond to complaint of participants.

There are a lot of different types of scammers active in bounty section. Protecting our IDs from them seems to be a challenge. Like you, I have had such a problem. A bounty cheater named DeXiam (https://bitcointalk.org/index.php?action=profile;u=2437185) used my details to participate Butter Swap bounty and stolen my work in Amepay bounty. I put a negative trust on his profile. But since I am not a DT member, he does not care about it.

Proof:
Amepay bounty:
I posted my week 1 report on Oct 7
https://bitcointalk.org/index.php?topic=5279528.msg55329077#msg55329077.
Scammer copied my report and posted on bounty thread https://bitcointalk.org/index.php?topic=5279528.msg55334456#msg55334456.
Archive: https://archive.st/archive/2020/10/bitcointalk.org/i0s4/bitcointalk.org/index.html

Butter Swap bounty:
My week 1 report link:
https://bitcointalk.org/index.php?topic=5280065.msg55348152#msg55348152

Scammer's week 1 report link:
https://bitcointalk.org/index.php?topic=5280065.msg55353913#msg55353913

Then I put a negative trust on his profile but he still doesn't stop.
https://i.imgur.com/dquxM1j.jpg.

I am also afraid of this shit cheater. I don't know is someone using my details or not. Because It's not possible to check all the bounties sheet every day. Sometimes I got busy and don't check regular basic. Does the POA system work to verify the participants? then how cheaters got accepted? if the ETH address is wrong? Even some cheaters got payment. Managers should check this carefully. Hope there will be new rules to avoid this kind of shit & sick mined peoples

That's the problem,

Since we are not the dt, even if you put a red tag on this cheaters account, no one will be able to notice. So, it only means that the action you have taken is useless. The only thing we can do is to contact the bounty manager hoping that he will take an action.

Then you should deal this with Reputation section where all those users who are trying to cheat will get more negative trust.There someone threads exists with the same kind of scammers so use the search to find that thread or create one for yourself.

As long as you can provide enough proof to accuse the scammer and the DT will actually give the scammer negative trust but the problem is what will be happening if the reputation section will be flooding with the similar thread as he is not only the only one who has been getting fooled by the scammer.

his manager must take their responsibility for that. His manager has already hired for that thing and it's his job to clean the campaign from the scammers.

I don't understand why people are making bounty a big deal, and sound like they're lose everything if they don't get their bounty. For god sake it's free stuffs that comes out of thin air and you don't need to pay, why expecting so much out of it?
I know some of these bounty hunters have minimum wage $1 or $2 daily in their country but to me these bounty hunters sounds ridiculous. I think most of these bounty hunter do it full time job, which you shouldn't!

Thanks for that, numerous bounty managers don't actually care about other bounty participants identity thefts but very few among them who have been doing thus job with passion can actually identify a scammer from an original owners. Some of them, even when report these scammers they won't border to investigate the concerns of their bounty participants in the process. IMO, the bounty section of the forum need overhauling in term of reputation from other section of the forum.

You failed to read in between lines and end up deviating from the topic. The aim of the topic is not about the payment, it's how cheaters used ones detailes on campaign they didn't register or register twice on a single Bounty which is highly prohibited by the forum.
DT members frown at this activity, I bet you have not been summon by them  ;D ;D

This is done by scammers, the fraud one is at the bottom of the list. I don't really know their intentions joining in such a bounty campaign then using other's people's address, if happen so and not noticed by bounty manager, the participant might received doubled stakes or rewards as rhe address copied, however it is not in the side of copied participant since it may cause him trouble that bounty manager might accuse him as cheating.

The question is do you create POA post? If yes then the cheaters have wasted their time because through proof of Authentication the bounty manager can easily erase other false campaigns in the spreadsheet, this is one reason why I hate social media campaign and telegram, there is always too much spammers in this campaigns

That is the importance of proof of registration / authentication for genuine hunters.
But i think wapinter is a popular bounty manager, they should already requiring proof of authentication on his every campaigns.
We as a hunter must check our name on the spreadsheet first. If it is already there without our knowledge, then we should report it.

It's very important to have a proof authentication for bounty hunters, are there still bounty campaigns that did not implement proof of authentication, scammers are on a watch for campaign that do not have this, because they can easily manipulate and cheat the campaign, and besides bounty managers will have a hard time who are the real owners of those submissions.

I'm sure that this type of cheating occurs on bounty campaigns that don't requests for proof of authentication posts on this forum, this will surely happen unless the project isn't good enough, it's left for the bounty managers to take action but I bet it's not going to be easy, with the way I see things here it's definitely the bounty managers fault

Recently bounty managers usually ask to write the "proof of join" post in order to prevent such sort of fraud. I thought such things were left back in 2017))

I am sure the bounty manager can solve this, but indeed nowadays many bounty managers ignore participants who experience problems like this because maybe they are at work and we are considered sending spam messages. I hope bounty hunters find out about this complaint and actually set up an easy but safe registration system from scammers. Because lately it is very common and I think almost all bounties have this kind of problem.

