Bitcoin Forum
March 29, 2024, 10:03:59 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: 1 2 [All]
  Print  
Author Topic: How to prevent reverse airdrop scam?  (Read 460 times)
Branko (OP)
Sr. Member
****
Online Online

Activity: 2422
Merit: 318


View Profile
November 08, 2018, 09:07:56 PM
 #1

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular
1711706639
Hero Member
*
Offline Offline

Posts: 1711706639

View Profile Personal Message (Offline)

Ignore
1711706639
Reply with quote  #2

1711706639
Report to moderator
1711706639
Hero Member
*
Offline Offline

Posts: 1711706639

View Profile Personal Message (Offline)

Ignore
1711706639
Reply with quote  #2

1711706639
Report to moderator
1711706639
Hero Member
*
Offline Offline

Posts: 1711706639

View Profile Personal Message (Offline)

Ignore
1711706639
Reply with quote  #2

1711706639
Report to moderator
Even in the event that an attacker gains more than 50% of the network's computational power, only transactions sent by the attacker could be reversed or double-spent. The network would not be destroyed.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711706639
Hero Member
*
Offline Offline

Posts: 1711706639

View Profile Personal Message (Offline)

Ignore
1711706639
Reply with quote  #2

1711706639
Report to moderator
1711706639
Hero Member
*
Offline Offline

Posts: 1711706639

View Profile Personal Message (Offline)

Ignore
1711706639
Reply with quote  #2

1711706639
Report to moderator
1711706639
Hero Member
*
Offline Offline

Posts: 1711706639

View Profile Personal Message (Offline)

Ignore
1711706639
Reply with quote  #2

1711706639
Report to moderator
baobao2000
Member
**
Offline Offline

Activity: 462
Merit: 23


View Profile
November 08, 2018, 11:01:25 PM
 #2

For some business reason, some people need multiple accounts to promote their business. I think as long as the website owner accepted their requirements, then that is ok. It is pretty hard to track down multiple accounts without any personal information. For limit the options to create multiple accounts you can set mobile phones verification, or ask users to register with a credit card. You don't have to charge anything. You can just check that the card is valid.
Bitfort
Sr. Member
****
Offline Offline

Activity: 952
Merit: 339

invest trade and gamble wisely


View Profile
November 08, 2018, 11:48:42 PM
Merited by dbshck (1)
 #3

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Like CLAM (every address holding BTC, LTC or DOGE in may 2014 received 4.6 CLAMs) or RHT (NEO address holding between 1 and 99 NEO in dec 2017 received 1 RTH) ...

MY HINTs
◄M► MINING
◄G► GAMBLING
◄E► EXCHANGE

◄E► (KCS) Kucoin-Staking, Auto-Lending, Trading-Bot
◄E► (BNB) Binance-Staking, Savings, 10% RefBack
◄E► (TRX) Poloniex-Staking, Lending, Fee Discount
◄E► (LEO) Bitfinex-Staking, Auto-Lending

◄G► Betfury-Faucet, Dividend Earnings (BFG holders, mine BFG by playing)
◄G► Bitvest -  Faucet, Bankroll Invest
◄G► CryptoGames-Faucet, Lotto
◄G► PrimeDice-Faucet

◄M► Prohashing (Multipool)-Payout in any coin, get 0.50% bonus for 30 days
◄M► MiningRigRentals (Marketplace)-buy hashrate or rent your miners
◄M► Viabtc  (Pool)-payout to Coinex (exchnage) without fees


Ardavan2150
Member
**
Offline Offline

Activity: 98
Merit: 12


View Profile
November 08, 2018, 11:57:55 PM
 #4

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
Branko (OP)
Sr. Member
****
Online Online

Activity: 2422
Merit: 318


View Profile
November 09, 2018, 12:05:00 AM
 #5

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further


Thats what I thought, but it seems reality is different

This is about 1/5 of users joining in just few seconds

logfiles
Copper Member
Legendary
*
Offline Offline

Activity: 1932
Merit: 1601


Top Crypto Casino


View Profile WWW
November 09, 2018, 12:37:46 AM
Merited by dbshck (1), Branko (1)
 #6

