Topic: How scammers use phishing email and are successful? (Read 217 times)

Since, I don't care about those lending platforms or those staking platforms does not mean others are not attracted. There are many clear evidence available on the internet that greed caused a lot grievances. It is something which will happen today and with nil knowledge about the Bitcoin and altcoins it will happen in the future.

The perception is clear to these noob, that is anything related to crypto can make them rich. That sound naive but that is the truth. Which makes me realize that whatever as an individual you do what remains in Bitcointalk will always remain in it.

This is where many have been careless by creating vulnerability to what they do, we cannot just accept an offer from somewhere we have no idea about, something that you did not apply for and someone is claiming to reward you on it, how possible, a reasonable person would have sensed its scam coming up, we must not be too desperate on greedy offers, they are traps instead set against us, if we are not careful, we may fall into it.

I have posted this topic on Bitcointalk, a big forum for newbies interested in Bitcoin. I am certain that those who join Bitcointalk will be aware of such scams but what about those who are not? They will still fall for it and lose their hard-earned coins through investment, this is a situation that is out of anyone's control. As an example when I was a newbie, I had fallen for a few scams similar to what I have experienced and written in this post. As for me I was not reckless at that time but I did mess up in those days and I have learned from my experience.

Thanks to the OP for sharing this information with us and this is one of the reasons why I love this forum so much, members will share their experiences whether good or bad so that others will learn from it. The internet is a hub for scammers and ignorant and greedy people will always fall for their scams, that is why we need to be thoroughly informed about their activities. There is no free money online and the sooner people understands this fact the better for them, you can not reap where you did not show online, and anybody that is enticing you to collect free money is a potential scammer. People should avoid clicking sites that they don't have any business with, even with familiar sites they should be very observant to know it it's a phishing link that they are about to click.

Thank you for this information, we are now in an era of airdrops where newbies with no single experience are coming into cryptocurrency for airdrops.
The telegram airdrop trend has now opened a way for scammers to use Airdrop opportunities to continue their scams, they are making an effort to use any means to convince beginners to fall for their scam because they know that people are doing airdrops now.

I hope our newbies will understand that scammers can come in different ways, they do almost appear real and their aim to make money makes them fall victim to their scams. Let's be cautious, there is no free money in the crypto space; although there are real airdrops, but be careful and know how and where you connect your wallets.

This scam tactics are around for a while now sadly there are people who still get scammed my suggestion is don't open emails, and never click links on mobile phones, and never give information's over the phones from people who you don't know.
When someone's calls me and told me they are from this company i told them to email me the information's, the best thing is to know the official websites, and double check everything, never connect you're wallet.
What is sad is people get excited when they hear a big amount, they lost their mind and do crazy things, just because there is money involve, when you are in crypto, you always check everything multiple times, never transact over the phone or emails just because they know something doesn't mean you have to trust them, always be curious in a good way, never trust anyone when it comes to crypto always be vigilant.

It's challenging to get away from emails that are necessary for us in many activities, learning like signing a course, working with companies, partners and business operations too.

So the best practice is to have different emails for different things.

For working, one email.
For personal-related things, one email.
For cryptocurrency-related things, like for exchanges, use one email.

At least, use three different emails to reduce risk of phishing attacks from multiple sources.

Above all of these, have good and careful practice online, don't click on links or download anything carelessly.

I have a similar setup and the difference is I just get phishing emails from fiat services on my no crypto connected email accounts lol.

I honestly think emails are just too susceptible to phishing attacks and gave up. The best approach is to only mitigate them as it's not possible to completely get away from them.

I see some folks using email forwarding services for better compartmentalization. If it's something you may be interested on, see: https://github.com/Lissy93/awesome-privacy?tab=readme-ov-file#mail-forwarding

It's a good thing that you have shared this here as it will help other people avoid the potential scam and create an awareness.
The step 2 was a major red flag in this case and people should be aware of this fact that anyone asking you to connect your wallet is probably a scam.
It's a good thing that you are aware of this fact and didn't fall for this trap.
Since you clicked the link from your phone, keep an eye for anything weird on your phone.
Such scripts are designed to steal your data and install malicious apps on your devices.

Yes, you are correct that my email address has been compromised and it is now evident that the scammers are getting smarter every day. Earlier my Gmail address would automatically identify spam but with this email, it did not work. I will need to check the settings of spam to find out what went wrong and why this email landed in my inbox straight away. I used my mobile device to check the PDF link, wherein I simply held my finger for the popup to come up to copy the link URL and then I posted it on a text pad by Google to see the links. Next time onwards I will follow your suggestion as of this time I might have been a little lucky.

Most times it is easy to fish this online criminals out because they always make use of generated text from AI tools, steal content from other resources they have picked to be a guide, and then paraphrase to their taste.

I still wonder how people might fall for cheap scams like this. Well, the world has changed since people feel they can make money without doing anything or by just tapping their phones. It has made them believe that all these airdrops and emails sent to phones as crypto projects are legit. Anyone who has no idea about these things will first-handily fall for it without delay because they have heard of people earning free money in cryptocurrency.

