Bitcoin wallet update warning

[Perfectbaby]

Greetings my people I bring up this little update towards how we update our bitcoin wallet. Okay, this is how it happens a friend of mine saw a pop notification on his trustwallet immediately he clicked on the update option and immediately the wallet update his funds was stolen from his wallet and I was like how is this possible. I don't need to argue much because I know that scammer are all over exploring the easier way to launch attack to people's wallet.

Lesson to learn:
1- Do not click on any pop notification asking you to give permission
2- Before updating your app make sure to visit the google play store yourself to confirm.
3- Do not feel so lazy to always logout from your app before going to bed, except you don't have fund inside but even as that it's not encourgeable to do so.
4- Make sure to clear history and phone cache before leaving for any other activity it could be going to bed or something similar.
5- Avoid clicking on random link when send to you it could be through WhatsApp, social media or even in this forums.
6- And lastly do not connects your wallet to any website without knowing proper information about the site, especially those who loves enrolling in airdrop and bounty campaign you might got phished with some link without your knowledge.

This is little update I have, don't wait till it happens to you always avoid it before it happens to you.

[Charles-Tim]

2- Before updating your app make sure to visit the google play store yourself to confirm.

That is if you are using Android. Also that is if you download the app from Playstore. Example is Electrum. I downloaded Electrum from the official site and not Playstore. The update I go for is through the official site but I make sure the URL is correct. But you can download it from Playstore if you want to.

3- Do not feel so lazy to always logout from your app before going to bed, except you don't have fund inside but even as that it's not encourgeable to do so.

Logout? Noncustodial wallets are not accounts. If it is exchanges, gambling sites and other apps, I do not log out. Even on this forum, I do not log out. Why should I necessarily log out? It should be because of privacy and not security. But this thread is about security.

4- Make sure to clear history and phone cache before leaving for any other activity it could be going to bed or something similar.

Why? This has nothing to do with security but privacy.

[Su-asa]

I am surprised to see this thread here because a very close friend of mine called me on WhatsApp call today and was asking me about yellowcard exchange if I can still access mine and I told him yes. He said he received a pop up message easy today after and the message said he should update his yellow card exchange and so he did. After the updating process, this guy can't access his account anymore and he have some little money on the account. So I am still surprise to see this thread here, but it's a good thing that we have know how to avoid such exchange or wallet scam. What I learned from this thread and what I witnessed to days is that, no one should click on any pop up notification about wallet or exchange updating, the best and safest way for anyone to update wallet is by visiting the site or playstore to update it from there instead of click on a pop up notification for updates.

[Jaycoinz]

Well I have to say is that am really not a fan of clicking links and I really don't do it when it comes to financial connected apps like wallet or bank account or any thing that has to do with something keeping money for me. But thanks for the info mate, but if you know the length these scammers are going to get the better of people then you would do everything to avoid clicking anything that has to do with links you not familiar with.

[CryptSafe]

You have spoken well OP. I think the few tips you have mentioned above could be observed by members who deem it fit to adopt your itemized safety tips. Safety is our business and as such should be properly adhered to if we must stay secured.
There is this aspect of safety we are really missing, updating a newer version of our Android OS. I believe we all have that notification on our device always d sometimes we ignore it. I must say that it is very important we update our android version when ever there is a new one because of we do not, our device would be porous for hackers to access because the security architecture of that version is below standard and as such would grant hackers access to your device. So therefore, to stay safe your device must be constantly updated to stay safe.

[Coyster]

2- Before updating your app make sure to visit the google play store yourself to confirm.

You no even suppose download your bitcoin wallet from Playstore, because e dey easy for person wey no too sabi to make mistake, come go download phishing application wey go steal their money. Na for the wallet original website you suppose download and update am.

3- Do not feel so lazy to always logout from your app before going to bed, except you don't have fund inside but even as that it's not encourgeable to do so.

Wetin you mean for here abeg?

[Perfectbaby]

2- Before updating your app make sure to visit the google play store yourself to confirm.

You no even suppose download your bitcoin wallet from Playstore, because e dey easy for person wey no too sabi to make mistake, come go download phishing application wey go steal their money. Na for the wallet original website you suppose download and update am.

3- Do not feel so lazy to always logout from your app before going to bed, except you don't have fund inside but even as that it's not encourgeable to do so.

Wetin you mean for here abeg?

If you login to your electrum wallet on mobile phone maybe want to make payment and after that what you need to do is to log out from wallet and exit otherwise if you didn't login out its easier for scammer to access your wallet since is still on active window.
Na just small thing be that, you self supposed understand am very well more than me because i know say my level never even near una own here.

Then for about wallet update, na true you talk; normally every update supposed come from their official website and not from playstore since random person fit launched attack such as vector attack.

