Bounty cheaters using reputed members accounts to register for bounty campaign

[bones261]

I just read this post from someone;

How the fuck do i get involved in this BS?

Easy: anyone can screenshot any account and claim to sell it. It doesn't mean anything.

The day someone claims to be selling my account will be the day I tag an account seller!

For future references, get a job noobs.

It's weekend

loyceV, I saw you tagged by other people to join telegram campaign



source : https://docs.google.com/spreadsheets/d/1OIWy_8Bj22aTH1s_Pat9TFzMe1IWJDl0xa5spVZldT4/edit#gid=761123474

note :
Bones261 #147
minerjones #283
LoyceV #332

WTF Thanks for letting me know. I never registered for this campaign. I have posted in the bounty thread and let the campaign manager know by PM. This really sucks!

How does this happen? I never registered for this bounty campaign and now my account is listed on the spreadsheet. There may be others. You may want to see if your account appears as registered for this campaign. This really pisses me off. I don't think my account was hacked though.

https://docs.google.com/spreadsheets/d/1OIWy_8Bj22aTH1s_Pat9TFzMe1IWJDl0xa5spVZldT4/edit#gid=761123474

[1713568577]

1713568577

[1713568577]

1713568577

[1713568577]

1713568577

[1713568577]

1713568577

[Bitcoin_Arena]

Cheater just copies your username and profile link and registers for the bounty.
Cheater can do this with as many accounts as they want well aware that reputable members like you could never visit the bounty section to participate in the bounties
This mostly happens with bounties who managers do not emphasize proof of authentication

[Avirunes]

Bounty forms are open and anyone can fill up the form putting any name and profile link. And, that's why bounty entries is not considered as solid proof of connection (if you are worried about it).

[suchmoon]

How does this happen? I never registered for this bounty campaign and now my account is listed on the spreadsheet. There may be others. You may want to see if your account appears as registered for this campaign. This really pisses me off. I don't think my account was hacked though.

https://docs.google.com/spreadsheets/d/1OIWy_8Bj22aTH1s_Pat9TFzMe1IWJDl0xa5spVZldT4/edit#gid=761123474

It's a spreadsheet. Anybody can register anything they want and apparently the bounty manager doesn't care enough to verify. I bet satoshi is doing bounties somewhere too. Such is the world of shitcoining.

[khaled0111]

How does this happen? I never registered for this bounty campaign and now my account is listed on the spreadsheet. There may be others. You may want to see if your account appears as registered for this campaign. This really pisses me off. I don't think my account was hacked though.

No need to hack your account. Anyone can use your name or any other random name to join the campaign as there is no restrictions and the bounty manager didn't even ask for an authentication post.

[bones261]

I'm just hoping this person doesn't use the same token address and/or telegram address and register for a signature campaign and start posting bullshit. I don't want my account linked to some bounty cheater's account. I wonder why they picked little old me? I wonder if I should actually be flattered. 

[joniboini]

I wonder why they picked little old me? I wonder if I should actually be flattered.  

They might want to use your Legendary status to get more stakes. Rest assured, any decent manager would know that 'reputable members' won't spend their time bounty hunting or using altcoin sig which is not guaranteed when they'll get paid.

[bones261]

I wonder why they picked little old me? I wonder if I should actually be flattered.  

They might want to use your Legendary status to get more stakes. Rest assured, any decent manager would know that 'reputable members' won't spend their time bounty hunting or using altcoin sig which is not guaranteed when they'll get paid.

Well I have a history of getting involved in plenty of shitcoins.  I still am active in a couple. However, most of these bounties are involved in shit tokens. I have been loath to get involved in tokens since the Dao burned me. My butt still hurts bad from that one.

[harizen]

I'm just hoping this person doesn't use the same token address and/or telegram address and register for a signature campaign and start posting bullshit. I don't want my account linked to some bounty cheater's account. I wonder why they picked little old me? I wonder if I should actually be flattered.  

They won't. Fraudsters just want to take advantage of the forum rank.

And they picked randomly. It happened to me lots of times Twitter campaign, Facebook campaign, signature campaign, airdrops etc..

That's why authentication post as a proof is a must. And of course, a responsible bounty manager.

[DarkStar_]

If you're bored, try asking the bounty manager to change the address to one you control 

[Quickseller]

I'm just hoping this person doesn't use the same token address and/or telegram address and register for a signature campaign and start posting bullshit. I don't want my account linked to some bounty cheater's account. I wonder why they picked little old me? I wonder if I should actually be flattered.  

This is one good reason to not rely on campaign spreadsheets when trying to link multiple accounts together.

In your example, a scammer is most likely entering your BitcoinTalk handle, and their TG handle and their ETah address to the google doc form. However a bounty manager could also change either the ETH address, TG or BitcoinTalk handle (intentionally or otherwise) that makes it appear two accounts are connected when this may not be the case.

If you're bored, try asking the bounty manager to change the address to one you control 

I wouldn’t do this. That sounds a lot like scamming to me. I might let the bounty manager know you are not participating in the campaign or that you are being impersonated.