From receiving an email from unknown sources which you didn't participate even before is red flag already. Especially that they are offering some rewards even if you didn't participate on their activities. So its good that this kind of topic has opened up here, since for sure lots of people could able to read it.  Then those people who's starting up their venture on crypto especially those who participate on airdrops will be saved from this kind of attempt made up by those jerks which try to do phising or spread malwares so that they can get something from their victim.

Moral lesson from OP post is we should turn down those random offers since usually all of it is just a scam attempts. Scammers will always try to catch the attention of their victims and people should stay vigilant, then always know the intentions of scammer so they could avoid getting caught empty handed by those criminals.

Any third-party emails to your email address indicate that your address is exposed somewhere. How did these scammers know him? Today you responded correctly to an unclaimed shipment, but tomorrow scammers will be more cunning and able to seduce you with something. Any PDF file can be filled with viruses. I would be very careful with my curiosity before clicking on links on the main device. Use virtual machines; they help us with our curiosity about the presence of viruses. However, is there a need to change your email? Simply ignore unwanted messages.

Different emails for different purposes to avoid risk of phishing attacks, and confusions or missing of important communication too.

Apply this method is like having a prevention that is better than use one email for all purposes and has to be under burden of many emails in, valid and phishing or many advertisement emails which I barely read and never click on.

I delete it by myself manually first and if it comes too often but I don't want it, I will block the senders.

That method and scammer emails are nothing new and i guess this kind of emails exist since after Etherum has lunched and even it works with other Coins also.
The only thing that has changed is the way how the mails are written.
I fully agree that you should use a few unique email accounts for each thing you using like privat , crypto and all other stuff just be save.
I get similar emails every week and they go straight to the spam folder and get deleted.

Because of the different projects in crypto people tend to use their emails related to various projects and reason why they are using their emails if you didn't join into this kind of activity you can easily block those or into spam, or if you are using an additional layer of security you can make an email filtering so it didn't make an immediate direct to your inbox, because of lacking of awareness to those people what kind of different attacks they are vulnerable with this phishing emails. If you did participate into these kind of project ignore or block so you don't hesitate anymore to click links or emails.

Everyone must have received these types of emails. Whether you are investing in bitcoin, altcoin, shitcoins, memcoins, it doesn't matter as long as you are an internet user with an email address, you'll receive one. And for some people, they may have one sitting right in their spam folders right now. Anyways, whenever I receive any email that has wants to create a sense of urgency to act now or I'll lose whatever it is they have for me, then I don't even bother opening the link. And 90% of the time, what gets people to click on the link is the persuasion tactics of a sense of urgency that they create. If not, I don't think anyone would be clicking on any link.

The internet will always be a scary place, ironic there is an actual airdrop from Summer.fi, all they want is just for the victims to click the link for the malware to get into their device, this shows why it`s important not to click random or obvious scam links online in fact when you discover it`s a scam link don`t even bother to click it.
Phishing Scammers are becoming more innovative, I remember when a friend of mine almost fell into one of these honeypot scam in this airdrop frenzy season from a telegram airdrop acting like a legit project already existing, I spoke about it in my LB here: https://bitcointalksearch.org/topic/m.64224863   

Well let's just say the email was phishy because you never had an engagement or enrolled for what the mail was detailed about.
They're also suspicious by trying to convince you with how amazing the project like trying to introduce you into something new on a Contrary.
Funny how the asked you to hurry and grab the chance. They seems desperate to convince you in developing highily interest and only ones with greeds will fall into that.
Claiming the address is from a verified and confidential user, don't they they allow reply for enquires instead their interest was that you should just clink the link and jump straight to the website.
That's real a perceive of scamming intention otherwise, there's no perfect proof to that but because safety first, extremely conciousness should be adhered to while we don't want to be a victim.

From the mail, you already can identify a red flag, CONNECT WALLET TO THEIR WEBSITE
Such mails are phishing mail sent randomly to different multi email addresses to catch potential person who might be so greedy to put their wallet at risk. Never connect your wallet to unknown sites. Beside for someone who has never had something to do with etherum,upon receiving such mail you just have to ignore it or delete it rather. It's nice of you posting this here op, as it will serve as a reminder to those here on the forum who carelessly connects or links their wallets to any sites in the name of airdrops.

I am not into Ethereum or into DeFi lending. I today received an email from Summer. Fi, which I am assuming is a lending platform. As I have never used any lending platform in the past nor will I use in the future I was astonished to see an email from them.

Below is the email content that I am quoting and also adding an image of it.

---

---

That looked so real and it did convince me click the attachment and download the pdf file. While thinking about it I realized I do not use Ethereum based platforms. Then I went ahead and checked the sender email address which was not I had expected. It showed - [email protected]

I asked myself why would someone or the platform send me an email that has a different domain name? I got convinced that this is a phishing email. But, I needed more proof that is why I used my mobile phone ability to tap on the link and explore them

When I saw those links they were suspicious, I am not going to post those links her but I will share the screenshot for everyone to understand.

Below is the image of those scripts used by scammers tonsend me a malware on my device.



Beware of such shits as they as in those scammers are always ready to loot your coins. This is why you should have a dedicated email only for crypto and never use your orginal email for anything related to cryptocurrencies.