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular

You can't completely weed out cheats but you can massively reduce on the multiple fake accounts by:

1: Considering account age especially for twitter or reddit( you can set a certain Karma limit for participation)... Also age of the Bitcointalk account with which they use to register. You can also decide to include Merit limits for the participants. eg Jr Member 2+ Merits, Member 13+ Merits, Full Member 105+ Merits. This can prove very hard for those who try to make multiple entries

2. As a prerequisite you make them to register with the ICO site and atleast have their emails verified. I know some can try to create as many emails as possible but this will reduce on the number

3. Make them do the sharing and tweeting through out the week... Like 1 tweet per every 24 hours, Those who don't abide get not stakes or get disqualified. Most cheats tend to do 5 tweets in a single day and report as they have so many other accounts to work on. So making 1 tweet per day for so many accounts can prove tiring.

Those are my thoughts, i hope you get an idea out of them.

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
elda34b
Sr. Member
****
Offline Offline

Activity: 910
Merit: 351


View Profile
November 09, 2018, 02:46:40 AM
Merited by dbshck (1)
 #7

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further

Believe it or not, some sockpuppetters has more than 10 Telegram accounts. They probably used online number or something like that to generate their account, or simply create their own bot to do that.

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Someone can have multiple wallet address, I think it might not prevent cheaters if they have a lot of money.

The only think that I know so far even though it is not popular is KYC, it is very hard to have more than one ID from your government even though somebody might simply steal it from other person (but this is very risky to do).
logfiles
Copper Member
Legendary
*
Offline Offline

Activity: 1932
Merit: 1601


Top Crypto Casino


View Profile WWW
November 09, 2018, 08:26:30 AM
 #8

The only think that I know so far even though it is not popular is KYC, it is very hard to have more than one ID from your government even though somebody might simply steal it from other person (but this is very risky to do).

One of the reasons KYC is not so unpopular is because of identity theft. On top of this, am pretty sure there are lots of scam airdrops that had a requisition for KYC that unsuspecting bounty hunters joined and ended up having their ID data collected. These same ID's are used to campaigns using multiple accounts  Grin Grin
So all in all, i don't think you can completely weed them out but you reduce the cheating whilst trying to maintain the number of genuine bounty hunters who would be interested in your bounty.

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
mk4
Legendary
*
Offline Offline

Activity: 2716
Merit: 3817


🪸 NotYourKeys.org 🪸


View Profile
November 09, 2018, 08:50:56 AM
 #9

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Like CLAM (every address holding BTC, LTC or DOGE in may 2014 received 4.6 CLAMs) or RHT (NEO address holding between 1 and 99 NEO in dec 2017 received 1 RTH) ...

This. Though there would be "the rich gets richer" counter-arguments, this is probably the best choice we have right now if you want to prevent individual people from claiming multiple airdrops, and at the same time, without accepting KYC.

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
Why can't you? Mobile sim cards are pretty cheap.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
Branko (OP)
Sr. Member
****
Online Online

Activity: 2422
Merit: 318


View Profile
November 09, 2018, 09:01:00 AM
 #10

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time.

Like CLAM (every address holding BTC, LTC or DOGE in may 2014 received 4.6 CLAMs) or RHT (NEO address holding between 1 and 99 NEO in dec 2017 received 1 RTH) ...

This. Though there would be "the rich gets richer" counter-arguments, this is probably the best choice we have right now if you want to prevent individual people from claiming multiple airdrops, and at the same time, without accepting KYC.

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
Why can't you? Mobile sim cards are pretty cheap.

And sometimes even that is not needed:

https://www.youtube.com/watch?v=1uzcOZZ0z9M

It seems scamming airdrops can actually be pretty good business, specially if you live in a country with low wages
Peacemaker1994
Jr. Member
*
Offline Offline

Activity: 154
Merit: 2


View Profile
November 09, 2018, 10:58:51 AM
 #11

I would disagree with you on this k.y.c is quite popular and a secured means in identifying ones client it has in a way proven to be the most effective formula so far but it still has its set backs
riderinred
Member
**
Offline Offline

Activity: 162
Merit: 24


View Profile
November 09, 2018, 11:47:02 AM
 #12

You could also work with cookies and IP tracking.
If the system detects two accounts from the same IP *BAN!*
Same with cookies.


