\u30d3\u30c3\u30c8\u30b3\u30a4\u30f3\u306f\u3001\"HASH \"\u3068\u547c\u3070\u308c\u308b\u6570\u5b66\u95a2\u6570\u306b\u3088\u3063\u3066\u4f5c\u6210\u3055\u308c\u305f\u30c7\u30b8\u30bf\u30eb\u756a\u53f7\u3067\u3042\u308b\u3002\u3053\u308c\u306f\u300c\u516c\u958b\u9375\u300d\u3068\u300c\u79d8\u5bc6\u9375\u300d\u3092\u901a\u3058\u3066\u30a2\u30af\u30bb\u30b9\u3055\u308c\u3001\u30c7\u30b8\u30bf\u30eb\u53f0\u5e33\u3067\u3042\u308b\u30d6\u30ed\u30c3\u30af\u30c1\u30a7\u30fc\u30f3\u306b\u4fdd\u6301\u3055\u308c\u308b\u3002\u53f0\u5e33\u306f\u7279\u5b9a\u306e\u5834\u6240\u306b\u4fdd\u7ba1\u3055\u308c\u308b\u306e\u3067\u306f\u306a\u304f\u3001\u591a\u304f\u306e\u5834\u6240\u306b\u4fdd\u7ba1\u3055\u308c\u308b\u3002<\/p>\n\n\n\n
\u53f0\u5e33\u306b\u8ffd\u52a0\u3067\u304d\u308b\u306e\u306f\u65b0\u3057\u3044\u53d6\u5f15\u3060\u3051\u3067\u3001\u65e2\u5b58\u306e\u53d6\u5f15\u3092\u5909\u66f4\u3057\u305f\u308a\u524a\u9664\u3057\u305f\u308a\u3059\u308b\u3053\u3068\u306f\u3067\u304d\u306a\u3044\u3002\u30d3\u30c3\u30c8\u30b3\u30a4\u30f3\u3084\u4ed6\u306e\u6697\u53f7\u901a\u8ca8\u3082\u540c\u69d8\u306e\u539f\u7406\u3067\u52d5\u3044\u3066\u3044\u308b\u3002\u305d\u306e\u305f\u3081\u3001\u8ab0\u3067\u3082\u3053\u308c\u307e\u3067\u306b\u767a\u751f\u3057\u305f\u3059\u3079\u3066\u306e\u53d6\u5f15\u3092\u898b\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u304c\u3001\u8ab0\u304c\u3069\u306e\u30d3\u30c3\u30c8\u30b3\u30a4\u30f3\u3092\u6240\u6709\u3057\u3066\u3044\u308b\u304b\u306f\u8ab0\u3082\u77e5\u3089\u306a\u3044\u3002<\/p>\n\n\n\n
\u30d3\u30c3\u30c8\u30b3\u30a4\u30f3\u3067\u4f55\u304b\u3092\u8cb7\u3044\u305f\u3044\u5834\u5408\u3001\u30d3\u30c3\u30c8\u30b3\u30a4\u30f3\u3092\u652f\u6255\u3044\u3068\u3057\u3066\u53d7\u3051\u5165\u308c\u3066\u304f\u308c\u308b\u58f2\u308a\u624b\u3092\u898b\u3064\u3051\u306a\u3051\u308c\u3070\u306a\u3089\u306a\u3044\u3002\u53d6\u5f15\u306f\u3001\u6697\u53f7\u53d6\u5f15\u6240\u3092\u901a\u3058\u3066\u3001\u307e\u305f\u306f\u4eba\u3068\u4eba\u3068\u306e\u9593\u3067\u76f4\u63a5\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n
\u4ed6\u306e\u4f01\u696d\u3082\u30d3\u30c3\u30c8\u30b3\u30a4\u30f3\u306e\u8db3\u8de1\u3092\u305f\u3069\u308a\u3001\u72ec\u81ea\u306e\u30c7\u30b8\u30bf\u30eb\u901a\u8ca8\u3092\u4f5c\u308a\u51fa\u3057\u305f\u3002\u73fe\u5728\u3001\u591a\u304f\u306e\u4ee3\u66ff\u6697\u53f7\u901a\u8ca8\u304c\u5b58\u5728\u3057\u3001\u305d\u306e\u591a\u304f\u306f\u30b3\u30a4\u30f3\u5168\u4f53\u306e\u4f9b\u7d66\u91cf\u3084\u30cf\u30c3\u30b7\u30e5\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u5909\u66f4\u3057\u305f\u5c0f\u3055\u306a\u30b3\u30d4\u30fc\u3067\u3042\u308b\u3002\u30ea\u30c3\u30d7\u30eb\u3068\u30e9\u30a4\u30c8\u30b3\u30a4\u30f3\u306f\u305d\u306e\u4ee3\u8868\u4f8b\u3060\u3002\u4e00\u65b9\u3001\u30a4\u30fc\u30b5\u30ea\u30a2\u30e0\u306f\u30c7\u30b8\u30bf\u30eb\u901a\u8ca8\u4ee5\u4e0a\u306e\u5b58\u5728\u306b\u306a\u308b\u3053\u3068\u3092\u76ee\u6307\u3057\u3066\u4f5c\u3089\u308c\u305f\u3002\u30b9\u30de\u30fc\u30c8\u30b3\u30f3\u30c8\u30e9\u30af\u30c8\u3084\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u304c\u6e80\u305f\u3055\u308c\u305f\u3068\u304d\u306b\u81ea\u52d5\u7684\u306b\u5b9f\u884c\u3055\u308c\u308b\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3067\u304d\u308b\u5206\u6563\u578b\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u3042\u308b\u3002\u3053\u308c\u306b\u3088\u3063\u3066\u3001\u5206\u6563\u578b\u30a2\u30d7\u30ea\uff08dapps\uff09\u306e\u958b\u767a\u306a\u3069\u3001\u307e\u3063\u305f\u304f\u65b0\u3057\u3044\u53ef\u80fd\u6027\u304c\u5e83\u304c\u3063\u3066\u3044\u308b\u3002<\/p>\n\n\n\n
\u6697\u53f7\u901a\u8ca8\u306f\u591a\u304f\u306e\u4eba\u3005\u306e\u60f3\u50cf\u529b\u3092\u304b\u304d\u7acb\u3066\u3001\u305d\u306e\u4eba\u6c17\u306f\u8fd1\u5e74\u6025\u4e0a\u6607\u3057\u3066\u3044\u308b\u3002\u3057\u304b\u3057\u3001\u3053\u306e\u3088\u3046\u306a\u95a2\u5fc3\u306f\u3001\u591a\u304f\u306e\u6697\u53f7\u8a50\u6b3a\u3092\u8a98\u767a\u3057\u3066\u3044\u307e\u3059\u3002\u4ee5\u4e0b\u3067\u306f\u3001\u6700\u3082\u4e00\u822c\u7684\u306a\u6697\u53f7\u8a50\u6b3a\u306e\u7a2e\u985e\u3092\u7d39\u4ecb\u3059\u308b\u3002<\/p>\n\n\n
\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u8a50\u6b3a<\/strong><\/h2>\n\n\n![\"Phishing](\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2022\/09\/Phishing-Scams-crypto-1024x512.jpg\")
<\/figure>\n\n\n\nPhishing is the illegal act of obtaining sensitive and confidential details, such as usernames, passwords, private keys or payment information, through fake websites and misleading links.<\/p>\n\n\n\n
Users are fooled into thinking they are entering their information on a trusted website or following a legitimate link that has been shared with them through emails, messages or Google ads.<\/p>\n\n\n\n
What usually happens is that users receive an email giving them the false idea that something has happened to their account or wallet and that they need to fix it by following a link.<\/p>\n\n\n\n
The link directs them to a fake website, usually designed to resemble the original website. It may use the same design, color scheme, logo and font style, forcing visitors to believe they are in the right place.<\/p>\n\n\n\n
Once the user enters the information, it is passed on to the scammers, who can then use it however they want. They may use the information straight away or store it for later, depending on how much they believe they can gain from the account.<\/p>\n\n\n\n\nIn plain terms: how a phishing attack actually reaches you<\/summary>\n\nThink of it as a fake shopfront. The attacker copies a website you already trust, then needs one thing only: for you to walk through the wrong door.<\/p>\n
The usual chain has four links. First, contact \u2014 an email, an SMS, a Telegram or Discord message, or a paid ad sitting above the real result in Google. Second, a reason to hurry \u2014 a “suspicious login”, a “wallet migration”, a refund waiting for you. Third, the fake page \u2014 visually identical to the real one, sitting on a domain that is one character off. Fourth, the harvest \u2014 whatever you type is sent straight to the attacker, often while the page shows a spinning loader so you do not realise anything went wrong.<\/p>\n
The important part: no software on your computer has been broken. Nothing was hacked. You were persuaded. That is why antivirus rarely stops phishing and why the defence has to be a habit rather than a tool.<\/p>\n<\/div>\n<\/details>\n\n\n\n
MyEtherWallet<\/a> is a prime example of this style of scam. Fake websites and applications were designed with the same look as the official platform, making users feel safe enough to provide the same information they would normally enter on the real website.<\/p>\n\n\n\nThis resulted in huge losses for users. To think that a fake MyEtherWallet app reportedly became one of the top apps in its category is scary. How easily it spread and affected so many users shows how vulnerable the cryptocurrency industry can be and how exposed users are to these attacks.<\/p>\n\n\n\n
Another method is the use of fake airdrops. This is when scammers pretend to represent legitimate companies and offer free tokens to large numbers of people.<\/p>\n\n\n\n
Along with the offer comes the need to download an application, connect a wallet or visit a portal created by the same individuals looking to make easy money at your expense.<\/p>\n\n\n\n
Users may be asked to enter their usernames, passwords, seed phrases or private keys. Once this information is provided, the scammers may gain access to the wallet and drain the account.<\/p>\n\n\n\n\nIn plain terms: why a “free token” airdrop is such an effective hook<\/summary>\n\nAn airdrop is a real thing. Genuine projects do hand out free tokens to early users, and that is exactly what makes the fake version work \u2014 the offer is not obviously absurd.<\/p>\n
The trick is what the offer asks for in return. A real airdrop never needs your seed phrase, your private key or your exchange password, because a seed phrase is not a login: it is the wallet itself. Anyone holding it owns every coin in that wallet, permanently, with no support line to call.<\/p>\n
The second version is quieter. Instead of asking you to type anything, the site asks you to “connect wallet” and approve a transaction to claim your tokens. The approval you sign is not a claim \u2014 it is permission for the attacker’s contract to move your tokens whenever it likes. The wallet may look untouched for days before it is emptied. Read what you are signing, and treat unlimited spending approvals as a decision, not a formality.<\/p>\n<\/div>\n<\/details>\n\n\n
How to Avoid Being Scammed<\/h3>\n\n\n
Now the question is, what needs to be done to avoid these activities?<\/p>\n\n\n\n
The answer is simple. Be informed.<\/p>\n\n\n\n
Keep yourself up to date. The more you know about what is happening around the world, the better. Subscribe to trusted news websites and read as much as possible.<\/p>\n\n\n\n
Discuss these subjects with people who understand them and talk about the latest scams. It requires some effort on your part. Be curious. Know more.<\/p>\n\n\n\n
A few things to keep in mind are as follows.<\/p>\n\n\n
Check the Website Address<\/h4>\n\n\n
Make sure the website address you are visiting is the same one you normally use.<\/p>\n\n\n\n
Usually, there are a few small differences that are ignored or difficult to notice. A scammer may change one letter, add an extra word or use a slightly different domain.<\/p>\n\n\n\n
But this is your hard-earned money we are talking about here, so you have to be careful every single time you are asked to enter your details.<\/p>\n\n\n\n
Double-check the address.<\/p>\n\n\n\n
It should start with \u201chttps\u201d and not just \u201chttp,\u201d but remember that HTTPS alone does not prove that the website is legitimate. Scam websites can also use HTTPS.<\/p>\n\n\n\n
The best option is to bookmark the official website or type the address manually into your browser.<\/p>\n\n\n\n\nIn plain terms: what a lookalike address actually looks like<\/summary>\n\nRead a domain from right to left, not left to right. The part that decides where you really are is the last two pieces before the first single slash \u2014 everything to the left of that can be invented freely by whoever owns the domain.<\/p>\n