You indicate an important issue. We should contact bounty manager regarding this issue. A careful bounty manager can reduce scammers by rejecting them from the campaign. Proof of authentication can be a good solution for this.

This happens repetitively in a bounty campaign that a lot of cheaters who joined, but the bounty managers should also attending the participants concern. As what others campaign manager did is the participant should provide the proof of authentication just to avoid the fraudulent act.

I think this is already a common problem in bounties because cheaters would want to of course get higher stakes by using someone else's account for usernames. I believe that even Satoshi's account here was even used before in bounty campaigns as well as other Legendary and reputated members here. Kinda annoying and stupid, I know.
All you gotta do is get in touch with the BM so that you'll avoid getting framed for bounty abusing with alt accounts although I can see it in your feedback that you have alts but got somehow worked out and clarified.

Its hard for the manager alone to manage everything mostly if they have different campaign of social media and have other campaign he manage.

Proof of authentication can help ,the only problem is the thread will became so Messy with a lot spam messages using that authentication .and other important questions asked there can be forgaten or unreadable because of many spam messages like that.

Good solution is to report them every time you  saw someone cheating or use other's people profile.  but not all members will know that someone is using their profile intentionally to join in a bounty.

It is no longer news bro, all this social media newbies participants are often the culprit of this bad act, most of them are clueless to the forum and campaign rule, they compound a huge work load for the bm to hand, in my current campaign, there have been several of such similar cases, the really have a lot of work on their plate.

I have experienced something like that , I think upper year, and when I tried to make a comment about it, the manager got me out of the campaign, because I was actually confused to see the project appear in 2 phases, the first by a legendary member  the second by a junior member.  The legend manager could not even wait to get my information right, and funny enough till today I never even received the project token.

That was always happening in a bounty that have many cheaters doing even do they reported its always coming back. Then must better have a proof authentication to resolve this problem because like they said in the first comment it can detect directly and cant copy the details of we have. And the best solution of that is to reportedly to DT so that they are the one can decide if they put it negative or not.

I have seen a several times my account information being used in the bounty specially in telegram and twitter campaign. Really it’s not possible to check all of the project spreadsheet who's misusing my profile. Proof of Authentication absolutely vital to identify the real ownership. Without POA won't  possible to filtering this issue.  

yes, message authentication is very good applied to all bounty programs to avoid account forgery.  In 2017 and 2018, many bounty programs do not require an authentication message so that account forgery occurs in every bounty and at that time the person who fraudulent the account still gets a prize from the bounty he participates in.  This year there are still some who do account forgery, therefore the campaign manager must be more careful in accepting participants who join the bounty program he created.

Lucky you that you're still participating in the same bounty, for you to dictate that someone is using your own details to partake in the same bounty.
What happens if you weren't aware of that?
Bounties should make proof of stakes compulsory, to avoid issues like this

I've experienced this kind of problem before when I'm still managing a certain project. This is a headache for the bounty managers that bounty hunters are obviously cheating. #Proof of Authentication is very important in bounty projects nowadays cause there are too many hunters trying to impersonate somebody. It's really hard for a bounty manager to keep things still especially on the first day of the campaign when cheaters are spamming the spreadsheets with applications. Imagine I got almost 5000 applications before on the first day of the campaign and I'm sure that just 10% of them are real ones who are participating. Thankfully Proof of Authentication on every report makes the filtering easy and resolves the issue. Implementing the rules strictly is needed in the bounty campaigns so you can see the ones who are serious about it or not.

The link you provided is the "JACS.tech" bounty, which is managed not by Wapinter, but by the Hhampuz manager, who is considered a professional in his field. Now that I have mentioned his name here, I think that now he will read this thread and will be able to take adequate measures against cheaters.

1. There is pretty much nothing that can be done about this.
2. There is a bot that is mass signing up to the google form entering completely random members. You should not give negative trust to any of them as the one in control of the bot, without a doubt, is not the owner of the accounts it's using to signup with. They are just entering the ETH address in someone elses name (The ETH address is the only thing they are in control of), hoping that some manager will just look over it and award them tokens.
3. You mention my bounty by name and say that we are doing nothing.. I'd invite you to read the last few posts where I bring up the issue (in the Telegram group as well) and where I'm currently working on a solution. Talking about us not caring because we want to raise a community asap is simply not true. What would I possibly stand to benefit from 10k bots signing up to a bounty where they won't do their task and they'll add nothing?

