Discord Servers of different projects

[crwth]

Has anyone experienced joining a server and then being asked to confirm through a captcha bot then proceeding to your MetaMask wallet as normal, then being asked your secret recovery phrase?

I just experienced this and of course, I immediately didn't continue with this because it's obviously a scam. People need to be aware that you don't need to connect or input your phrase to any type of website or something. The steps are quite convincing TBH.

[vv181]

That is something new that I barely heard. On which parts specifically do they ask the secret recovery phrase? On some website or directly at Discord?

Are they asking you to connect the Metamask or something? Because I also just know about it. Usually, I only experience joining a discord server that only requires basic captcha verification. Joining a discord server that requires you to connect a Metamask wallet is already shady at best. Or is it just the norm out there? For any specific purpose.

[crwth]

That is something new that I barely heard. On which parts specifically do they ask the secret recovery phrase? On some website or directly at Discord?

The steps were these.

• After joining a discord server, there's a verification needed
• After verification, captcha bot DMed
• It opened to a captcha site then verification
• Then after that, the Metamask extension was shown and then asked for your password, which is normal when opening the extension
• After that then it's asking for verification to input a recovery phrase.

Are they asking you to connect the Metamask or something? Because I also just know about it. Usually, I only experience joining a discord server that only requires basic captcha verification. Joining a discord server that requires you to connect a Metamask wallet is already shady at best. Or is it just the norm out there? For any specific purpose.

Not really sure if it's the norm though.

[lightbit]

Has anyone experienced joining a server and then being asked to confirm through a captcha bot then proceeding to your MetaMask wallet as normal, then being asked your secret recovery phrase?

I just experienced this and of course, I immediately didn't continue with this because it's obviously a scam. People need to be aware that you don't need to connect or input your phrase to any type of website or something. The steps are quite convincing TBH.

That usually happens when the hackers/scammers have a bot pointed at a specific or multiple discord servers. Mostly it's not even the fault of those servers, hackers are simply targeting them. So basically what happens is, the bots are pointed to target the newcomers in the server. So when you join it, their "verification bot" DMs you, which certainly is FAKE. It asks you to verify by captcha and stuff, just to make it look legit and it shares a link as well I think, which no one should click without proper verification. Once that link is clicked, the metamask wallet opens and asks them to approve the application and once the user does that, BAM, their wallet gets hacked. It's as simple as that for those scammers. They don't care what a person goes through because of their actions. Recently I myself have been a target of some hacker group and lost 3+ BTC and other assets. I still get sad because of it... So please make sure not to click on scammy links and always store your crypto in a Hardware wallet. Thanks for reading. Stay safe.

[vv181]

This is a new insight for me, seems scamming scheme does keep evolving on Discord. @crwth, do you mind if you share the particular Discord server that you experienced regarding this issue or any server that you any aware of? The above comment seems to give a new explanation. It is probably that the hacker are keeping the Discord member list or utilizing the discord server newcomer bot, it is also plausible that the alleged scam site are from someone instead of directly from the server verification bot.

[joniboini]

Never experience it myself but it is not that surprising. I mean, there have been cases like this since MetaMask become popular and some people never bothered to check whether a contract or request is malicious or not. I do get an invite to many scam groups though. It seems like Discord is really not that different from Telegram if we're talking about scammers' modus operandi.

[blockman]

I have joined a few discord servers and never asked that way just as you've experienced. That's already fishy when a website asks you to connect to your wallet even if it's not required at most times and it's just a discord or telegram channel.
And another red flag is when they've asked you about your private keys/recovery phrases. It's a total no-no and whoever owns that server surely knows what he's up to and that's likely why many folks have been hacked that they've never noticed, they're giving their seed phrases willingly not knowing that it's a type of hack or phishing.

[crwth]

It asks you to verify by captcha and stuff, just to make it look legit and it shares a link as well I think, which no one should click without proper verification. Once that link is clicked, the metamask wallet opens and asks them to approve the application and once the user does that, BAM, their wallet gets hacked. It's as simple as that for those scammers. They don't care what a person goes through because of their actions. Recently I myself have been a target of some hacker group and lost 3+ BTC and other assets. I still get sad because of it... So please make sure not to click on scammy links and always store your crypto in a Hardware wallet. Thanks for reading. Stay safe.

I don't think approving would be able to hack the wallet but inputting your secret phrase would make it vulnerable to attacks for sure. Just be careful with that. Those hackers are expected to not care at all about the users that they are attacking. As long as their benefit from it, they wouldn't care at all.

This is a new insight for me, seems scamming scheme does keep evolving on Discord. @crwth, do you mind if you share the particular Discord server that you experienced regarding this issue or any server that you any aware of? The above comment seems to give a new explanation. It is probably that the hacker are keeping the Discord member list or utilizing the discord server newcomer bot, it is also plausible that the alleged scam site are from someone instead of directly from the server verification bot.

I joined the Enjin discord group. I'm not sure if the verification bot is compromised or something.

Never experience it myself but it is not that surprising. I mean, there have been cases like this since MetaMask become popular and some people never bothered to check whether a contract or request is malicious or not. I do get an invite to many scam groups though. It seems like Discord is really not that different from Telegram if we're talking about scammers' modus operandi.

If you are in multiple groups like signal groups or something. You would receive unsolicited DMs from bots saying that you have won X amount of ETH or BTC. That's the usual thing that scammers do or something.

