Author

Topic: ShapeShift Phishing Scam >>>> DO NOT TYPE "shapeshift.com" on your browser!!!! (Read 220 times)

newbie
Activity: 53
Merit: 0
Thank you for your sympathy. Good suggestion about hovering over the link.
newbie
Activity: 13
Merit: 0
Working in the IT field, I see this happen all the time with clients.  I feel for you and your loss.  I hope future ICO's can incorporate more images into their proofs so you can verify  websites easier.  I always train my customers to hover over links before clicking anything to make sure it matches where you want to go.
newbie
Activity: 53
Merit: 0
I can't recall specifically, but it was likely the result of typing on the browser, and then following the first link from the google result at haste. Bad practice, should not repeat ever.
mk4
legendary
Activity: 2870
Merit: 3873
Paldo.io 🤖
From where did you get that link from? The first "S" and the "T" from your link is a special character. Take a look:



There is a something like dot above it. That's why you can't open the website and it's showing as a "phising".

Probably a Google advertisement, the same exact way hackers create phishing sites in the past for exchanges like Bittrex, whereas hackers used the domain "blttrex.com". People need to learn to use ad blocker browser extensions.
legendary
Activity: 2758
Merit: 6830
From where did you get that link from? The first "S" and the "T" from your link are special characters. Take a look:



There is a something like a dot above it. That's why you can't open the website and it's blocked by Google as a "phising" attempt.
newbie
Activity: 53
Merit: 0
If you try the below on Safari, you will see a warning, as this site has already been reported as a "phishing" scam:

https://www.ṡhapeshifṫ.com/

It appears the underlying site has been taken down already.

Here is a relevant excerpt from ShapeShift.io support, which stresses to go directly to shapeshift.io:

--------
We are so sorry you lost your coin. We are doing everything in our power to get this site taken down. You may want to search reddit and other forums to see if anyone else has been a victim and if they are planning any sort of action against these scammers.
Always be sure to go directly to shapeshift.io, do not follow e-mail links, do not click on slack links, do not click on random links sent to you and you will be fine. We must be vigilant to protect our assets against these scammers.
--------

Anyway, it seems the site was brought down, so this may no longer be a risk, but I suspect the perpetrators have likely moved on to scam more in a different way.
legendary
Activity: 2758
Merit: 6830
Shapeshift.com is actually legit and will redirect you to the .io domain. Are you sure that's the fake website you are talking about?
newbie
Activity: 53
Merit: 0
There is a phishing scam that can get you to send your coins to a scam address.

DO NOT FOLLOW ANY LINKS FROM EMAILS, DISCUSSION FORUMS, ETC, OR TYPE "shapeshift.com" on your browser.

Always directly type "https://shapeshift.io" on your browser.

An example scam BTC address is this: "1CtrxC9p7HACeBJF6wdLmJMw4LzMRm3XhJ". DO NOT EVER SEND YOUR COINS TO THIS ADDRESS!!!!

You can see how much this address has scammed by going to https://live.blockcypher.com/btc/address/1CtrxC9p7HACeBJF6wdLmJMw4LzMRm3XhJ/

The phishing scam is very well executed, as it mimics Shapeshift.io website, and when the dialog box asking for you to send the coins to the Shapeshift BTC address shows up, they give you the scam address.

It would be great if someone could figure you who actually owns this address, so that they can be found and people that lost coins could go after them.

I must say, Shapeshift.io needs to be more alert of such phishing scams and should actively pursue the perpetrators.
Jump to: