Bitcoin Forum
November 19, 2024, 06:07:12 PM *
News: Check out the artwork 1Dq created to commemorate this forum's 15th anniversary
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: How to prevent reverse airdrop scam?  (Read 490 times)
Branko (OP)
Sr. Member
****
Offline Offline

Activity: 2660
Merit: 328


View Profile
November 08, 2018, 09:07:56 PM
 #1

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular
baobao2000
Member
**
Offline Offline

Activity: 462
Merit: 23


View Profile
November 08, 2018, 11:01:25 PM
 #2

For some business reason, some people need multiple accounts to promote their business. I think as long as the website owner accepted their requirements, then that is ok. It is pretty hard to track down multiple accounts without any personal information. For limit the options to create multiple accounts you can set mobile phones verification, or ask users to register with a credit card. You don't have to charge anything. You can just check that the card is valid.
Bitfort
Sr. Member
****
Offline Offline

Activity: 952
Merit: 339

invest trade and gamble wisely


View Profile
November 08, 2018, 11:48:42 PM
Merited by dbshck (1)
 #3

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Like CLAM (every address holding BTC, LTC or DOGE in may 2014 received 4.6 CLAMs) or RHT (NEO address holding between 1 and 99 NEO in dec 2017 received 1 RTH) ...

MY HINTs
◄M► MINING
◄G► GAMBLING
◄E► EXCHANGE

◄E► (KCS) Kucoin-Staking, Auto-Lending, Trading-Bot
◄E► (BNB) Binance-Staking, Savings, 10% RefBack
◄E► (TRX) Poloniex-Staking, Lending, Fee Discount
◄E► (LEO) Bitfinex-Staking, Auto-Lending

◄G► Betfury-Faucet, Dividend Earnings (BFG holders, mine BFG by playing)
◄G► Bitvest -  Faucet, Bankroll Invest
◄G► CryptoGames-Faucet, Lotto
◄G► PrimeDice-Faucet

◄M► Prohashing (Multipool)-Payout in any coin, get 0.50% bonus for 30 days
◄M► MiningRigRentals (Marketplace)-buy hashrate or rent your miners
◄M► Viabtc  (Pool)-payout to Coinex (exchnage) without fees


Ardavan2150
Member
**
Offline Offline

Activity: 98
Merit: 12


View Profile
November 08, 2018, 11:57:55 PM
 #4

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
Branko (OP)
Sr. Member
****
Offline Offline

Activity: 2660
Merit: 328


View Profile
November 09, 2018, 12:05:00 AM
 #5

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further


Thats what I thought, but it seems reality is different

This is about 1/5 of users joining in just few seconds

logfiles
Copper Member
Legendary
*
Offline Offline

Activity: 2170
Merit: 1822


Top Crypto Casino


View Profile WWW
November 09, 2018, 12:37:46 AM
Merited by Branko (1), dbshck (1)
 #6

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular

You can't completely weed out cheats but you can massively reduce on the multiple fake accounts by:

1: Considering account age especially for twitter or reddit( you can set a certain Karma limit for participation)... Also age of the Bitcointalk account with which they use to register. You can also decide to include Merit limits for the participants. eg Jr Member 2+ Merits, Member 13+ Merits, Full Member 105+ Merits. This can prove very hard for those who try to make multiple entries

2. As a prerequisite you make them to register with the ICO site and atleast have their emails verified. I know some can try to create as many emails as possible but this will reduce on the number

3. Make them do the sharing and tweeting through out the week... Like 1 tweet per every 24 hours, Those who don't abide get not stakes or get disqualified. Most cheats tend to do 5 tweets in a single day and report as they have so many other accounts to work on. So making 1 tweet per day for so many accounts can prove tiring.

Those are my thoughts, i hope you get an idea out of them.

███████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████

███████████████████████
.
BC.GAME
▄▄▀▀▀▀▀▀▀▄▄
▄▀▀░▄██▀░▀██▄░▀▀▄
▄▀░▐▀▄░▀░░▀░░▀░▄▀▌░▀▄
▄▀▄█▐░▀▄▀▀▀▀▀▄▀░▌█▄▀▄
▄▀░▀░░█░▄███████▄░█░░▀░▀▄
█░█░▀░█████████████░▀░█░█
█░██░▀█▀▀█▄▄█▀▀█▀░██░█
█░█▀██░█▀▀██▀▀█░██▀█░█
▀▄▀██░░░▀▀▄▌▐▄▀▀░░░██▀▄▀
▀▄▀██░░▄░▀▄█▄▀░▄░░██▀▄▀
▀▄░▀█░▄▄▄░▀░▄▄▄░█▀░▄▀
▀▄▄▀▀███▄███▀▀▄▄▀
██████▄▄▄▄▄▄▄██████
.
..CASINO....SPORTS....RACING..


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
elda34b
Sr. Member
****
Offline Offline

Activity: 910
Merit: 351


View Profile
November 09, 2018, 02:46:40 AM
Merited by dbshck (1)
 #7

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further

Believe it or not, some sockpuppetters has more than 10 Telegram accounts. They probably used online number or something like that to generate their account, or simply create their own bot to do that.

