Crypto phishing scams have become a lucrative business, with attackers reportedly making tens of thousands of dollars weekly by impersonating Coinbase support and exploiting leaked data.
Nick Neuman, CEO of Bitcoin self-custody solutions provider Casa, recently engaged with a scammer who openly discussed their operations. According to Neuman, the scammer claimed they earned as much as $35,000 in just two days and targeted high-profile crypto professionals, including CEOs, CFOs, and software engineers. The scammers reportedly use databases like Unchained Capital to identify wealthy victims with minimum holdings of $50,000.
The phishing process involves convincing targets that their accounts are at risk, sending them fake notifications with malicious links. These links often lead victims to unwittingly transfer funds to wallets controlled by the scammers. Advanced tactics such as email spoofing and automated doxxing tools are employed to make the attacks more convincing. The ultimate goal is to bypass security measures and siphon funds directly.
The scammers also revealed their laundering methods, which involve using Tornado Cash to anonymize transactions and converting stolen funds into privacy coins like Monero. They avoid KYC exchanges and rely on intermediaries and hardware wallets like Ledger to cash out. Calling the crypto industry the “Wild Wild West,” the scammer admitted their ambition to scale their operations to $100,000 monthly.
Crypto phishing scams have surged, with over $127 million stolen in the third quarter of 2024 alone, highlighting the ongoing vulnerabilities in the industry despite increased security efforts.
ALEX Protocol, a DeFi platform built on Bitcoin’s Stacks layer, has suffered a second major breach—this time resulting in an estimated $14 million loss.
A Ukrainian man has been arrested for allegedly orchestrating a years-long cryptojacking scheme that compromised thousands of online accounts tied to a global hosting provider, authorities revealed this week.
An extensive international cybercrime network has been brought down after law enforcement seized 145 domains linked to BidenCash, a notorious online marketplace that thrived on trading stolen credit card data and compromised digital identities.
Hackers in the crypto world are changing course, moving away from exploiting smart contracts and turning their focus toward tricking users directly.