1 bitcointalk account and some telegram accounts they entered (probably stolen from other users), that's a wrong thing. Isn't there an efficient way of registering so that it doesn't happen again? I think the bounty manager should make sure, 1 bitcointalk account, 1 telegram account. but it will be difficult when he joins a different bounty. maybe this is the reason why kyc is required for several bounties and reasons.

I see a lot of this in most bounty campaigns. I myself is a victim once causing my previous bitcointalk account to be banned. I also saw several bounty participants complaining about it but so far the problem still exists.  Hopefully this would be eliminated so bounty projects would only allow legitimate participants to join the campaign.

Only those bounty managers who have a lot of qualifications can easily identify the cheater hunters and remove them later. My guess is that this is actually the job of the bounty manager because he will be able to catch all the cheater hunters when he is engaged in the work of spreadsheet update. There are some unprofessional managers who do not notice this and finish spreadsheet update activities very quickly.

Yep, that's why there are some bounty manager asking for Proof of Authentication or something a post on the bounty thread that needed from the participant before joining to the bounty.
I also experienced this before, I think more a year ago. I saw my username in some of spreadsheet of bounty I think or it is an airdrop, but the ethereum address there is not belong to me, and I can admit 100% that I didn't join on that airdrop/bounty campaign.

Some bounty managers don't pay attention that they need to protect their participants with public information on spreadsheets. Privacy of participants should be protected and information like email addresses should be hidden from spreadsheets.

If managers don't hide email addresses, bad people can send spam, malicious emails to participants or they can steal those information from spreadsheets to make fake applications.

It is not too difficult to hide unnecessary information for public spreadsheets but unprofessional managers don't care.

Too bad you have to experience this, all you have to do is present your findings to the various bounty manager of the project(s) so that they can ban this guy's, this is very common with this social media bounties, and from what I have observed this are mostly done by new members, no old member who knew the implications of this kind of action will risk their account doing shit like this,

This is why pos is very important and should be applied in all bounties, many scammers tends to take advantage of any campaign who did not apply this process, they will hijack with their bot, very stupid act in my opinion because eventually they will get cut and those multiple accounts will not get anything except create more work for the bm.

The current problem and actually the same old problem was bounty manager don't set limits on the number of participants that can join to the campaign that's why it result on tremendous amount of user that joining campaign which bounty campaign can't handle anymore. Bounty managers always focus on quantity over quality that's why the result is always useless. Lots of participants while the campaign only produce a huge spam of post in forum and in social media.

what you are saying is very true because some time ago I still saw a lot of bots registering on a large scale and stealing the identity of people in this forum so it's very dangerous, it's better to use the authentic post system that can be used for verification and may also apply can only one register from google form.

That's true there should be double checking especially if the bounty manager is managing a lot of campaigns he should have an assistant to check if there are double entries and scammers who wants to get in and steal other people's works, the bounty manager is at stake if he cannot keep the campaign clean, so he should monitor it from time to time.

Cheaters often use other people's profile information to register on the spreadsheet. Don't worry too much about what's going on, if you have any questions, ask the bounty operator. I've found that most bounty programs require a 'Proof of Authentication', which is hard to fake without being an account holder.

Just do the Basic,If you are a Bounty Hunter then better be observant and be attentive always check the spreadsheets and if you saw your name (or others that you knew) being used by these scammers then Report right away to the manager and report as well to the Mods.
these are the things that you must do and don't stress your self because this will never end as scammers are part of this community,they are the one who proves how healthy this market and valuable.

I have also experienced cases like this, where there are participants who register with the data I have. unfortunately, the bounty manager was observant enough to see the cheating, and immediately took action.
in this case, we do need to do a review before making a payment, or beforehand on the existing spreadsheet. Because there are so many participants, I think there are several accounts that have escaped the monitoring of the bounty manager. because of this, participants also need to take precautions by checking their own data, and if there is an imitation, then immediately report it to the bounty manager for handling.

cheating like this will continue to happen, and I feel like they will try to find loopholes to exploit other people's work for themselves.

I guess this happens for a reason that the fraudster uses the same detail of other participant and only change their eth address only to get the benefit of given rewards. But if the copied detail of other participants is their eth addresses, it is pity on the part of that participant since the manager would guess its their alternate account and they could be banned for this if proven right.

This is how I see the solution to the situation. If fraudsters use someone's data, then this most often happens from a beginner. He has a lot of different data from other people's accounts in his message history. If, for example, he uses your data, then the manager on the history of your messages will easily determine that you are the real owner of this data. Since the date of the posts, your social networks, for example, have earlier dates than his.
I honestly don't see any problem here. There are a few idiots who are newbies and have 4-5 messages. They steal other people's data, using it for registration. And then they become inactive. I see it daily. But I will not accuse you of cheating or the presence of alternative accounts. The motives of those who engage in such matters are not clear.