So login.yourexchange.com.secure-verify.io<\/code> is not your exchange. It is secure-verify.io<\/code>, wearing your exchange’s name as a costume. The same goes for a hyphen where there should be nothing (your-exchange.com<\/code>), an extra word (yourexchange-wallet.com<\/code>), a swapped letter (yourexchagne.com<\/code>), a different ending (.co<\/code>, .net<\/code>, .app<\/code> instead of \u30c9\u30c3\u30c8\u30b3\u30e0<\/code>), and characters from another alphabet that render identically to Latin ones.<\/p>\nThis is also why HTTPS proves so little. The padlock only means the connection is encrypted between you and whoever owns that address \u2014 and a scammer can get a certificate for their own fake domain in minutes, for free. Encrypted does not mean honest. A bookmark, or typing the address yourself, removes the guesswork entirely.<\/p>\n<\/div>\n<\/details>\n\n\n
Go With Your Gut Feeling<\/h4>\n\n\n
If the website does not feel right, something looks off or something feels different from your normal routine, stop.<\/p>\n\n\n\n
Do not proceed without verifying it.<\/p>\n\n\n\n
Call a friend who knows a thing or two. Contact the company through its official website. Do something. Just do not go with the flow.<\/p>\n\n\n
Watch Out for Urgency<\/h4>\n\n\n
Another very common tactic these fishy websites use is creating a sense of urgency.<\/p>\n\n\n\n
They give warnings. They use deadlines. They force the user to take action as quickly as possible, sometimes using big, bold red titles with words such as \u201cHURRY,\u201d \u201cURGENT\u201d or \u201cACCOUNT SUSPENDED.\u201d<\/p>\n\n\n\n
The aim is to create panic and make users act without thinking rationally. Most of the time, the result is terrible.<\/p>\n\n\n\n
If a message is rushing you, stop and check the account directly through the official website. Do not use the link in the message.<\/p>\n\n\n\n\nIn plain terms: why urgency is the giveaway, not the emergency<\/summary>\n\nUrgency is not decoration on the scam. It is the scam. Careful checking takes a couple of calm minutes, so the attacker’s whole job is to make sure you never get those minutes.<\/p>\n
It works because fear narrows attention. Told that your account is being drained right now, you stop reading the address bar and start looking for the button that makes the problem go away. That is the moment the fake page is built for.<\/p>\n
The defence needs no expertise at all: any message that pressures you is, by that fact alone, a message you should not act on from inside the message. Close it. Open the site the way you normally do \u2014 your own bookmark, your own typing, your own app. If the emergency is real, it will still be there on the official dashboard. It almost never is.<\/p>\n<\/div>\n<\/details>\n\n\n
Use a Strong Password<\/h4>\n\n\n
Always set a strong password.<\/p>\n\n\n\n
More importantly, remember that password or store it safely in a trusted password manager. It is very common for people to forget their passwords and lose access to their own wallets or accounts.<\/p>\n\n\n\n
Use a different password for every account and enable two-factor authentication whenever possible.<\/p>\n\n\n\n
Never give anyone your password, private key or seed phrase. A real wallet company or customer support agent should never ask for this information.<\/p>\n\n\n\n
Later on, we will explain in more detail how to avoid scams and the main dos and don\u2019ts.<\/p>\n\n\n\n\nIn plain terms: password, private key and seed phrase are three different things<\/summary>\n\nPeople use these words interchangeably, and scammers rely on that confusion.<\/p>\n
A password<\/strong> unlocks an account on somebody else’s service \u2014 an exchange, for example. If it is stolen, the company can freeze the account and give it back to you.<\/p>\nA \u79d8\u5bc6\u9375<\/strong> authorises spending from one specific address. Whoever holds it can move those funds. It cannot be changed or revoked.<\/p>\nA seed phrase<\/strong> \u2014 the 12 or 24 words written down when you created the wallet \u2014 regenerates every private key in that wallet. It is not a password for the wallet: it is<\/em> the wallet. Type it into a website and the money is gone, usually within minutes, with nobody to appeal to.<\/p>\nSo the rule has two halves. Passwords: unique per account, stored in a password manager, with two-factor authentication turned on \u2014 and prefer an authenticator app or a hardware key over SMS codes, which can be stolen through a SIM swap. Seed phrase: never typed into any website, any support chat, any “wallet validation” tool, ever. Legitimate support will never ask, because legitimate support cannot use it for anything except stealing from you.<\/p>\n<\/div>\n<\/details>\n\n\n
Mining Scams<\/strong><\/h2>\n\n\n![\"\u6697\u53f7\u30de\u30a4\u30cb\u30f3\u30b0\u8a50\u6b3a\"](\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2022\/09\/Crypto-Mining-Scams-2-1-1024x512.jpg\")
<\/figure>\n\n\n\nMining scams are another interesting part of the cryptocurrency world. Many of them use cloud mining.<\/p>\n\n\n\n
Now, not all cloud mining is illegitimate. Some companies use cloud mining for legitimate purposes. But, as always, there are a few that have used cloud mining negatively and carried out elaborate schemes to scam people.<\/p>\n\n\n\n
Cloud mining is the process of mining cryptocurrencies through a remote service. There are companies that allow people to open an account with them and, in return, let users participate in the mining process.<\/p>\n\n\n\n
The process is conducted through the company\u2019s equipment, removing the need for users to purchase hardware or deal directly with equipment maintenance and energy costs.<\/p>\n\n\n\n
There are legitimate operations out there, and there are people who participate in them. At the same time, there are companies that are completely on the wrong side of the law and every ethical boundary.<\/p>\n\n\n\n\nIn plain terms: what you are actually buying with cloud mining<\/summary>\n\nYou are renting a share of someone else’s machines and paying for the electricity they burn. In exchange you receive whatever those machines earn, minus the operator’s fee.<\/p>\n
That is the whole model, and it explains why the margins are thin even when everything is honest. The operator has already paid for the hardware and pays the power bill; they only sell you a contract if their cut makes it worth more to them than mining it themselves. You are, by design, on the less profitable side of that trade.<\/p>\n
It also explains why the fraudulent version is so easy to run. Nothing about a cloud mining contract is visible to the buyer. There is no machine you can point at, no hash rate you can independently confirm, no way to tell rented capacity from a spreadsheet. A dashboard showing your “daily earnings” costs nothing to fake, and the payouts can be funded entirely by the next customer’s deposit \u2014 at which point it has stopped being mining and become a Ponzi scheme with mining-themed graphics.<\/p>\n<\/div>\n<\/details>\n\n\n
The Returns<\/h3>\n\n\n
Returns are one way of looking at these operations and judging whether they may be trying to sting you.<\/p>\n\n\n\n
But be careful. Very high or guaranteed returns are usually a bigger warning sign than low returns.<\/p>\n\n\n\n
Cryptocurrency mining depends on electricity prices, hardware performance, mining difficulty, fees and the value of the cryptocurrency being mined. No legitimate company can guarantee massive profits without any risk.<\/p>\n\n\n\n
If a company promises easy money, fixed daily profits or returns that sound too good to be true, there is a good chance something is wrong.<\/p>\n\n\n\n
Steer clear of such setups. They are not for you. Or anyone, for that matter.<\/p>\n\n\n\n\nIn plain terms: why a fixed daily return is impossible in mining<\/summary>\n\nMining income moves every single day, because five separate things underneath it move every single day.<\/p>\n
Mining difficulty<\/strong> rises as more machines join the network, so the same hardware earns less over time \u2014 this is automatic and continuous. The coin price<\/strong> swings, and your earnings are paid in that coin. Electricity<\/strong> is the largest running cost and is priced by the hour in many markets. Hardware<\/strong> ages, fails and gets outpaced by newer models. Network fees<\/strong> and block rewards change too \u2014 Bitcoin’s reward halves roughly every four years, cutting the income from identical work in half overnight.<\/p>\nAny one of those makes a guaranteed number impossible. All five together make it a claim nobody could honour even if they wanted to. So when an operator quotes a flat “1.5% per day”, they are not describing mining output; they are describing a marketing figure they have chosen. The money to pay it has to come from somewhere, and if it is not coming from the machines, it is coming from the next depositor.<\/p>\n<\/div>\n<\/details>\n\n\n
Transparency<\/h3>\n\n\n
Is the company allowing you to examine how it works, what tools it uses and how it plans to take the business forward?<\/p>\n\n\n\n
If not, you should be concerned that there is something it does not want you, or anyone outside its inner circle, to know.<\/p>\n\n\n\n
Transparency is very important. Every user has the right to know about the company they are going to be involved with.<\/p>\n\n\n\n
You should be able to find information about the owners, business address, equipment, fees, contracts, withdrawal rules and how returns are calculated.<\/p>\n\n\n\n
There should be no question about it.<\/p>\n\n\n\n\nIn plain terms: how to check transparency yourself, in ten minutes<\/summary>\n\nTransparency is not a feeling about a website. It is a list of specific claims you can go and verify.<\/p>\n
The people.<\/strong> Are named executives listed, and do those names exist outside this company’s own website \u2014 conference talks, an employment history, press coverage? Photographs that appear on stock-image sites, or a team page with no surnames, answers the question on its own.<\/p>\nThe company.<\/strong> A registration number and address can be checked in the relevant national companies register in a couple of minutes. A serviced-office address shared with hundreds of other entities, or a registration two months old behind a decade of claimed operating history, is a contradiction worth taking seriously.<\/p>\nThe machines.<\/strong> Which model, how many, in which facility, at what power cost? Honest operators publish this because it is their pitch. Photographs of a data centre prove nothing \u2014 reverse-image search them.<\/p>\nThe exit.<\/strong> Withdrawal minimums, fees, processing times, and whether payouts stop during “maintenance”. This is where the complaints appear first, so search the company name together with the word withdrawal and read what people say when they try to leave.<\/p>\nIf asking any of this directly gets you a support agent who changes the subject or offers a bonus for depositing more, that is your answer.<\/p>\n<\/div>\n<\/details>\n\n\n