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Someone can have multiple wallet address, I think it might not prevent cheaters if they have a lot of money.

The only think that I know so far even though it is not popular is KYC, it is very hard to have more than one ID from your government even though somebody might simply steal it from other person (but this is very risky to do).
logfiles
Copper Member
Legendary
*
Offline Offline

Activity: 2170
Merit: 1822


Top Crypto Casino


View Profile WWW
November 09, 2018, 08:26:30 AM
 #8

The only think that I know so far even though it is not popular is KYC, it is very hard to have more than one ID from your government even though somebody might simply steal it from other person (but this is very risky to do).

One of the reasons KYC is not so unpopular is because of identity theft. On top of this, am pretty sure there are lots of scam airdrops that had a requisition for KYC that unsuspecting bounty hunters joined and ended up having their ID data collected. These same ID's are used to campaigns using multiple accounts  Grin Grin
So all in all, i don't think you can completely weed them out but you reduce the cheating whilst trying to maintain the number of genuine bounty hunters who would be interested in your bounty.

███████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████

███████████████████████
.
BC.GAME
▄▄▀▀▀▀▀▀▀▄▄
▄▀▀░▄██▀░▀██▄░▀▀▄
▄▀░▐▀▄░▀░░▀░░▀░▄▀▌░▀▄
▄▀▄█▐░▀▄▀▀▀▀▀▄▀░▌█▄▀▄
▄▀░▀░░█░▄███████▄░█░░▀░▀▄
█░█░▀░█████████████░▀░█░█
█░██░▀█▀▀█▄▄█▀▀█▀░██░█
█░█▀██░█▀▀██▀▀█░██▀█░█
▀▄▀██░░░▀▀▄▌▐▄▀▀░░░██▀▄▀
▀▄▀██░░▄░▀▄█▄▀░▄░░██▀▄▀
▀▄░▀█░▄▄▄░▀░▄▄▄░█▀░▄▀
▀▄▄▀▀███▄███▀▀▄▄▀
██████▄▄▄▄▄▄▄██████
.
..CASINO....SPORTS....RACING..


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
mk4
Legendary
*
Offline Offline

Activity: 2926
Merit: 3881


📟 t3rminal.xyz


View Profile WWW
November 09, 2018, 08:50:56 AM
 #9

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Like CLAM (every address holding BTC, LTC or DOGE in may 2014 received 4.6 CLAMs) or RHT (NEO address holding between 1 and 99 NEO in dec 2017 received 1 RTH) ...

This. Though there would be "the rich gets richer" counter-arguments, this is probably the best choice we have right now if you want to prevent individual people from claiming multiple airdrops, and at the same time, without accepting KYC.

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
Why can't you? Mobile sim cards are pretty cheap.

» t3rminal.xyz «
Telegram Alert Bots for Traders
Branko (OP)
Sr. Member
****
Offline Offline

Activity: 2660
Merit: 328


View Profile
November 09, 2018, 09:01:00 AM
 #10

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Like CLAM (every address holding BTC, LTC or DOGE in may 2014 received 4.6 CLAMs) or RHT (NEO address holding between 1 and 99 NEO in dec 2017 received 1 RTH) ...

This. Though there would be "the rich gets richer" counter-arguments, this is probably the best choice we have right now if you want to prevent individual people from claiming multiple airdrops, and at the same time, without accepting KYC.

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
Why can't you? Mobile sim cards are pretty cheap.

And sometimes even that is not needed:

https://www.youtube.com/watch?v=1uzcOZZ0z9M

It seems scamming airdrops can actually be pretty good business, specially if you live in a country with low wages
Peacemaker1994
Jr. Member
*
Offline Offline

Activity: 154
Merit: 2


View Profile
November 09, 2018, 10:58:51 AM
 #11

I would disagree with you on this k.y.c is quite popular and a secured means in identifying ones client it has in a way proven to be the most effective formula so far but it still has its set backs
riderinred
Member
**
Offline Offline

Activity: 162
Merit: 24


View Profile
November 09, 2018, 11:47:02 AM
 #12

You could also work with cookies and IP tracking.
If the system detects two accounts from the same IP *BAN!*
Same with cookies.


If you'd prefer to keep it simple activity might do it.
Activity that cannot be automated like meaningful posts or written reviewes/articles on a project.

I remember projects where one had to ask questions or answer them in a group to be regarded as 'active' and getting the reward.
So if someone new joined everyone was keen on answering questions. Same with AMAs and interviews.
Was a totally different experience from other groupchats Grin

You are your worst enemy and your best ally.
I am just some guy with a keyboard.
Branko (OP)
Sr. Member
****
Offline Offline

Activity: 2660
Merit: 328


View Profile
November 09, 2018, 12:08:04 PM
 #13

Asked after I played with investigating certain wallet. Look at this:

https://etherscan.io/tokentxns?a=0x58c658e3185072915870153448e893aac3226abd

All transactions are from various airdrops
Obiwankenodium
Copper Member
Member
**
Offline Offline

Activity: 322
Merit: 15


View Profile WWW
November 09, 2018, 03:29:02 PM
 #14

KyC is not popular under people trying to join airdrops with multiple accounts.