There are many cases of fraud like this, sometimes bounty managers do not pay attention to the validity of the registered account, to minimize fraud someone can find out from the name and wallet address listed on their account if done carefully, and sometimes because many of them take part in the bounty, this is underestimated and results in losses for the account user.

Too bad that many people get tagged for that for wrong reason, and good thing that some obvious wrong connection happens through ownership of an ETH or BTC address.
Good thing there are plenty of bounty managers willing to check each entries for verification purposes.
Some aren't and just straight up running the bounty itself.

If you are smart than a cheater then you can help the bounty admin and manager to kick out those cheaters and the real one will be rewarded at the end. Proof of authentication can also be use to prove them that you are the real owner of that account. It's really difficult for the campaign manager to detect the cheaters if the participants is too many. That's why I think bounty manager and the hunters must work together for good and kick out those bots and cheaters.

Being a bounty manager is not so easy than we think because they don't actually have the time to check every details of their participants who joined their bounty campaign, that is why they sometimes commit mistakes that they didn't notice some of their participants are cheaters and scammers. But I see most bounty manager are doing all their best to keep the bounty campaign away from cheaters and scammers.

This is the classic method that usually cheaters does to steal other people stakes.
Using other's bitcointalk username, but using their own telegram handle and their own ethereum address.
Proof of Authentication should be mandatory for all bounty campaigns in bitcointalk forum to ensure fair distribution.

maybe this will not apply to the bounty signature, because the signature will be difficult to trick using someone else's username because we enter the signature according to our actual account rank. maybe for social media bounties, the bounty manager must be more careful.

Yes if authentication is provided for every bounty manager then the bounty campaigns will be much nicer and no one will be able to cheat morally in the case of bounty campaigns most of the managers cheat and change the wallet from the sheet to take advantage of the reward themselves the participants are  affected. Therefore if authentication is made mandatory no one will be able to change the address and there will be no chance of cheating.

Wait, how are they joining the same campaign using your username? And how are they even doing this? I am guessing they are applying from another platform using your bitcointalk username? If that is the case, how come the bounty managers aren't even cross checking anything? I means that is not even that hard to do. All you have to do is using the find function on the sheet and check if the user has already joined the campaign. Or they can tell them to send him a message from his bitcointalk account before enrolling. Looks like its just the managers that aren't doing their jobs properly.

Its the bounty manager's fault that cheaters invade the campaign, I would have joined DEGO Finance bounty too but the bounty has no signature campaign available, every bounty managers must compulsory proof of authentication and also limited participants to have a clean bounty managing experience

I have experienced the same thing like you, I have never joined a bounty but after I checked the spreadsheet on the Blog or telegram campaign on that project, my Btt name was used by someone who was sneaky to join the bounty campaign, and I 'have reported it with the gift manager but they didn't respond to do so. I also hope that all gift managers should always check on the participants who follow the projects they manage, so that someone sneaky using someone else's Btt can be excluded from the campaign.

These scammers will never stop, I have been a victim to this scam,it mostly happens in social media bounty campaigns, I heard bots are been used to do this, I complained to the bounty manager he didn't say anything about it, the scammers even used my profile to register in the telegram bounty campaign before I got there, too bad I can't identify the scammer cus it's just his telegram name there, I would have tagged him asap,these is really getting out of control,we need to put an end to this.

This is one of the cheaters in cryptocurrency, where they stole the name of the account of some of the members here in the forum.
via copying the link profile, username, and Telegram username as well, only the difference in the ETH address they use of course. Where this opportunist called an exploiter if I am not mistaken. if you find something like this you must immediately report or inform the bounty manager about the issues.

if a manager are doing thier job seriously , this type of cheating wont be succesful  . this occurs popularly on bounty alts because there are more members required in it and if manager is also lazy , they wont scan the profile links one by one . its okay if managers are going to face the consequence but i heard that inocent users are being blamed for this  . what if they dont know how to defend their selves  , they will got tagged and disqualified for the campaign that they join and future campaign that they are going to join .

It isnt right to them to get blamed because even myself when im already aware on how this forum works and how things goes still get victimized with this copy-effort issue

where people do post up your links of reports or even your own profile link itself for the benefit on claiming some bounties or do able to participate which do really sucks big
time as a person who done nothing to cheat up something.

I agree to the point that this is indeed on managers job but due to nature of bounty hunting that you do need to deal with 100's or even more of accounts then
verification one by one would really be pain in the ass.

It can be done only through identifying the POA and if the manager didn't try to take a look at POA and it's quite difficult to be identified as he was saying before the scammer has been trying to use their selfclaiming to the account that has owned by him to did a campaign before. It can be verified through the address that has already posted by him.
Just hope the managers will try to use the various formula.