Potential scam.. need help please

[Cryptogreatdane]

So about a week ago someone sent something to my coinbase wallet ethereum address via the polygon network. I got a message saying i had received 10 cookies. I was confused so i went into my wallet. Things immediately felt a little different. There was a different wallet picture in the corner that said wallet one. The app asked me for my code in weird spots. I never put my code in. I could bypass it with the back button. There they were, 10 cookies sitting in my wallet. Not sure what i should do with them, or even what they are. Not even really sure if their malicious or not. Just weird. I guess i could send them back to the sender. Im not really concerned about my funds at this point. Im more concerned that something like this can happen to an address without fault of the owner. You dont have to click a link,  they just show up. Are all ethereum based addresses at risk? Suggestions or any insight into this would be helpful. This exceeds my scope of computer knowledge. Thank you in advance computer ninjas


 

[stackinsats777]

Pretty common on Eth network and with NFTs. There’s malicious code in the smart contract that can usually drain your wallet if you sell. Not really sure how it works but I’ve seen it plenty and had many such tokens appear on Eth, Polygon, and BSC

[serjent05]

It is normal, even my wallet address has lots of spam tokens.  But on a serious note, it is possibly a dusting attack.  It is an attack where a hacker try to know the real identity of the address owner.[1].

You can follow these tips written on this article[1]

Simple Ways To Keep Your Wallet Safe
The good news is that there are simple ways you can protect yourself from these types of attacks:

• Do not click on any unknown links. If it’s too good to be true, it usually is.
• Do not interact (swap, trade, sell, or use) with any unknown tokens you didn’t verify
• Do not attempt to connect your wallet to a Decentralized Exchange to collect free airdrop tokens or swap the unknown tokens. The moment you connect, you’ve given it permission to drain 100% of the crypto funds in your wallet
• Avoid posting any identifying information in tandem with your wallet address

You can read more information about dusting attack in the link below.




[1] https://anchain.ai/blog/crypto-dusting-attack/

[cryptomaniac_xxx]

If I'm in your case, wouldn't touch that token,

And as per

https://coincodex.com/convert/cookiesale/bitcoin/?amount=10

10 cookies = 0.00000781 BTC

So it doesn't have any value at all, and as @serjent05 said, this could just be a dusting attack.

[Piesel]

This is pretty common with ethereum wallets I have tons of those cheat tokens seating dormant in my wallets for God knows how long and sometimes I consider them to be spam tokens, and these tokens are never worth anything, ethereum network with its smart contract feature have open us all up to a lot of this spam where random tokens are dropped in addresses in the network.

I don't usually take them seriously since they can't amount to anything and they can be a threat to my wallet security unless I click on any link.

[sulendra12]

~snip~

Just don't bother with it and move on.

I also got it on my BSC smart contract address, full of troll tokens that worth nothing without any liquidity at all. If you find those, just don't click any links provided by those tokens, don't interact with the tokens as they will drain your money with the fees, etc. One way to check this is to check the discussion on bscscan or any block explorers of your choice, they will tell you if it's scam or not because so many people have faced this shill tokens.

[Johnyz]

This is an old way to hack your wallet, the moment you touch that money you are done.
Just ignore it and hide it because you can’t do anything about it anymore, I have a lot of scam tokens as well under polygon network and bsc, this has been their way to scam or hack newbies and those who are not familiar with this scheme. Again, Don’t ever touch it or better try to have a new wallet and don’t expose it in public.

[Hypnosis00]

If you are not expecting someone to send you any token in any way, better ignore it and never touch it. But, you will expect someone to message you on social media or in your BTT account for that matter. But be careful with the links that might send to you.

However, until nobody had able to reach you with that, we can't say whether it was a scam attempt or not. Since you have an idea already, you know what the next step you do. This might be a common issue for scam attempt asking for money that is why you should be careful in dealing this.

