scam

Solana ecosystem wallet and exchange Backpack issued a security alert, warning users to be cautious of fraudulent airdrop activities disguised as tokenized stocks.Backpack stated that scammers may reference real token addresses to make related activities appear legitimate, thereby enticing users to participate. The company advises users to refer to its official Solana minting directory and verify the token addresses before proceeding.

Binance has issued a security reminder stating that withdrawal services are being restored in phases, and criminals may take this opportunity to commit fraud. They may impersonate Binance through private messages, emails, group chats, or even in the notes of small transfers, claiming they can help you "accelerate withdrawals," "prioritize processing," "receive compensation," or transfer your assets to a so-called "Binance vault."To ensure the safety of your assets, please remember that Binance will never: proactively contact you to inquire about your account or funds; offer or sell priority slots in the withdrawal queue; charge fees under the pretext of unlocking a network or asset; ask you to connect your wallet, sign authorization, or transfer funds to "unlock" withdrawals; request you to connect your wallet, sign or authorize any operation, or transfer funds to "unlock" withdrawals; ask you to transfer assets to any "vault," "secure account," "custodial wallet," or address provided by others; send links related to "qualification verification," "status inquiry," or "compensation collection"; ask for your password, 2FA verification code, or mnemonic phrase; guide you to unofficial websites to check proof of reserves (PoR); or offer paid "asset recovery" services.Do not connect your wallet or sign or authorize any unknown requests casually. These actions may grant third parties access to or the ability to transfer your assets. Once malicious authorization or transactions are completed, your assets may be at risk of theft, and related on-chain transactions are usually irreversible. If your withdrawal is still being processed, please check the progress within the Binance App. Do not trust anyone claiming they can pay to accelerate withdrawals, purchase priority processing qualifications, or complete withdrawals in advance through other means.

Binance co-founder He Yi posted a reminder that users should be wary of new scam methods amid the chaos.The post quoted by He Yi stated that scammers send users a small amount of GRAM and insert a fake Binance official announcement in the transfer information, claiming that user assets are not safe, luring users to transfer to the so-called "Binance Vault." The post warned users not to click on related links, connect wallets, or transfer to unknown wallets.

He Yi posted on platform X, stating that the Binance community reward activity requires regulatory approval and will go live tomorrow after being reviewed and approved by the regulatory agency.Currently, there are no cash voucher activities. Please be cautious of various phishing and scam links.

Hong Kong Interbank Clearing Limited disclosed the discovery of a fraudulent website that imitates its official website, luring users to recharge and withdraw through virtual wallets, and claiming to provide Fast Payment System (FPS) online transaction security support, including refunds, reporting unauthorized online transactions, and transaction support.Hong Kong Interbank Clearing Limited emphasizes that, under normal circumstances, it will not directly provide Fast Payment System services to individual members of the public, nor will it proactively contact individual members of the public. Do not provide personal or banking information to the related website.

According to Bloomberg, during the intense fluctuations in international oil prices in early March, a trader allegedly influenced prices on the decentralized derivatives platform Hyperliquid through two accounts, using oil-related crypto derivatives.According to an analysis provided to Bloomberg by blockchain monitoring company Solidus Labs, the trader placed over $170 million in abnormal orders, and Solidus believes their behavior is suspected to be a form of spoofing price manipulation.

According to Scam Sniffer monitoring, a user suffered an address poisoning attack, resulting in a loss of approximately 50,000 USD in assets.

The South Korean cryptocurrency exchange Upbit announced that it has recently discovered that criminals are impersonating the GIWA blockchain project, spreading false information about the mainnet launch and digital asset issuance, and inducing users to transfer assets.Upbit stated that GIWA is an Ethereum Layer 2 network being developed by its parent company Dunamu, which is currently only running a testnet, and the mainnet is still in the development and preparation stage, with no official launch time announced yet. Upbit reminds users to be cautious of unverified information regarding the mainnet launch, token issuance, and investment, and not to trust unofficial channels that request the purchase of digital assets, transfers, or wallet connections. Project progress should be based on information released by the official GIWA website and official social media.

