Topic: Phantom phishing website (Read 323 times)

Scammer nowadays are getting smarter that is why we should learn more so we can avoid the phising website like this. Back then one of people in my local community lost his entire balance that worth around 80K USD at that time because he installed the wrong app in the palystore back then SolFlare doesnt have wallet in android but somehow it pass the bar from the play store security and maybe drain lot of people.

The key is always double check everything and create a hot wallet and cold wallet for extra security + Hardware wallet

It must be known by anyone because this is basic knowledge to avoid phishing sites will take all the contents of anyone's wallet connected.

Being careful in everything is mandatory to do, regardless of anyone, even those who are professionals.

Seeing the incidence of phishing with many methods carried out today, we must indeed be smarter than scammers.
Now that technology is getting more sophisticated, it is increasingly assisted by AI to do phishing.

I once read the news of someone who was too skeptical about the security of his device, used all kinds of security but in the end he fell into a scam trap and lost his money in just a few hours.
https://cyberthreat.id/read/2553/Rekening-Jenius-YouTuber-Wisnu-Dibobol-Ini-Kata-Pakar-TI


Skepticism also does not help to be safe from scammer attacks, so it is necessary to remain vigilant.

It's purely and mainly because of carelessness. If they are careful enough, as I said, they won't be scammed. Phantom and phtn are really different words and I will never be scammed with this.

Knowledge to avoid scams and phishing is important, I don't say you are wrong, but my emphasize is, if they are careful, they won't be scammed even they don't have knowledge about phishing scams.

Like if they want to find a Bitcoin forum, and someone gives them a forum with its name as "Shitcoin forum", will they join?

It is an eye opener to how vulnerable we all can be and how little most people know when it comes security from fraud in data transactions. it might explain all of the emails I have been getting from Gmail accounts with subject lines like "Important! Account details expiring soon!" for services I have never had an account with.
Some people might not realize that it's still possible to see the 'from' address before you open the email. In any case this is why it's always recommended to use a unique, randomly generated password with 2 factor auth for everything.

For the crypto aspect even if you consider yourself an experienced crypto trader who is typically cautious about clicking links, please don't put all your eggs in one basket, diversify and only investing what you can afford to lose.  You should be maintaining multiple income streams in order  to support crypto trading and holding.

I understand you but we have to understand too that not everyone is a pro in this space. It is carelessness actually but you need to have at least a minimum knowledge of cyber or Web discernment. Some people can read and write perfectly but they can not differentiate between a fake and legit website. It's unfair to say they deserve to be scammed in that way.

However, I will advice them to get themselves acquainted with necessary knowledge pertaining to cyber network as long as they have venture into this space. Majority know how to browse through the internet but they don't even bother to know about the web links they interact with.

Most importantly, never import your seed phrase or private key into unofficial apps or website for any reason.

This is true. It scary when you got new device or laptop that youll install for new wallet and finding out that its gonna be a fake one but when you look at it all you find is almost the same app.

A warning should be implemented at the expense of the Google so people would not be blindly be victimized by this.

I completely agree with you. Fake app is very similar to real Phantom app which makes it very tricky. You are right people are very excited about Phantom and other meme coins, and this excitement can make people more likely to fall for scams. It is sad that scammers are using this excitement to trick new investors. Google should definitely do something to remove these fake apps and keep users safe from scams. We should all be careful and learn more before putting our money into anything. We need to make sure we are using real app and not fake one.

That's a conventional way of scamming those people who already have this wallet. They're targeting those who have probably uninstalled or just trying to get an updated version of it. Because if someone's making a new wallet and it asks for the seeds, that's the obvious scam there.

They don't even do something with the scam-sponsored ads on their search engine, no filters, it will show even the right people for their scamming. Google is only for the ads money.

They look almost identical, and it will be difficult to distinguish between the two. Imagine you had previously created the wallet and wanted to log in, and the next thing you know, after importing your seed phrase, your assets are already at risk, and there may be many fake sites like this that people will fall victim to, as we learn every day.

And anywhere there is hype or attention, scammers will go to any length to take advantage of such projects in order to defraud people, and the Rockies are notorious for falling victim to little mishaps, so it has become a major source of concern. And google might show concern and am sure they would have been bringing a lot of things like this down or they should create sections were you can even report most of this fake links, we know how scammers are persistent with their craft always bringing out new things so informations like this will even safe us from a lot of things.

When you already built up a successful business, your website will be favorite target of scammers who will create many phishing sites to scam your current and potential users.

As a business operator, you will have to create your business' knowledge hub for users, to inform them about most common scam types, including phishing and if possible, have an article on these scam types. It is helpful for users as well as guests to reduce risk of being scammed by phishing sites. If your business has these documents for users and guests, the rest will be responsibility of them, and if they are scammed, it's because they didn't read and learn, and were too carelessly.