\u30de\u30eb\u30a6\u30a7\u30a2\u8a50\u6b3a<\/strong><\/h2>\n\n\n![\"\u6697\u53f7\u30de\u30eb\u30a6\u30a7\u30a2\u8a50\u6b3a\"](\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2022\/09\/Malware-Scams-crypto-1024x512.jpg\")
<\/figure>\n\n\n\nA malware portal or infected application can be used to attack your computer and hit you exactly where it hurts.<\/p>\n\n\n\n
Malicious software<\/a> is created and placed inside downloads, wallet applications, browser extensions, email attachments or fake updates.<\/p>\n\n\n\nOnce the computer is infected, the malware can take control of certain functions and steal private information or data in the way it was designed to do.<\/p>\n\n\n\n
There are numerous ways through which the job can be done.<\/p>\n\n\n\n
One example is malware that can compromise a Bitcoin wallet. When you attempt to send coins to a friend in need, the original wallet address may be replaced with a fake one belonging to the scammer.<\/p>\n\n\n
Cryptocurrency Clipboard Hijackers<\/h3>\n\n\n
One type of malware scam that received attention was known as a cryptocurrency clipboard hijacker.<\/p>\n\n\n\n
It used the Windows clipboard as its weapon.<\/p>\n\n\n\n
Some of these scammers used the clipboard to monitor thousands of cryptocurrency addresses, but one reported version was much bigger. It was said to monitor around 2.3 million addresses.<\/p>\n\n\n\n
The malware used the copy-and-paste mechanism of Windows systems.<\/p>\n\n\n\n
Cryptocurrency addresses are usually long and difficult to remember. When users copied and pasted an address, the malware replaced it with a forged address belonging to the scammer.<\/p>\n\n\n\n
The transaction would then land in the wrong hands.<\/p>\n\n\n\n
Because cryptocurrency transactions are usually irreversible, the money may be impossible to recover once it has been sent.<\/p>\n\n\n\n
Always compare the wallet address before confirming a transaction. Check the first and last several characters, and for a large payment, consider sending a small test transaction first.<\/p>\n\n\n\n\nIn plain terms: how a clipboard hijacker steals a payment<\/summary>\n\nEvery time you copy something, your computer holds it in one shared pocket called the clipboard. Any program running on that machine can read that pocket, and any program can quietly change what is in it. That is not a flaw being exploited \u2014 it is how the clipboard has always worked.<\/p>\n
So the malware does nothing dramatic. It sits idle, watching what you copy, and does nothing at all until the thing you copied looks like a crypto address. At that instant it swaps your copied address for one of its own, chosen from its stored list to match the same currency and the same general shape. Then it goes quiet again.<\/p>\n
What makes it so effective is the psychology of the paste. You copied the correct address one second earlier, so you already know what should be in the box. Addresses are long, meaningless strings that the eye skims rather than reads, and the substitute often begins with similar characters. You glance, it looks right, you confirm \u2014 and the payment is final, on a public ledger, sitting in a stranger’s wallet.<\/p>\n
Two habits defeat it completely. Compare characters at the start \u305d\u3057\u3066<\/em> at the end of the address after pasting, not just at the start. And for anything substantial, send a small test amount first, confirm it arrived, then send the rest.<\/p>\n<\/div>\n<\/details>\n\n\nHow to Spot Possible Malware<\/h3>\n\n\n\n- Your computer shows signs of slowing down.<\/li>\n
- Pop-up ads begin appearing far too often and become difficult to ignore.<\/li>\n
- You notice unusual activity that you were not responsible for.<\/li>\n
- Programs open or close by themselves.<\/li>\n
- Your browser settings suddenly change.<\/li>\n
- Your security software becomes disabled.<\/li>\n
- You see login attempts or transactions that you did not authorize.<\/li>\n<\/ul>\n\n\n\n
If you believe your computer is infected, disconnect it from the internet and stop entering passwords or accessing wallets until the device has been checked.<\/p>\n\n\n\n\nIn plain terms: what to do first if you think you are infected<\/summary>\n\nOrder matters more than speed here, and the instinct most people follow \u2014 log in and check the accounts \u2014 is the one that does the damage.<\/p>\n
Disconnect first.<\/strong> Pull the Wi-Fi or the cable. Anything still being sent to the attacker stops at that moment.<\/p>\nDo not log in to anything from that machine.<\/strong> Not the exchange, not the email, not the wallet. If the device is compromised, every password you type is simply a new password being handed over.<\/p>\nChange passwords from a different device<\/strong> \u2014 a phone on mobile data, another computer \u2014 starting with the email account, because that is what resets everything else. Then the exchanges, then whatever shares those passwords.<\/p>\nAssume the seed phrase is gone<\/strong> if it was ever typed, photographed or stored on that machine. Move the funds to a wallet created on a clean device. Changing the password on the old wallet does nothing; the seed phrase still opens it.<\/p>\nClean the machine properly.<\/strong> A scan that finds nothing is not proof of safety. For a device that held real money, a full wipe and reinstall is the only honest reset.<\/p>\n<\/div>\n<\/details>\n\n\nFake Wallets<\/strong><\/h2>\n\n\n![\"\u507d\u306e\u6697\u53f7\u8ca1\u5e03\"](\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2022\/09\/Fake-Crypto-Wallets-1024x512.jpg\")
<\/figure>\n\n\n\nFake wallets are also a favorite of scammers.<\/p>\n\n\n\n
They create a fake wallet to trick people into revealing their passwords, private keys or seed phrases.<\/p>\n\n\n\n
Bitcoin Gold was new to the market, and users who were looking to claim their coins were directed to a fake wallet that went by the name of \u30de\u30a4\u30d3\u30fc\u30c6\u30a3\u30fc\u30b8\u30fc\u30a6\u30a9\u30ec\u30c3\u30c8.com<\/a>.<\/p>\n\n\n\nThinking it was the real thing, users provided information relating to their private keys and were deprived of millions of dollars as a result.<\/p>\n\n\n\n
The scam emptied wallets and reportedly cost users a combined amount close to $3.5 million.<\/p>\n\n\n\n
Keeping in mind the number of fake Google ads and advertisements being thrown at you every day, you have to be very careful when visiting a website or downloading a wallet.<\/p>\n\n\n\n
The ideal thing to do is to keep the original website bookmarked or type the address manually into your browser.<\/p>\n\n\n\n
Only download wallets through the official project website or verified app-store page.<\/p>\n\n\n
How to Spot a Fake Wallet<\/h3>\n\n\n\n- Information about the wallet or its business model is missing.<\/li>\n
- There is no presence on major cryptocurrency or security websites that usually cover important platforms.<\/li>\n
- The platform has only recently been created.<\/li>\n
- The developers or company owners cannot be identified.<\/li>\n
- The wallet asks for your private key or seed phrase without a valid reason.<\/li>\n
- The website uses \u201chttp\u201d instead of \u201chttps,\u201d meaning the connection is not secure.<\/li>\n
- The app appears mainly through paid advertisements rather than official channels.<\/li>\n
- The reviews seem copied, repetitive or far too positive.<\/li>\n<\/ul>\n\n\n\n
Remember that HTTPS does not automatically mean a website is safe. Always verify the domain, the company and the official download link before entering any sensitive information.<\/p>\n\n\n\n\nIn plain terms: how to verify a wallet before you install it<\/summary>\n\nThe dangerous moment is not using the wallet \u2014 it is choosing it. Almost every fake wallet is found the same way: through a search result, an ad, or an app store listing, rather than through the project itself.<\/p>\n
Start from the project, never from the search box.<\/strong> Find the official website through a source you already trust, then follow its download link to the app store. That single reversal removes the most common trap, because a paid ad can sit above the real result and a store listing can carry the real logo.<\/p>\nRead the listing sceptically.<\/strong> Check the publisher name against the one on the official site, the install count against how well known the wallet is, and the release date \u2014 a wallet claiming years of history with a listing from last month is a copy. Reviews that are numerous, five-star, short and posted within the same few days are bought.<\/p>\nWatch the first screen.<\/strong> A genuine wallet either creates a new seed phrase for you or asks you to type an existing one to restore your own<\/em> wallet \u2014 offline, on the device. If the first thing the app or site asks for is a seed phrase in order to “verify”, “sync”, “validate” or “unlock rewards”, close it.<\/p>\nTest small.<\/strong> Before moving anything meaningful, send a small amount in, send it back out, and confirm both transactions on a block explorer. A wallet that accepts deposits but stalls on withdrawals has told you what it is while it still costs almost nothing to find out.<\/p>\n<\/div>\n<\/details>\n\n\nICO\u8a50\u6b3a<\/strong><\/h2>\n\n\n![\"ICO](\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2022\/09\/ICO-SCAMS-crypto-1-1024x512.jpg\")
<\/figure>\n\n\n\n\u6697\u53f7\u901a\u8ca8\u306e\u767b\u5834\u4ee5\u6765\u3001\u6a5f\u95a2\u6295\u8cc7\u5bb6\u306f\u30c7\u30b8\u30bf\u30eb\u8cc7\u7523\u306b\u5927\u304d\u306a\u95a2\u5fc3\u3092\u5bc4\u305b\u3066\u3044\u308b\u3002\u3057\u304b\u3057\u3001\u591a\u304f\u306eICO\u304c\u8a50\u6b3a\u3068\u306a\u308a\u3001\u591a\u984d\u306e\u8cc7\u91d1\u3092\u7372\u5f97\u3057\u305f\u9014\u7aef\u306b\u4e8b\u696d\u304c\u6d88\u6ec5\u3057\u3066\u3044\u308b\u3002<\/p>\n\n\n\n
\u8cc7\u91d1\u306f\u3059\u3067\u306b\u8abf\u9054\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u9069\u7528\u306b\u95a2\u3059\u308b\u30af\u30ea\u30a8\u30a4\u30bf\u30fc\u306e\u6c7a\u5b9a\u3092\u76e3\u7763\u3059\u308b\u898f\u5236\u6a5f\u95a2\u3082\u306a\u3044\u305f\u3081\u3001ICO\u306f\u8cc7\u91d1\u3092\u3069\u3046\u4f7f\u304a\u3046\u3068\u81ea\u7531\u3060\u3002\u8cc7\u91d1\u3092\u6301\u3061\u9003\u3052\u3059\u308b\u3053\u3068\u3082\u3001\u6cd5\u5f8b\u306e\u7bc4\u56f2\u5185\u3067\u6d3b\u52d5\u3059\u308b\u3053\u3068\u3082\u7c21\u5358\u306b\u3067\u304d\u308b\u3002<\/p>\n\n\n\n
