Spot a fake website before connecting that wallet

[aysha9853]

Good breakdown, a lot of newcomers still think HTTPS means safe which is no longer true, i like the idea of using a burner wallet because even careful people make mistakes, another thing I do is bookmark official sites from the start and never use search again, it sounds basic but it saves you from sponsored scam ads.

[tech30338]

lol i almost fell for a fake uniswap last month stay sharp guys

Good for you, you could have compromise your wallet and lost everything in the future, some people really make mistake not because they want it but by accident, so for them to be able to avoid such things, OP list are one of them to be not to take for granted, sometimes we are in a wrong address, but since we are too confident we did not look properly in the address, and eventually click it, by the time we realize our mistake its already too late and our wallets are drained.

[libert19]

Good post! I learned some new stuff.

... Another tool  Remove.cash can also help you check if you have accidentally granted approval to a malicious site in the past.

Pretty sure you meant revoke.cash here. 

~snip

... Phishing email scams fall in this category too you'll basically find cases where you receive a supposed email from microsoft but it reads rnicrosoft and those with a bad eye won't notice you see a comment saying;

That's a good one, I had to read it twice to notice the change.

...

...

Someone I knew  was victim of such , the scammer was quite inexperienced though , but still was able to fooled him , he was so desperate to solve the issue he was facing on grey wallet that he got messaged from”X” (formerly known as Twitter ) by an impersonator that claim to be grey customer service , and he sent him a link to fill his details in , he didn’t even bother to see the suspicious act in it, all he care about is to get some answers from the grey wallet concerning the issue he was facing, so when he was filling in his details he noticed that the password space was off, like there where no option to choose if he want to the password to show or not as he typed it , the password was literally showing in words and he got his email hacked in  the process too , leading to some loss of assets in his grey account , at same time making things more complicated for him .

I don't think this is about password being shown or not, your friend was scammed by inputing his details, that's it.

[taufik123]

Someone I knew  was victim of such , the scammer was quite inexperienced though , but still was able to fooled him , he was so desperate to solve the issue he was facing on grey wallet that he got messaged from”X” (formerly known as Twitter ) by an impersonator that claim to be grey customer service , and he sent him a link to fill his details in , he didn’t even bother to see the suspicious act in it, all he care about is to get some answers from the grey wallet concerning the issue he was facing, so when he was filling in his details he noticed that the password space was off, like there where no option to choose if he want to the password to show or not as he typed it , the password was literally showing in words and he got his email hacked in  the process too , leading to some loss of assets in his grey account , at same time making things more complicated for him .

I don't think this is about password being shown or not, your friend was scammed by inputing his details, that's it.

Hahaha meaning that the scammer managed to trap that person into entering username and password details,
yes and again this is not because of the weakness of the system but the weakness of the user because it is included in the social target
of the enginering because the scammer impersonates someone else on twitter and gives instructions with a scam link.

Don't easily trust anyone in crypto, whoever it is because the crypto world is very cruel.
Even people who pretend to be other people look real, need to re-verify and who will not give gifts for free via DM on all social media, it can be sure that it is a trap.

I receive a lot of DMs on X and I never open them, most scammer accounts and on telegram also send links and applications that I don't recognize.

It's better to turn off the auto download feature on telegram and never be curious about what they send, you can be sure everything will be a trap to take our money.

[libert19]

^ yes, I also receive fake support messages/comments on messenger apps and on X. As for disabling automatic media download, this is the first thing I do in messenger apps — I used to disable prior to save data but nowadays I do it for security purposes.

[Agathamay]

Good breakdown, a lot of newcomers still think HTTPS means safe which is no longer true, i like the idea of using a burner wallet because even careful people make mistakes, another thing I do is bookmark official sites from the start and never use search again, it sounds basic but it saves you from sponsored scam ads.

We can be vulnerable when it comes to scamming, more importantly we should simply know what we're doing and bringing up our level of confidence to match our current condition. Websites rumours about been a fake one, I can deal with it but never seeing myself linking my wallet with these random websites. I'm safe and have been for the long time, I just need to create awareness about the inappropriate ads that flying up and down.

[Zigabel]

Thi is a very useful piece of information OP, I want to believe that fir some people who probably were not aware of such will get the awareness now and know how to check out for possible potential compromised links when they see one. This is why I have always advocated for getting a separate device as much as possible, if you know it is going  to be really difficult for you to resist clicking on miat of these links when you come across them, get a different device where you use mainly for your storage and access of your wallet wherein you sore your assets and then the other device remains the one you will use to care on with your daily activities because just like you said, ine cannot be too careful enough, we as humans are mistake prone and so it can happen at anytime but the damage will be lesser if the the device are separate.

[Adbitco]

This particular one has kept me safe since I came onto this space. A few times I tried doing random search by myself I got onto scam sites and was warned by my browser. I had to quickly disengaged. Nobody should overlook that security check.

