SCAM! rahakott.ch is a copycat of rahakott.io Wallet which stopped operating.

[JeromeTash]

What happened: rahakott.ch is a copycat web wallet which is phishing for login details and mnemonic phrases of unsuspecting users of rahakott.io which stopped operating on 31st August 2020


Scammers Profile Link: Not in the forum

Scammer's website: https://rahakott.ch/
Archive Link: https://archive.vn/lx9SN

Original Website: https://rahakott.io
Archive Link: https://web.archive.org/web/20200729071818/https://rahakott.io


rahakott.io Officially Announced that they were closing down:


Archived Source Link: https://web.archive.org/web/20200729071822/https://rahakott.io/pages/news

[Casdinyard]

What happened: rahakott.ch is a copycat web wallet which is phishing for login details and mnemonic phrases of unsuspecting users of rahakott.io which stopped operating on 31st August 2020

Good catch! At first I thought rahakott.ch is just their other domain (chinese domain) but glad you've mentioned that the main Rahakkot.io website is already down. But aren't we late to report this? Rahakkot.io fully stopped their operations in the mid August and only shutdown their website recently, which had been the time that those scammers would copy the Rahakott's website to their own domain. But yeah, hope that no one had been fooled by the scam domain. But still, if they ever had the login details, Rahakott.io already deleted their database and their main website, so I think there are only a percent chance that users had been scammed (after the .io notice)

[Potato Chips]

They already scammed three people and these are all recent--after the real website/wallet ceased its operations.

• 24 days ago
• 22 days ago
• 1 day ago

Since the .io went down, the .ch is reigning in the first page when your look it up. I guess they just entered the word "rahakott" in their search bars.

[Halab]

They already scammed three people and these are all recent--after the real website/wallet ceased its operations.

There are probably many more. Yesterday (before this topic was created), a french user came to explain his problem with Rahakott.
Another example here: https://revain.org/wallets/rahakott :

Cleiti S
September 08, 2020
stole my money, don't use it!
used rahakott a couple times before and everything was great (i especially enjoyed the feature of changing the wallet number to make transactions untraceable), but this time my funds that i sent to a rahakott wallet came there and in a couple hours were SENT ELSEWHERE (which i could trace since it's blockchain). Interesting fact is that my rahakott wallet DOES NOT SHOW any recieving or outgoing transactions at all. Empty history. (it was a new wallet so those two transactions should be the only ones showing)

=> my assets got stolen and rahakott pretends that no money ever even reached the wallet. NO support to contact. Don't use it.

also what's with all those news about closing and still the webpage was completely available, everything was working?

And here is the address used to steal BTC from the french user : https://www.blockchain.com/btc/address/33ZBoBZoNyA4Btmo1ckebKp8pJCnJnzoTq

[JeromeTash]

Good catch! At first I thought rahakott.ch is just their other domain (chinese domain) but glad you've mentioned that the main Rahakkot.io website is already down.

They already had an Op to switch languages on their website so there was no need for a different domain specifically for Chinese language

Code:

https://rahakott.io/lang/cn

They also had warnings about phishing domains on their website but that won't be visible anymore since it's Offline so i will leave the warning here;

Warning about phishing attempts
Attention!

We have discovered Rahakott phishing attempts. Our official addresses:

https://rahakott.io
https://rahakott.com
http://rahakottymyflyum.onion
http://rahakott2jmcdnajbsmi6b74t3koh5wnlpsoym44jccli6rzjvk2tcad.onion
Any other addresses pose a risk of losing your funds! Be careful!

Source: https://web.archive.org/web/20200729071822/https://rahakott.io/pages/news

But aren't we late to report this? Rahakkot.io fully stopped their operations in the mid August and only shutdown their website recently, which had been the time that those scammers would copy the Rahakott's website to their own domain.

It's not late, the scam is actually just getting started since the original wallet closed their website.
The warnings can help people who might google the domain name. They could end up seeing this thread.

