Be Careful Sharing The QR Code Of Your Wallet Too

[libert19]

You have heard about never share your private key or recovery phrase but sharing qr codes is as dangerous.

There is sync with mobile feature in metamask wallet which lets you sync your desktop metamask with mobile, problem is it gives complete access to the one scanning qr, which many are unaware of.

Victim: https://twitter.com/Ape_NFTs/status/1427706077332873220

Unfolding of events: https://twitter.com/MyCrypto/status/1427711396498731009

Other cases:

Another similar case: https://mobile.twitter.com/_jeffnicholas_/status/1430323445057744897

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

Edit: metamask has disabled the qr code feature as of now.

[Luffygroove]

Oh wow, it's really a cruel and scary world. Thank you for sharing. However, if it's legit, I really want to know how the process of this crime, I mean technically. Criminals are getting smarter every day and we need to be a step ahead of them even though it's hard. I was always told to never spread my private key or phrase seeds to other people, but now people scamming by spreading the phrase seeds, This is insane, and now people got scammed by QR code. How we should handle these criminals?.

[Synerggy]

Good one libert19 imagine a scammer talking to a crypto newbie, asking him or her to send her qrcode for unknown reasons stating that they don't need their private keys because that shouldn't be shared with strangers, I'm telling you this is doable for newbies

[crwth]

I knew of that feature when I was setting up my Metamask on my smartphone. I didn't realize that it has that kind of risk involved when connecting the two. I think this is vital information that everyone should've known and have an idea about.

I also recently saw how someone got hacked; even though he has been in the crypto space for a long time and knows its ins and outs, but he still got hacked. They somehow connected to the wrong site and input the seed phrase. He has been out of his mind doing that, and that's just what happens when you are not in your best condition.

https://www.coinspeaker.com/nft-game-loses-cryptopunk-scammers/

[SFR10]

I really want to know how the process of this crime, I mean technically.

Just read the following threaded tweets ^{[8 parts]} and you'll see the whole picture:

• Unfolding of events: https://twitter.com/MyCrypto/status/1427711396498731009
  

How we should handle these criminals?.

Always double-check and verify who you're talking with ^{[it's a simple step but unfortunately, a lot of people tend to forget or ignore it]}.
@libert19
Thank you for posting this ^[bookmarked].

[OcTradism]

With extension from wallet, I only use it with a wallet for one purpose. I don't store all my money in that wallet because if wallets are closed source, I don't know what they built in the extensions.

QR code of 2FA is risky too. It is always easier to scan QR code to set up 2FA for your account but many people scan 2FA QR code and forget to back it up. You will have two options to set up your 2FA, type it, copy and paste, scan QR Code.

I copy and paste to back it up.
Type it manually to check the usability of my backup.

[Ceyflix-Rez]

Had to confess I don't know about this before, I don't know that QR code can take over a wallet permanently just like inserting a private key, thanks for sharing OP, if someone asked me for my wallet QR code I would have send it thinking it's nada

[Dragonfund]

You have heard about never share your private key or recovery phrase but sharing qr codes is as dangerous.

There is sync with mobile feature in metamask wallet which lets you sync your desktop metamask with mobile, problem is it gives complete access to the one scanning qr, which many are unaware of.

Victim: https://twitter.com/Ape_NFTs/status/1427706077332873220

Unfolding of events: https://twitter.com/MyCrypto/status/1427711396498731009

QR code can be tactical and should be treated with caution.

I dropped a guide about QR code for any who wish to learn some days ago on [GUIDE] QR CODE: How they are implemented on Bitcoin, Alts and exchange wallet

Protect your finances.

[libert19]

Another similar case: https://mobile.twitter.com/_jeffnicholas_/status/1430323445057744897

[noorman0]

Had to confess I don't know about this before, I don't know that QR code can take over a wallet permanently just like inserting a private key, thanks for sharing OP, if someone asked me for my wallet QR code I would have send it thinking it's nada

Scammers only take advantage of the victim's negligence to let them explore the device and take over anything before the victim realizes that they were being tricked at that time. This scam is likely to occur on exchange accounts that have a similar syncing method to other devices, I saw it in some exchange mobile apps and interestingly that doesn't require confirmation (2fa, email, etc.) as complicated as on the web version to withdraw funds.

[livingfree]

Thank you for this additional knowledge.

I didn't know that it can possibly happen so for those that usually use mobile for their metamask, it's better to take note on this.

And as well as bookmark it.

[Chuky92]

Thanks for sharing this very important information and I am not even aware of such, although I have not tried it before. One of the things that comes with innovations is that, the more a technology grows, the more the users needs to be up to date with what's happening, else a small mistake might put the user at a great risk.
With the way crypto space is growing and the urge of scammers to get their victims in anyway they can, I would say it is quite better not sharing any sort of information apart wallet address with anyone nor even keeping such in your prominently used devices, offline is always the best. Also, it's better sharing only wallet address but anything short than that, just keep it to yourself, the reason for this is, I used to know you can scan QR code instead of sending address but with this new development, let someone not get mixed up, hence only wallet address is better to share.

[libert19]

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

[tbct_mt2]

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

PMs from strangers are bad.
PMs from anyone in which the sender asks for money is bad & suspicious. You must check that it is a real person you know or an impersonator
PMs from entire stranger who ask for money is most terrible.

I always do video calls in order to confirm that the person I will send money to is the person who sent me PMs.

[libert19]

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

PMs from strangers are bad.
PMs from anyone in which the sender asks for money is bad & suspicious. You must check that it is a real person you know or an impersonator
PMs from entire stranger who ask for money is most terrible.

I always do video calls in order to confirm that the person I will send money to is the person who sent me PMs.

It never came to 'sending money' in these scams, those are obvious.

[semobo]

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

PMs from strangers are bad.
PMs from anyone in which the sender asks for money is bad & suspicious. You must check that it is a real person you know or an impersonator
PMs from entire stranger who ask for money is most terrible.

I always do video calls in order to confirm that the person I will send money to is the person who sent me PMs.

It never came to 'sending money' in these scams, those are obvious.

They are tricky and becoming smarter now, they are trying scam which seems more realistic than old methods so we also have to keep updated about their scamming strategies to stay away from those scams. Sharing is caring!

[zasad@]

I also did not know about this metamask possibility.
But I always use a hardware wallet to work with metamask. The seed phrase is not stored on the computer, and any action requires pressing buttons on the hardware wallet.
The same algorithm applies to mobile phone owners.
People store hundreds of thousands of dollars in wallets and have no desire to spend $ 100 on security.

[mu_enrico]

You have heard about never share your private key or recovery phrase but sharing qr codes is as dangerous.

It depends on what kind of QR codes. If it only contains your (public) address, I think it's safe. But there are private QR codes that you should keep it for yourself, such as, private keys and websites sync which is quite popular for login from phone apps, or vice versa. Binance, Okex, and other popular exchanges also use this method, so keep it (the qr code) secret.

Anyway, thanks for mentioning this so that newbies won't fall to scams.

[zachyboy090118]

Sharing personal wallet information is always been prohibited. So many scammer now and if you used to give your wallet info than you are saying goodbye to your funds on that wallet. We know that we used mostly trust wallet and metamask. They have a QR code features and agree of what you have said, QR code is dangerous than other password, recovery phrase  and etc. This should be not shared at all and should be take care my the wallet owner at all times.

[darioc]

There are many extremely sophisticated scams that make us fall into the trap at any time. Thanks for sharing these, it is very helpful for me and those around me.