Warning: ZKasino - Possible wallet phishing scam

[UserU]

The attractive offer of this site naturally increases its susceptibility to skepticism. No KYC is required to withdraw up to 500k. The main objective of such a big opportunity is to ‍attract the big investors. Those who have little knowledge about gambling sites can avoid it. Those who connect the wallet without knowing about any site will naturally affect by the scam. It has no promotion so everyone is highly suspicious of it.

Not everyone likes KYC though, so many newly-established ones try to lure them with sweet talks.

[libert19]

Having a secondary one with only pocket change on a different device isn't a bad idea.

You could use two wallets on metamask itself, with 'useless' one for sites like mentioned in op.

Hardware wallet for savings, hot wallet for day-to-day transactions and lastly useless wallet.

Even better, no wallet  What do you think? Most of the DeFis are useless and there's no need of using such platform I think.

I figure that depends upon user, I'm active in ethereum ecosystem so can't live without it. Yes, there are shady dapps, have been burnt few times as well, but it can also be rewarding with it's retrospective drops (hop, dydx, uni, op).

[Broadanbig]

Looks like he is an idiot if he thinks adding up to 500k wd instant for the next 24 hours will bring in the big depositors. It's really a shame that we don't know where to find this person and send them to a prison cell for awhile for the scam attempt.

It is really a shame just as you have said but we cannot do anything here rather than account ban but we know this is a decentralized platform void of kyc so any one here is free to make posts, comment and take part in work or jobs available. Come to talk of it, the zkasino has long deleted the post and none can assess the page anymore.  I am happy OP did Research and did a quick response immediately after OP discovery so that members do not fall victim of account phishing which would have been disasterous for those who have no idea the genuineness of what they were clicking bit all the same, no own has complained of linking their accounts to the zkasino site and that is ok by me.

[libert19]

It is really a shame just as you have said but we cannot do anything here rather than account ban but we know this is a decentralized platform void of kyc so any one here is free to make posts, comment and take part in work or jobs available.

Neither do i know proper meaning of decentralization, but pretty sure this forum ain't it.

[QueenVera]

Warning about ZK:NO KYC Instant withdraws up to $500K/24h.Today only: 0% edge and ZKAS airdrop

Every element of the website (including the social media viewing) requires you to connect your wallet. Additionally, the topic is locked for discussion though the creator (newbie) is posting to bump the thread. This is extremely suspicious.

This thread can be removed after a moderator reviews the report. This is a warning not to connect your wallet to this website until there is more information as to why the discussion is locked and why the website forces walletconnect for even things like viewing social media/joining discord.

The site is already a very suspicious one and there is no single reason why one will be asked to connect or link a wallet address at every step they take just because they want to try out a casino. I'm sure that this singular act alone has already done so much harm than good to their reputation and it will take them so much time to dispute this claims.
Thank you so much OP for raising this awareness to us and I hope more persons get to see this thread so as not to fall victim of any malicious or criminal acts.

[coin-investor]

Warning about ZK:NO KYC Instant withdraws up to $500K/24h.Today only: 0% edge and ZKAS airdrop

Every element of the website (including the social media viewing) requires you to connect your wallet. Additionally, the topic is locked for discussion though the creator (newbie) is posting to bump the thread. This is extremely suspicious.

This thread can be removed after a moderator reviews the report. This is a warning not to connect your wallet to this website until there is more information as to why the discussion is locked and why the website forces walletconnect for even things like viewing social media/joining discord.

The site is already a very suspicious one and there is no single reason why one will be asked to connect or link a wallet address at every step they take just because they want to try out a casino. I'm sure that this singular act alone has already done so much harm than good to their reputation and it will take them so much time to dispute this claims.
Thank you so much OP for raising this awareness to us and I hope more persons get to see this thread so as not to fall victim of any malicious or criminal acts.

I'm not one who will try that, there are many DeFi casinos now but until now I haven't connected any of my wallets until they are reported safe by those who have tried their platform, it's not that I don't trust these platforms it's just that they are not fully accepted by the gambling community and there are safety parameters that need to be employed to make it safe for the gambling community.

[Eternad]

I'm not one who will try that, there are many DeFi casinos now but until now I haven't connected any of my wallets until they are reported safe by those who have tried their platform, it's not that I don't trust these platforms it's just that they are not fully accepted by the gambling community and there are safety parameters that need to be employed to make it safe for the gambling community.

Creating a new wallet is not that hard though just to try any service. I usually have this kind of dummy wallet so that I can explore any DeFi website without any worries since some DeFi website only shows full feature once you connect your wallet.

On this casino case. This is a clone copy of an existing project and used to phish users account. This is an obvious scam so I agree to you that people should not try this site or proven scam site.