[HajiBagi]

Thank you for sharing this update here because it’s a very important for all of us, most especially those of us wey Dey involved in cryptocurrency, we have to be careful in everything we do to avoid all those stuff wey fit affect our property, many us just Dey involved in cryptocurrency but some don’t know how to take care of their own property, I have a friend that is hold btc and he like all this kind of stuff wey concern airdrop and he no Dey see any link of airdrop or any update wey go bring money and he no go follow am, na so he go click on link that they ask him to put his wallet address and seed phrase in the airdrop so that he can connect his wallet to withdraw from the airdrop and my guy want to fuck up and do so, na small remain make them scam him and since that accident wan happen he don get sense.

Every day we Dey receive many newbie in the forum and some of the newbie are ready to invest so it will be good if you update them about waiting Dey sup so that make them no go do waiting no good because if any newbie get scam he or she will not trust the forum again and it will spoil the forum name and stop those people that have interest on learning about bitcoin or any other cryptocurrency and invest in it.

[Coyster]

If you login to your electrum wallet on mobile phone maybe want to make payment and after that what you need to do is to log out from wallet and exit otherwise if you didn't login out its easier for scammer to access your wallet since is still on active window.
Na just small thing be that, you self supposed understand am very well more than me because i know say my level never even near una own here.

It doesn't work like that my bro, firstly you don't "login" to your electrum wallet, na only custodial platforms wey you dey login to, with a username and password, but that one no be the point i wan establish here.

As long as your wallet dey online, scammers go fit attack you. Your password dey only protect your wallet from attack wey dey physical, e no dey protect you from online attack, so e no matter to an online attacker if your wallet is password protected or not.

[Miles2006]

Na good update be this as everyday person dey learn new thing and na better lesson be this, I be don see one thread about google playstore and scammers for beginners and help board. Aside crypto scam sef scammers don dey creep into playstore with fake apps and different kinds of update no be today, make we dey sure wetin we dey download as our activities sef no safe mostly for google. Lastly wetin we give out sometimes fit come turn against us as na wetin concern scammers so them no even care, here na the link I dey talk about; https://bitcointalk.org/index.php?topic=5494158.0

[DiMarxist]

I don't advise people most new comers  in the cryptocurrency market but to use Trustwallet because of the user interface. It is complicated to use and the transaction fee e dey high. And normally Trustwallet e don upgrade him wallet because of all those nonsense wey dey happen.
And di best wallets to use in dis cryptocurrency market na Electrum and Bluewallet too w dey good.

[Samlucky O]

Although na true you dey talk sha, we just need to dey careful for anything we dey do because scammers dey upgrade almost everyday and anything we dey also do we gat use sence make we no go fall for trap. No be say person go dey claim say him don Tay for the system say nothing fit do am, forgetting say as day dey pass anso people dey upgrade. For me Presisly I dey dey extremely careful for wetting I dey do expecially anything concerning wallets and ads or because most of the scammers they use all those format dey enter people so make we just dey careful Naim be the piece of advice I get for we

[Smartvirus]

I’ve never liked the idea of having to update my wallet. Old versions works just fine to me most times except, there is some obvious news about the update. Besides, what do you need from a wallet rather than have it receive, store and send funds when you need to. Some of the best updates that could happen to a wallet is the ease to having to access functions like fee settings, bump and double spend. Other than these, it’s pretty much not worth it most times for me. Transactions are broadcasted to the blockchain just in the same way and they meet the same challenges so, why bother!

Something I might ask though, funds don’t just get missing without no traces. Perhaps your friend @OP should check if their was any transaction initiated on his behalf from that wallet since he/she supposedly still has it before any conclusion.

[Obari]

This is little update I have, don't wait till it happens to you always avoid it before it happens to you.

Post like this are worth giving merits and I wish our senior colleagues can at some point try to support users like this.
Op you did a great job with your work and indeed I must say thank you for trying to remind us of informations like this because a lot of things are already going on in the cryptocurrency industry and people have to be really intentional and very conscious about everything they do with their wallets and exchanges.

I personally learnt the very hard way from paxful after I lost a borrowed fund to clicking on a phishing link from a p2p transaction and that very incidence taught me a very big lesson.

[EL MOHA]

2- Before updating your app make sure to visit the google play store yourself to confirm.

6- And lastly do not connects your wallet to any website without knowing proper information about the site, especially those who loves enrolling in airdrop and bounty campaign you might got phished with some link without your knowledge.

First thing i will advice any newbie is try as much as possible to prioritize the use of cold storage when you are saving larger amounts of funds, no matter the precautionary measures taking on hot storage there is still that risk of losing your funds

To the point of updating your app, it is a bad culture to download the app through play store or App Store, there are many fake apps on the store most especially play store. Visit the direct website and download the app and if possible verify the app for authentication. This is way safer than going direct to the store for it.

When connecting your wallet to any website make use of burner wallet ( a wallet which you don’t have funds on) as this will save from any major compromization should the site be a phishing one. Using your main wallet is risky because even if you disconnect it, you might still get compromised later on.