According to AASTOCKS, the Hong Kong police stated on the social media platform Guardian that they received over 50 reports of investment fraud in the past week, involving losses exceeding 30 million Hong Kong dollars. One retired woman in her sixties met a man claiming to be interested in renting a house through a property trading platform, who recommended cryptocurrency investment as an investment expert.The man sent her links to fake investment websites and induced her to invest funds with promises of returns. Following his instructions, the woman went to a physical cryptocurrency exchange store 20 times to purchase USDT, which she then transferred to a designated wallet, ostensibly for investing in ETH. Initially, she was able to withdraw some funds successfully, but then continued to invest more. When she attempted to withdraw again, the man demanded payment of USDT worth approximately 7 million Hong Kong dollars as tax, at which point she realized she had been scammed, ultimately losing over 4.5 million Hong Kong dollars.

According to the Shenzhen Economic Investigation Bureau, recent investors have suffered financial losses due to participating in investment scams under the guise of "RWA real estate tokenization." These scams typically use technical packaging such as "smart contract automatic dividends" and "blockchain browser verifiable" to lure investors into purchasing fictitious on-chain fragmented property rights. Once the funds are in place, they stop paying dividends and disappear.The Shenzhen Economic Investigation Bureau pointed out that the smart contract address and company registration information can only confirm the existence of the code and the business entity, and do not represent a real binding of underlying physical assets, nor do they indicate that the project has financial business qualifications. According to current regulatory regulations in China, any tokenized financing activities carried out domestically under the name of RWA are considered illegal financial activities. Virtual currencies do not have legal tender status, and related token issuance, financing, and trading speculation are not protected by law.

On-chain detective Specter retweeted on platform X, alerting the community that the InfoFi project BILL is suspected of being a scam. It is reported that the price of the Billion (BILL) token has dropped by about 97% from its historical high.In the past two months, 17 wallets associated with the team have received tokens and deposited approximately 988 million BILL into CEX, while another independent deposit address also deposited 360 million BILL into CEX this week. The related tokens originated from the project's team multi-signature wallet.

According to CryptoBriefing, the Virtual Currency Unit (VCU) led by Brooklyn Assistant District Attorney Alona Katz collaborated with the FBI's New York office to conduct a joint operation that seized or shut down 241 fraudulent domain names and 112 servers. This operation marks the conclusion of a three-year investigation into an internationally connected cryptocurrency investment fraud network.The network primarily targeted Russian-speaking communities, directing victims to fake cryptocurrency investment platforms through Russian advertisements on Facebook, and then carried out secondary fraud under the guise of "recovering funds." Investigators estimate the related losses to be in the tens of millions of dollars, with some victims losing their entire savings. The prosecution has currently recovered about $300,000 for the victims, and there have been no reports of arrests from this operation. The FBI's Internet Crime Complaint Center's 2025 Internet Crime Report indicates that cryptocurrency-related fraud losses reached $11.366 billion that year, a 22% increase from the previous year. Losses from cryptocurrency fraud accounted for more than half of all internet crime losses in 2025.

According to Hong Kong media HK01, Hong Kong BBB Group (Chinese name: Hao Hao Hao Group) claims to invest in the agarwood industry in Malaysia and sell over-the-counter stocks and digital assets, suspected to be a scam. The company states that it will convert OTC stocks into "digital asset" cryptocurrency by February 2027 or earlier.It is reported that the Hong Kong police have received reports from 21 individuals, involving an investment project amounting to 14 million Hong Kong dollars. The Commercial Crime Bureau is investigating for "conspiracy to defraud," and so far, four people have been arrested. Additionally, according to the Hong Kong Securities and Futures Commission's official website, "Malaysia Agarwood Plantation Investment, Agarwood Tree Program, Agarwood Potted Trees, APT4" have been listed as suspicious investment products.

