News

Fraudsters posing as lawyers and 'recovery agents' target people who already lost money to crypto scams, charging upfront fees to return funds that never come back. The FBI's IC3 has warned twice.

Scammers need only seconds of audio to fake a loved one's voice, then demand payment in crypto or gift cards. The FBI and FTC say the calls are getting harder to doubt.

Pig-butchering crews follow a script: find the target, fatten with affection, then slaughter through a fake trading app. Knowing each stage is the strongest defense.

A tiny division that rounds down sounds harmless. On Starknet, it let an attacker inflate a balance cent by cent until the lending pools were empty.

Malware now scans phone galleries for recovery-phrase screenshots, then drains the wallet. A durable offline backup and a strict no-cloud rule keep the master key out of reach.

You never send a transaction. You just 'sign' a message that looks harmless, and hand an attacker the right to move your tokens. This is the mechanic behind most 2024 drainer losses.

In May 2024, a single copy from a transaction history sent 1,155 WBTC — about $68 million — to a stranger who had seeded a near-identical address. Here's how the trap works, and the rule that defeats it.

Attackers seed your wallet log with near-identical lookalike addresses, betting one hurried copy-paste sends your funds to them. Chainalysis traced a single campaign across 82,031 spoofed addresses.

Eric Council Jr. walked into a phone store, claimed a stranger's number, and used the codes it received to hijack the SEC's own X account. He drew 14 months in prison.

Clipboard-swapping malware quietly replaces the address you copied with the thief's lookalike. Only the address shown on the hardware wallet's own screen can be trusted.

Thieves have mailed pre-tampered wallets to breach victims and sold counterfeit units through marketplaces. Both routes end with your recovery phrase in the attacker's hands.

A secret beyond your recovery phrase spawns a hidden wallet no seed thief can open. Forget it, though, and the funds are gone; no vendor can restore it.