[DaNNy001]

This is little update I have, don't wait till it happens to you always avoid it before it happens to you.

Post like this are worth giving merits and I wish our senior colleagues can at some point try to support users like this.
Op you did a great job with your work and indeed I must say thank you for trying to remind us of informations like this because a lot of things are already going on in the cryptocurrency industry and people have to be really intentional and very conscious about everything they do with their wallets and exchanges.

I personally learnt the very hard way from paxful after I lost a borrowed fund to clicking on a phishing link from a p2p transaction and that very incidence taught me a very big lesson.

Well sorry mate, I think learning from mistakes and error is very painful but it's actually the best teacher and I have also learnt from a mistake I did although it was nothing like clicking a phishing link, mine was actually not paying attention to the minimum deposit and actually sent funds to the address and the exchange swallowed the funds and since that day I have been always careful checking the minimum deposit requirements before actually depositing money to exchange am not too familiar with.

[Makus]

True, everyday we learn and this is a good update. But it still seem a bit impossible because I have underestimated the computing power of programmers/hackers. I believe there are more of hackers in crypto than any other fields because the frequent occurrence of such news and stories is becoming too alarming and the only way to protect ourselves is to learn their tricks and take precautionary measure to avoid them. I feel pity for the person than got his coins stolen by just responding to update that popped up on his phone. I think one of the best way to also save our assets is to use an air gapped device to save our wallets I wouldn't advice anyone to save his electrum wallet in his mobile phone that he carries around. But you can do that for exchanges since we only use them when we want to make exchange. This is an important lesson that we should learn from and make adjustments to our anonymity and security.

[CryptopreneurBrainboss]

This is little update I have, don't wait till it happens to you always avoid it before it happens to you.

Everything you said are basic information that any body picking interest in the industry should have but nice effort though. The information has also been repeated on the forum and the local board numerous times but it's good you're bringing it up again so we can be informed/reminder of how easy it is to lose everything but to avoid alot of this wahala, differentiate your device that your wallets is located in from your everyday device and you go avoid 90% of this wahala. Also you wey know say your wallet dey your phone, no dey downloaded anyhow apps or all this careless trending apps dem (e.g secret message apps) because na there scammers dey chop from when you go downloading clones wey dem dun infect already to steal your sensitive information.

Post like this are worth giving merits and I wish our senior colleagues can at some point try to support users like this.

Not every posts that has to do with wallet deserve to be merited, if you read above you go see plenty corrections has been given and the publicizing of trustwallet isn't something that should be welcomed on the local board because it isn't among the best wallets to be used. The fact say they can be easily exploited should be a warning that they shouldn't be trusted as where we store our coins. If you dey participate for airdrop or doing other minor online giveaways then you fit dey use am but anything major investment, find a more appropriate wallet to use. Just because sometimes is popular doesn't make it the best.

[Adbitco]

This is little update I have, don't wait till it happens to you always avoid it before it happens to you.

Everything you said are basic information that any body picking interest in the industry should have but nice effort though. The information has also been repeated on the forum and the local board numerous times but it's good you're bringing it up again so we can be informed/reminder of how easy it is to lose everything but to avoid alot of this wahala, differentiate your device that your wallets is located in from your everyday device and you go avoid 90% of this wahala. Also you wey know say your wallet dey your phone, no dey downloaded anyhow apps or all this careless trending apps dem (e.g secret message apps) because na there scammers dey chop from when you go downloading clones wey dem dun infect already to steal your sensitive information.

Post like this are worth giving merits and I wish our senior colleagues can at some point try to support users like this.

Not every posts that has to do with wallet deserve to be merited, if you read above you go see plenty corrections has been given and the publicizing of trustwallet isn't something that should be welcomed on the local board because it isn't among the best wallets to be used. The fact say they can be easily exploited should be a warning that they shouldn't be trusted as where we store our coins. If you dey participate for airdrop or doing other minor online giveaways then you fit dey use am but anything major investment, find a more appropriate wallet to use. Just because sometimes is popular doesn't make it the best.

That is the best to do because when a user do have multiple devices or even using his system for some of cryptocurrency storage of assets it could be very hard alterations but when they are using all devices for browsing and storing their assets it makes very vulnerable for alterations. Like you said lot of these information has been shared so op should use some search option for most of the post to avoid repeating post that has been shared already.

[Igebotz]

Something I might ask though, funds don’t just get missing without no traces. Perhaps your friend @OP should check if their was any transaction initiated on his behalf from that wallet since he/she supposedly still has it before any conclusion.

So, what will he do with the transaction ID and receiver wallet? Start tracing onchain with little or no experience; the coin is gone; no professional con artist would send stolen assets to an exchange tied to his real-life identity; instead, it would go to a non-custodial wallet or a mixer for a clean coin..