Криптовалютные мошенничества

Распространённые методы

• • Fake crypto exchanges with slightly altered names of real platforms
• • "Airdrop" or "giveaway" scams requiring a small deposit first
• • Pump-and-dump schemes using social media hype for worthless tokens
• • Fake DeFi platforms promising extremely high staking/farming returns
• • Wallet drainer attacks where victims connect their cryptocurrency wallet to a malicious dApp that requests broad token approval permissions, then silently drains all assets
• • Rug pulls where developers create a new token, build hype through social media influencers, attract millions in liquidity, then withdraw all funds and abandon the project
• • Clipboard hijacking malware that detects when you copy a crypto wallet address and silently replaces it with the attacker's address, diverting your transfer

Как распознать

• Guaranteed returns — cryptocurrency markets are inherently volatile
• Pressure to send crypto to a specific wallet for "verification" or "doubling"
• Celebrity endorsement of a new token (almost always fake)
• Platform only accepts crypto deposits and makes withdrawals difficult
• The token's smart contract code has not been audited by a reputable security firm, or the audit report is fabricated — always verify audits directly on the auditing firm's website
• The project's team is anonymous with no verifiable identities, and the whitepaper is vague, plagiarized, or full of buzzwords without substantive technical detail
• You are asked to connect your wallet to an unknown website and approve unlimited spending on your tokens — this is the signature pattern of a wallet drainer attack

Как защитить себя

• Only use well-known, regulated cryptocurrency exchanges
• Never send crypto to someone promising to send back more
• Research any token or platform extensively before investing
• Be extremely cautious with DeFi protocols offering abnormally high yields
• Use a hardware wallet for storing significant crypto holdings and never enter your seed phrase on any website — no legitimate service will ever ask for your seed phrase
• Before connecting your wallet to any dApp, research the project and use token approval checker tools (like Revoke.cash) to review and revoke unnecessary permissions
• Always double-check the recipient wallet address character by character before confirming a transaction, and be aware of address poisoning attacks where scammers send small transactions from addresses that closely resemble yours

Реальные примеры