According to Chainalysis, one of the biggest victims in the theft incident involving the cryptocurrency hardware wallet manufacturer Ledger was also a scammer, suffering a loss of over 60 BTC, worth approximately 4.8 million dollars, with funds coming from a task scam.In this scam, participants were paid to create fake sales and reviews for real products. Subsequently, a "negative balance" appeared, and participants were told that they had to invest their own funds to receive payment. On September 22, the mastermind behind the scam transferred the funds to three separate Ledger addresses. On October 9, the thieves emptied all three addresses, transferring the funds to the same wallet through a single transaction from each address. The receiving wallet has been reported to be involved with the stolen funds.

According to Bitcoin News monitoring, a German Ledger user @jayr_crypto reported receiving a forged letter again this week. The letter impersonates Ledger, claiming that new regulations require users to register their Bitcoin wallets through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements and mentions German financial regulators, while also including a QR code that directs users to a so-called mandatory registration process.The user believes that addresses exposed in a previous data breach are being used for targeted attacks on Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend the sale of its hardware wallets in a European retail network covering 11 countries and over 1,000 stores.Earlier reports indicated that malicious spy implants were found inside Ledger devices purchased from European retailers. Ledger confirmed separately that compromised devices sold by a Southeast Asian distributor contained implants capable of stealing recovery phrases and transmitting them over cellular networks. Ledger has not confirmed any breaches of devices in Europe. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks initiated using home addresses. Do not scan suspicious QR codes or enter recovery phrases.

According to a report from the official Coinbase blog, the Anti-Scam Centre (ASC) of the Singapore Police Force released a briefing on scams and cybercrime for the first half of 2026, showing that cryptocurrency scam losses in Singapore decreased by 43% year-on-year, from 114.9 million Singapore dollars to 65.5 million Singapore dollars.The ASC attributes this achievement in part to the actions taken by industry partners, including the shutdown of 47,500 mobile lines, 37,500 WhatsApp accounts, and 52,200 malicious websites, as well as investigations into over 2,900 money mules and scammers, resulting in approximately 470 prosecutions. The Coinbase Global Intelligence Team identified over 720 potential victims through four joint operations with the ASC, helping to intercept potential losses of over 18.9 million Singapore dollars.

According to the City of London Police report, 25-year-old London man Ajay Shinjin (also known as AJ Marley Cruz) was sentenced to two and a half years in prison by the Inner London Crown Court for his involvement in a SIM swap fraud case. He pleaded guilty on September 28 to two charges of conspiracy to commit fraud by false representation and transferring criminal property. The case involved the theft of cryptocurrency worth nearly £200,000 (approximately $265,000).In early November 2021, British telecom operator BT discovered unauthorized activity in its systems, where customers' phone numbers were transferred to SIM cards controlled by criminals, who intercepted one-time verification codes sent by banks and cryptocurrency platforms. The police identified several suspects based on device data provided by BT, and Shinjin was linked to four of the devices. He profited over £44,000, which he used for a vacation in Dubai, a luxury apartment in Canary Wharf, and a gold-plated dental grill.Details of the case revealed that one victim lost approximately £40,000 in cryptocurrency on November 2, 2021, with about £27,000 flowing into Shinjin's personal crypto account; a second victim had approximately £17,000 entirely transferred to his wallet; he also assisted in stealing about £8,000 from a third victim's Coinbase account and around £130,000 from a fourth victim. Shinjin was first arrested at his residence in 2021 and was re-arrested at Heathrow Airport upon returning from Dubai in October 2023.

According to The Block, Kishu Inu founder Alexander Sisemore faces three counts of telecommunications fraud related to a so-called "rug pull" scheme involving an amount of $9 million.Prosecutors allege that Sisemore secretly sold off the tokens allocated to him at the project's launch while making false statements to investors. Currently, the Federal Bureau of Investigation (FBI) is seeking Kishu Inu investors.

According to Scam Sniffer monitoring, a user suffered an address poisoning attack on Ethereum, resulting in a loss of 30,004 USDT.

According to Scam Sniffer monitoring, a user lost LINK tokens worth $167,342 after signing a phishing authorization for Permit2 on Ethereum.The authorization was signed on August 18, 2025.