[aesma]

I guess when you don't know things it's easier to get scammed. For example .ch is not a Chinese top level domain ! It's for Switzerland, from latin Confœderatio Helvetica.

Of course some people will think BTC = money = banks => Switzerland is a good choice !

The original website probably claused because they had trouble with the authorities for not performing KYC or something along those lines, be that a lesson that you should not use a web wallet !

[chq1017]

this is a scam just got done for $850 AUD. didn't do enough research!!!!!
37PEeR36jV6Z3fHC2ZmxDhkan3aNYy1ifS    this was wallet address.
i looked it up on bit coin address lookup and came up with a scam eventually in the transaction history. anyway DONT USE RAHAKOTT !!!!!!!!!!!!!

[JeromeTash]

this is a scam just got done for $850 AUD. didn't do enough research!!!!!
37PEeR36jV6Z3fHC2ZmxDhkan3aNYy1ifS    this was wallet address.
i looked it up on bit coin address lookup and came up with a scam eventually in the transaction history. anyway DONT USE RAHAKOTT !!!!!!!!!!!!!

Sorry for the loss, that's about 550 USD
You should always learn the culture of first carrying out some background research before using a service that's not popular. The genuine rahakott wallet shutdown and what we now have a clone website pretending to be the original wallet which is scamming people.

[muleguy33]

Just ran across this thread.  I hadn't logged into my Rahakott wallet in about 11mo and never saw the warning about them shutting down Aug 1.  Is there any way now to retrieve funds that were stored there?  Also, like others I simply thought they had moved the site from .io to .ch and entered my mnemonic there but without the 25th word which I should have been promted for on the next screen but luckily wasn't.  That being the case, since they are still fishing for menmonics, then logicially that must mean there is some way to recover stored funds somehow.     

[JeromeTash]

I think there is no way of recovering the funds at least to my knowledge. The mnemonics were just more like login credentials to one's account and not the actual link to the addresses. What the clone wallet is doing is just trick people into believing that it's the original wallet and then when one registers and sends money, they get scammed

[muleguy33]

I think there is no way of recovering the funds at least to my knowledge. The mnemonics were just more like login credentials to one's account and not the actual link to the addresses. What the clone wallet is doing is just trick people into believing that it's the original wallet and then when one registers and sends money, they get scammed

That was my point exactly.  In order to get scammed by the people with the fake Rahakott.ch domain would imply that SOMEONE (including me) can still access the funds I had at Rahakott.io.  I have tried Electrum, Wasabi, and Bitpay with no luck so far.  However, I'm not 100% sure I'm doing the Bip38/39 conversions correctly since most everything seems to expect 12 words instead of 24 words plus a passphrase.  So far every account import to every wallet in every different way I have tried it has come up with an imported account with a $0 balance and no transaction history.  If my wallet ever did successfully import, wouldn't it show the transaction history of the imported wallet?      

[JeromeTash]

If my wallet ever did successfully import, wouldn't it show the transaction history of the imported wallet?       

Yeah, you would be able to see all the transaction history plus the balance of Bitcoins in the address if at all there were any Bitcoins in there

@Potato Chips also tried generating the visible bitcoin address in the tutorial using the mnemonicin vain.

Tried importing this guy's mnemonic (https://youtu.be/ccWX2ryPVgM) to iancoleman (https://github.com/iancoleman/bip39), played with the derivation path and didn't find the same address, so maybe it's not bip39? Did rahakott say it is or you based it on the word list?

Better check your addresses if the funds moved or not. If you dont have them with you, try checking your browser history or maybe you've sent someone a TXID. They seem to have an access to their users funds seeing how they are offering recovery of cross-chain sent coins and internal (off-chain) transfers. I'm not entirely sure but there's a chance it's not actually a mnemonic that would generate your keys from rahakott but rather just a way to access your account in the website.

[JeromeTash]

Update

Another scam website which is a copycat of rahakott.io was discovered recently when a user tried to advertise it.

Avoid ---->> rahakott.net (copycat site which is scam)