[Pmalek]

You could use two wallets on metamask itself, with 'useless' one for sites like mentioned in op.

Yes, but that doesn't change the fact that your hot wallet (the software itself) shouldn't be put in a situation where someone could potentially abuse it. It might just be a phishing and social engineering attack, but if there is also malware involved then nothing is safe.

[Fivestar4everMVP]

It is really a shame just as you have said but we cannot do anything here rather than account ban but we know this is a decentralized platform void of kyc so any one here is free to make posts, comment and take part in work or jobs available.

Neither do i know proper meaning of decentralization, but pretty sure this forum ain't it.

The forum is not decentralized, from what I know and understand decentralization to be or mean, but then, what we can conclude on is that the forum grants freedom of posts/speech to everyone, as long as you as it does not go against the forum rules, or put others in a state or situation where they are likely to lose their funds to scam mostly.
Though the forum does not monitor or regulate scam, but through reports from users, the moderators still try their best to delete/ trash out posts created with a motive to scam unsuspecting victims, which is really good, and again, the system also warn users against dealing with users with high negative trust rating, which is another good feature again.

[batang_bitcoin]

Thanks for ups!
Whenever I see websites that wants me to connect my wallet onto them, I'm completely closing my window there and never visits again.
These scammers would do everything what it takes to scam and rob people's money, so don't oblige on their technique of stealing everyone that would be gullible to their schemes.
I wouldn't even waste my time on trying it out with a wallet of mine that contains nothing, they're worth it just to be ignored by us since they've been caught as a potential phishing site.

[BenCodie]

You could use two wallets on metamask itself, with 'useless' one for sites like mentioned in op.

Yes, but that doesn't change the fact that your hot wallet (the software itself) shouldn't be put in a situation where someone could potentially abuse it. It might just be a phishing and social engineering attack, but if there is also malware involved then nothing is safe.

Using a browser extension wallet that is useless as the user suggested should be a perfectly fine way to test websites that require wallet connection. Usually the full extent that a malicious wallet connect website can go, is accessing all of your addresses and doing as much damage as that permission can damage. As far as I am aware, there is no such malware that can be injected into your browser or desktop via wallet connection.

[bitcampaign]

the thread has been deleted and can't be accessed, so far I've used zkasino never had any problems or maybe someone plagiarized their original site for scams and I don't know if this discussion leads to the original site or the plagiarist, but as far as I know everything is safe until now and thanks for this information

[BenCodie]

the thread has been deleted and can't be accessed, so far I've used zkasino never had any problems or maybe someone plagiarized their original site for scams and I don't know if this discussion leads to the original site or the plagiarist, but as far as I know everything is safe until now and thanks for this information

Yes, it seems that the user ripped the landing page and just replaced everything with malicious wallet connect requests. Thankfully the situation has been handled and for now, the thread was deleted and this one has become more of a point of reference to this unique attempt now. If you want to see how the user conducted the attempt, see the second post by bitbollo.

scam sites or in general scams are not moderated here on bitcointalk so moderators will not doing anything.
I have tried to connect my wallet in order to collect some coins airdropped but

Your wallet balance is too low to claim anything, Please deposit funds or try again with another wallet.

it seems this site is just a clone of https://play.zkasino.io/ (I don't know if it's a scam even this but for sure here you can access to social media/player addresses etc...)
and yes you can't see anything but just connect your wallet.
any items you try to click is just a reminder to homepage or connect wallet

https://who.is/whois/zkasino.win
according who.is this site has been registered on 21 February 2023 ... and has already
- 29241 users and - 35117472 bets... in less than 20 hours!
(note this amount has not changed since I am connected there... including live bets)

ok it's a scam

meanwhile Z-Kasino has deleted his topic
https://ninjastic.space/search?author=Z-Kasino&board=56 but here you can find all details
Red trust added!

[robelneo]

You could use two wallets on metamask itself, with 'useless' one for sites like mentioned in op.

Yes, but that doesn't change the fact that your hot wallet (the software itself) shouldn't be put in a situation where someone could potentially abuse it. It might just be a phishing and social engineering attack, but if there is also malware involved then nothing is safe.

I would not even use my spare wallet just to try, they want you to think it's safe until they are not anymore, so you link your wallet play there and withdraw, then you think it's safe to use your main wallet to save transaction fees from your main wallet to your spare wallet, it is when you are comfortable that they going to do hacking.

I prefer to wait for reviews and audits of their smart contract or until they have proven that they are safe to trust their platform to link your wallet.

[libert19]

You could use two wallets on metamask itself, with 'useless' one for sites like mentioned in op.

