hey everyone,

With the return of moon distributions underway, I wanted to share a recent scam attempt I experienced to help protect others in the community.

So I had questions about setting up a wallet for my moons. Eventually, someone reached out, claiming they could assist me in managing moons through TrustWallet (no idea why they wanted me to get this wallet).

Honestly, he seemed knowledgeable and friendly. He almost immediately directed me to a site called dapps-chains to "validate" my wallet. I didn't really know what this meant, and with new tech emerging all the time in this space, I sometimes give people the benefit of the doubt. The site looked fishy though.

list of \"features\": Migration Issues, Asset Recovery, Rectification, High Gas Fees, Slippage Error, Transaction Error, Cross Chain Transfer, Staking Issues, Swap/Bridge, Claim Reflection, Validation, Login Issues, Claim Airdrop, NFTS Issues, Missing/Irregular Balances, Threats Scan, Transaction Delays, Locked Accounts, Trading Wallet Issues, Tokens Purchase, Wallet Whitelist, Wallet Issuance, Wallet Retrieval, Others

Now, legitimate dApps usually have reviews or audits by security and auditing companies, which this site lacked. They had a whole list of features that did not appear realistic.

I clicked the TrustWallet icon to connect, and it immediately asked for my seed phrase. Alarm bells started going off. I never share my keys with anything outside of reputable trusted wallets.

For my developers out there, here is what the network tab looked like when attempting to connect to TrustWallet. It did not even attempt to connect to TrustWallet and then asked for my seed phrase:

https://i.redd.it/kx4ngswt05fd1.gif

Obviously, this was a scam. I played along and even edited a screenshot of my wallet to show fake balances. Despite the obvious fakery, the scammer didn’t notice and kept trying to get my seed phrase, lmao.

https://preview.redd.it/o6i56n7y05fd1.jpg?width=300&format=pjpg&auto=webp&s=e470e16debc720ffec1badbf5b16797990a3eb3c

I messed around with him for a bit, trying to waste his time. I think he figured out I was bullshitting him and stopped responding after a few days.

The scammer’s strategy is clear:

• Engage the victim in setting up a new wallet
• Direct them to validate the wallet on an illegitimate site
• Extract the seed phrase
• Wait for the user to fund the wallet, then steal the funds

Warning to Everyone:

• Be extremely cautious with your seed phrase. Only enter it on trusted, well-known wallet services.
• Be wary of unsolicited help via DMs. Scammers often pose as helpful community members.
• Verify the legitimacy of any site. Look for reviews, audits, and check community forums before interacting with unfamiliar sites.

Stay safe, folks, and if you suspect a scam, report it and warn others