\u30ae\u30b6\u8a50\u6b3a<\/a> \u306f\u3001\u8a50\u6b3a\u7684\u306aICO\u6d3b\u52d5\u306e\u60aa\u540d\u9ad8\u3044\u4f8b\u3067\u3001\u7591\u3046\u3053\u3068\u3092\u77e5\u3089\u306a\u3044\u6295\u8cc7\u5bb6\u304b\u3089$2\u4e07\u30c9\u30eb\u8fd1\u304f\u304c\u596a\u308f\u308c\u305f\u3002\u5927\u624b\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u304c\u3001\u652f\u63f4\u8005\u306a\u3089\u8ab0\u3067\u3082\u9003\u3052\u51fa\u3059\u3088\u3046\u306a\u7406\u7531\u3067\u30ae\u30b6\u3068\u306e\u63d0\u643a\u3092\u89e3\u6d88\u3057\u305f\u3068\u767a\u8868\u3059\u308b\u3068\u3001\u8b66\u544a\u306e\u65d7\u304c\u306f\u305f\u3081\u304d\u59cb\u3081\u305f\u3002\u3059\u3050\u306b\u8a50\u6b3a\u7591\u60d1\u304c\u6301\u3061\u4e0a\u304c\u308a\u3001\u8ab0\u3082\u304a\u91d1\u3092\u53d6\u308a\u623b\u305b\u306a\u304f\u306a\u3063\u305f\u3002<\/p>\n\n\n\n\u30a8\u30cb\u30b0\u30de\u30fb\u30ab\u30bf\u30ea\u30b9\u30c8\u30fb\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306e\u958b\u767a\u8005\u3082\u3001\u5b9f\u7528\u7684\u306a\u88fd\u54c1\u3092\u6301\u3063\u3066\u3044\u305f\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u3001$45\u4e07\u30c9\u30eb\u3092\u624b\u306b\u3057\u305f\u3002<\/p>\n\n\n
ICO\u8a50\u6b3a\u3092\u56de\u907f\u3059\u308b\u65b9\u6cd5<\/h3>\n\n\n
ICO\u3078\u306e\u6295\u8cc7\u3092\u691c\u8a0e\u3059\u308b\u969b\u306f\u3001\u81ea\u5206\u81ea\u8eab\u3067\u8abf\u67fb\u3057\u3001\u6c7a\u3057\u3066\u640d\u5931\u304c\u8a31\u5bb9\u3067\u304d\u308b\u4ee5\u4e0a\u306e\u6295\u8cc7\u306f\u3057\u306a\u3044\u3053\u3068\u3002\u6c7a\u65ad\u3092\u4e0b\u3059\u524d\u306b\u30db\u30ef\u30a4\u30c8\u30da\u30fc\u30d1\u30fc\u3092\u8aad\u307f\u3001\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u7406\u89e3\u3059\u308b\u3053\u3068\u3002<\/p>\n\n\n\n
\u8a55\u5224\u306e\u826f\u3044ICO\u3092\u898b\u3064\u3051\u308b\u306b\u306f\u3001\u597d\u610f\u7684\u306a\u30aa\u30f3\u30e9\u30a4\u30f3\u30ec\u30d3\u30e5\u30fc\u3068\u5f37\u529b\u306a\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u306e\u5b58\u5728\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3055\u3089\u306b\u3001\u305d\u306e\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306b\u5b9f\u7528\u7684\u306a\u88fd\u54c1\u304c\u3042\u308a\u3001\u5c06\u6765\u306e\u660e\u78ba\u306a\u30ed\u30fc\u30c9\u30de\u30c3\u30d7\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3082\u30c1\u30a7\u30c3\u30af\u3057\u3088\u3046\u3002<\/p>\n\n\n
\u30d1\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a<\/strong><\/h2>\n\n\n![\"\u30d1\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a\"](\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2022\/09\/Pump-and-Dump-Scam-1-1024x512.jpg\")
<\/figure>\n\n\n\n\u30d1\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u30fb\u30b9\u30ad\u30fc\u30e0\u3068\u306f\u3001\u6295\u8cc7\u8a50\u6b3a\u306e\u4e00\u5f62\u614b\u3067\u3001\u500b\u4eba\u304c\u904e\u5927\u8a55\u4fa1\u3055\u308c\u3066\u3044\u308b\u304b\u3001\u5931\u6557\u3059\u308b\u904b\u547d\u306b\u3042\u308b\u4f01\u696d\u306b\u6295\u8cc7\u3059\u308b\u3082\u306e\u3067\u3042\u308b\u3002\u8a50\u6b3a\u5e2b\u306f\u3053\u308c\u3089\u306e\u6295\u8cc7\u5bb6\u3092\u8aac\u5f97\u3057\u3001\u8a50\u6b3a\u306b\u8cc7\u91d1\u3092\u3064\u304e\u8fbc\u307e\u305b\u3066\u304b\u3089\u9ad8\u5024\u3067\u682a\u5f0f\u3092\u58f2\u5374\u3059\u308b\u3002\u88ab\u5bb3\u8005\u306f\u3001\u305d\u306e\u4f01\u696d\u306b\u672c\u7269\u306e\u767a\u5c55\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3092\u5224\u65ad\u3059\u308b\u3053\u3068\u304c\u96e3\u3057\u3044\u305f\u3081\u3001\u3053\u306e\u3088\u3046\u306a\u8a50\u6b3a\u306f\u3057\u3070\u3057\u3070\u30c7\u30b8\u30bf\u30eb\u6697\u53f7\u901a\u8ca8\u3092\u6a19\u7684\u306b\u3059\u308b\u3002<\/p>\n\n\n\n
\u6295\u8cc7\u5bb6\u306e\u4e2d\u306b\u306f\u3001\u3042\u308b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306b\u6295\u8cc7\u3059\u308b\u3053\u3068\u3092\u305f\u3081\u3089\u3063\u3066\u3044\u308b\u4eba\u3082\u3044\u308b\u304b\u3082\u3057\u308c\u306a\u3044\u304c\u3001\u5927\u624b\u30d7\u30ec\u30fc\u30e4\u30fc\u304c\u6295\u8cc7\u3057\u305f\u308a\u63d0\u643a\u3057\u305f\u308a\u3059\u308b\u3068\u3044\u3046\u7d04\u675f\u304c\u3042\u308c\u3070\u3001\u52c7\u6c17\u3065\u3051\u3089\u308c\u308b\u3002\u305d\u3046\u3067\u306a\u3051\u308c\u3070\u3042\u307e\u308a\u6709\u671b\u3068\u306f\u601d\u3048\u306a\u3044\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3067\u3042\u3063\u3066\u3082\u3001\u4eba\u3005\u306f\u305d\u308c\u3092\u4fe1\u3058\u308b\u3088\u3046\u306b\u306a\u308b\u3002<\/p>\n\n\n\n
\u8a50\u6b3a\u5e2b\u306f\u591a\u304f\u306e\u4eba\u306b\u4fe1\u3058\u8fbc\u307e\u305b\u308b\u3053\u3068\u3067\u4fa1\u683c\u3092\u3064\u308a\u4e0a\u3052\u308b\u3002\u305d\u308c\u304c\u7d42\u308f\u308a\u3001\u4fa1\u683c\u304c\u3053\u308c\u4ee5\u4e0a\u4e0a\u304c\u3089\u306a\u3044\u3068\u306a\u308b\u3068\u3001\u4e00\u6589\u306b\u58f2\u308a\u51fa\u3057\u3001\u4fa1\u683c\u3092\u4e00\u6c17\u306b\u6025\u843d\u3055\u305b\u308b\u3002<\/p>\n\n\n\n
\u3053\u308c\u306f\u6570\u5206\u306e\u3046\u3061\u306b\u8d77\u3053\u308a\u3046\u308b\u3053\u3068\u3060\uff01<\/p>\n\n\n\n
\u6697\u53f7\u306e\u30dd\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a\u306e\u4f8b\u3068\u3057\u3066\u3001\u6b21\u306e\u3088\u3046\u306a\u3082\u306e\u304c\u3042\u308b\u3002 \u30d3\u30c3\u30c8\u30b3\u30cd\u30af\u30c8\u8a50\u6b3a<\/a>.<\/p>\n\n\n\nBitconnect\u306f\u3001\u9ad8\u5229\u56de\u308a\u306e\u6295\u8cc7\u30d7\u30ed\u30b0\u30e9\u30e0\u3068\u3057\u3066\u5ba3\u4f1d\u3055\u308c\u305f\u6697\u53f7\u901a\u8ca8\u3060\u3063\u305f\u3002\u6bce\u6708\u6700\u592740%\u306e\u30ea\u30bf\u30fc\u30f3\u304c\u7d04\u675f\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u308c\u306f\u5e02\u5834\u306e\u4ed6\u306e\u3069\u306e\u5546\u54c1\u3088\u308a\u3082\u306f\u308b\u304b\u306b\u9ad8\u3044\u3082\u306e\u3067\u3057\u305f\u3002<\/p>\n\n\n\n
\u591a\u304f\u306e\u4eba\u304c\u30d3\u30c3\u30c8\u30b3\u30cd\u30af\u30c8\u306b\u6295\u8cc7\u3057\u305f\u304c\u3001\u3059\u3050\u306b\u4fa1\u683c\u304c\u66b4\u843d\u3057\u3001\u5168\u8ca1\u7523\u3092\u5931\u3063\u305f\u3002<\/p>\n\n\n\n
\u6697\u53f7\u306e\u30dd\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a\u306e\u3082\u3046\u4e00\u3064\u306e\u4f8b\u306f\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3042\u308b\u3002 PlusToken\u8a50\u6b3a<\/a>.<\/p>\n\n\n\nPlusToken\u306f\u3001\u6295\u8cc7\u306e\u5229\u606f\u3092\u5f97\u308b\u65b9\u6cd5\u3068\u3057\u3066\u5ba3\u4f1d\u3055\u308c\u305f\u6697\u53f7\u901a\u8ca8\u3060\u3063\u305f\u3002\u6bce\u6708\u6700\u59279%\u306e\u30ea\u30bf\u30fc\u30f3\u304c\u7d04\u675f\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u308c\u306f\u5e02\u5834\u306b\u51fa\u56de\u3063\u3066\u3044\u308b\u4ed6\u306e\u3069\u306e\u901a\u8ca8\u3088\u308a\u3082\u306f\u308b\u304b\u306b\u9ad8\u3044\u3082\u306e\u3067\u3057\u305f\u3002<\/p>\n\n\n\n
\u4eba\u3005\u306fPlusToken\u306b\u6295\u8cc7\u3057\u305f\u304c\u3001\u3059\u3050\u306b\u4fa1\u683c\u304c\u66b4\u843d\u3057\u3001\u5168\u8ca1\u7523\u3092\u5931\u3063\u305f\u3002<\/p>\n\n\n
\u30dd\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a\u3092\u56de\u907f\u3059\u308b\u65b9\u6cd5<\/h3>\n\n\n
\u6697\u53f7\u901a\u8ca8\u306b\u6295\u8cc7\u3059\u308b\u524d\u306b\u3001\u4e0b\u8abf\u3079\u3092\u3057\u307e\u3057\u3087\u3046\u3002\u305d\u306e\u901a\u8ca8\u304c\u3044\u304b\u306b\u4eba\u6c17\u304c\u3042\u308b\u304b\u3068\u3044\u3046\u30cb\u30e5\u30fc\u30b9\u3084\u30d6\u30ed\u30b0\u8a18\u4e8b\u3001\u30a8\u30c3\u30bb\u30a4\u304c\u305f\u304f\u3055\u3093\u3042\u308b\u5834\u5408\u306f\u3001\u65b0\u3057\u3044\u901a\u8ca8\u306b\u6295\u8cc7\u3057\u3066\u306f\u3044\u3051\u307e\u305b\u3093\u3002\u305d\u306e\u30b3\u30a4\u30f3\u306b\u3064\u3044\u3066\u8abf\u3079\u3001\u30db\u30ef\u30a4\u30c8\u30da\u30fc\u30d1\u30fc\u3092\u8aad\u3093\u3067\u3001\u8ab0\u304c\u306a\u305c\u305d\u306e\u30b3\u30a4\u30f3\u3092\u4f5c\u3063\u305f\u306e\u304b\u306b\u3064\u3044\u3066\u8a73\u3057\u304f\u77e5\u308a\u307e\u3057\u3087\u3046\u3002\u305d\u3046\u3059\u308b\u3053\u3068\u3067\u3001\u3053\u306e\u901a\u8ca8\u3067\u30d1\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u304c\u884c\u308f\u308c\u3066\u3044\u306a\u3044\u304b\u3069\u3046\u304b\u3092\u5224\u65ad\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n
\u30dd\u30f3\u30b8\u30fc\u30fb\u30af\u30ea\u30d7\u30c8\u30fb\u30b9\u30ad\u30fc\u30e0<\/strong><\/h2>\n\n\n![\"\u30dd\u30f3\u30b8\u30fc\u8a50\u6b3a\"](\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2022\/09\/Ponzi-Scam-1024x512.jpg\")
<\/figure>\n\n\n\n\u30cd\u30ba\u30df\u8b1b\u306f\u8a50\u6b3a\u306e\u4e00\u7a2e\u3067\u3042\u308a\u3001\u6f5c\u5728\u7684\u306a\u6295\u8cc7\u5bb6\u306b\u5bfe\u3057\u3001\u65b0\u3057\u3044\u4f1a\u54e1\u3092\u52e7\u8a98\u3059\u308b\u3053\u3068\u3067\u5229\u76ca\u3092\u4e0a\u3052\u308b\u3068\u544a\u3052\u308b\u3082\u306e\u3067\u3042\u308b\u3002\u554f\u984c\u306f\u3001\u6700\u7d42\u7684\u306b\u3001\u30b9\u30ad\u30fc\u30e0\u306b\u8cc7\u91d1\u3092\u6295\u8cc7\u3059\u308b\u65b0\u3057\u3044\u4eba\u3005\u304c\u8db3\u308a\u306a\u304f\u306a\u308a\u3001\u6295\u8cc7\u3057\u305f\u5168\u54e1\u3092\u30b5\u30dd\u30fc\u30c8\u3059\u308b\u306e\u306b\u5341\u5206\u306a\u53ce\u76ca\u304c\u5165\u3063\u3066\u3053\u306a\u3044\u305f\u3081\u3001\u30b9\u30ad\u30fc\u30e0\u304c\u5d29\u58ca\u3057\u3066\u3057\u307e\u3046\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u3088\u3046\u306a\u4e8b\u614b\u304c\u767a\u751f\u3059\u308b\u3068\u3001\u5143\u3005\u3069\u308c\u3060\u3051\u306e\u8cc7\u91d1\u304c\u6301\u3061\u8fbc\u307e\u308c\u305f\u304b\u3001\u3042\u308b\u3044\u306f\u305d\u308c\u304c\u3069\u3053\u3067\u4f7f\u308f\u308c\u305f\u304b\u306b\u95a2\u308f\u3089\u305a\u3001\u30b9\u30ad\u30fc\u30e0\u306b\u6295\u8cc7\u3057\u305f\u5168\u54e1\u304c\u9a19\u3055\u308c\u308b\u3053\u3068\u306b\u306a\u308b\u3002\u8a50\u6b3a\u5e2b\u306f\u624b\u3063\u53d6\u308a\u65e9\u304f\u5229\u76ca\u3092\u4e0a\u3052\u3001\u88ab\u5bb3\u8005\u3092\u7f6e\u304d\u53bb\u308a\u306b\u3059\u308b\u3002\u30cd\u30ba\u30df\u8b1b\u306f\u6697\u53f7\u901a\u8ca8\u306e\u4e16\u754c\u306b\u3082\u6d78\u900f\u3057\u3066\u304a\u308a\u3001\u4e16\u754c\u4e2d\u306e\u6295\u8cc7\u5bb6\u3092\u9a19\u3057\u3066\u3044\u308b\u3002<\/p>\n\n\n\n
\u3053\u306e\u7a2e\u306e\u8a50\u6b3a\u306b\u3088\u308b\u91d1\u92ad\u7684\u88ab\u5bb3\u306f\u58ca\u6ec5\u7684\u3067\u3042\u308b\u3002<\/p>\n\n\n\n
