Old phishing scam on the rise on centralized exchanges

[Cookdata]

I forgot to post this yesterday after taking the screenshots. I'm not sure whether this is a new or old trick by scammers to steal from the exchange targeting users credentials but this particular one caught my eye which I decided to share.
CZ shared a phishing scam on Twitter on how scammers send users an SMS that contains an unknown website with a similar name as Binance that steal your details.



source: https://twitter.com/cz_binance/status/1489545612718579715?s=20&t=8c-U2-mptITD2GJyoNMwJQ

In my opinion, this trick may be outdated but there should be a reason why he decided to share this with everyone. This can happen to any other exchange.

[1714699715]

1714699715

[1714699715]

1714699715

[1714699715]

1714699715

[1714699715]

1714699715

[SquirrelJulietGarden]

Check official websites then official social media for important announcements. More carefully, double check with trusted third party marketcap websites such as coinmarketcap.com or coingecko.com. More carefully, check again with Google search. It means you will check 3 times at least and if all given information, links are matched, it means you are safe with official sites from which you can get official announcements.

About withdrawal or anything relates to your account, it should be sent to you from official channels such as email. SMS, Telegram, Discord, etc. if you receive such messages from strangers, it is very likely a scam and phishing effort.

[DdmrDdmr]

<…>

The smishing campaign targeting Binance is probably a recurring issue that takes place, and CZ simply warned his followers here to be wary. The url seems to be currently inactive, and I haven’t managed to locate an archived page to see what the site looked like. Regardless, I’ve read on multiple sources the obvious: the site was harvesting credentials to gain access the platform and steal from people’s accounts. There is however no reports to date on the extent and impact of the smishing campaign so far.

Note: Binance’s antiphising code seems to only be included in emails and not in SMS.

[hugeblack]

you can check if Binance link is offical using ---> https://www.binance.com/en/official-verification
Unfortunately, Binance manages several domains besides the dot com domain and therefore users will find some problems when the site is official and different from the .com domain.

Generally, scammers try to find people who do not have any technical experience.

[Mpamaegbu]

In my opinion, this trick may be outdated but there should be a reason why he decided to share this with everyone.

It's not really an outdated trick. People still fall for it and whine about how they've been duped, not knowing they got tricked by a phisher. CZ has a point sending out that warning. It's timely, considering that there's searchlight on his exchange at a time like this.

Note: Binance’s antiphising code seems to only be included in emails and not in SMS.

That's absolutely correct! It simply goes to emails, not SMS. I think the problem with most users who fall for that trick is supposition where they begin to imagine that possibly/supposedly that Binance has changed its method and is now adopting the SMS method. Thus they click, and click to their doom it becomes.

[dkbit98]

CZ shared a phishing scam on Twitter on how scammers send users an SMS that contains an unknown website with a similar name as Binance that steal your details.

Real question here is how the scammers even got the phone numbers from all those people who received messages?
Maybe it was one of many leaks that exposed private information of customers, Binance had one or more leaks, as well as Ledger and maybe other exchanges.
Only solution for this problem is to don't reply and clicking anything you receive from unknown people in SMS or emails, and block senders, but ultimate solution would be changing phone number.
If anyone want's to use their phone number or email then use alternative number of temporary email for registrations.

[Trojane]

I'm very surprised and shocked to my feet as I discovered that Binance is so insecure to a point that hackers can easily maneuver thier way into the it  and claim people's coinsz that's very unfair...cant the team do something about it to make the stability of this insecurity syncronized to function?
There's no need of asking how this peeps get different numbers because when the blockchain is accessible, the whole information becomes fragile and can be easily be used, then and there, they can easily spam the users as much as they can just to randomly get what they want.

[Darker45]

Phishing is indeed an old trick, but I'm not sure we can call it outdated. I'm sure many still fall for it. People should then just cease clicking on links whether they are coming through SMS, email, DMs in Telegram and Twitter and other social media platforms, ads, and so forth. Just go straight to your account using their official site and check if there was indeed a request to withdraw or whatever.

[mk4]

In my opinion, this trick may be outdated but there should be a reason why he decided to share this with everyone. This can happen to any other exchange.

Or like to any other platform in general, inside and outside the cryptocurrency space. Human trickery is still the most effective hacking/scamming method simply because a lot of people refuse to educate themselves, and rather learn the hard way.

[pakhitheboss]

How did those scammers get the numbers of Binance account holders? If someone does not have an account on Binance then the user will be least bothered with these kinds of SMS. Phishing scams were very common in the ICO days a lot of investors lost a good amount of money. They are still happening and everyone needs to be cautious about it.

[aysg76]

Twitter and YouTube are notorious for their scams. Every day is the same, only with the participation of different public figures, but as users fell for these tricks, they continue to fall.

Various link clicks, giveaways, cryptocurrency multipliers, all this is in abundance right now in these social networks. The most frequent phishing and scam attacks are using fake CZ, Elon Musk, Vitalik Buterin.

Right at the moment the double your coins scam is on the verge of rising as you would find the Twitter profiles of these known people who are actively indulged in crypto market are hacked and then people send coins to some particular address and then the results are with us all.We have seen so many cases for this happening around from last few months.

Or like to any other platform in general, inside and outside the cryptocurrency space. Human trickery is still the most effective hacking/scamming method simply because a lot of people refuse to educate themselves, and rather learn the hard way.

A simple awareness that nothing is free in this world is needed but still the majority goes with greed and are accounting their coins on centralised exchange which are already prone to hacks and scams but still we see scams on daily basis.

[Taskford]

In my opinion, this trick may be outdated but there should be a reason why he decided to share this with everyone. This can happen to any other exchange.

Or like to any other platform in general, inside and outside the cryptocurrency space. Human trickery is still the most effective hacking/scamming method simply because a lot of people refuse to educate themselves, and rather learn the hard way.

Aside for lazy to educate theirselves sometimes people are to lazy to verify if what they receive is legit, this is why we see a experience trader got hack. Maybe from this if they now they receive a message something like that it always good to check the link carefully if it looks identical then better follow what CZ said which go direct to them to be more safe from those attempts.

[7deadlyBTCIN]

I forgot to post this yesterday after taking the screenshots. I'm not sure whether this is a new or old trick by scammers to steal from the exchange targeting users credentials but this particular one caught my eye which I decided to share.
CZ shared a phishing scam on Twitter on how scammers send users an SMS that contains an unknown website with a similar name as Binance that steal your details.



source: https://twitter.com/cz_binance/status/1489545612718579715?s=20&t=8c-U2-mptITD2GJyoNMwJQ

In my opinion, this trick may be outdated but there should be a reason why he decided to share this with everyone. This can happen to any other exchange.

Binance-com.web.app? What's that? I don't know how people are falling for this type of scams the truth is just right in front of us and we couldn't see it, that link looks way too suspicious to me and that's definitely not from the original binance exchange.

[ABCbits]

Binance-com.web.app? What's that? I don't know how people are falling for this type of scams the truth is just right in front of us and we couldn't see it, that link looks way too suspicious to me and that's definitely not from the original binance exchange.

The target of such scam isn't you, but people who have no digital security awareness or think after take an action.

[sunsilk]

That's an old scam trick.

The target of such scam isn't you, but people who have no digital security awareness or think after take an action.

This is true. It may easier be spotted by someone who's aware of phishing. But the reality is hard for those that are unaware of this trick. We can easily say that a link is a phishing link unlike those lack of knowledge about this trick.

Even they do it easy, there will really be someone who may fall for it.