I have joined a few discord servers and never asked that way just as you've experienced. That's already fishy when a website asks you to connect to your wallet even if it's not required at most times and it's just a discord or telegram channel.
And another red flag is when they've asked you about your private keys/recovery phrases. It's a total no-no and whoever owns that server surely knows what he's up to and that's likely why many folks have been hacked that they've never noticed, they're giving their seed phrases willingly not knowing that it's a type of hack or phishing.

That's the reason why I'm surprised to have that and asked here in the forum if you have experienced it yourselves with something similar.

lol thank you for this information. I just know that if hacker is starting to create scam bot to be used on discord as well. Shit this gonna be a problem for discord to remove such bot. Asking for recovery phrase and password have become a red flag if that discord server has been infected by scam bot. The creator is a scammer. im sure about this. The verification is having a purpose to confirm if you're not bot but not for asking that our wallet, password or even phrase.

Be careful what you browse and see. Never give out recovery phrases etc.

[blockman]

I have joined a few discord servers and never asked that way just as you've experienced. That's already fishy when a website asks you to connect to your wallet even if it's not required at most times and it's just a discord or telegram channel.
And another red flag is when they've asked you about your private keys/recovery phrases. It's a total no-no and whoever owns that server surely knows what he's up to and that's likely why many folks have been hacked that they've never noticed, they're giving their seed phrases willingly not knowing that it's a type of hack or phishing.

That's the reason why I'm surprised to have that and asked here in the forum if you have experienced it yourselves with something similar.

That's good and you've asked and you didn't become a victim of theirs. It's always better to ask first or if you find something odd that's quite risky for you.
Then, you should leave it and don't ever get associated with them again because it might cost you your holdings and much worse if it's the life savings you have becomes stolen/hacked.

[crwth]

I have joined a few discord servers and never asked that way just as you've experienced. That's already fishy when a website asks you to connect to your wallet even if it's not required at most times and it's just a discord or telegram channel.
And another red flag is when they've asked you about your private keys/recovery phrases. It's a total no-no and whoever owns that server surely knows what he's up to and that's likely why many folks have been hacked that they've never noticed, they're giving their seed phrases willingly not knowing that it's a type of hack or phishing.

That's the reason why I'm surprised to have that and asked here in the forum if you have experienced it yourselves with something similar.

That's good and you've asked and you didn't become a victim of theirs. It's always better to ask first or if you find something odd that's quite risky for you.
Then, you should leave it and don't ever get associated with them again because it might cost you your holdings and much worse if it's the life savings you have becomes stolen/hacked.

I immediately looked at it and was surprised that it really looks legit but upon checking the bot now again, it's definitely a spam bot that monitors that legitimate server and DMs you directly if you just joined recently. It does look really legit but it obviously failed for me because I have knowledge on these types of things. How about the others? I do hope no one got scammed because of it.

[blockman]

That's good and you've asked and you didn't become a victim of theirs. It's always better to ask first or if you find something odd that's quite risky for you.
Then, you should leave it and don't ever get associated with them again because it might cost you your holdings and much worse if it's the life savings you have becomes stolen/hacked.

I immediately looked at it and was surprised that it really looks legit but upon checking the bot now again, it's definitely a spam bot that monitors that legitimate server and DMs you directly if you just joined recently. It does look really legit but it obviously failed for me because I have knowledge on these types of things. How about the others? I do hope no one got scammed because of it.

Most of the discord servers are like that, there will be a bot messaging you with some welcoming message. And these cons are taking advantage of it.
Those that are unaware of this will be the ones likely to be their victims. Unlike you, they have no idea of what's going on and how the process will go although there's an obvious setup on it because they're asking for specific details.

[crwth]

I also experience somewhat a similar type of phishing attempt when I joined a group, I got an immediate DM from a scammer's bot where I need to pass a verification and the link provided leads to a website. I didn't clicked I dont want to risk my device to get compromised but I am curious to know more about that website.

That's what I experienced. Upon checking of the bot recently, I see that it was banned already and it's really not an official one. It's really somewhat of a close replica of something that would ask for your connection or something to your wallet. It's really something that would be convincing to others that might not be familiar with those kinds of things yet.

scammers and hackers are ruining discord and it might turn into telegram where its infested with tons of bots.

I know. It's really annoying with all the DMs that you would receive and all the *Contests* that you have won. Probably everyone has won that's worth 0.41923952 BTC or some shit like that lol.

That's good and you've asked and you didn't become a victim of theirs. It's always better to ask first or if you find something odd that's quite risky for you.
Then, you should leave it and don't ever get associated with them again because it might cost you your holdings and much worse if it's the life savings you have becomes stolen/hacked.

I immediately looked at it and was surprised that it really looks legit but upon checking the bot now again, it's definitely a spam bot that monitors that legitimate server and DMs you directly if you just joined recently. It does look really legit but it obviously failed for me because I have knowledge on these types of things. How about the others? I do hope no one got scammed because of it.

Most of the discord servers are like that, there will be a bot messaging you with some welcoming message. And these cons are taking advantage of it.
Those that are unaware of this will be the ones likely to be their victims. Unlike you, they have no idea of what's going on and how the process will go although there's an obvious setup on it because they're asking for specific details.

I do see official discord servers that verify that way and that's why I clicked on the bot and brought me to a convincing website. Everyone should have somewhat of knowledge to prevent falling into a trap like that.