scammers

DyorSwap officially announced that the so-called "GIWA Mainnet" identified by the team earlier is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

DyorSwap officially announced that the so-called "GIWA mainnet" previously identified by the team is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

According to Bloomberg, the Internal Revenue Service (IRS) has warned cryptocurrency holders that scammers are contacting some taxpayers by mailing fake letters in an attempt to steal their digital assets or personal data. The IRS stated that these letters may ask taxpayers to register for a so-called "Digital Asset Compliance Portal," which does not exist. The IRS also reminds users not to scan suspicious QR codes and not to answer or cooperate with calls requesting payment.While phishing and digital scams are not new in the cryptocurrency industry, sending fake IRS notices through physical mail seems to be a new scam tactic. Since the IRS has indeed sent letters related to digital assets to taxpayers in the past, and last year saw a surge in cryptocurrency tax filing notifications, many taxpayers are confused, which may lead scammers to exploit this familiarity for disguise. As the U.S. tax system requires taxpayers to disclose cryptocurrency activities on their tax returns, communication between the IRS and cryptocurrency holders has become more common. This also makes counterfeit tax notices more misleading. For cryptocurrency users, encountering "IRS letters" involving portal registration, QR code scanning, wallet connections, or payment requests should be treated with caution, and verification should be done through official channels.

According to market news, the domain name of the Bitcoin wallet Samourai Wallet, which was once famous for its privacy features, has now been taken over by scammers after being seized by the FBI, and is being used to host phishing sites to steal Bitcoin.Domain records show that the website was registered through a privacy protection service, and the current owner's identity is unknown. Multiple users on the X platform have reported the phishing site to the domain registrar NameCheap, requesting the site be shut down, but have not yet received a response.

Binance founder CZ revealed that he discovered users on the social media platform X using AI-generated images to impersonate supporters who are closely associated with him.CZ pointed out that the account has 863,000 followers, used a photo from a BNB Chain event in Korea that he attended as a banner, and posted several AI-generated photos of him with CZ. By analyzing the details of the photos, such as the fact that he never wears blue or purple clothing, and the inconsistent resolution of the characters in the images, CZ identified these as forged images. The original photo was actually a picture with Aster CEO Leonard.CZ reminded the community to be vigilant against such potential scams, while also stating that the Binance team welcomes sincere constructive feedback.

Wintermute CEO Evgeny Gaevoy posted on social media that some builders and KOLs who claim to "exit the crypto industry" before the age of 30 have not truly engaged deeply in industry development, and their statements are misleading. Gaevoy pointed out that this group of people is often not long-term investors but chose to leave at an early stage, so it does not constitute a genuine "exit." He believes that describing brief participation as "exiting the industry" is essentially about gaining industry experience and reputation that do not belong to them, which is unfair to long-term practitioners. Gaevoy emphasized that the development of the crypto industry relies on continuous investment and construction, and leaving after a short-term attempt should not be packaged as a symbolically significant personal choice.

According to SlowMist monitoring, the scammers who obtained 50 million USDT through a "transfer record poisoning attack" began to transfer the funds within 30 minutes after receiving them.The scammer first exchanged 50 million USDT for DAI via MetaMask Swap, then converted all DAI into 16,690 ETH, and finally deposited all the funds into the mixing service Tornado Cash. Previously, it was reported that a user suffered a loss of approximately 50 million dollars due to a "transfer record poisoning attack."

ChainCatcher message, CoinMarketCap has issued a warning on social media that scammers are impersonating its customer service personnel to contact users, attempting to steal private keys or recovery phrases. The platform emphasizes that CMC does not have a phone number and will never proactively call users.

ChainCatcher message, according to a post by Binance CEO Richard Teng, on August 26, 2025, the Binance team recently discovered a scam involving fake Binance customer service calls requesting users to change their API. Scammers use spoofed numbers or VoIP technology to contact users, claiming "Your Binance account may be at risk. We need to immediately adjust your API settings to ensure the safety of your funds."Subsequently, the scammers initiate withdrawal operations using the newly obtained permissions, transferring cryptocurrency directly to wallets under their control. The information is based on official observations, and no specific number of cases has been disclosed.

ChainCatcher news, according to Cointelegraph, North Wales police are investigating a major cryptocurrency theft case. A scammer impersonated a senior UK police officer and successfully stole Bitcoin worth £2.1 million (approximately $2.8 million).The police stated that this is a "highly targeted and sophisticated scam," and the scammer may have obtained the victim's information through a data breach. The scammer claimed to have arrested a suspect in possession of the victim's identification, creating panic and urgency to lure the victim into logging into a cold wallet through a link provided by them. Believing they were following police instructions, the victim entered their mnemonic phrase on a carefully forged website, resulting in the theft of their funds.

ChainCatcher news, according to a report by Coindesk, based on a report from the security agency SentinelLABS, scammers are using AI-generated YouTube videos to promote malicious smart contracts disguised as MEV trading bots, having stolen over $1 million in cryptocurrency funds.In the most successful case, the address 0x8725 ...6831 stole 244.9 ETH (approximately $902,000) through an associated video (with 387,000 views). The scam tactics include: using AI-generated avatars/voices, manipulating the comment section, and employing techniques like XOR obfuscation in the contract code to hide the attackers' wallets. SentinelLABS warns users never to deploy "free bots" promoted on social media, emphasizing the need to review smart contract code, even on test networks.