[Blawpaw]

So about a week ago someone sent something to my coinbase wallet ethereum address via the polygon network. I got a message saying i had received 10 cookies. I was confused so i went into my wallet. Things immediately felt a little different. There was a different wallet picture in the corner that said wallet one. The app asked me for my code in weird spots. I never put my code in. I could bypass it with the back button. There they were, 10 cookies sitting in my wallet. Not sure what i should do with them, or even what they are. Not even really sure if their malicious or not. Just weird. I guess i could send them back to the sender. Im not really concerned about my funds at this point. Im more concerned that something like this can happen to an address without fault of the owner. You dont have to click a link,  they just show up. Are all ethereum based addresses at risk? Suggestions or any insight into this would be helpful. This exceeds my scope of computer knowledge. Thank you in advance computer ninjas


 

The network is overrun by spam tokens. I also have lots of them and do not even bother to check what they are. In your case, the "different wallet picture in the corner" asking you for a code could have been a way of getting your code and eventually leading your wallet to be drained. So, sending the token back to its owner could trigger the same reaction.

The best course of action with any unwanted tokens appearing in your wallet is to simply ignore it.

Anyway, here you can find 5 simple tips to identify spam\scam Tokens!

[Baofeng]

Same here, even in 2018 or 2019, this is already prevalent, a lot of scam tokens landing on your wallet. The thing is, maybe you have exposed your wallet publicly and this scammers try to lure you by depositing some in your wallet and who knows, they could follow you and then set a trap later.

So in any case don't be bother by them, ignore it.

And if you are paranoid or something, just create another clean address.

[TastyChillySauce00]

So about a week ago someone sent something to my coinbase wallet ethereum address via the polygon network. I got a message saying i had received 10 cookies. I was confused so i went into my wallet. Things immediately felt a little different. There was a different wallet picture in the corner that said wallet one. The app asked me for my code in weird spots. I never put my code in. I could bypass it with the back button. There they were, 10 cookies sitting in my wallet. Not sure what i should do with them,

Just leave it alone in your wallet and you shall never touch it. It's probably dusting attack and that token being sent by scammers to your wallet. I have received bunch of these garbage tokens and i did nothing and i never encounter any problem with my wallet. You shall never try to access it via dex.

or even what they are. Not even really sure if their malicious or not. Just weird. I guess i could send them back to the sender. Im not really concerned about my funds at this point. Im more concerned that something like this can happen to an address without fault of the owner. You dont have to click a link,  they just show up. Are all ethereum based addresses at risk? Suggestions or any insight into this would be helpful. This exceeds my scope of computer knowledge. Thank you in advance computer ninjas
 

Yuor ethereum address was not at the risk if you did nothing with it as it's used another blockchain like polygon which has a very cheap fees. Just forget it. Focus in your asset. You will be fine. There are so many dusting tokens created by scammers.

[livingfree]

As you've said, there's nothing to do with it and there's also no need for you to interact with it. Usually, they're just spam tokens, dust attack and a smart contract per se.

It's not just happening only with Ethereum addresses but even in other networks like TRX/trc20, it also happens. Just ignore them and don't spend any tiny fee of sending it back to the sender.

[Rengga Jati]

..Not sure what i should do with them, or even what they are. Not even really sure if their malicious or not. Just weird. I guess i could send them back to the sender. Im not really concerned about my funds at this point.

Nothing to do with those tokens, they are only shits. Never think to send back tot hem ebcuase this may also open tanotehr scam process by them. This may be also a trap.
However, you may become one of the types of scams, so, beware, and better to stay away from whatever they order from you. If you follow what they instruct, you may be trapped in their scam cycle as well. This is very common to happen.

Actually, people or especially scammers can easily send shit tokens into Ethereum wallets or whatever wallet address because it is easy to create such tokens. This is one of the ways why scammers commonly will use this trick to trap the victims. Once more, whatever they want or instruct, never follow. Just ignore it. But, if you are so worried becuse you have been a target of scammer, you may no need to save many assets in your account. This is not safe to save your inevstment in online wallet or exchanges.

[len01]

actually you don't need to be confused or don't need to do anything if you don't know the coin. indeed at this time a lot of unknown spam coins that enter our wallet by itself.
and if we're not careful it can become one of the dusting attacks. if at any time you touch the coin it is tantamount to you giving full access to the hacker.
so from now on if there are coins or tokens that enter your wallet and you don't know about it, it's better to just let it go and never touch it

[vv181]

~I got a message saying i had received 10 cookies. I was confused so i went into my wallet. I was confused so i went into my wallet. Things immediately felt a little different. There was a different wallet picture in the corner that said wallet one. The app asked me for my code in weird spots. I never put my code in. I could bypass it with the back button. ~You dont have to click a link,  they just show up.


 

Do you have another picture where it asking the code? and Are you sure you opened up your wallet application, not any link from the message?

I doubt that the particular difference is happening inside the application, only a sophisticated attack could alter how the app behaves, and even if it is probable, the attacker would simply direct the hack toward directly compromising the wallet, not sending or asking for such code.

Are all ethereum based addresses at risk? Suggestions or any insight into this would be helpful. ]

Since some further detailed explanation already addressed above, and yes it is widely known. My take is simply not to interact with any unknown coin or token or message that you did not aware of.

[wxa7115]

So about a week ago someone sent something to my coinbase wallet ethereum address via the polygon network. I got a message saying i had received 10 cookies. I was confused so i went into my wallet. Things immediately felt a little different. There was a different wallet picture in the corner that said wallet one. The app asked me for my code in weird spots. I never put my code in. I could bypass it with the back button. There they were, 10 cookies sitting in my wallet. Not sure what i should do with them, or even what they are. Not even really sure if their malicious or not. Just weird. I guess i could send them back to the sender. Im not really concerned about my funds at this point. Im more concerned that something like this can happen to an address without fault of the owner. You dont have to click a link,  they just show up. Are all ethereum based addresses at risk? Suggestions or any insight into this would be helpful. This exceeds my scope of computer knowledge. Thank you in advance computer ninjas

This is very common and if you have a big enough amount of money in a single address that can be more than enough for you to become a target of scammers and hackers, after all we must remember that transactions are public and anyone can see how much money is allocated to each address.

So as it as been recommended by other users the best thing you can do is to ignore those tokens and to never open any link or try to interact with those tokens at all, or you could lose the money you have at that address.

[kelonmusk]

This usually happens with BSC or ETH addresses, usually if tokens that have been registered or are already on the DEX or CEX, the value usually appears when we scan the smart contract.

Conversely, if you feel you have never bought or traded other tokens, just ignore it. One more thing, do not connect your wallet MetaMask or Trust Wallet to unknown websites or networks.

[Smack That Ace]

This is just a dusting attack and this is pretty common, not a new thing anymore. You should not curiously click them or need to return them to someone, just ignore them and never touch such tokens, otherwise your property will be hacked at any time. Maybe your wallet address is already public on social network so you will see more such junk tokens sent to your wallet in near future.

My advice to you is if you have a lot of assets in this wallet, it's best to move them to another wallet and never share your main wallet address with anyone or make it public on social media.

[Outhue]

The new rules with crypto wallets now is never sell any coins and tokens that doesn't belong to you or you get for free.

No new and old wallets are safe from this bad actors in crypto space, once you purchase and make your first transaction your wallet address will be revealed to the world ( through Etherscan ) and this actors will copy all the addresses they can find and send them fake/malicious tokens.

Only deal with the coins and tokens you buy with your money.

[CryptoYar]

This is not new, it's quite an old method used by scammers to steal people's funds.

This is how they scam.

1) They'll send you a token ( just like you received it) And when you check the information of the token, there you'll get a website name. And that website contains some malicious codes where you are asked to connect your web3 wallet ( metamask for e.g)

When you connect your wallet, then you will be asked permission that permission will actually be for token spending, once you click "ALLOW" he/ scammers will have permission to spend your tokens.



2) they'll send you tokens that have some malicious codes in their smart contacts. When you try to swap, the native token of that blockchain (where you are swapping) will automatically be transferred to the scammer's wallet.


The only thing you need to do is ignore these tokens if you don't want to lose your funds.