New QR Code Scam Targets Cryptocurrency Users

A new cryptocurrency scam involving QR codes is emerging, according to the analytics firm Bitrace.

Bitrace reports that scammers are using QR codes to deceive users into authorizing their wallets. This scam lures traders with attractive over-the-counter (OTC) trade offers and rewards in the cryptocurrency TRX, which is native to the Tron protocol.

(2/n)
How QR Codes Steal User Authorizations

Bitrace tested the QR code with an empty wallet and was directed to a third-party website, https://sktnid[.].com/, supporting USDT transfers.

Click Confirm to interact with a Phishing smart contract, at which point the wallet… pic.twitter.com/06b80Ko1k7

— Bitrace (@Bitrace_team) August 8, 2024

The scheme typically begins with scammers making a small payment in USDT to build trust. They then propose a transaction at below-market rates and offer TRX incentives for continued engagement. As part of their ruse, they request a small test repayment.

Bitrace tested the scam by using an empty wallet and found that it redirected them to a third-party site designed to facilitate USDT transfers. By confirming the transaction, users unknowingly interact with a phishing smart contract that steals their wallet authorization.

The firm reports that between July 11 and July 17, 2024, this scam resulted in the theft of $120,000 worth of USDT from 27 victims. Bitrace advises investors to verify the counterparty’s address and perform due diligence before making any transactions.