Fake exchanges that mimics original exchanges are real

[Findingnemo]

Even official exchange has mirror links which could be one of the reason why people not really giving much attention to the urls, one good solution to stop these is that exchange should list all their mirror links in their official website if they have more than one urls to direct to their platforms.

Most obvious ones can be spotted by looking at the url itself, they will replace or swap a word with another that we usually skip while reading cause our memory does arrange them in order even when the words are mispelled.

Nah mirror links are actually good, it help people who restricted by their local ISP to use the sites.

When the sites restricted by local ISP, it doesn't mean the sites not allow citizen from that country to use their sites, but the local ISP is just strict enough. Using VPN isn't allowed because they don't allow it in their terms, that's why mirror links is the solution.

I am not against the mirror link, that is useful when someone is restricted by their ISP not by their country but what I am saying is they should list their mirror link somewhere to avoid the fake URLs because the scammers will look for domains that are closer to the official links and user might mistaken that it's another link instead of a clone one so it's necessary to list all the official links to a particular website.

[Obari]

Scam is a very broad topic and I think almost all sector of the economy has at some point in time faced some
Sort of scams directly or indirectly and the issue with cryptocurrency and scam is a very big case as there are several ways scams are carried out using crypto and this is getting very scary as it seems that, regardless of how conscious and careful a user might, there are still possibilities of them falling to scams unconsciously just with the case of the mentioned report and this should be some sort of wake up call to everyone to take their asset safety very extreme as these scammers aren’t relenting and we should also try to implore every measure that guaranties safety of our asset.

[Davidvictorson]

It is good to know and only visit the correct URL of a website. If you do not know the correct URL, you can get it from site like Coingecko and Coinmarketcap.

Damm, scammers are working round the clock to rip unsuspecting victims of their hard earned money. And there are many people who fall for this especially old, retire people who live probably alone. I know that there will be some people of other age brackets but this is just getting too much and a call to action for everyone. Do noy joke with learning about cybersecurity. We need to know how to stay safe online, how to protect our personal information, and so many other things. And it is not just because you are own bitcoin but because as long as you own an electronic device that connects to the internet, you are a potential target. Happy that these folks got punished but will they stop?

[_act_]

Scam is a very broad topic and I think almost all sector of the economy has at some point in time faced some

Crypto scam is not a broad topic if you are looking for just ways to avoid being scammed. When I first know about crypto, I learned about different types of malware like Trojan, Rootkit, Cryptojacking, Clipper and some other types of malware. Then I read about how to avoid them. The funniest thing is that to avoid all these malware is very simple. Also I learn about scam and how to avoid them. Also your knowledge will save you from scammers. If I should put all down, it will not be more than 3 to 5 pages of A4 paper. The problem is just that people are ignorant and they do not bother to learn about crypto scam and hack until they have become a scam victim.

[Potato Chips]

But here’s something I’ve noticed about security.....it's not always as strong as we think. Okay---For example, with Binance, when you log in, you need your username, password, and 2FA code. But if we look at what happened here, the hacker was able to access the account because they got the 2FA code from a phishing site. But when it comes to withdrawing funds, shouldn’t Coinbase ask for another 2FA code? If they did, maybe the funds wouldn’t have been stolen. I’m curious about this too since I’m not a Coinbase user--I use Binance.

Could anyone confirm if Coinbase requires 2FA again for withdrawals?

Yeah they do. I would say 2fa does cover withdrawals in every exchange--if not, most-- as 2fa is designed as an extra layer to protect people's funds.

Sadly, if someone was already vulnerable enough to have fallen victim to a phishing website and the perp was able to get into their account. I would say it wouldn't be too hard to get another OTP for withdrawals.

For instance, they could make a text box pop-up on the phishing website indicating an OTP code has to be key-in for security-- in other words, make up lies that screams urgent. Because it's their website, they know all data you submit. Or, as the article has mentioned, perps could trick victims into giving remote access of their devices.

[sunsilk]

Everyone needs to be vigilant and always has to check the URL before trying to visit them. Verify, verify and keep on verifying every URL before visiting these exchanges that we're familiar and we've been using for so long.

If you are familiar with these exchanges, you will remember their domain links and can type it manually or web browsers will remember these url links for you. You can bookmark these url links on your web browsers too, it's not too difficult for people who are familiar with exchanges they used for a long time.

Phishing attacks more target at newbies who don't know about these exchanges and they will go to Google or other search engines for finding links. Newbies can go to Application Stores and search applications, if unfortunately they will find fake applications.

A general principle that applies for both newbies and senior people, double check information.

It is much better to bookmark them so that even if you remember them, one single time we can have an error and mistype one or two characters of it and then these scammers have already prepared the fake exchange with that domain.

There is no problem with us that are familiar with what we do and what the exact name of these exchanges.

