Be Careful Sharing The QR Code Of Your Wallet Too - page 2.

libert19

hero member

Activity: 2520

Merit: 952

Quote from: tbct_mt2 on August 26, 2021, 03:54:17 AM

Quote from: libert19 on August 26, 2021, 02:49:43 AM

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

PMs from strangers are bad.
PMs from anyone in which the sender asks for money is bad & suspicious. You must check that it is a real person you know or an impersonator
PMs from entire stranger who ask for money is most terrible.

I always do video calls in order to confirm that the person I will send money to is the person who sent me PMs.

It never came to 'sending money' in these scams, those are obvious.

tbct_mt2

hero member

Activity: 2366

Merit: 838

Quote from: libert19 on August 26, 2021, 02:49:43 AM

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

PMs from strangers are bad.
PMs from anyone in which the sender asks for money is bad & suspicious. You must check that it is a real person you know or an impersonator
PMs from entire stranger who ask for money is most terrible.

I always do video calls in order to confirm that the person I will send money to is the person who sent me PMs.

libert19

hero member

Activity: 2520

Merit: 952

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

Chuky92

copper member

Activity: 966

Merit: 5

Thanks for sharing this very important information and I am not even aware of such, although I have not tried it before. One of the things that comes with innovations is that, the more a technology grows, the more the users needs to be up to date with what's happening, else a small mistake might put the user at a great risk.
With the way crypto space is growing and the urge of scammers to get their victims in anyway they can, I would say it is quite better not sharing any sort of information apart wallet address with anyone nor even keeping such in your prominently used devices, offline is always the best. Also, it's better sharing only wallet address but anything short than that, just keep it to yourself, the reason for this is, I used to know you can scan QR code instead of sending address but with this new development, let someone not get mixed up, hence only wallet address is better to share.

livingfree

hero member

Activity: 2884

Merit: 579

Hire Bitcointalk Camp. Manager @ r7promotions.com

Thank you for this additional knowledge.

I didn't know that it can possibly happen so for those that usually use mobile for their metamask, it's better to take note on this.

And as well as bookmark it.

noorman0

hero member

Activity: 1778

Merit: 709

[Nope]No hype delivers more than hope

Quote from: Ceyflix-Rez on August 22, 2021, 07:45:35 AM

Had to confess I don't know about this before, I don't know that QR code can take over a wallet permanently just like inserting a private key, thanks for sharing OP, if someone asked me for my wallet QR code I would have send it thinking it's nada

Scammers only take advantage of the victim's negligence to let them explore the device and take over anything before the victim realizes that they were being tricked at that time. This scam is likely to occur on exchange accounts that have a similar syncing method to other devices, I saw it in some exchange mobile apps and interestingly that doesn't require confirmation (2fa, email, etc.) as complicated as on the web version to withdraw funds.

libert19

hero member

Activity: 2520

Merit: 952

Another similar case: https://mobile.twitter.com/_jeffnicholas_/status/1430323445057744897

Dragonfund

full member

Activity: 546

Merit: 148

Quote from: libert19 on August 21, 2021, 09:42:06 PM

You have heard about never share your private key or recovery phrase but sharing qr codes is as dangerous.

There is sync with mobile feature in metamask wallet which lets you sync your desktop metamask with mobile, problem is it gives complete access to the one scanning qr, which many are unaware of.

Victim: https://twitter.com/Ape_NFTs/status/1427706077332873220

Unfolding of events: https://twitter.com/MyCrypto/status/1427711396498731009

QR code can be tactical and should be treated with caution.

I dropped a guide about QR code for any who wish to learn some days ago on [GUIDE] QR CODE: How they are implemented on Bitcoin, Alts and exchange wallet

Protect your finances.

Ceyflix-Rez

member

Activity: 420

Merit: 13

$CYBERCASH METAVERSE

Had to confess I don't know about this before, I don't know that QR code can take over a wallet permanently just like inserting a private key, thanks for sharing OP, if someone asked me for my wallet QR code I would have send it thinking it's nada

OcTradism

hero member

Activity: 1722

Merit: 801

With extension from wallet, I only use it with a wallet for one purpose. I don't store all my money in that wallet because if wallets are closed source, I don't know what they built in the extensions.

QR code of 2FA is risky too. It is always easier to scan QR code to set up 2FA for your account but many people scan 2FA QR code and forget to back it up. You will have two options to set up your 2FA, type it, copy and paste, scan QR Code.

I copy and paste to back it up.
Type it manually to check the usability of my backup.

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: Luffygroove on August 21, 2021, 10:10:53 PM

I really want to know how the process of this crime, I mean technically.

Just read the following threaded tweets ^{[8 parts]} and you'll see the whole picture:

Quote from: libert19 on August 21, 2021, 09:42:06 PM
Unfolding of events: https://twitter.com/MyCrypto/status/1427711396498731009

Quote from: Luffygroove on August 21, 2021, 10:10:53 PM

How we should handle these criminals?.

Always double-check and verify who you're talking with ^{[it's a simple step but unfortunately, a lot of people tend to forget or ignore it]}.

@libert19
Thank you for posting this ^[bookmarked].

crwth

copper member

Activity: 2940

Merit: 1280

https://linktr.ee/crwthopia

I knew of that feature when I was setting up my Metamask on my smartphone. I didn't realize that it has that kind of risk involved when connecting the two. I think this is vital information that everyone should've known and have an idea about.

I also recently saw how someone got hacked; even though he has been in the crypto space for a long time and knows its ins and outs, but he still got hacked. They somehow connected to the wrong site and input the seed phrase. He has been out of his mind doing that, and that's just what happens when you are not in your best condition.

https://www.coinspeaker.com/nft-game-loses-cryptopunk-scammers/

Synerggy

member

Activity: 248

Merit: 13

Futiracoin.com

Good one libert19 imagine a scammer talking to a crypto newbie, asking him or her to send her qrcode for unknown reasons stating that they don't need their private keys because that shouldn't be shared with strangers, I'm telling you this is doable for newbies

Luffygroove

member

Activity: 966

Merit: 25

Ton Together | Save Smart & Win Big

Oh wow, it's really a cruel and scary world. Thank you for sharing. However, if it's legit, I really want to know how the process of this crime, I mean technically. Criminals are getting smarter every day and we need to be a step ahead of them even though it's hard. I was always told to never spread my private key or phrase seeds to other people, but now people scamming by spreading the phrase seeds, This is insane, and now people got scammed by QR code. How we should handle these criminals?.

libert19

hero member

Activity: 2520

Merit: 952

You have heard about never share your private key or recovery phrase but sharing qr codes is as dangerous.

There is sync with mobile feature in metamask wallet which lets you sync your desktop metamask with mobile, problem is it gives complete access to the one scanning qr, which many are unaware of.

Victim: https://twitter.com/Ape_NFTs/status/1427706077332873220

Unfolding of events: https://twitter.com/MyCrypto/status/1427711396498731009

Other cases:

Quote from: libert19 on August 25, 2021, 03:00:28 AM

Quote from: libert19 on August 26, 2021, 02:49:43 AM

Holy shit, another! 250 eth: https://mobile.twitter.com/sohrobf/status/1430478533306982408

2) https://mobile.twitter.com/oneinaneillion/status/1429333073066295296

Always verify who you receive dms from, all these scams started from fake dms then proceeded to MM qr code.

Edit: metamask has disabled the qr code feature as of now.

Topic: Be Careful Sharing The QR Code Of Your Wallet Too - page 2. (Read 333 times)