Bitcoin Forum
September 22, 2025, 06:36:47 AM *
News: Latest Bitcoin Core release: 29.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Economy / Scam Accusations / Re: [WARNING] XMRWallet.com Scams - Stay vigilant! on: September 21, 2025, 12:19:40 PM
There's also another domain that uses the same interface as the Monero website for retrieving mnemonics.

Phishing: monero-wallet.io
2  Economy / Scam Accusations / Re: Phishing fake crypto wallets on: September 18, 2025, 05:17:03 PM
Good catch. Please update the status of every platform if it’s already flagged or down. If you have time, continue updating this thread and invite member contributions.
Phishing and fake crypto wallet creators are targeting newbies in Crypto. The best solution is to get the link to the official site, not from what you see on social media or a post from an article.
When you are an investor in cryptocurrency, knowledge is gold because you are your own bank, and you alone can protect your assets, and what you know can make a difference in your safety
OP, you should probably adjust or change the search inputs a bit. As far as I can see, almost all domains have 'wallet' in the name, obviously, that's how the search engine reacted to your query. It would be really strange if there were no other phishing sites that contain the word wallet in the domain name.
I mean, this really requires a lot of commitment to expose most of the malicious sites.

I just added new phishing sites to the list, and there are still more to add here.

I just checked the list > some domains are no longer online, while others are still online with a warning about wallet extensions.

If you are a victim of cryptocurrency theft, you can file a complaint, as the method used here is completely different, since it targets people directly. It's not like on an anonymous website this time.

In short, developers can also pursue this case, and it will be easier to expose everything here, the domains, in order to track them over time.

I have also sent samples to VirusTotal and other verification sites, and antivirus programs are starting to detect it as a stealer, which is good news.

I will update this list daily and also register on altcoinstalks to expose this to other communities.
3  Economy / Scam Accusations / Re: Phishing fake crypto wallets on: September 09, 2025, 10:19:28 AM
Update is added another wallet to the list fake wallet avalanche, zcash, litecoin.
4  Economy / Scam Accusations / Phishing fake crypto wallets on: September 06, 2025, 07:31:47 PM
While searching on Google, I came across several fake wallets posing as real wallet sites, where you are asked to enter your mnemonic code on the phishing site. There are also fake wallet sites that invite you to download malware. I tested this on a virtual machine, but access to the software was denied. The wallet contained anti-VM software, which looked like malware. These sites steal your cryptocurrencies once you enter your mnemonic code or download the wallet. The information is sent directly to the person behind the site.

((Phishing Wallet Page))

>Polkadot
polkadot-wallet.com > Always online Phishing

>Solana
solana-wallet.io > Always online Phishing
solana-wallet.net > Offline

>Monero
monero-wallet.io Always online Phishing

>Zcash
zcash-wallet.com > Always online Phishing

>Aptos
aptos-wallet.net > Always online Phishing

>BitcoinSV
bitcoinsv-wallet.io > Always online Phishing

>Zilliqa
zilliqa-wallet.com > Always online Phishing

>Bittensor
bittensorwallet.co > Always online Phishing

>Tezos
tezoswallet.io > VPS Ubuntu IP 146.70.233.80 > Always online Malware
tezos-wallet.io > Always online Phishing

>USDT
usdt-wallet.org > VPS Ubuntu IP 146.70.24.185 > Always online Malware

>Chainlink
chainlinkwallet.org > VPS Ubuntu IP 91.218.143.25 > Always online Malware

>Dogecoin
dogecoin-wallet.io > Always online Phishing
doge-wallet.com > Always online Phishing

>Dash
dash-wallet.io > Always online Phishing

>Decred
decredwallet.com > Offline

>Helium
heliumwallet.org > Always online Phishing

>Nem
nem-wallet.com > Always online Phishing
nemwallet.org > Server IP 89.238.132.248 > Always online Malware

>Ravencoin
ravencoinwallet.com > Always online Phishing

>Neo
neowallet.org > VPS Ubuntu IP 146.70.233.78 > Always online Malware

>Avalanche
avalanche-wallet.com > Always online Phishing

>Vertcoin
electrum-vtc.org > Server IP 62.182.80.15 > Always online Malware

>Litecoin
litevaultwallet.io > Always online Phishing
litecoin-wallet.io > Always online Phishing

>Waves
waves-wallet.io > Always online Phishing

>Hedera
hederawallet.io > Server IP 217.148.142.44 > Always online Malware

>Cardano
cardano-wallet.io > Always online Phishing


Another method he also uses Github to list fake wallets, this is the same method that is hidden behind in the source code, he receives the mnemonics by Telegram BOT

>Polygon
polygonwollet.github.io
walletpolygon.github.io


Do not click on any of the links, be careful and do not click on the first link that may appear on the search engine, do your research first before typing or sending anything.

The sites are mostly registered in Asia, and some lines of code are written in Chinese and French, so this person is fluent in these languages. Upon closer inspection, it turns out that a single person manages all these sites, and they are written by him.

--

To report a phishing page, you can write to Google and Microsoft:
https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site-guest
https://safebrowsing.google.com/safebrowsing/report_phish/

You can also report it directly to the project teams. They generally blacklist domains fairly quickly.
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!