We're not the target of these scammers but the new ones that are not yet familiar of things.

[God Of Thunder]

This freaks me out, to be honest. Sometimes, experienced people make mistakes as well. But if someone has an exchange account, they should know what is correct URL of that exchange. I won't use an unnamed exchange, which is not well known, and I cannot even remember the URL of that exchange. Most exchanges have mobile apps these days. Since exchanges are not supposed to be used as crypto wallets, you can always use an APP instead of accessing them via URL. But if you are using exchange as a wallet, it is your mistake, and you should know that you no longer control your assets.

[Perfectbaby]

It is good to know and only visit the correct URL of a website. If you do not know the correct URL, you can get it from site like Coingecko and Coinmarketcap.

This is my most preferred way of accessing the exchange and I don't just google to search any exchange or coin that I want to buy or trade, if I want to login to a website or if I have the app on my phone what I does is go directly on coinmarketcap then click the link there login using my app scanner from the exchange app in my phone with this I do not directly input my details to the webpage.

[avp2306]

It is good to know and only visit the correct URL of a website. If you do not know the correct URL, you can get it from site like Coingecko and Coinmarketcap.

This is my most preferred way of accessing the exchange and I don't just google to search any exchange or coin that I want to buy or trade, if I want to login to a website or if I have the app on my phone what I does is go directly on coinmarketcap then click the link there login using my app scanner from the exchange app in my phone with this I do not directly input my details to the webpage.

You will just end up on a lot of fake or scam sites if you search those sites in google. So what's really more recommended action to do is to search those exchange on those big crypto sites since for sure that they would never get a fake link from them.

Also they should list the URL of legitimate exchange then put it on notepad so whenever they try to access those exchange then automatically they could just copy and paste it.

Being vigilant on every happening online is important and we should make it a habit that we check the URL of the exchange we are visiting.

[dansus021]

Fake exchanges that mimics original exchanges are real it is real tho is not just the fake exchange but almost everything including an big project like eigenlayer, even company like eigen layer yesterday has been hack and share phising link about airdrop. "EigenLayer Twitter Account Hacked to Share Ethereum Airdrop Scam
A hacker published a series of posts Friday from EigenLayer's Twitter account, urging users to click on an apparent phishing link." https://decrypt.co/287159/eigenlayer-twitter-hack-airdrop-scam

Hacker nowadays also smart they buy twitter account with a golden tick and then share some phising link that some user didn't notice about it and voila all their wallet is emptied. 

[hd49728]

Fake exchanges that mimics original exchanges are real it is real tho is not just the fake exchange but almost everything including an big project like eigenlayer, even company like eigen layer yesterday has been hack and share phising link about airdrop.

Hacks can happen, account sales can happen, many things can be used by scammers and hackers, but as users, we all can do very easy steps to defend ourselves.

It's not too hard to maintain sharp thinking and be careful with activities, so that no scammers, no hackers can steal our money.

Scam book. Read the book on most famous scam types, to avoid scam.
What to know about cryptocurrency and scams
Stop and think to reduce risk of crypto scams

Hacker nowadays also smart they buy twitter account with a golden tick and then share some phising link that some user didn't notice about it and voila all their wallet is emptied. 

These guys ignored a very vital principle when doing airdrop. Don't use your main wallets with money in it, or worse with most of your money in it, to claim any airdrop. Ignore a hook of how good that airdrop is, obey a vital principle and only use your dummy wallets for airdrop.

[Alpha Marine]

Seriously this scheme has grown beyond even Just the likes of exchanges alone but has gone to almost everything bitcoin related, it will look old fashioned but most at times even the knowledgeable one do fall victim of this.

Actually, it also goes beyond bitcoin and crypto. These kinds of scams are in different forms. They mostly attack payment services. They can clone a website with few changes to the URL and steal victim's money when they make payments on the site. They do it to online stores too. So if you're not careful you might be making payment to the wrong account on the wrong site. It's more common with crypto because they're more difficult to trace.
We have to cross-check the addresses, accounts or URLs we make payments because these scams may look ridiculous and cheap, but if you're not careful, anybody can be a victim.

[Oshosondy]

Hacker nowadays also smart they buy twitter account with a golden tick and then share some phising link that some user didn't notice about it and voila all their wallet is emptied. 

I will not say that scammers are smart. What I have noticed is that the scam that has been existing for long are still used by scammers today to scam people. Nothing many is new. But what I will say is that people are ignorant and they do not want to learn. Their lack of knowledge about scam and hack has been the reason why scammers are still able to make money from their doing. If someone is having the knowledge about how to avoid scam, scammers will only continue to waste their time on the person until they are tired.

[tvplus006]

...Not randomly clicking links + triple checking URLs before clicking them have been the best way to avoid being a victim.