Beyond phishing sites, there is another scam, Punycode and how to protect yourself from Spoofed URLs and fake websites..

Ive seen before MetaMask have tons of phishing like this and after Solana became popular, hackers seems to see this as an opportunity, to avoid this as possible check the link because recently if you tried to search a wallet into your search engines especially google there's an advertisement promotion so don't always click at the top list search always verify if all of the letters in the domain are the same with the original. I didn't seen this extension every time I search phantom but report as possible so newbies don't fall on this trap.

It seems the app is almost identical to the original phantom. Thanks OP for sharing this Id hope some of our community members here wouldnt be trick by this.

I get the hype surrounding phantom as degen on memecoin right now is on hype and scammers likely take advantage of it to lure some newbies into apeing and doing a fake one might do the trick there.

Damn Google should do something about it dont you think guys.

I think the number of reports and Google's automatic filtering system just can't keep up with the number of new phishing websites. I don't think 1 or 10 reports is enough to trigger the system, not to mention some people just find it troublesome to report these websites even if they know it's fake. The best protection is our awareness.

Hmm, How many people reported it until now, I've seen many of such pages ...

Always check the Domain / URL
click from the official source only like ANN, Official Social media etc etc..

Mostly newbies fall into such scams due to the incapability of controlling emotion.

This is very dangerous because the Google Play Store is the place where the official application has been said to be safe, but in fact it is still a place to store applications that contain malware in it.

As in the case of the Xenomorph malware which was excited because it was camouflaged as a Keyboard application that was not even detected by Google and targeted victims who had mobile banking applications, crypto wallets and would drain everything there.

Now it's necessary to be careful with all the platforms that say they're safe, but in fact they don't know what's going on.

https://bitcointalksearch.org/topic/m.61893757

You are making a point here, it is not really making any sense after one receives an application for a product and some other people send something similar to the original and they can not question the authenticity of the fake or clone they have received, they go ahead to publish or upload it on their website for people to download thereby putting millions of people at risk to fake which could cost them their assets and funds.

When it comes to verification, they do not bother themselves because they already put up user policy that could cover them if anything goes south but I still wonder why people do not take their time to observe what they are downloading into their gadget, may be taking time to look at spellings, punctuations on letters, extra letters etc, these little things could give tips to noting scams and fake phishing websites and applications.

Google are shady with their advertisement policies and regulations, it's unacceptable that their search engine displays phishing sites on top, sometimes with Ads badge too.

They also allow fake applications to be listed in their Google Play Store, that is another unacceptable quality control from Google. They had bad procedure to keep things work smoothly and safely for community or they just intended to allow all these scam things.

Advertisement on social media is the same too, and these platforms probably believe that they will have no issue with laws and if anything wrong, the companies, advertisers will be responsible first, not Google or Facebook.

If people can create fake wallets, I think they can still create fake wallet websites. It's just as you have said, newbies are mostly exploited for their ignorance, and they need to be assisted at every opportunity we have got. For me anytime I want to visit a particular company website which I don't really know their official address, I usually look for their X account handle, and check it out on X, so from their official verified account, the link to their website will be there. From there, I will click on the provided link and it will take me to the site. This is one way to get a legit website link. I don't like the idea of searching for website address on Google. The risk of someone being exposed to a phishing site is just too much, and I don't like to taking chances.

We can't blame them since they lost something they work hard for and that's why they call it scam when they got scammed. There's people like that where they don't take responsibility of what they have done and will do something else to not take responsibility of it. I think it's also possible that there are people who may have done it on purpose to spread fomo lioe those people who don't want crypto like someone from government for example although I don't have proof to prove it.

The problem is do this newbies actually know the real one before even dictating which is the right one, most of the times newbies usually head to goggle search engine to search for wallets they want and if they haven’t used such wallet before they simply just get the copyright or the phishing one and assuming it is the right one and this is not entirely their fault but a problem of ignorance. The best thing is when we are teaching the newbies the legit links to get the resources should be given out too so that they get the right info and tools too. Other than that newbies also should prioritize going to the wallet website

Phantom, MetaMask, TrustWallet, or any other popular cryptocurrency wallet is targeted by scammers. One may encounter them in search engines, emails, or even in communication applications and social media that ask for wallet connection or require the entry of secret phrases into fake wallets. These wallets must have clear signs and differences that will raise questions, as they are easily recognizable scams.

However, some people rush to take any action without sufficient research and focus, which leads to the theft of their wallet and assets; anyone should also, if they come across such links that will pose a threat to beginners, report them through Google and through its registry to be fully restricted. I will submit my reports about this domain now. I hope that every beginner realizes the danger of these phishing sites and fake wallets and remains cautious when installing or connecting their wallet to unfamiliar sites.