If you'd prefer to keep it simple activity might do it.
Activity that cannot be automated like meaningful posts or written reviewes/articles on a project.

I remember projects where one had to ask questions or answer them in a group to be regarded as 'active' and getting the reward.
So if someone new joined everyone was keen on answering questions. Same with AMAs and interviews.
Was a totally different experience from other groupchats Grin

You are your worst enemy and your best ally.
I am just some guy with a keyboard.
Branko (OP)
Sr. Member
****
Online Online

Activity: 2422
Merit: 318


View Profile
November 09, 2018, 12:08:04 PM
 #13

Asked after I played with investigating certain wallet. Look at this:

https://etherscan.io/tokentxns?a=0x58c658e3185072915870153448e893aac3226abd

All transactions are from various airdrops
Obiwankenodium
Copper Member
Member
**
Offline Offline

Activity: 322
Merit: 15


View Profile WWW
November 09, 2018, 03:29:02 PM
 #14

KyC is not popular under people trying to join airdrops with multiple accounts.

As mentioned above you can try to prevent people to join with multiple accounts in different ways, but i think kyc is still the best way to do so.

dealsmith
Newbie
*
Offline Offline

Activity: 31
Merit: 0


View Profile
November 10, 2018, 08:52:42 AM
 #15

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
It is possible. Because of people's greed, they can create more than 10 different telegram accounts to have airdrop. It is true.
riderinred
Member
**
Offline Offline

Activity: 162
Merit: 24


View Profile
November 13, 2018, 12:16:59 PM
 #16

Linking everything with Telegram might be a good idea. Since you cannot have 10 different Telegram accounts. This might restrict it a bit further
It is possible. Because of people's greed, they can create more than 10 different telegram accounts to have airdrop. It is true.

Virtual cell phone numers are real guys

You are your worst enemy and your best ally.
I am just some guy with a keyboard.
Akoldi_ibk
Jr. Member
*
Offline Offline

Activity: 1050
Merit: 1


View Profile
November 13, 2018, 03:26:46 PM
 #17

You could also work with cookies and IP tracking.
If the system detects two accounts from the same IP *BAN!*
Same with cookies.


If you'd prefer to keep it simple activity might do it.
Activity that cannot be automated like meaningful posts or written reviewes/articles on a project.

I remember projects where one had to ask questions or answer them in a group to be regarded as 'active' and getting the reward.
So if someone new joined everyone was keen on answering questions. Same with AMAs and interviews.
Was a totally different experience from other groupchats Grin
If you have being in this space for a while, you will agree with me that it is very easy and simple to bypass cookies and IP detector just by using simple tools, with little or no technical knowledge. I think KYC is still the best way to slow down multiple accounts.

───[  KUWA  ]───
─────────────[  Securely Connect Smart Contracts with Real-World Data and APIs ]─────────────
───[  KUWA.ai  ]───
coinlocket$
Legendary
*
Offline Offline

Activity: 2324
Merit: 1512


#1 VIP Crypto Casino


View Profile
November 13, 2018, 04:19:09 PM
 #18

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular

It's quite simple actually but needs some time for the manager, but since the only thing for most of them are numbers of participation, they don't even look at who participate on the airdrop.
I have the perfect idea to avoid 90% of scammers, and I've already posted on the past, and nobody cared about it.

.
.BITCASINO.. 
.
#1 VIP CRYPTO CASINO

▄██████████████▄
█▄████████████▄▀▄▄▄
█████████████████▄▄▄
█████▄▄▄▄▄▄██████████████▄
███████████████████████████████
████▀█████████████▄▄██████████
██████▀██████████████████████
████████████████▀██████▌████
███████████████▀▀▄█▄▀▀█████▀
███████████████████▀▀█████▀
 ▀▀▀▀▀▀▀██████████████
          ▀▀▀████████
                ▀▀▀███

.
......PLAY......
CryptopreneurBrainboss
Legendary
*
Offline Offline

Activity: 2212
Merit: 4124


eXch.cx - Automatic crypto Swap Exchange.


