Cryptocurrency has grown significantly in popularity and value over the past decade, making it an attractive target for scammers. Exchange impersonation is one of the latest tactics employed by these fraudsters. It involves impersonating employees from cryptocurrency exchanges.
Recently, the FBI warned about this prevalent scam, where scammers reach out to unsuspecting victims and steal their funds. In this blog post, we explain how the scam works and provide essential tips to protect yourself from falling victim to it.
Exchange Impersonation Scam Case Study
In 2020, Binance was affected by this type of scam. Many customers received unsolicited emails and phone calls from individuals claiming to be Binance support staff. These fraudsters used spoofed contacts to appear authentic.
They falsely warned Binance customers that their accounts were at risk of being compromised as a result of a security breach.
To that effect, they asked the trading platform’s customers to have their accounts secured by providing their login details and two-factor authentication codes.
Consequently, they gained access to the accounts of customers who honored the request and later sent follow-up emails requesting additional personal information. The customers further provided their proof of address and passport photos without knowing that they were falling into a scam.
Consequently, those customers lost their cryptocurrencies, prompting Binance to issue a public warning and offer guidelines on how to tell authentic customer support communications. The company advised its customers to enable and strictly use the 2-factor authentication account security protocol. It also advised them to avoid sharing their sensitive account information, which scammers may use to access their accounts and steal their cryptocurrencies.
How the Exchange Impersonation Scam Works
Scammers utilize various techniques to reach their victims, typically through unsolicited phone calls or messages. These messages may come in the form of emails, texts, or even social media communications. Here is a detailed breakdown of how these scams usually unfold:
#1. The exchange impersonation scam begins when the fraudster contacts the victim without prior solicitation. The scammer poses as an employee from a well-known cryptocurrency exchange. This impersonation often involves the scammer using official-sounding language and employing tactics to make their contact appear legitimate.
#2. Victim Manipulation. To manipulate the victim, the scammer creates a sense of urgency. They might claim that there is an immediate problem with the victim’s cryptocurrency account. Common claims include saying the account has been compromised or that there are unauthorized attempts to access the account. The aim is to alarm the victim and prompt them to act quickly without thorough consideration.
#3. Requesting sensitive information. Here, the scammer instructs the victim to take steps to secure their account. These steps often include:
- Providing sensitive information like personal identification details or log-in credentials.
- Clicking on a malicious link.
- The scammer may also ask the victim to download software or visit a specific website to resolve the issue.
#4. Finally, once the victim complies and provides the requested information or follows the instructions, the scammer gains access to the victim’s cryptocurrency account. With this access, the scammer can transfer the victim’s funds to their own accounts, effectively stealing the cryptocurrency. By the time the victim realizes what has happened, it is often too late to recover the stolen assets.
Tips to Protect Yourself From Exchange Impersonation Scam
To safeguard your cryptocurrency and personal information from such scams, consider the following tips:
#1. Do not respond to unsolicited contacts: If you receive a call or message indicating any kind of account problem or compromise, ignore it, especially if it demands urgent action. Fraudsters will try to push you into making harried decisions by creating a false sense of urgency. Ignore the message or end the call, and then contact the crypto exchange using the official customer service contact information or phone number provided on their verified website. Do not use any phone number or contact information given by the potential scammer.
#2. Avoid clicking any links sent by the caller or visiting any websites recommended by them. Instead, go to the official website of the crypto exchange by typing the URL directly into your browser.
#3. Never provide log-in information to anyone under any circumstances. Your crypto exchange will never ask for your sensitive log-in credentials casually over the phone or via email.
#4. Exercise caution with unsolicited messages that ask you to click on links, download files, or open attachments. The scammer might be trying to put malware onto your device to gain unauthorized access to your accounts.
Further Considerations
While the tips above provide a solid foundation for protecting yourself against exchange impersonation scams, it’s also important to remain vigilant and continuously educate yourself about emerging threats. Scammers constantly evolve their tactics, and staying informed is one of the best defenses. Here are a few additional points to consider:
#1. Always inspect your accounts frequently to see if there’s any unusual activity. By detecting suspicious activity early, it’s easy to prevent further losses quickly.
#2. Implement strong passwords, two-factor authentication (2FA), unique passwords for different accounts, and other strong security practices to safeguard your accounts. These practices will make it harder for cybercriminals to access your accounts.
#3. Educate yourself and others, sharing information about these scams with friends, family, and colleagues. The more people know about these tactics, the fewer victims scammers will have.
Final Thoughts
Exchange impersonation scams, involving fraudsters impersonating exchange employees, are a serious threat. However, by understanding the ways of these scammers, it’s easy to be proactive and protect yourself and those around you.
Always verify the authenticity of any unsolicited contact, avoid providing sensitive information, and report any suspicious activity to the relevant authorities. By remaining informed and vigilant, you can avoid crypto exchange impersonation scams.
Report An Exchange Impersonation Scam and Pursue Your Funds
Would you like to report any activity associated with the exchange impersonation scam? If so, go to this page, or send an email to scamread@scamreader.info.