As mentioned above you can try to prevent people to join with multiple accounts in different ways, but i think kyc is still the best way to do so.

dealsmith
Newbie
*
Offline Offline

Activity: 31
Merit: 0


View Profile
November 10, 2018, 08:52:42 AM
 #15

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
It is possible. Because of people's greed, they can create more than 10 different telegram accounts to have airdrop. It is true.
riderinred
Member
**
Offline Offline

Activity: 162
Merit: 24


View Profile
November 13, 2018, 12:16:59 PM
 #16

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
It is possible. Because of people's greed, they can create more than 10 different telegram accounts to have airdrop. It is true.

Virtual cell phone numers are real guys

You are your worst enemy and your best ally.
I am just some guy with a keyboard.
Akoldi_ibk
Jr. Member
*
Offline Offline

Activity: 1050
Merit: 1


View Profile
November 13, 2018, 03:26:46 PM
 #17

You could also work with cookies and IP tracking.
If the system detects two accounts from the same IP *BAN!*
Same with cookies.


If you'd prefer to keep it simple activity might do it.
Activity that cannot be automated like meaningful posts or written reviewes/articles on a project.

I remember projects where one had to ask questions or answer them in a group to be regarded as 'active' and getting the reward.
So if someone new joined everyone was keen on answering questions. Same with AMAs and interviews.
Was a totally different experience from other groupchats Grin
If you have being in this space for a while, you will agree with me that it is very easy and simple to bypass cookies and IP detector just by using simple tools, with little or no technical knowledge. I think KYC is still the best way to slow down multiple accounts.

───[  KUWA  ]───
─────────────[  Securely Connect Smart Contracts with Real-World Data and APIs ]─────────────
───[  KUWA.ai  ]───
coinlocket$
Legendary
*
Offline Offline

Activity: 2562
Merit: 1517


#1 VIP Crypto Casino


View Profile
November 13, 2018, 04:19:09 PM
 #18

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular

It's quite simple actually but needs some time for the manager, but since the only thing for most of them are numbers of participation, they don't even look at who participate on the airdrop.
I have the perfect idea to avoid 90% of scammers, and I've already posted on the past, and nobody cared about it.

█████████████████████████
███████████▄█████████████
██████▀░▀█▀░▀█▀░▀████████
███████▄███▄███▄█████████
████▀██▀██▀░▀████▀░▀█████
███████████░███▀██▄██████
████▀██▀██░░░█░░░████████
███████████░███▄█▀░▀█████
████▀██▀██▄░▄███▄░░░▄████
███████▀███▀███▀██▄██████
██████▄░▄█▄░▄█▄░▄████████
███████████▀█████████████
█████████████████████████
 
.Bitcasino.io.
 
.BTC  ✦  Where winners play  BTC.
.
..
.
    ..





████
████
░░▄████▄████████████▄███▄▄
░███████▄██▄▄▄▄▄▄█████████▄
███████████████████████████
▀████████████████████████▀
░░▀▀████████████████████
██████████████████▄█████████
██
▐███████▀███████▀██▄██████
███████▄██▄█▀████▀████████
░░██████▀▀▀▄▄▄████▀▀████
██▐██████████▀███▀█████████████    ████
███
████████████
███████████████    ████
█████▀████████████████▀
███████▀▀▀█████████▀▀
..
....
 
 ..✦ Play now... 
.
..
CryptopreneurBrainboss
Legendary
*
Offline Offline

Activity: 2450
Merit: 4290


eXch.cx - Automatic crypto Swap Exchange.


View Profile WWW
November 13, 2018, 08:52:27 PM
Last edit: November 13, 2018, 09:12:18 PM by CryptopreneurBrainboss
 #19

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time
I don't support this, this is just a system of making the rich richer. What about those that don't have money to buy coins how do they now benefit from airdrops?

I commented on a similar thread today so instead of rewriting I will just quote my previous reply
Solution to problem, before any airdrop/bounty (twitter, Facebook etc) participant is been paid, proof of authentication should be performed from the account of participants. (I believe many airdrop/bounty campaigns are already doing this). Secondly the address feature should be utilized. This will reduced the level of the fraud, payment address should be gotten from participants profile and not through Google form. whether it's btc or eth or any other address.

Addition: satoshi and admins of forum foresaw this problem and created a solution long time ago. Bitcointalk has the solution.

How?: All social media accounts used in participation of the supposed airdrop should be linked to your bitcointalk profile. The Other contact info space can be used to link your Facebook, Twitter, Telegram etc username that way when users try to cheat by creating multiple bitcointalk accounts they'll be cut and ban just as mod are currently banning alt accounts.

Note: reverse airdrop scam can't be eradicated totally but can be reduced.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
yesyes18
Member
**
Offline Offline

Activity: 546
Merit: 12


View Profile
November 13, 2018, 09:01:55 PM
 #20

Even KYCs are still no option to prevent cheaters from doing what they do. Cheaters always know their way around when they want to get along with their normal activities. What I can say is that you've got to be careful and you should make sure to do your own research before entering into any market.

Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!