Even if you use the correct URL, this does not guarantee that you will not end up on a phishing site. There are already many similar cases where scammers substitute DNS and redirect victims to phishing sites.

[fullhdpixel]

Indian national sentenced for alleged $20M crypto scheme in North Carolina, abroad

Chirag Tomar a 31 year old stole crypto from hundreds of people. Him and his co-conspirators created a fake website Pro.Coinbase.Com which is a scam website and similar to Coinbase website.

Users will input their login details on the fake website which is used to know their login information. Also it is used to know the users authenticator information. Some users were tricked and their devices were remotely accessed.

People getting scammed by phishing websites will always be a thing because it is literally impossible to educate every newbie about this. People who either are internet literates and use such forums very often might know about these things before they witness them, but most people wouldn't be among this category and they will only learn about this the hard way which is by becoming a victim first and then knowing what they shouldn't do or be careful about in the future.

One Tomar is arrested, there are millions of Tomars roaming free, creating fake websites, and trying to find victims so that they can eat some food and buy some cloths for themselves and their families because they probably aren't capable enough of earning some money in a legit way.

[Oshosondy]

...Not randomly clicking links + triple checking URLs before clicking them have been the best way to avoid being a victim.

Even if you use the correct URL, this does not guarantee that you will not end up on a phishing site. There are already many similar cases where scammers substitute DNS and redirect victims to phishing sites.

Also a site can be compromised. But what would be done in such situation? Some sites that people can download file from do have PGP signature verification which can help but what about most sites that does not have anything like that?

I make sure that the URL of the site I am visiting is correct and I make sure that the site is a reputable site. This has been what I have been doing and it is helping.

[tvplus006]

...I make sure that the URL of the site I am visiting is correct and I make sure that the site is a reputable site. This has been what I have been doing and it is helping.

Ideally, you need to visit the official Twitter (X) page of the project, and if the DNS servers are really changed, there will definitely be a message about it. But again, this is ideal, since no one will access the official page every time before visiting the project's website.

[Publictalk792]

People getting scammed by phishing websites will always be a thing because it is literally impossible to educate every newbie about this. People who either are internet literates and use such forums very often might know about these things before they witness them, but most people wouldn't be among this category and they will only learn about this the hard way which is by becoming a victim first and then knowing what they shouldn't do or be careful about in the future.

One Tomar is arrested, there are millions of Tomars roaming free, creating fake websites, and trying to find victims so that they can eat some food and buy some cloths for themselves and their families because they probably aren't capable enough of earning some money in a legit way.

Yes you are right phishing websites will always trick people because it is impossible to teach everyone about online safety. Experienced internet users know about these scams but most from us do not know. They will only learn by falling victim and then understanding what to avoid. And you are right when one scammer like Chirag Tomar gets caught there are many more out there creating fake websites to find victims. They do this to support themselves and their families because they can not earn money honestly.

[SquirrelJulietGarden]

Yes you are right phishing websites will always trick people because it is impossible to teach everyone about online safety. Experienced internet users know about these scams but most from us do not know. They will only learn by falling victim and then understanding what to avoid.

Fact is opposite than your thinking.

There are many resources teach about scams including phishing scam type and how to avoid scams generally and phishing scam in particular. People, if are careful, can do a quick search with any search engine and find good educational resources against scams, phishing scams.

They practically are not careful from beginning by skipping a searching step, and if they are informed about scams, they will ignore it too. Because of their carelessness first, and greediness later, they ignore all flags of scam, and join scam parties. So it's their responsibility for their money lost to scammers, no way to blame on anyone or on lack of educational resources about scams.

[Samlucky O]

Fake site or domain are almost everywhere in the internet and we must thread with caution. I have made some research on this and discovered the type of scam site and how they operate and possible solution.

Common types of scam websites

Phishing websites
Malware distribution sites
Clone websites
Fake e-commerce sites
Technical support scams
Charity scams
Lottery or prize scams
Investment scams

HOW TO KNOW IF A SITE IS FAKE

Analyze the source of the website link, Using this tool[/b]
👉nordvpn.com/ features threat-protection

Check the domain name and URL.
👉How to sport the different between a fake url from real URL is that the fake one tend to copy the original and if you are not careful you can't spot the difference. Example
Real URL>> www.facebook.com
Fake URL>> www.faceb00k.com
replacing the double alphabet (oo) for a double number Zero (00) and many other formats.

Check if the website is HTTP secure, using the Link
👉Nordvpn.com link checker

Use a website checker
👉google.com safe browsing search 🔍

Check the domain age using
👉Whois.domaimtools.com

Use reliable security software like NordVPN’s anti-phishing solution
👉nordvpn.com/features threat protection/ anti-phising

You can take a look at the source link  please note I am not certain about all this site but just a sudjestion if it can be helpful.