[bones261]

If you're bored, try asking the bounty manager to change the address to one you control  

Too late since I PM'd the bounty manager to state that it is not me. Maybe next time. However, I'm not certain that I want to lower myself to participating in any fashion in a Eth token, or any other token. It looks like even tether is a shit token.

[The Cryptovator]

This isn't first time happen that kind of case. I don't what is their intention for use reputed members username or whatever. If bounty manager not verified the person then its problem of BM. I think that's why bounty managers asking for proof of authentication. If they don't check proof of authentication then why its necessary to ask?

However we don't know actually who are doing that, may be he/she used your user name and may be someone others ETH address just for abasement. Don't worry about that, I have seen someone used theymos profile for bounty. So stay cool let them do it and perhaps eventually they will end up with negative feedback's if cought by managers.

[Findingnemo]

These kind of abuses happening due to the bad bounty campaign management who are supposed to see the quality of bounty participants but they never watch anything like that they will just put stakes based on the post count every week.

[TMAN]

If you're bored, try asking the bounty manager to change the address to one you control 

this... may be the only way to stop the pajeets doing it.

[CryptopreneurBrainboss]

This is why I occasionally search through the forum with some of my details that have already been made known publicly like ETH address, social media accounts, username etc to see if some bounty cheater is making use of them to earn. I did discover my telegram username was once used.

You can serve yourself some unnecessary explanation if you make you of the search button once in a while to avoid been accused of operating an alt. The bounty managers don't care that's why this guys find it easy to cheat the system.

[NeuroticFish]

I never registered for this bounty campaign and now my account is listed on the spreadsheet. There may be others. You may want to see if your account appears as registered for this campaign. This really pisses me off.

Thanks for the heads up. I "am" there too. I've just sent a message to the campaign manager.
From what I see one could join to the campaign directly from Medium. Even on Bitcointalk there are simply links to google form. Not a basic check for who is filling the form. Obviously some are abusing it.

[LoyceV]

How does this happen? I never registered for this bounty campaign and now my account is listed on the spreadsheet. There may be others. You may want to see if your account appears as registered for this campaign. This really pisses me off. I don't think my account was hacked though.

This has been happening for a very long time, and has nothing to do with your account. It could easily be prevented, for instance by setting up Google Docs to scrape the addy from the Location field in your profile. I've been playing around with that a while back, but didn't get it working exactly how I wanted.

There's also no need at all to post a Bitcointalk username if the bounty has nothing to do with this forum. They could just as well omit the username and only let them only spam their Telegram.

This mostly happens with bounties who managers do not emphasize proof of authentication

"Proof of authentication" is some sort of legalized bumping spam. It goes directly against the forum rules:

1. No zero or low value, pointless or uninteresting posts or threads. [1][e]

But without this bumping spam, bounty threads quickly disappear from the first page and don't get the participants they want.
There's absolutely no need to spam the same address in many different threads, that's what a profile page is for. It's very easy to scrape that and stop all account-abuse. But that requires a bounty manager who cares, which won't happen as long as they earn more from spamming more.

I'm just hoping this person doesn't use the same token address and/or telegram address and register for a signature campaign and start posting bullshit. I don't want my account linked to some bounty cheater's account. I wonder why they picked little old me? I wonder if I should actually be flattered.  

Don't flatter yourself, it's either a bot or an idiot

[Hhampuz]

It's a bot!

I've managed a bounty where we had one of those automatic forms for signup and it got flooded with 20k names within an hour. It just randomly assigns an ETH address to your name and hopes that nobody will notice, lol.

I've since moved to manual applications due to this, which sucks.

[Quickseller]

How does this happen? I never registered for this bounty campaign and now my account is listed on the spreadsheet. There may be others. You may want to see if your account appears as registered for this campaign. This really pisses me off. I don't think my account was hacked though.

This has been happening for a very long time, and has nothing to do with your account. It could easily be prevented, for instance by setting up Google Docs to scrape the addy from the Location field in your profile. I've been playing around with that a while back, but didn't get it working exactly how I wanted.

There's also no need at all to post a Bitcointalk username if the bounty has nothing to do with this forum. They could just as well omit the username and only let them only spam their Telegram.

This mostly happens with bounties who managers do not emphasize proof of authentication

"Proof of authentication" is some sort of legalized bumping spam. It goes directly against the forum rules:

1. No zero or low value, pointless or uninteresting posts or threads. [1][e]

But without this bumping spam, bounty threads quickly disappear from the first page and don't get the participants they want.
There's absolutely no need to spam the same address in many different threads, that's what a profile page is for. It's very easy to scrape that and stop all account-abuse. But that requires a bounty manager who cares, which won't happen as long as they earn more from spamming more.

I'm just hoping this person doesn't use the same token address and/or telegram address and register for a signature campaign and start posting bullshit. I don't want my account linked to some bounty cheater's account. I wonder why they picked little old me? I wonder if I should actually be flattered. 

Don't flatter yourself, it's either a bot or an idiot

Proof of authentication posts are allowed if the participants are documenting their work so long as the work is not trivial.

Campaign managers can also have participants give proof of authentication via PMs.