Just as you can see, the differences is very clear to notice, but some of these newbies don't care to check all these spellings properly; they are always eager to have the wallet so as to but whatever coin has been recommended for them to avoid missing out; that's FOMO.
Phishing attacks are an old method of scam. That is why there are several threads here that always advice newbies to always try and download any crypto related exchanges or wallets from their official websites, not by just using google Search; it is very important to be very vigilant and give proper concentration to wallets and where to download them  because if any newbie get scammed for their mistakes, they will blame crypto and call it scam.

It's an old type of scam made by scammers so there's no surprise that there would be something similar to the original one but if it's about websites then you can identify the real one between the fake one like you provided. People should always check the link not just one time or two times but multiple times to make sure it is the correct one and not a phishing site. Scammers can't duplicate the exact link but it may look like the same and that's what people should always check.

I also often find them and scammers also pay Google Ads so that phishing links can be on top when the search is done.
In addition to the main search page, scammers also place ads on social media such as Facebook, X so that their phishing links are easily exposed and those who don't know will click and visit it and indeed look like the real page.

It's easy to make the same interface with the help of AI and the like, so now we as users have to be vigilant and the URL link used is also made almost the same and only the characters are different.

This is why i don't really like anything that has to do with extension.
Even if at some point, one could've easily detect that something is wrong while trying to create a new wallet, there are others that might still fall victim.
And taking a look at both links, someone who isn't familiar or good at taking note of things that are little detailed will assume otherwise. If only people could get information like this, i think we will surely address the issue of phishing scams to some extent. And it is always advisable that we bookmark important and most visited links on our browsers, so we won't have to go searching for them at all time, which i even feel has a way of contributing to falling victims to scams like this.

This is very horrible, why on earth should one want to import his seeds just to discover that he is only exposing it to a third party scammers just for them to be able to have access to ones wallet, they would have hunted on many users, no wonder some will just woke up a day to discover everything concerning their wallet asset had been vanished away without a cause, this is part of the reasons on what led to such, they are making use of a sophisticated phishing techniques through seed phrase importation to hunt on their victims, we have to stay informed and always ensure we are on the right platform for any intended website or app visited by us.

It is quite useful that the discussion that has been posted on the forum regarding the wallet that should be avoided for use and which good wallet is recommended for use both mobile versions or desktop versions.
Basically there are many good choices for mobile version of wallets that can be tested that have been tested such as Bluewallet and Electrum through a good and correct installation process by downloading through the official website or site.

These tools are helpful but without them, if people are careful, they can self detect phishing sites easily. They can be scammed by phishing sites of Phantom wallet if these domain names are like phantomwallet, phantomwl, whatever with phantom in the domain name.

Here in this example, the phishing site has nothing closely to these domain names, so be scammed with this non sense domain name is pure carelessness from users.

Scam book has many points but Phishing scam is on the top of list.

Google support to list phishing sites on top of search result too.

We can distinguish from the domain name and most of all be observant when you access any site... because we know phishing sites are always there if people are a little impetuous then this can be fatal for them.

I always use extensions.
Scam Sniffer
Pocket Universe

So that when there is a phishing site and accessed it will be immediately blocked by this extension.

Attention to details is a critical skill for everyone. Another thing is awareness of this phishing schemes. We gotta stay updated and create this awareness in our communities too. I am an advocate for everyone to take at least a basic cyber security courses regardless of whether you own crypto or not because these schemes are not exclusive to crypto only. I am passing this on to the small community I belong to.

Phishing site is a very old scam type, and I'd like to put the domain name of a phishing site in a code block and even consider to use [dot] rather than . to make it not clickable.

Phishing sites are for scam and if you spread their links, you are helping these scammers.

People who were scammed with that stupid link, deserve to be scammed.

From Phantom to phtn, if they can be scammed like this, they're super stupid and very careless.

Collection of comprehensive guides on identify and avoid scam projects

There have been other copyright wallets that are very identical, and the experience I had with what I described was astounding. And I tried to open a phantom wallet extension, and the interphase of the exchange was the same, but the method was different from the real one. And this is something we should be aware of, and it may not only apply to the Phantom Wallet, but to other wallets as well.



This is the first interphase that looks identical to the original one, thus it is typically difficult to determine which is the original one; but, as you continue to use it, you will be able to distinguish.





And when you click on create wallet you will be asked to import seed phrase this is one of the cheapest ways to scam people and if not that you want to create what if you have selected I already have a wallet then import your seed phrase the next thing to be seen is your wallet has been hacked and you wonder what must have happened and this is not only for phantom wallet but their people who have fallen victim to this and the moment your seed phrase is out then that is all for you.

The link for the fake phantom wallet extension: https://phtnwall.com/ext/
From the link you can tell is different from the original but when you search phantom wallet extension this is part of the option you will see. And this is the original link: https://phantom.app/