Comment
Author: Admin | 2025-04-28
Cyber security attacks. In this section we want to stress the importance of identifying these attacks and how you can and should avoid them. Specifically, we will go through how to identify fake airdrop scams on Crypto Twitter (now called X), the social media platform where most crypto users get their news and information from.Crypto scammers often exploit airdrops as a tactic to deceive users, because users are vulnerable when claiming airdrops. Users must be cautious as claiming an official airdrop typically requires a user to: Go to a newly launched website/tokens claim link (New XXX project foundation) Interact with a new smart contract (Because the token is new) Interact with a new token (assuming the airdropped token is newly minted) These will all be factors exploited by scammers who try to trick you to go to their website and approve their new but malicious smart contract.Common TacticsPosing as Official Twitter AccountsScammers will often pose as the official account, commenting under official posts to trick users into clicking their fake airdrop claims link. Look out for misspelled names for instance, @ElgenLayer spelled with an l vs. @EigenLayer which is the official account. Always check the user profile of these posts to ensure it is indeed the correct poster.Projects may also include footers at the end of their X posts to combat scams. Look out for these Tweet thread footers and ignore any comments/announcements that come after the footer.Airdrop Checker Twitter Advertisements/emailsAnother common tactic is through Twitter advertisements (and even emails should attackers get a hold of them through data breaches). You may receive ads that claim that you have received XX amount of token and that the token's claim window is fast closing, thereby rushing you to quickly interact with their website. These bogus websites may have an “airdrop checker” that will indicate that you are eligible regardless of what wallet address you entered. They may then also prompt you to connect your wallet to proceed, even signing a few “approvals” before you can use their airdrop checker. These approvals usually grant the fake website access to your wallet, after which they’ll drain its contents. Note that most official airdrop checkers do not even need you to connect your wallet, only provide your wallet address. If an airdrop checker pushes for you to connect your wallet, it is a red flag that usually indicates that an airdrop checker is bogus.Final
Add Comment