View Profile WWW
November 13, 2018, 08:52:27 PM
Last edit: November 13, 2018, 09:12:18 PM by CryptopreneurBrainboss
 #19

Don't do airdrops based on social media accounts! Make airdrop based on holding some other asset at given time
I don't support this, this is just a system of making the rich richer. What about those that don't have money to buy coins how do they now benefit from airdrops?

I commented on a similar thread today so instead of rewriting I will just quote my previous reply
Solution to problem, before any airdrop/bounty (twitter, Facebook etc) participant is been paid, proof of authentication should be performed from the account of participants. (I believe many airdrop/bounty campaigns are already doing this). Secondly the address feature should be utilized. This will reduced the level of the fraud, payment address should be gotten from participants profile and not through Google form. whether it's btc or eth or any other address.

Addition: satoshi and admins of forum foresaw this problem and created a solution long time ago. Bitcointalk has the solution.

How?: All social media accounts used in participation of the supposed airdrop should be linked to your bitcointalk profile. The Other contact info space can be used to link your Facebook, Twitter, Telegram etc username that way when users try to cheat by creating multiple bitcointalk accounts they'll be cut and ban just as mod are currently banning alt accounts.

Note: reverse airdrop scam can't be eradicated totally but can be reduced.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
yesyes18
Member
**
Offline Offline

Activity: 546
Merit: 12


View Profile
November 13, 2018, 09:01:55 PM
 #20

Even KYCs are still no option to prevent cheaters from doing what they do. Cheaters always know their way around when they want to get along with their normal activities. What I can say is that you've got to be careful and you should make sure to do your own research before entering into any market.

Locotoni
Member
**
Offline Offline

Activity: 490
Merit: 15


View Profile
November 13, 2018, 09:38:32 PM
 #21

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular

KYC is not popular, becouse here is a lot of scam projects, and KYC is risk for your identification. and in 21 century you can make online loans and other Crime with your ID.

i think you want airdrop site - with IP checker. same IP = BAN.  but its so bad, becouse in one family maby will 2-3 crypto lover, and maby 2 reg in 1 IP isnot bad. you can make airdrop on your ICO website. and when they will REG on web, you can check IP adress. and BAN scamers.

i think this is best way for now
Branko (OP)
Sr. Member
****
Online Online

Activity: 2422
Merit: 318


View Profile
November 13, 2018, 09:44:36 PM
 #22

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular

KYC is not popular, becouse here is a lot of scam projects, and KYC is risk for your identification. and in 21 century you can make online loans and other Crime with your ID.

i think you want airdrop site - with IP checker. same IP = BAN.  but its so bad, becouse in one family maby will 2-3 crypto lover, and maby 2 reg in 1 IP isnot bad. you can make airdrop on your ICO website. and when they will REG on web, you can check IP adress. and BAN scamers.

i think this is best way for now

Easy to avoid using TOR or VPN, and on my ISP just by router reset, get different IP each time...its a bit of
hindrance, but not too much
kakonhat
Member
**
Offline Offline

Activity: 1106
Merit: 11

Crypto in my Blood


View Profile WWW
November 14, 2018, 06:18:28 AM
 #23

By "reverse" I mean people making hundreds of fake FB, twitter etc accounts and siphoning
coins from ICO.

I know you can make KYC, but what would be other good practices, since KYCs are not so popular
Yes, KYC not popular because of who are looking for airdrop, bounty they are doing many projects' bounties. So they forget to get up to date every time when they finished any project. So, Projects should take the KYC at starting time, so it could be helpful for both. (maybe).

Riingdian
Newbie
*
Offline Offline

Activity: 30
Merit: 0


View Profile
November 14, 2018, 01:25:54 PM
 #24

It's really quite simple but it takes a bit of time for the manager, but since the only thing for most of them is the number of participants, they do not even look at who is involved in this.
Pages: 1 2 [All]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!