Yes, but that doesn't change the fact that your hot wallet (the software itself) shouldn't be put in a situation where someone could potentially abuse it. It might just be a phishing and social engineering attack, but if there is also malware involved then nothing is safe.

I would not even use my spare wallet just to try, they want you to think it's safe until they are not anymore, so you link your wallet play there and withdraw, then you think it's safe to use your main wallet to save transaction fees from your main wallet to your spare wallet, it is when you are comfortable that they going to do hacking.

I prefer to wait for reviews and audits of their smart contract or until they have proven that they are safe to trust their platform to link your wallet.

I meant it for investigation purposes. Connecting wallet does not do anything unless you give dapp approval permission.

When you connect, at least in case metamask it would show — 'See address, account balance, activity and suggest transactions to approve'.

Your wallet is at mercy of last one, once you do this to any shady dapp, your wallet is done.

Regarding audits, they may give some level of legitimacy but don't mean much, plenty cases where audited platforms got drained.

[slapper]

Thanks for ups!
Whenever I see websites that wants me to connect my wallet onto them, I'm completely closing my window there and never visits again.
These scammers would do everything what it takes to scam and rob people's money, so don't oblige on their technique of stealing everyone that would be gullible to their schemes.
I wouldn't even waste my time on trying it out with a wallet of mine that contains nothing, they're worth it just to be ignored by us since they've been caught as a potential phishing site.

I've seen several crooks try to scam honest folks out of their hard-earned money. Exasperatingly many people fall for such scams. Linking one's wallet to an unfamiliar website is like giving a stranger one's credit card and PIN in hopes they won't steal.

Such situations need prioritizing safety and well-being. Before giving a website your wallet or connecting it, be cautious and do your research. If one has any doubts, they should consult a cybersecurity professional or any crypto professional immediately. Always be cautious rather than complacent.

[bitbollo]

our "hero" Z-Kasino
is coming back with a new wallet phishing scam.
https://bitcointalk.org/index.php?topic=5441072.msg61811224#msg61811224
here full details (also added a new red trust).

if some one want create a flag I am ready to support it...

@Cyrus @hilariousandco
since this user is clearly faking another forum user just to commit some scam... [Zkasino is the original forum user...] why not ban this fake/impersonator?

[SirLancelot]

The site is already a very suspicious one and there is no single reason why one will be asked to connect or link a wallet address at every step they take just because they want to try out a casino. I'm sure that this singular act alone has already done so much harm than good to their reputation and it will take them so much time to dispute this claims.
Thank you so much OP for raising this awareness to us and I hope more persons get to see this thread so as not to fall victim of any malicious or criminal acts.

I find it more annoying than suspicious because what I know is that any decentralized/web3 platforms do also works like that where they will also ask us to connect our wallet with them but the only difference maybe is that a legit platform does not force us of doing it. For our safety it will be better to use a separate wallet when connecting to any decentralized and web3 platforms.

This is the only downside of this technology because our whole wallet is exposed once we made a connection with them. If this casino here is truly a scam then it's normal that they won't care about their reputation so don't worry about them. They deserved it anyway.

[Daltonik]

The attractive offer of this site naturally increases its susceptibility to skepticism. No KYC is required to withdraw up to 500k. The main objective of such a big opportunity is to ‍attract the big investors. Those who have little knowledge about gambling sites can avoid it. Those who connect the wallet without knowing about any site will naturally affect by the scam. It has no promotion so everyone is highly suspicious of it.

But if you go to the online casino website zkasino.io , and not the mod that the OP promoted here, then you won't see a mention of the withdrawal amount anywhere there, besides, it's not in their doc, so I don't think there's a corresponding bankroll there (the last bank roll was on their twitter $2m) to ensure the withdrawal of $500k per player.

https://twitter.com/ZKasino_io/status/1621907358120042498

[Pmalek]

Usually the full extent that a malicious wallet connect website can go, is accessing all of your addresses and doing as much damage as that permission can damage.

We all know that too many people don't like to read. Even when the wallet clearly states what permissions you give certain services, people just want to get rid of the pop-up so they click yes or approve. That's the problem. You can give a site permission to access your wallet and perform certain transactions in your name.

As far as I am aware, there is no such malware that can be injected into your browser or desktop via wallet connection.

Maybe, maybe not. I don't want to be the lab rat to test it.

@Cyrus @hilariousandco
since this user is clearly faking another forum user just to commit some scam... [Zkasino is the original forum user...] why not ban this fake/impersonator?

I don't see why one scammer should be banned when thousands have been allowed to do as they please because the forum follows a "scams are not moderated policy". Personally, I would ban them all. But since that is not happening, then we shouldn't ban only a handful of those we don't like.