scammers using Exodus wallet fake email

[Pmalek]

I relay the most on trustwallet.

Your choice of wallet isn't much better either. If you are using it as a multicoin mobile wallet, then ok. You don't really have many good alternatives. If you store bitcoins in it, then you could do much better.

It is used as an email backup for recovery purposes. Using a non-custodial open source wallet is the most recommended one. No email required, no need to rely on the company/developers knowledge for recovery/installation, just your secured device for it to install and use.

Do you know this for a fact or is it an educated guess? Exodus is a closed-source wallet but it's non-custodial. You control your keys, so what kind of sensitive information would they be storing and sending via email for recovery?

And the other thing at the end of this message is that they say that they can block the account of users who avoided doing what they sent them and seize all their funds. Exodus cannot, and nobody can't do this because Exodus Wallet does not store personal information, and any user has full control over his wallet and its security. "Your keys, your crypto"

In theory, yes, they shouldn't have any way to do that. But like with any other closed-source wallet, no one but the developers know.

[PX-Z]

It is used as an email backup for recovery purposes. Using a non-custodial open source wallet is the most recommended one. No email required, no need to rely on the company/developers knowledge for recovery/installation, just your secured device for it to install and use.

Do you know this for a fact or is it an educated guess? Exodus is a closed-source wallet but it's non-custodial.

The bold part is my recommendation when using a wallet. I'm not saying it is what exodus is, in fact it's the opposite.

You control your keys, so what kind of sensitive information would they be storing and sending via email for recovery?

I don't know, it is sent to the user's email after creating a wallet, only if the user input an email for the recovery purpose^[1]

[1] https://www.exodus.com/support/article/39-how-do-i-restore-from-email-backup#

[Yamane_Keto]

But the point I would make in general is why people put their coins into a wallet that requires login or email or KYC or any of those things, the wallet should be fully decentralized.

Exchanges are often described as centralized or decentralized, as you need a third party to exchange betwwen crypto and crypto to fiat.
wallets are described as closed source, open source, or non-custodial, custodial, but if the wallet is central (you need to connect to a central node), it is still safe if your private key generated in true random entropy and in clean opensource OS, the only problem here is privacy.

People use Exodus wallet because of the paid articles that appear when you search using keywords like BEST BITCOIN WALLET OR MILTICRYPTO WALLET and it's attractive but after a while you'll notice that its fees are high, it's closed source, and has no privacy.

[arabspaceship123]

I don't use Exodus wallet so didn't know how their users restore wallets. Users giving emails addresses to wallet providers isn't safe that option shouldn't be available. Scammers are attempting to extract seeds from users from phishing links. They're sending bulk emails with expectations of catching Exodus users to entrap.

Yes Exidos wallet is a non-custodial wallet so this email is meaningless, as long as you have control of your keys there is no fear.

Of course, trolls try to scare people who think that something may have happened to the wallet, so they may visit the phishing link out of curiosity to see what is going on.

But the point I would make in general is why people put their coins into a wallet that requires login or email or KYC or any of those things, the wallet should be fully decentralized.

[Gladitorcomeback]

If you receive the same email don't click or you'll be diverted to a scam site. You'll be threatened with funds being seized if you don't deliver your Exodus Wallet private key. They're scaring people with lies so if you've received it delete it. Don't worry nothing will happen as long as you don't click.

One of the common and old attempt of the scammers to scam people. I also recieved mails from fake Metamask email to update my Metamask because old Metamask has malware. when I clicked on this site , its asking for paraphrase which is clear scam. Thanks for sharing here to keep aware Bitcointalk community and i hope no one will be fool to trust on these mails.

we should always download app from official store and also bookmark official sites, official Twitter account and should not believe on any mail, sms or any attempt which is not related to official one.

[arabspaceship123]

I've received fake emails from scammers pretending they're from Metamask. All they're after is for seeds or passwords to steal your money. I remember it had phishing links so I reported it. I should've put that info in a thread as a warning. Your idea for bookmarking official sites should protect users from risks so we should be doing it.

If you receive the same email don't click or you'll be diverted to a scam site. You'll be threatened with funds being seized if you don't deliver your Exodus Wallet private key. They're scaring people with lies so if you've received it delete it. Don't worry nothing will happen as long as you don't click.

One of the common and old attempt of the scammers to scam people. I also recieved mails from fake Metamask email to update my Metamask because old Metamask has malware. when I clicked on this site , its asking for paraphrase which is clear scam. Thanks for sharing here to keep aware Bitcointalk community and i hope no one will be fool to trust on these mails.

we should always download app from official store and also bookmark official sites, official Twitter account and should not believe on any mail, sms or any attempt which is not related to official one.

[Gladitorcomeback]

I've received fake emails from scammers pretending they're from Metamask. All they're after is for seeds or passwords to steal your money. I remember it had phishing links so I reported it. I should've put that info in a thread as a warning. Your idea for bookmarking official sites should protect users from risks so we should be doing it.

Yes add all scamming attempt faced by you to aware Bitcointalk family. actually scammers using different techniques and as a crypto user we should know every tricked they use to cheat people. I think Google should also now work on verified mail sign just like twitter to make it secure somehow. This verification sign should be given to only big company used for funding and business.

Bookmarking all big projects, exchanges ,wallets official site is very necessary because google will show promotional ads on the top and 99% are phising sites which will clean your wallet after connecting. sometimes we directed to these sites in hurry which cause big loss.

[Pmalek]

I don't know, it is sent to the user's email after creating a wallet, only if the user input an email for the recovery purpose^[1]

This seems to be an old recovery feature that you could use to regain access to your Exodus wallet if you installed the software on a different computer, for example, or if it stopped working on your current one. But if you have your seed, the email recovery feature isn't needed. They don't mention that you need a wallet file for successful recovery, which makes me think that Exodus was once a custodial service. 

[PX-Z]

which makes me think that Exodus was once a custodial service. 

I always thought that they are because of this recovery process. I don't know how it is now, especially when they offer a third-party built-in exchange on the wallet. I dont if its still there.

[Pmalek]

I don't know how it is now, especially when they offer a third-party built-in exchange on the wallet. I dont if its still there.

I am guessing they offer some sort of instant swaps like many other wallets that have built-in exchanges. Instant exchanges are custodial. Some services like ChangeNOW like to falsely claim they are non-custodial or "free of custody" as they say. They are not. You need to deposit your coins into their addresses, and they hold the keys. Not only that, but your crypto could get frozen, and you could be asked to undergo KYC, explain the source of funds, explain how you got them, etc., etc. If we were talking about non-custodial services, you could then recover your coins, show them the middle-finger, and go elsewhere. But you can't. 

[arabspaceship123]

It's important I posted about Exodus wallet fake emails. Exodus Wallet didn't send emails asking for seeds or passwords. Telling ppl about the fake emails was important so it's done I'll lock the thread.