Forsage-crypto\u306f2\u5e74\u4ee5\u4e0a\u306b\u308f\u305f\u308b\u6697\u53f7\u30cd\u30ba\u30df\u8b1b\u3067\u3001\u30a4\u30fc\u30b5\u30ea\u30a2\u30e0\u3001\u30c8\u30ed\u30f3\u3001\u30d0\u30a4\u30ca\u30f3\u30b9\u306e\u30b9\u30de\u30fc\u30c8\u30b3\u30f3\u30c8\u30e9\u30af\u30c8\u3092\u4f7f\u3063\u305f\u53d6\u5f15\u306b\u53c2\u52a0\u3055\u305b\u308b\u3053\u3068\u3067\u6295\u8cc7\u5bb6\u3092\u9a19\u3057\u305f\u3002Forsage-crypto\u306e\u30a2\u30d5\u30a3\u30ea\u30a8\u30a4\u30c8\u30fb\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u30fb\u30d3\u30b8\u30cd\u30b9\u30e2\u30c7\u30eb\u306f\u3001\u5229\u76ca\u3092\u4fdd\u8a3c\u3059\u308b\u3053\u3068\u3067\u6295\u8cc7\u5bb6\u3092\u5f15\u304d\u8fbc\u3093\u3060\u3002\u305d\u306e\u30d3\u30b8\u30cd\u30b9\u30e2\u30c7\u30eb\u306f SEC\u306e\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8<\/a>Forsage\u306f\u3001\u30a4\u30fc\u30b5\u30ea\u30a2\u30e0\u30ba\u3001\u30c8\u30ed\u30f3\u30ba\u3001\u30d0\u30a4\u30ca\u30f3\u30b9\u306e\u30d6\u30ed\u30c3\u30af\u30c1\u30a7\u30fc\u30f3\u7528\u306e\u4f7f\u3044\u3084\u3059\u3044\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3092\u63d0\u4f9b\u3059\u308b\u3053\u3068\u3067\u3001\u4f55\u767e\u4e07\u4eba\u3082\u306e\u500b\u4eba\u6295\u8cc7\u5bb6\u3092\u9b45\u4e86\u3057\u305f\u3002\u3055\u3089\u306b\u3001\u65b0\u305f\u306b\u6295\u8cc7\u3055\u308c\u305f\u8cc7\u91d1\u3092\u3001\u30de\u30eb\u30c1\u5546\u6cd5\u306e\u7279\u5fb4\u3067\u3042\u308b\u3001\u4ee5\u524d\u306e\u53c2\u52a0\u8005\u3078\u306e\u8fd4\u6e08\u306b\u5229\u7528\u3057\u305f\u3002<\/p>\n\n\n\n\u6697\u53f7\u30cd\u30ba\u30df\u8b1b\u306e\u3082\u3046\u4e00\u3064\u306e\u4f8b\u306f\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3042\u308b\u3002 \u30ef\u30f3\u30b3\u30a4\u30f3\u8a50\u6b3a<\/a>.OneCoin\u30b9\u30ad\u30fc\u30e0\u306f\u3001\u65b0\u3057\u3044\u6697\u53f7\u901a\u8ca8\u306b\u6295\u8cc7\u3057\u3066\u304a\u91d1\u3092\u7a3c\u3050\u65b9\u6cd5\u3068\u3057\u3066\u5ba3\u4f1d\u3055\u308c\u305f\u3002\u3057\u304b\u3057\u3001\u540c\u793e\u306f\u30cd\u30ba\u30df\u8b1b\u3060\u3068\u975e\u96e3\u3055\u308c\u3066\u3044\u308b\u3002\u540c\u793e\u306e\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u306b\u3088\u308b\u3068\u3001\u540c\u793e\u306f\u30d9\u30c8\u30ca\u30e0\u3067\u8a2d\u7acb\u3055\u308c\u305f\u304c\u3001\u540c\u56fd\u306f\u5f8c\u306b\u3053\u306e\u4e3b\u5f35\u306b\u7570\u8b70\u3092\u5531\u3048\u305f\u3002\u3055\u3089\u306b\u3001\u4e16\u754c\u4e2d\u306e\u3044\u304f\u3064\u304b\u306e\u56fd\u3084\u5730\u57df\u3067\u3044\u304f\u3064\u304b\u306e\u707d\u5bb3\u304c\u767a\u751f\u3057\u3001OneCoin\u304c\u8a50\u6b3a\u3067\u3042\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u3002<\/p>\n\n\n\u306d\u305a\u307f\u8b1b\u306e\u898b\u5206\u3051\u65b9<\/h2>\n\n\n\n- \u53ce\u76ca\u306f\u6307\u6570\u95a2\u6570\u7684\u306b\u9ad8\u3044<\/li>\n
- \u7121\u514d\u8a31\u30d6\u30ed\u30fc\u30ab\u30fc<\/li>\n
- \u900f\u660e\u6027\u306e\u6b20\u5982<\/li>\n
- \u4f1a\u793e\u306b\u95a2\u3059\u308b\u60c5\u5831\u4e0d\u8db3<\/li>\n
- \u672a\u767b\u9332\u6295\u8cc7<\/li>\n<\/ul>\n\n\n\n
\u3059\u3067\u306b\u8a50\u6b3a\u306b\u906d\u3063\u3066\u3057\u307e\u3063\u305f\u5834\u5408\u3001\u3067\u304d\u308b\u3053\u3068\u306f\u3044\u304f\u3064\u304b\u3042\u308b\uff1a<\/p>\n\n\n\n
\n- SEC\u306e\u9023\u7d61\u5148 https:\/\/www.sec.gov\/tcr<\/a>.SEC\u306f\u7c73\u56fd\u306e\u8a3c\u5238\u76e3\u7763\u6a5f\u95a2\u3067\u3042\u308a\u3001\u6b21\u306b\u4f55\u3092\u3059\u3079\u304d\u304b\u306b\u3064\u3044\u3066\u8a73\u3057\u3044\u60c5\u5831\u3092\u6559\u3048\u3066\u304f\u308c\u308b\u3060\u308d\u3046\u3002<\/li>\n
- FBI\u306b\u82e6\u60c5\u3092\u7533\u3057\u7acb\u3066\u308b https:\/\/www.ic3.gov\/Home\/ComplaintChoice<\/a>.\u5f7c\u3089\u306f\u8a50\u6b3a\u3092\u8abf\u67fb\u3057\u3001\u3042\u306a\u305f\u306e\u304a\u91d1\u3092\u53d6\u308a\u623b\u3059\u624b\u52a9\u3051\u3092\u3057\u3066\u304f\u308c\u308b\u3060\u308d\u3046\u3002<\/li>\n
- \u9023\u90a6\u53d6\u5f15\u59d4\u54e1\u4f1a\u306e\u9023\u7d61\u5148 https:\/\/www.ftccomplaintassistant.gov\/<\/a>.\u5f7c\u3089\u306f\u3001\u3042\u306a\u305f\u304c\u304a\u91d1\u3092\u53d6\u308a\u623b\u3059\u306e\u3092\u52a9\u3051\u308b\u3053\u3068\u304c\u3067\u304d\u3001\u307e\u305f\u8a50\u6b3a\u5e2b\u304c\u4ed6\u306e\u4eba\u3005\u3092\u8a50\u6b3a\u3057\u7d9a\u3051\u308b\u306e\u3092\u9632\u3050\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/li>\n
- FINRA\u3078\u306e\u304a\u554f\u3044\u5408\u308f\u305b\u306f\u3001https:\/\/www.finra.org\/\u3002FINRA\u306f\u7c73\u56fd\u306e\u91d1\u878d\u898f\u5236\u6a5f\u95a2\u3067\u3059\u3002\u3042\u306a\u305f\u306f \u82e6\u60c5\u3068\u5831\u544a<\/a> \u8a3c\u5238\u4f1a\u793e\u306b\u3088\u308b\u8a50\u6b3a\u3084\u4e0d\u5be9\u306a\u884c\u70ba\u306e\u53ef\u80fd\u6027\u3002<\/li>\n<\/ul>\n\n\n\n
<\/figure>\n\n\n\nPhishing is the illegal act of obtaining sensitive and confidential details, such as usernames, passwords, private keys or payment information, through fake websites and misleading links.<\/p>\n\n\n\n
Users are fooled into thinking they are entering their information on a trusted website or following a legitimate link that has been shared with them through emails, messages or Google ads.<\/p>\n\n\n\n
What usually happens is that users receive an email giving them the false idea that something has happened to their account or wallet and that they need to fix it by following a link.<\/p>\n\n\n\n
The link directs them to a fake website, usually designed to resemble the original website. It may use the same design, color scheme, logo and font style, forcing visitors to believe they are in the right place.<\/p>\n\n\n\n
Once the user enters the information, it is passed on to the scammers, who can then use it however they want. They may use the information straight away or store it for later, depending on how much they believe they can gain from the account.<\/p>\n\n\n\n Think of it as a fake shopfront. The attacker copies a website you already trust, then needs one thing only: for you to walk through the wrong door.<\/p>\n The usual chain has four links. First, contact \u2014 an email, an SMS, a Telegram or Discord message, or a paid ad sitting above the real result in Google. Second, a reason to hurry \u2014 a “suspicious login”, a “wallet migration”, a refund waiting for you. Third, the fake page \u2014 visually identical to the real one, sitting on a domain that is one character off. Fourth, the harvest \u2014 whatever you type is sent straight to the attacker, often while the page shows a spinning loader so you do not realise anything went wrong.<\/p>\n The important part: no software on your computer has been broken. Nothing was hacked. You were persuaded. That is why antivirus rarely stops phishing and why the defence has to be a habit rather than a tool.<\/p>\n<\/div>\n<\/details>\n\n\n\n MyEtherWallet<\/a> is a prime example of this style of scam. Fake websites and applications were designed with the same look as the official platform, making users feel safe enough to provide the same information they would normally enter on the real website.<\/p>\n\n\n\n This resulted in huge losses for users. To think that a fake MyEtherWallet app reportedly became one of the top apps in its category is scary. How easily it spread and affected so many users shows how vulnerable the cryptocurrency industry can be and how exposed users are to these attacks.<\/p>\n\n\n\n Another method is the use of fake airdrops. This is when scammers pretend to represent legitimate companies and offer free tokens to large numbers of people.<\/p>\n\n\n\n Along with the offer comes the need to download an application, connect a wallet or visit a portal created by the same individuals looking to make easy money at your expense.<\/p>\n\n\n\n Users may be asked to enter their usernames, passwords, seed phrases or private keys. Once this information is provided, the scammers may gain access to the wallet and drain the account.<\/p>\n\n\n\n An airdrop is a real thing. Genuine projects do hand out free tokens to early users, and that is exactly what makes the fake version work \u2014 the offer is not obviously absurd.<\/p>\n The trick is what the offer asks for in return. A real airdrop never needs your seed phrase, your private key or your exchange password, because a seed phrase is not a login: it is the wallet itself. Anyone holding it owns every coin in that wallet, permanently, with no support line to call.<\/p>\n The second version is quieter. Instead of asking you to type anything, the site asks you to “connect wallet” and approve a transaction to claim your tokens. The approval you sign is not a claim \u2014 it is permission for the attacker’s contract to move your tokens whenever it likes. The wallet may look untouched for days before it is emptied. Read what you are signing, and treat unlimited spending approvals as a decision, not a formality.<\/p>\n<\/div>\n<\/details>\n\n\n Now the question is, what needs to be done to avoid these activities?<\/p>\n\n\n\n The answer is simple. Be informed.<\/p>\n\n\n\n Keep yourself up to date. The more you know about what is happening around the world, the better. Subscribe to trusted news websites and read as much as possible.<\/p>\n\n\n\n Discuss these subjects with people who understand them and talk about the latest scams. It requires some effort on your part. Be curious. Know more.<\/p>\n\n\n\n A few things to keep in mind are as follows.<\/p>\n\n\n Make sure the website address you are visiting is the same one you normally use.<\/p>\n\n\n\n Usually, there are a few small differences that are ignored or difficult to notice. A scammer may change one letter, add an extra word or use a slightly different domain.<\/p>\n\n\n\n But this is your hard-earned money we are talking about here, so you have to be careful every single time you are asked to enter your details.<\/p>\n\n\n\n Double-check the address.<\/p>\n\n\n\n It should start with \u201chttps\u201d and not just \u201chttp,\u201d but remember that HTTPS alone does not prove that the website is legitimate. Scam websites can also use HTTPS.<\/p>\n\n\n\n The best option is to bookmark the official website or type the address manually into your browser.<\/p>\n\n\n\n Read a domain from right to left, not left to right. The part that decides where you really are is the last two pieces before the first single slash \u2014 everything to the left of that can be invented freely by whoever owns the domain.<\/p>\n So This is also why HTTPS proves so little. The padlock only means the connection is encrypted between you and whoever owns that address \u2014 and a scammer can get a certificate for their own fake domain in minutes, for free. Encrypted does not mean honest. A bookmark, or typing the address yourself, removes the guesswork entirely.<\/p>\n<\/div>\n<\/details>\n\n\n If the website does not feel right, something looks off or something feels different from your normal routine, stop.<\/p>\n\n\n\n Do not proceed without verifying it.