ChainCatcher news, according to Decrypt, the U.S. Department of Justice announced on Wednesday that a Nigerian fraudster successfully scammed a donor out of $250,000 in cryptocurrency by impersonating Steve Witkoff, co-chair of the Trump-Vance inauguration committee.It is reported that the fraudster sent an email on December 24, 2024, using a clever domain spoofing technique—replacing the lowercase letter "i" in the official email "@t47inaugural.com" with a visually similar lowercase letter "l," resulting in "@t47lnaugural.com." The victim was deceived and transferred 250,300 Ethereum-based USDT stablecoins to a cryptocurrency wallet controlled by the fraudster on December 26.The FBI successfully recovered 40,300 USDT through blockchain transaction tracking, with the assistance of Tether, and these funds are currently undergoing civil forfeiture proceedings to compensate the victim. Experts warn that as the political sphere becomes more accepting of cryptocurrency, such scams targeting crypto donations may increase, and AI and deepfake technology will further amplify the scale and complexity of fraudulent activities.

ChainCatcher news, according to News On 6, a new law in Oklahoma, USA, aims to prevent scammers from using cryptocurrency ATMs to steal funds, particularly from the elderly. The law will take effect in November, limiting first-time users to a withdrawal cap of $2,000 within 72 hours, requiring ATMs to be licensed and tracked, and allowing scam victims to seek refunds within 14 days of reporting.Lawmakers and the AARP Oklahoma chapter stated that this law is a step towards protecting local residents from the increasingly rampant digital fraud.

ChainCatcher message, Jupiter co-founder meow tweeted, "The three major 'mosquitoes' in the crypto space are spammers, scammers, and sybil actors."

ChainCatcher news, according to Cryptoslate, Polygon co-founder Sandeep Nailwal recently revealed that scammers are using AI technology to forge videos of his likeness to defraud startups in the crypto industry.The scammers first hacked the Telegram account of Polygon Ventures head Shreyansh Singh, and then contacted startups within the ecosystem, luring victims into Zoom meetings under the pretense of investment discussions. During the meetings, the scammers used AI-generated images of Nailwal, Singh, and fictitious team members (without audio interaction) to deceive attendees into installing malicious software development kits.Nailwal stated that several entrepreneurs have reached out to him to verify the authenticity of the meetings. Nailwal advised community members not to install unfamiliar software during unsolicited interactions, and he emphasized the importance of operational protocols, urging crypto users to separate wallet signing activities from everyday device usage.

ChainCatcher news, according to Cointelegraph, a recent offline phishing scam targeting Ledger hardware wallet users has emerged, with scammers requesting victims to verify their recovery phrases through postal letters.On April 29, tech commentator Jacob Canfield exposed a forged "Ledger Security Update Notification" letter on the X platform, which contained a branded QR code that lured users into entering their 24-word recovery phrase.Ledger's official response emphasized: "We will never ask for your recovery phrase in any way."This scam may be linked to the Ledger user data breach incident in July 2020, when the names, phone numbers, and addresses of over 270,000 users were exposed by hackers. Reports in 2021 indicated that some users received counterfeit hardware wallets preloaded with malware.Experts remind: Any request for recovery phrases is a scam, and physical isolation is the core security advantage of hardware wallets.

ChainCatcher news, according to FTX creditor representative Sunil, scammers have recently impersonated FTX to send phishing emails to creditors. Sunil reminds creditors:Do not click on links in the emails, as these links may lead to fake claims portals;Check the sender's address;Access the official claims portal or official address directly, rather than through email links;Verify information through X and Telegram channels. Sunil urges all FTX creditors to remain vigilant against such scams.

ChainCatcher message, there are scammers using the X account @mj_official23 to impersonate basketball superstar Michael Jordan and promote suspicious token contracts. Community feedback indicates that this account was originally @samthingsoweto and has just been renamed to @mj_official23 today. Users are advised to remain vigilant.

ChainCatcher news, scammers have stolen $2.2 million worth of cryptocurrency from New Yorkers through a new job scam. The suspects claimed via text messages to help find remote work and asked job seekers to deposit dollars into cryptocurrency accounts. Victims were told to purchase cryptocurrency on legitimate platforms (such as Coinbase, Gemini) and then transfer it to an unmanaged digital wallet.New York Attorney General Letitia James has filed a lawsuit to recover the frozen cryptocurrency and hold the scammers accountable. Investigations show that this scam spans multiple jurisdictions, with victims primarily being individuals eager to find remote work.

ChainCatcher News: U.S. Attorney Tessa M. Gorman announced that victims of business email compromise (BEC) who lost millions of dollars may be compensated due to the swift actions of the U.S. Secret Service and the asset forfeiture division of the U.S. Attorney's Office. In December 2023, a company engaged in real estate transactions reported that its system had been breached, with scammers stealing over $1 million by submitting fraudulent wire transfer instructions.Investigations revealed that at least ten other businesses or individuals were also victimized, with losses ranging from $75,000 to $425,000. The funds obtained from these scams were laundered through multiple bank accounts, some of which were held by "money mules," and were subsequently consolidated into a cryptocurrency wallet controlled by Nigerian scammers.Law enforcement acted quickly, seizing approximately 32.68 bitcoins from the scammers' cryptocurrency wallet, valued at around $900,000 at the time. The U.S. Attorney's Office subsequently filed a civil forfeiture lawsuit for the seized bitcoins. Since the seizure, the price of bitcoin has more than tripled. Due to the increase in bitcoin prices, ten victims who have filed claims may receive full compensation.