To realistic, I have also been warned same way with my system when using it to access some of these sites, and if that site is not safe you would be warned by the browser about the security threat of the site one is accessing. It is either you disengage the site or continue with it if you truly sure of the site you are accessing than being that dumb and get phished by a fake site.
Usually I do pay attention to that warning, to avoid being led to another similar site that is fake.

[Alpha Marine]

You know with a hardware wallet all these vigilante procedures won't be necessary? The only thing you need to do is verify the website and scan the QR code to make transactions, that's after you know how to keep your recovery seed away from online, how many Trojans and malwares can one really defeat when new ones are coming up almost everyday.

As much as the discussion is about Bitcoin and crypto, those are not the only things that we should be careful of on our devices. There are probably other apps on that phone that hold sensitive documents and even bank apps that have money in them, so this still applies.
If you go to a malicious site and input some privy information on that site thinking it was another one, you'll be vulnerable.
Security doesn't end with Bitcoin. Of course, securing your Bitcoin is good, but we also have to protect other things on our device, and we can't keep all those things in a hardware wallet.

[RockBell]

Thi is a very useful piece of information OP, I want to believe that fir some people who probably were not aware of such will get the awareness now and know how to check out for possible potential compromised links when they see one. This is why I have always advocated for getting a separate device as much as possible, if you know it is going  to be really difficult for you to resist clicking on miat of these links when you come across them, get a different device where you use mainly for your storage and access of your wallet wherein you sore your assets and then the other device remains the one you will use to care on with your daily activities because just like you said, ine cannot be too careful enough, we as humans are mistake prone and so it can happen at anytime but the damage will be lesser if the the device are separate.

There is nothing that will be as powerful as information because when you are knowledgeable about  crypto especially when it comes to managing your wallet because, and the is information that are been shared by op is to make people learn more about protection because most people don't even take this seriously and they don't know that in the process you can lose everything, and getting a separate device is not a bad idea but the truth is that what if you don't have money for another device best thing is for them to learn to manage and not clicking things that are not important because why would you even click on random links.

And there ways to avoid websites and the best thing is to follow the instructions of your Brower because most times browsers will block your access to does, website so there is a lot of need for us to be personally be conscious of what ever we are clicking, but a lot of people are going to be taking things more passionately because things like this can lead to them loosing there money.

[Rikafip]

More often than not, people that fall for the fake website do it because they were in a hurry.

I keep repeating a story about a friend of mine who lost ~$100K worh of crypto because he connected his Metamask to a fake website. Thing is, he wanted to buy some shitcoins that were in presale, and by being in hurry to do it, clicked on the first rsult in google that was actually a fake website. He connected his wallet to it, and when he did it, scammers drained his wallet.

Crazy thing is that guy was one of the OGs who was in crypto for many years, and living solely off it, yet he managed to lose huge amount of money in such a stupid and careless way.

[boyptc]

These tips are a good help for everyone who has no idea on how to spot some fake websites and how random victims are complaining that they did nothing and yet, they've been hacked.

I think it will make the thread better OP if you've got some visuals in it and try to highlight the important ones which you've mentioned on the thread.

People usually don't read that much even if it's very useful but only looks at the graphical posts for them to learn it easily.

[Patikno]

• Watch out for wrong extensions... metamask.io is the real site so metamask.org or meta mask.net will likely be a scam.

Just to add, some website owners intentionally use mirror domains to make it easier for users to access their sites. Therefore, we sometimes need to verify whether a site with a different domain is legitimate. I think the best way to check is to visit the community, or perhaps ask the relevant community directly. They usually have several social media channels, so we can ask them and wait for a response from the official party.

Specifically for metamask, as far as I know they only have one domain, and that is metamask.io, so, if anyone claims to be a mirror site or has another domain, then they are a scam. Cmiiw.

[puloweh555]

• Watch out for wrong extensions... metamask.io is the real site so metamask.org or meta mask.net will likely be a scam.

Just to add, some website owners intentionally use mirror domains to make it easier for users to access their sites. Therefore, we sometimes need to verify whether a site with a different domain is legitimate. I think the best way to check is to visit the community, or perhaps ask the relevant community directly. They usually have several social media channels, so we can ask them and wait for a response from the official party.

Specifically for metamask, as far as I know they only have one domain, and that is metamask.io, so, if anyone claims to be a mirror site or has another domain, then they are a scam. Cmiiw.

Fake websites often lead to many fraud victims because they are so similar that at first glance we don't even realize they're fake. This isn't just true for Metamask, but for many other sites as well. Therefore anyone dealing with assets even with exchanges should always be careful before clicking on them as a single mistake could result in the loss of your assets.

What the OP said is all true and is often underestimated but the impact is profound when we fall victim to this type of fraud. Besides being thorough before clicking on a site we should also be thorough and observant. That's why we should save the sites we frequently use with browsers and this list to avoid carelessness when opening websites and other things.

[EL MOHA]

More often than not, people that fall for the fake website do it because they were in a hurry.

I keep repeating a story about a friend of mine who lost ~$100K worh of crypto because he connected his Metamask to a fake website. Thing is, he wanted to buy some shitcoins that were in presale, and by being in hurry to do it, clicked on the first rsult in google that was actually a fake website. He connected his wallet to it, and when he did it, scammers drained his wallet.

Crazy thing is that guy was one of the OGs who was in crypto for many years, and living solely off it, yet he managed to lose huge amount of money in such a stupid and careless way.

If it was a newbie that actually did this I think we might actually be saying something like it was due to the newbie been ignorant and stuffs like that but yeah it’s an experience person and when stories like this are told I usually tell people that it’s scary because it means there is no limit to the amount of experience you can have that can make you immune to scams.

For me the easiest way to avoid this type of scams is to simply Just prioritize the use of cold wallet because there is no extra security that can make one to be too careful. Imagine having to leave a whole $100k in an hot wallet, I know for some it’s not much but it was just risk for anyone to have it on a wallet that connects to DApps.

[taufik123]

More often than not, people that fall for the fake website do it because they were in a hurry.

I keep repeating a story about a friend of mine who lost ~$100K worh of crypto because he connected his Metamask to a fake website. Thing is, he wanted to buy some shitcoins that were in presale, and by being in hurry to do it, clicked on the first rsult in google that was actually a fake website. He connected his wallet to it, and when he did it, scammers drained his wallet.

Crazy thing is that guy was one of the OGs who was in crypto for many years, and living solely off it, yet he managed to lose huge amount of money in such a stupid and careless way.

It's pretty crazy to know your friend is a crypto OGs who already knows how the crypto world works.
Again we are ordinary humans who can even make fatal mistakes even though they are quite professional and know how to risk in crypto.

When we are not focused and too hasty in taking action, bad things happen like your friend experienced.

But if he does know about the pre-sale of shitcoins that he is aiming for, why not save or bookmark on his official website, why should he do a search on google.

I think it was a really stupid act, then he used the main Wallet to connect with dApps and even that was just shitcoin, either he was drunk or unaware of what he was doing.
Using a Wallet with a balance of $100k just to buy shitcoin, that's what keeps me on my toes.

[satscraper]

I can't connect a primary or a main wallet to any site be it reputable or not

Good policy, I must say.

Even legitimate websites can be vulnerable to hacker attacks, making them dangerous to connect to. The latest case involving React vulnerability (CVE‑2025‑55182) reinforces your commitment, especially considering how many sites use the server side part of React.

[Bobrox]

Clearly full step by step explaining by OP how to avoid from fake and scam sit before connecting wallet, many scammer make similar website with the original website exactly about wallet and confusing for the beginner how to differentiate between official and scam website link. First time when I joined the bitcointalk forum popular using myetherwallet, there are easily the scammer make fake myetherwallet website and on the top page search. If can't differentiate I believe the beginner easily creating wallet trough fake or scam myetherwallet website.

Agree with OP for any one must be careful and checking all when access website or create wallet, looking the real domain of that website are using dot.com, dot.ai, dot.org until many kinds new fake domain create by the scammer how to make their website looks similar with the original website.

[promise444c5]

Don't easily trust anyone in crypto, whoever it is because the crypto world is very cruel.
Even people who pretend to be other people look real, need to re-verify and who will not give gifts for free via DM on all social media, it can be sure that it is a trap.

I receive a lot of DMs on X and I never open them, most scammer accounts and on telegram also send links and applications that I don't recognize.

I think they target comments on particular tweets, depending on what you engage with, who you follow, what you like, and what you post... I receive tons of them too, until I set it to verified users only, because most were from non-verified accounts. Since I don’t follow them back, they remain as requests..

I still open them to read their bs though ..it’s a way to stay aware of some of their tactics.

[albon]

More often than not, people that fall for the fake website do it because they were in a hurry.

I keep repeating a story about a friend of mine who lost ~$100K worh of crypto because he connected his Metamask to a fake website. Thing is, he wanted to buy some shitcoins that were in presale, and by being in hurry to do it, clicked on the first rsult in google that was actually a fake website. He connected his wallet to it, and when he did it, scammers drained his wallet.

Crazy thing is that guy was one of the OGs who was in crypto for many years, and living solely off it, yet he managed to lose huge amount of money in such a stupid and careless way.

That is correct. Rushing and not taking the time to verify a website before connecting your wallet, as well as failing to conduct necessary research or failing to use browser extensions to detect fake and phishing websites are all factors that can cause even experienced users in this field to make a serious mistake that results in the complete draining their wallet’s assets in just a few minutes.

Phishing and fake websites can usually be detected quickly but victims who do not verify thoroughly may still lose their wallet assets, as happened with your friend.

It is worth noting that "shitcoins" websites require more research than others due to simple design and the ease with which the entire site can be copied onto a different domain with another extension, misleading and deceiving investors in the end.