<\/p>\n\n\n\n Call a friend who knows a thing or two. Contact the company through its official website. Do something. Just do not go with the flow.<\/p>\n\n\n Another very common tactic these fishy websites use is creating a sense of urgency.<\/p>\n\n\n\n They give warnings. They use deadlines. They force the user to take action as quickly as possible, sometimes using big, bold red titles with words such as \u201cHURRY,\u201d \u201cURGENT\u201d or \u201cACCOUNT SUSPENDED.\u201d<\/p>\n\n\n\n The aim is to create panic and make users act without thinking rationally. Most of the time, the result is terrible.<\/p>\n\n\n\n If a message is rushing you, stop and check the account directly through the official website. Do not use the link in the message.<\/p>\n\n\n\n Urgency is not decoration on the scam. It is the scam. Careful checking takes a couple of calm minutes, so the attacker’s whole job is to make sure you never get those minutes.<\/p>\n It works because fear narrows attention. Told that your account is being drained right now, you stop reading the address bar and start looking for the button that makes the problem go away. That is the moment the fake page is built for.<\/p>\n The defence needs no expertise at all: any message that pressures you is, by that fact alone, a message you should not act on from inside the message. Close it. Open the site the way you normally do \u2014 your own bookmark, your own typing, your own app. If the emergency is real, it will still be there on the official dashboard. It almost never is.<\/p>\n<\/div>\n<\/details>\n\n\n Always set a strong password.<\/p>\n\n\n\n More importantly, remember that password or store it safely in a trusted password manager. It is very common for people to forget their passwords and lose access to their own wallets or accounts.<\/p>\n\n\n\n Use a different password for every account and enable two-factor authentication whenever possible.<\/p>\n\n\n\n Never give anyone your password, private key or seed phrase. A real wallet company or customer support agent should never ask for this information.<\/p>\n\n\n\n Later on, we will explain in more detail how to avoid scams and the main dos and don\u2019ts.<\/p>\n\n\n\n People use these words interchangeably, and scammers rely on that confusion.<\/p>\n A password<\/strong> unlocks an account on somebody else’s service \u2014 an exchange, for example. If it is stolen, the company can freeze the account and give it back to you.<\/p>\n A \u79d8\u5bc6\u9375<\/strong> authorises spending from one specific address. Whoever holds it can move those funds. It cannot be changed or revoked.<\/p>\n A seed phrase<\/strong> \u2014 the 12 or 24 words written down when you created the wallet \u2014 regenerates every private key in that wallet. It is not a password for the wallet: it is<\/em> the wallet. Type it into a website and the money is gone, usually within minutes, with nobody to appeal to.<\/p>\n So the rule has two halves. Passwords: unique per account, stored in a password manager, with two-factor authentication turned on \u2014 and prefer an authenticator app or a hardware key over SMS codes, which can be stolen through a SIM swap. Seed phrase: never typed into any website, any support chat, any “wallet validation” tool, ever. Legitimate support will never ask, because legitimate support cannot use it for anything except stealing from you.<\/p>\n<\/div>\n<\/details>\n\n\n Mining scams are another interesting part of the cryptocurrency world. Many of them use cloud mining.<\/p>\n\n\n\n Now, not all cloud mining is illegitimate. Some companies use cloud mining for legitimate purposes. But, as always, there are a few that have used cloud mining negatively and carried out elaborate schemes to scam people.<\/p>\n\n\n\n Cloud mining is the process of mining cryptocurrencies through a remote service. There are companies that allow people to open an account with them and, in return, let users participate in the mining process.<\/p>\n\n\n\n The process is conducted through the company\u2019s equipment, removing the need for users to purchase hardware or deal directly with equipment maintenance and energy costs.<\/p>\n\n\n\n There are legitimate operations out there, and there are people who participate in them. At the same time, there are companies that are completely on the wrong side of the law and every ethical boundary.<\/p>\n\n\n\n You are renting a share of someone else’s machines and paying for the electricity they burn. In exchange you receive whatever those machines earn, minus the operator’s fee.<\/p>\n That is the whole model, and it explains why the margins are thin even when everything is honest. The operator has already paid for the hardware and pays the power bill; they only sell you a contract if their cut makes it worth more to them than mining it themselves. You are, by design, on the less profitable side of that trade.<\/p>\n It also explains why the fraudulent version is so easy to run. Nothing about a cloud mining contract is visible to the buyer. There is no machine you can point at, no hash rate you can independently confirm, no way to tell rented capacity from a spreadsheet. A dashboard showing your “daily earnings” costs nothing to fake, and the payouts can be funded entirely by the next customer’s deposit \u2014 at which point it has stopped being mining and become a Ponzi scheme with mining-themed graphics.<\/p>\n<\/div>\n<\/details>\n\n\n Returns are one way of looking at these operations and judging whether they may be trying to sting you.<\/p>\n\n\n\n But be careful. Very high or guaranteed returns are usually a bigger warning sign than low returns.<\/p>\n\n\n\n Cryptocurrency mining depends on electricity prices, hardware performance, mining difficulty, fees and the value of the cryptocurrency being mined. No legitimate company can guarantee massive profits without any risk.<\/p>\n\n\n\n If a company promises easy money, fixed daily profits or returns that sound too good to be true, there is a good chance something is wrong.<\/p>\n\n\n\n Steer clear of such setups. They are not for you. Or anyone, for that matter.<\/p>\n\n\n\n Mining income moves every single day, because five separate things underneath it move every single day.<\/p>\n Mining difficulty<\/strong> rises as more machines join the network, so the same hardware earns less over time \u2014 this is automatic and continuous. The coin price<\/strong> swings, and your earnings are paid in that coin. Electricity<\/strong> is the largest running cost and is priced by the hour in many markets. Hardware<\/strong> ages, fails and gets outpaced by newer models. Network fees<\/strong> and block rewards change too \u2014 Bitcoin’s reward halves roughly every four years, cutting the income from identical work in half overnight.<\/p>\n Any one of those makes a guaranteed number impossible. All five together make it a claim nobody could honour even if they wanted to. So when an operator quotes a flat “1.5% per day”, they are not describing mining output; they are describing a marketing figure they have chosen. The money to pay it has to come from somewhere, and if it is not coming from the machines, it is coming from the next depositor.<\/p>\n<\/div>\n<\/details>\n\n\n Is the company allowing you to examine how it works, what tools it uses and how it plans to take the business forward?<\/p>\n\n\n\n If not, you should be concerned that there is something it does not want you, or anyone outside its inner circle, to know.<\/p>\n\n\n\n Transparency is very important. Every user has the right to know about the company they are going to be involved with.<\/p>\n\n\n\n You should be able to find information about the owners, business address, equipment, fees, contracts, withdrawal rules and how returns are calculated.<\/p>\n\n\n\n There should be no question about it.<\/p>\n\n\n\n Transparency is not a feeling about a website. It is a list of specific claims you can go and verify.<\/p>\n The people.<\/strong> Are named executives listed, and do those names exist outside this company’s own website \u2014 conference talks, an employment history, press coverage? Photographs that appear on stock-image sites, or a team page with no surnames, answers the question on its own.<\/p>\n The company.<\/strong> A registration number and address can be checked in the relevant national companies register in a couple of minutes. A serviced-office address shared with hundreds of other entities, or a registration two months old behind a decade of claimed operating history, is a contradiction worth taking seriously.<\/p>\n The machines.<\/strong> Which model, how many, in which facility, at what power cost? Honest operators publish this because it is their pitch. Photographs of a data centre prove nothing \u2014 reverse-image search them.<\/p>\n The exit.<\/strong> Withdrawal minimums, fees, processing times, and whether payouts stop during “maintenance”. This is where the complaints appear first, so search the company name together with the word withdrawal and read what people say when they try to leave.<\/p>\n If asking any of this directly gets you a support agent who changes the subject or offers a bonus for depositing more, that is your answer.<\/p>\n<\/div>\n<\/details>\n\n\n A malware portal or infected application can be used to attack your computer and hit you exactly where it hurts.<\/p>\n\n\n\n Malicious software<\/a> is created and placed inside downloads, wallet applications, browser extensions, email attachments or fake updates.<\/p>\n\n\n\n Once the computer is infected, the malware can take control of certain functions and steal private information or data in the way it was designed to do.<\/p>\n\n\n\n There are numerous ways through which the job can be done.<\/p>\n\n\n\n One example is malware that can compromise a Bitcoin wallet. When you attempt to send coins to a friend in need, the original wallet address may be replaced with a fake one belonging to the scammer.<\/p>\n\n\n One type of malware scam that received attention was known as a cryptocurrency clipboard hijacker.<\/p>\n\n\n\n It used the Windows clipboard as its weapon.<\/p>\n\n\n\n Some of these scammers used the clipboard to monitor thousands of cryptocurrency addresses, but one reported version was much bigger. It was said to monitor around 2.3 million addresses.<\/p>\n\n\n\n The malware used the copy-and-paste mechanism of Windows systems.<\/p>\n\n\n\n Cryptocurrency addresses are usually long and difficult to remember. When users copied and pasted an address, the malware replaced it with a forged address belonging to the scammer.<\/p>\n\n\n\n The transaction would then land in the wrong hands.<\/p>\n\n\n\n Because cryptocurrency transactions are usually irreversible, the money may be impossible to recover once it has been sent.<\/p>\n\n\n\n Always compare the wallet address before confirming a transaction. Check the first and last several characters, and for a large payment, consider sending a small test transaction first.<\/p>\n\n\n\n Every time you copy something, your computer holds it in one shared pocket called the clipboard. Any program running on that machine can read that pocket, and any program can quietly change what is in it. That is not a flaw being exploited \u2014 it is how the clipboard has always worked.<\/p>\n So the malware does nothing dramatic. It sits idle, watching what you copy, and does nothing at all until the thing you copied looks like a crypto address. At that instant it swaps your copied address for one of its own, chosen from its stored list to match the same currency and the same general shape. Then it goes quiet again.<\/p>\n What makes it so effective is the psychology of the paste. You copied the correct address one second earlier, so you already know what should be in the box. Addresses are long, meaningless strings that the eye skims rather than reads, and the substitute often begins with similar characters. You glance, it looks right, you confirm \u2014 and the payment is final, on a public ledger, sitting in a stranger’s wallet.<\/p>\n Two habits defeat it completely. Compare characters at the start \u305d\u3057\u3066<\/em> at the end of the address after pasting, not just at the start. And for anything substantial, send a small test amount first, confirm it arrived, then send the rest.<\/p>\n<\/div>\n<\/details>\n\n\n If you believe your computer is infected, disconnect it from the internet and stop entering passwords or accessing wallets until the device has been checked.<\/p>\n\n\n\n Order matters more than speed here, and the instinct most people follow \u2014 log in and check the accounts \u2014 is the one that does the damage.<\/p>\n Disconnect first.<\/strong> Pull the Wi-Fi or the cable. Anything still being sent to the attacker stops at that moment.<\/p>\n Do not log in to anything from that machine.<\/strong> Not the exchange, not the email, not the wallet. If the device is compromised, every password you type is simply a new password being handed over.<\/p>\n Change passwords from a different device<\/strong> \u2014 a phone on mobile data, another computer \u2014 starting with the email account, because that is what resets everything else. Then the exchanges, then whatever shares those passwords.<\/p>\n Assume the seed phrase is gone<\/strong> if it was ever typed, photographed or stored on that machine. Move the funds to a wallet created on a clean device. Changing the password on the old wallet does nothing; the seed phrase still opens it.<\/p>\n Clean the machine properly.<\/strong> A scan that finds nothing is not proof of safety. For a device that held real money, a full wipe and reinstall is the only honest reset.<\/p>\n<\/div>\n<\/details>\n\n\n Fake wallets are also a favorite of scammers.<\/p>\n\n\n\n They create a fake wallet to trick people into revealing their passwords, private keys or seed phrases.<\/p>\n\n\n\n Bitcoin Gold was new to the market, and users who were looking to claim their coins were directed to a fake wallet that went by the name of \u30de\u30a4\u30d3\u30fc\u30c6\u30a3\u30fc\u30b8\u30fc\u30a6\u30a9\u30ec\u30c3\u30c8.com<\/a>.<\/p>\n\n\n\n Thinking it was the real thing, users provided information relating to their private keys and were deprived of millions of dollars as a result.<\/p>\n\n\n\n The scam emptied wallets and reportedly cost users a combined amount close to $3.5 million.<\/p>\n\n\n\n Keeping in mind the number of fake Google ads and advertisements being thrown at you every day, you have to be very careful when visiting a website or downloading a wallet.<\/p>\n\n\n\n The ideal thing to do is to keep the original website bookmarked or type the address manually into your browser.<\/p>\n\n\n\n Only download wallets through the official project website or verified app-store page.<\/p>\n\n\n Remember that HTTPS does not automatically mean a website is safe. Always verify the domain, the company and the official download link before entering any sensitive information.<\/p>\n\n\n\n The dangerous moment is not using the wallet \u2014 it is choosing it. Almost every fake wallet is found the same way: through a search result, an ad, or an app store listing, rather than through the project itself.<\/p>\n Start from the project, never from the search box.<\/strong> Find the official website through a source you already trust, then follow its download link to the app store. That single reversal removes the most common trap, because a paid ad can sit above the real result and a store listing can carry the real logo.<\/p>\n Read the listing sceptically.<\/strong> Check the publisher name against the one on the official site, the install count against how well known the wallet is, and the release date \u2014 a wallet claiming years of history with a listing from last month is a copy. Reviews that are numerous, five-star, short and posted within the same few days are bought.<\/p>\n Watch the first screen.<\/strong> A genuine wallet either creates a new seed phrase for you or asks you to type an existing one to restore your own<\/em> wallet \u2014 offline, on the device. If the first thing the app or site asks for is a seed phrase in order to “verify”, “sync”, “validate” or “unlock rewards”, close it.<\/p>\n Test small.<\/strong> Before moving anything meaningful, send a small amount in, send it back out, and confirm both transactions on a block explorer. A wallet that accepts deposits but stalls on withdrawals has told you what it is while it still costs almost nothing to find out.<\/p>\n<\/div>\n<\/details>\n\n\n \u6697\u53f7\u901a\u8ca8\u306e\u767b\u5834\u4ee5\u6765\u3001\u6a5f\u95a2\u6295\u8cc7\u5bb6\u306f\u30c7\u30b8\u30bf\u30eb\u8cc7\u7523\u306b\u5927\u304d\u306a\u95a2\u5fc3\u3092\u5bc4\u305b\u3066\u3044\u308b\u3002\u3057\u304b\u3057\u3001\u591a\u304f\u306eICO\u304c\u8a50\u6b3a\u3068\u306a\u308a\u3001\u591a\u984d\u306e\u8cc7\u91d1\u3092\u7372\u5f97\u3057\u305f\u9014\u7aef\u306b\u4e8b\u696d\u304c\u6d88\u6ec5\u3057\u3066\u3044\u308b\u3002<\/p>\n\n\n\n \u8cc7\u91d1\u306f\u3059\u3067\u306b\u8abf\u9054\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u9069\u7528\u306b\u95a2\u3059\u308b\u30af\u30ea\u30a8\u30a4\u30bf\u30fc\u306e\u6c7a\u5b9a\u3092\u76e3\u7763\u3059\u308b\u898f\u5236\u6a5f\u95a2\u3082\u306a\u3044\u305f\u3081\u3001ICO\u306f\u8cc7\u91d1\u3092\u3069\u3046\u4f7f\u304a\u3046\u3068\u81ea\u7531\u3060\u3002\u8cc7\u91d1\u3092\u6301\u3061\u9003\u3052\u3059\u308b\u3053\u3068\u3082\u3001\u6cd5\u5f8b\u306e\u7bc4\u56f2\u5185\u3067\u6d3b\u52d5\u3059\u308b\u3053\u3068\u3082\u7c21\u5358\u306b\u3067\u304d\u308b\u3002<\/p>\n\n\n\n \u30ae\u30b6\u8a50\u6b3a<\/a> \u306f\u3001\u8a50\u6b3a\u7684\u306aICO\u6d3b\u52d5\u306e\u60aa\u540d\u9ad8\u3044\u4f8b\u3067\u3001\u7591\u3046\u3053\u3068\u3092\u77e5\u3089\u306a\u3044\u6295\u8cc7\u5bb6\u304b\u3089$2\u4e07\u30c9\u30eb\u8fd1\u304f\u304c\u596a\u308f\u308c\u305f\u3002\u5927\u624b\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u304c\u3001\u652f\u63f4\u8005\u306a\u3089\u8ab0\u3067\u3082\u9003\u3052\u51fa\u3059\u3088\u3046\u306a\u7406\u7531\u3067\u30ae\u30b6\u3068\u306e\u63d0\u643a\u3092\u89e3\u6d88\u3057\u305f\u3068\u767a\u8868\u3059\u308b\u3068\u3001\u8b66\u544a\u306e\u65d7\u304c\u306f\u305f\u3081\u304d\u59cb\u3081\u305f\u3002\u3059\u3050\u306b\u8a50\u6b3a\u7591\u60d1\u304c\u6301\u3061\u4e0a\u304c\u308a\u3001\u8ab0\u3082\u304a\u91d1\u3092\u53d6\u308a\u623b\u305b\u306a\u304f\u306a\u3063\u305f\u3002<\/p>\n\n\n\n \u30a8\u30cb\u30b0\u30de\u30fb\u30ab\u30bf\u30ea\u30b9\u30c8\u30fb\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306e\u958b\u767a\u8005\u3082\u3001\u5b9f\u7528\u7684\u306a\u88fd\u54c1\u3092\u6301\u3063\u3066\u3044\u305f\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u3001$45\u4e07\u30c9\u30eb\u3092\u624b\u306b\u3057\u305f\u3002<\/p>\n\n\n ICO\u3078\u306e\u6295\u8cc7\u3092\u691c\u8a0e\u3059\u308b\u969b\u306f\u3001\u81ea\u5206\u81ea\u8eab\u3067\u8abf\u67fb\u3057\u3001\u6c7a\u3057\u3066\u640d\u5931\u304c\u8a31\u5bb9\u3067\u304d\u308b\u4ee5\u4e0a\u306e\u6295\u8cc7\u306f\u3057\u306a\u3044\u3053\u3068\u3002\u6c7a\u65ad\u3092\u4e0b\u3059\u524d\u306b\u30db\u30ef\u30a4\u30c8\u30da\u30fc\u30d1\u30fc\u3092\u8aad\u307f\u3001\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u7406\u89e3\u3059\u308b\u3053\u3068\u3002<\/p>\n\n\n\n \u8a55\u5224\u306e\u826f\u3044ICO\u3092\u898b\u3064\u3051\u308b\u306b\u306f\u3001\u597d\u610f\u7684\u306a\u30aa\u30f3\u30e9\u30a4\u30f3\u30ec\u30d3\u30e5\u30fc\u3068\u5f37\u529b\u306a\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u306e\u5b58\u5728\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3055\u3089\u306b\u3001\u305d\u306e\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306b\u5b9f\u7528\u7684\u306a\u88fd\u54c1\u304c\u3042\u308a\u3001\u5c06\u6765\u306e\u660e\u78ba\u306a\u30ed\u30fc\u30c9\u30de\u30c3\u30d7\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3082\u30c1\u30a7\u30c3\u30af\u3057\u3088\u3046\u3002<\/p>\n\n\n \u30d1\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u30fb\u30b9\u30ad\u30fc\u30e0\u3068\u306f\u3001\u6295\u8cc7\u8a50\u6b3a\u306e\u4e00\u5f62\u614b\u3067\u3001\u500b\u4eba\u304c\u904e\u5927\u8a55\u4fa1\u3055\u308c\u3066\u3044\u308b\u304b\u3001\u5931\u6557\u3059\u308b\u904b\u547d\u306b\u3042\u308b\u4f01\u696d\u306b\u6295\u8cc7\u3059\u308b\u3082\u306e\u3067\u3042\u308b\u3002\u8a50\u6b3a\u5e2b\u306f\u3053\u308c\u3089\u306e\u6295\u8cc7\u5bb6\u3092\u8aac\u5f97\u3057\u3001\u8a50\u6b3a\u306b\u8cc7\u91d1\u3092\u3064\u304e\u8fbc\u307e\u305b\u3066\u304b\u3089\u9ad8\u5024\u3067\u682a\u5f0f\u3092\u58f2\u5374\u3059\u308b\u3002\u88ab\u5bb3\u8005\u306f\u3001\u305d\u306e\u4f01\u696d\u306b\u672c\u7269\u306e\u767a\u5c55\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3092\u5224\u65ad\u3059\u308b\u3053\u3068\u304c\u96e3\u3057\u3044\u305f\u3081\u3001\u3053\u306e\u3088\u3046\u306a\u8a50\u6b3a\u306f\u3057\u3070\u3057\u3070\u30c7\u30b8\u30bf\u30eb\u6697\u53f7\u901a\u8ca8\u3092\u6a19\u7684\u306b\u3059\u308b\u3002<\/p>\n\n\n\n \u6295\u8cc7\u5bb6\u306e\u4e2d\u306b\u306f\u3001\u3042\u308b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306b\u6295\u8cc7\u3059\u308b\u3053\u3068\u3092\u305f\u3081\u3089\u3063\u3066\u3044\u308b\u4eba\u3082\u3044\u308b\u304b\u3082\u3057\u308c\u306a\u3044\u304c\u3001\u5927\u624b\u30d7\u30ec\u30fc\u30e4\u30fc\u304c\u6295\u8cc7\u3057\u305f\u308a\u63d0\u643a\u3057\u305f\u308a\u3059\u308b\u3068\u3044\u3046\u7d04\u675f\u304c\u3042\u308c\u3070\u3001\u52c7\u6c17\u3065\u3051\u3089\u308c\u308b\u3002\u305d\u3046\u3067\u306a\u3051\u308c\u3070\u3042\u307e\u308a\u6709\u671b\u3068\u306f\u601d\u3048\u306a\u3044\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3067\u3042\u3063\u3066\u3082\u3001\u4eba\u3005\u306f\u305d\u308c\u3092\u4fe1\u3058\u308b\u3088\u3046\u306b\u306a\u308b\u3002<\/p>\n\n\n\n \u8a50\u6b3a\u5e2b\u306f\u591a\u304f\u306e\u4eba\u306b\u4fe1\u3058\u8fbc\u307e\u305b\u308b\u3053\u3068\u3067\u4fa1\u683c\u3092\u3064\u308a\u4e0a\u3052\u308b\u3002\u305d\u308c\u304c\u7d42\u308f\u308a\u3001\u4fa1\u683c\u304c\u3053\u308c\u4ee5\u4e0a\u4e0a\u304c\u3089\u306a\u3044\u3068\u306a\u308b\u3068\u3001\u4e00\u6589\u306b\u58f2\u308a\u51fa\u3057\u3001\u4fa1\u683c\u3092\u4e00\u6c17\u306b\u6025\u843d\u3055\u305b\u308b\u3002<\/p>\n\n\n\n \u3053\u308c\u306f\u6570\u5206\u306e\u3046\u3061\u306b\u8d77\u3053\u308a\u3046\u308b\u3053\u3068\u3060\uff01<\/p>\n\n\n\n \u6697\u53f7\u306e\u30dd\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a\u306e\u4f8b\u3068\u3057\u3066\u3001\u6b21\u306e\u3088\u3046\u306a\u3082\u306e\u304c\u3042\u308b\u3002 \u30d3\u30c3\u30c8\u30b3\u30cd\u30af\u30c8\u8a50\u6b3a<\/a>.<\/p>\n\n\n\n Bitconnect\u306f\u3001\u9ad8\u5229\u56de\u308a\u306e\u6295\u8cc7\u30d7\u30ed\u30b0\u30e9\u30e0\u3068\u3057\u3066\u5ba3\u4f1d\u3055\u308c\u305f\u6697\u53f7\u901a\u8ca8\u3060\u3063\u305f\u3002\u6bce\u6708\u6700\u592740%\u306e\u30ea\u30bf\u30fc\u30f3\u304c\u7d04\u675f\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u308c\u306f\u5e02\u5834\u306e\u4ed6\u306e\u3069\u306e\u5546\u54c1\u3088\u308a\u3082\u306f\u308b\u304b\u306b\u9ad8\u3044\u3082\u306e\u3067\u3057\u305f\u3002<\/p>\n\n\n\n \u591a\u304f\u306e\u4eba\u304c\u30d3\u30c3\u30c8\u30b3\u30cd\u30af\u30c8\u306b\u6295\u8cc7\u3057\u305f\u304c\u3001\u3059\u3050\u306b\u4fa1\u683c\u304c\u66b4\u843d\u3057\u3001\u5168\u8ca1\u7523\u3092\u5931\u3063\u305f\u3002<\/p>\n\n\n\n \u6697\u53f7\u306e\u30dd\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a\u306e\u3082\u3046\u4e00\u3064\u306e\u4f8b\u306f\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3042\u308b\u3002 PlusToken\u8a50\u6b3a<\/a>.<\/p>\n\n\n\n PlusToken\u306f\u3001\u6295\u8cc7\u306e\u5229\u606f\u3092\u5f97\u308b\u65b9\u6cd5\u3068\u3057\u3066\u5ba3\u4f1d\u3055\u308c\u305f\u6697\u53f7\u901a\u8ca8\u3060\u3063\u305f\u3002\u6bce\u6708\u6700\u59279%\u306e\u30ea\u30bf\u30fc\u30f3\u304c\u7d04\u675f\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u308c\u306f\u5e02\u5834\u306b\u51fa\u56de\u3063\u3066\u3044\u308b\u4ed6\u306e\u3069\u306e\u901a\u8ca8\u3088\u308a\u3082\u306f\u308b\u304b\u306b\u9ad8\u3044\u3082\u306e\u3067\u3057\u305f\u3002<\/p>\n\n\n\n \u4eba\u3005\u306fPlusToken\u306b\u6295\u8cc7\u3057\u305f\u304c\u3001\u3059\u3050\u306b\u4fa1\u683c\u304c\u66b4\u843d\u3057\u3001\u5168\u8ca1\u7523\u3092\u5931\u3063\u305f\u3002<\/p>\n\n\n \u6697\u53f7\u901a\u8ca8\u306b\u6295\u8cc7\u3059\u308b\u524d\u306b\u3001\u4e0b\u8abf\u3079\u3092\u3057\u307e\u3057\u3087\u3046\u3002\u305d\u306e\u901a\u8ca8\u304c\u3044\u304b\u306b\u4eba\u6c17\u304c\u3042\u308b\u304b\u3068\u3044\u3046\u30cb\u30e5\u30fc\u30b9\u3084\u30d6\u30ed\u30b0\u8a18\u4e8b\u3001\u30a8\u30c3\u30bb\u30a4\u304c\u305f\u304f\u3055\u3093\u3042\u308b\u5834\u5408\u306f\u3001\u65b0\u3057\u3044\u901a\u8ca8\u306b\u6295\u8cc7\u3057\u3066\u306f\u3044\u3051\u307e\u305b\u3093\u3002\u305d\u306e\u30b3\u30a4\u30f3\u306b\u3064\u3044\u3066\u8abf\u3079\u3001\u30db\u30ef\u30a4\u30c8\u30da\u30fc\u30d1\u30fc\u3092\u8aad\u3093\u3067\u3001\u8ab0\u304c\u306a\u305c\u305d\u306e\u30b3\u30a4\u30f3\u3092\u4f5c\u3063\u305f\u306e\u304b\u306b\u3064\u3044\u3066\u8a73\u3057\u304f\u77e5\u308a\u307e\u3057\u3087\u3046\u3002\u305d\u3046\u3059\u308b\u3053\u3068\u3067\u3001\u3053\u306e\u901a\u8ca8\u3067\u30d1\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u304c\u884c\u308f\u308c\u3066\u3044\u306a\u3044\u304b\u3069\u3046\u304b\u3092\u5224\u65ad\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n \u30cd\u30ba\u30df\u8b1b\u306f\u8a50\u6b3a\u306e\u4e00\u7a2e\u3067\u3042\u308a\u3001\u6f5c\u5728\u7684\u306a\u6295\u8cc7\u5bb6\u306b\u5bfe\u3057\u3001\u65b0\u3057\u3044\u4f1a\u54e1\u3092\u52e7\u8a98\u3059\u308b\u3053\u3068\u3067\u5229\u76ca\u3092\u4e0a\u3052\u308b\u3068\u544a\u3052\u308b\u3082\u306e\u3067\u3042\u308b\u3002\u554f\u984c\u306f\u3001\u6700\u7d42\u7684\u306b\u3001\u30b9\u30ad\u30fc\u30e0\u306b\u8cc7\u91d1\u3092\u6295\u8cc7\u3059\u308b\u65b0\u3057\u3044\u4eba\u3005\u304c\u8db3\u308a\u306a\u304f\u306a\u308a\u3001\u6295\u8cc7\u3057\u305f\u5168\u54e1\u3092\u30b5\u30dd\u30fc\u30c8\u3059\u308b\u306e\u306b\u5341\u5206\u306a\u53ce\u76ca\u304c\u5165\u3063\u3066\u3053\u306a\u3044\u305f\u3081\u3001\u30b9\u30ad\u30fc\u30e0\u304c\u5d29\u58ca\u3057\u3066\u3057\u307e\u3046\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u3088\u3046\u306a\u4e8b\u614b\u304c\u767a\u751f\u3059\u308b\u3068\u3001\u5143\u3005\u3069\u308c\u3060\u3051\u306e\u8cc7\u91d1\u304c\u6301\u3061\u8fbc\u307e\u308c\u305f\u304b\u3001\u3042\u308b\u3044\u306f\u305d\u308c\u304c\u3069\u3053\u3067\u4f7f\u308f\u308c\u305f\u304b\u306b\u95a2\u308f\u3089\u305a\u3001\u30b9\u30ad\u30fc\u30e0\u306b\u6295\u8cc7\u3057\u305f\u5168\u54e1\u304c\u9a19\u3055\u308c\u308b\u3053\u3068\u306b\u306a\u308b\u3002\u8a50\u6b3a\u5e2b\u306f\u624b\u3063\u53d6\u308a\u65e9\u304f\u5229\u76ca\u3092\u4e0a\u3052\u3001\u88ab\u5bb3\u8005\u3092\u7f6e\u304d\u53bb\u308a\u306b\u3059\u308b\u3002\u30cd\u30ba\u30df\u8b1b\u306f\u6697\u53f7\u901a\u8ca8\u306e\u4e16\u754c\u306b\u3082\u6d78\u900f\u3057\u3066\u304a\u308a\u3001\u4e16\u754c\u4e2d\u306e\u6295\u8cc7\u5bb6\u3092\u9a19\u3057\u3066\u3044\u308b\u3002<\/p>\n\n\n\n \u3053\u306e\u7a2e\u306e\u8a50\u6b3a\u306b\u3088\u308b\u91d1\u92ad\u7684\u88ab\u5bb3\u306f\u58ca\u6ec5\u7684\u3067\u3042\u308b\u3002<\/p>\n\n\n\n Forsage-crypto\u306f2\u5e74\u4ee5\u4e0a\u306b\u308f\u305f\u308b\u6697\u53f7\u30cd\u30ba\u30df\u8b1b\u3067\u3001\u30a4\u30fc\u30b5\u30ea\u30a2\u30e0\u3001\u30c8\u30ed\u30f3\u3001\u30d0\u30a4\u30ca\u30f3\u30b9\u306e\u30b9\u30de\u30fc\u30c8\u30b3\u30f3\u30c8\u30e9\u30af\u30c8\u3092\u4f7f\u3063\u305f\u53d6\u5f15\u306b\u53c2\u52a0\u3055\u305b\u308b\u3053\u3068\u3067\u6295\u8cc7\u5bb6\u3092\u9a19\u3057\u305f\u3002Forsage-crypto\u306e\u30a2\u30d5\u30a3\u30ea\u30a8\u30a4\u30c8\u30fb\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u30fb\u30d3\u30b8\u30cd\u30b9\u30e2\u30c7\u30eb\u306f\u3001\u5229\u76ca\u3092\u4fdd\u8a3c\u3059\u308b\u3053\u3068\u3067\u6295\u8cc7\u5bb6\u3092\u5f15\u304d\u8fbc\u3093\u3060\u3002\u305d\u306e\u30d3\u30b8\u30cd\u30b9\u30e2\u30c7\u30eb\u306f SEC\u306e\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8<\/a>Forsage\u306f\u3001\u30a4\u30fc\u30b5\u30ea\u30a2\u30e0\u30ba\u3001\u30c8\u30ed\u30f3\u30ba\u3001\u30d0\u30a4\u30ca\u30f3\u30b9\u306e\u30d6\u30ed\u30c3\u30af\u30c1\u30a7\u30fc\u30f3\u7528\u306e\u4f7f\u3044\u3084\u3059\u3044\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3092\u63d0\u4f9b\u3059\u308b\u3053\u3068\u3067\u3001\u4f55\u767e\u4e07\u4eba\u3082\u306e\u500b\u4eba\u6295\u8cc7\u5bb6\u3092\u9b45\u4e86\u3057\u305f\u3002\u3055\u3089\u306b\u3001\u65b0\u305f\u306b\u6295\u8cc7\u3055\u308c\u305f\u8cc7\u91d1\u3092\u3001\u30de\u30eb\u30c1\u5546\u6cd5\u306e\u7279\u5fb4\u3067\u3042\u308b\u3001\u4ee5\u524d\u306e\u53c2\u52a0\u8005\u3078\u306e\u8fd4\u6e08\u306b\u5229\u7528\u3057\u305f\u3002<\/p>\n\n\n\n \u6697\u53f7\u30cd\u30ba\u30df\u8b1b\u306e\u3082\u3046\u4e00\u3064\u306e\u4f8b\u306f\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3042\u308b\u3002 \u30ef\u30f3\u30b3\u30a4\u30f3\u8a50\u6b3a<\/a>.OneCoin\u30b9\u30ad\u30fc\u30e0\u306f\u3001\u65b0\u3057\u3044\u6697\u53f7\u901a\u8ca8\u306b\u6295\u8cc7\u3057\u3066\u304a\u91d1\u3092\u7a3c\u3050\u65b9\u6cd5\u3068\u3057\u3066\u5ba3\u4f1d\u3055\u308c\u305f\u3002\u3057\u304b\u3057\u3001\u540c\u793e\u306f\u30cd\u30ba\u30df\u8b1b\u3060\u3068\u975e\u96e3\u3055\u308c\u3066\u3044\u308b\u3002\u540c\u793e\u306e\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u306b\u3088\u308b\u3068\u3001\u540c\u793e\u306f\u30d9\u30c8\u30ca\u30e0\u3067\u8a2d\u7acb\u3055\u308c\u305f\u304c\u3001\u540c\u56fd\u306f\u5f8c\u306b\u3053\u306e\u4e3b\u5f35\u306b\u7570\u8b70\u3092\u5531\u3048\u305f\u3002\u3055\u3089\u306b\u3001\u4e16\u754c\u4e2d\u306e\u3044\u304f\u3064\u304b\u306e\u56fd\u3084\u5730\u57df\u3067\u3044\u304f\u3064\u304b\u306e\u707d\u5bb3\u304c\u767a\u751f\u3057\u3001OneCoin\u304c\u8a50\u6b3a\u3067\u3042\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u3002<\/p>\n\n\n \u3059\u3067\u306b\u8a50\u6b3a\u306b\u906d\u3063\u3066\u3057\u307e\u3063\u305f\u5834\u5408\u3001\u3067\u304d\u308b\u3053\u3068\u306f\u3044\u304f\u3064\u304b\u3042\u308b\uff1a<\/p>\n\n\n\nIn plain terms: how a phishing attack actually reaches you<\/summary>\n
In plain terms: why a “free token” airdrop is such an effective hook<\/summary>\n
How to Avoid Being Scammed<\/h3>\n\n\n
Check the Website Address<\/h4>\n\n\n
In plain terms: what a lookalike address actually looks like<\/summary>\n
login.yourexchange.com.secure-verify.io<\/code> is not your exchange. It is secure-verify.io<\/code>, wearing your exchange’s name as a costume. The same goes for a hyphen where there should be nothing (your-exchange.com<\/code>), an extra word (yourexchange-wallet.com<\/code>), a swapped letter (yourexchagne.com<\/code>), a different ending (.co<\/code>, .net<\/code>, .app<\/code> instead of \u30c9\u30c3\u30c8\u30b3\u30e0<\/code>), and characters from another alphabet that render identically to Latin ones.<\/p>\nGo With Your Gut Feeling<\/h4>\n\n\n
Watch Out for Urgency<\/h4>\n\n\n
In plain terms: why urgency is the giveaway, not the emergency<\/summary>\n
Use a Strong Password<\/h4>\n\n\n
In plain terms: password, private key and seed phrase are three different things<\/summary>\n
Mining Scams<\/strong><\/h2>\n\n\n
<\/figure>\n\n\n\nIn plain terms: what you are actually buying with cloud mining<\/summary>\n
The Returns<\/h3>\n\n\n
In plain terms: why a fixed daily return is impossible in mining<\/summary>\n
Transparency<\/h3>\n\n\n
In plain terms: how to check transparency yourself, in ten minutes<\/summary>\n
\u30de\u30eb\u30a6\u30a7\u30a2\u8a50\u6b3a<\/strong><\/h2>\n\n\n
<\/figure>\n\n\n\nCryptocurrency Clipboard Hijackers<\/h3>\n\n\n
In plain terms: how a clipboard hijacker steals a payment<\/summary>\n
How to Spot Possible Malware<\/h3>\n\n\n
\n
In plain terms: what to do first if you think you are infected<\/summary>\n
Fake Wallets<\/strong><\/h2>\n\n\n
<\/figure>\n\n\n\nHow to Spot a Fake Wallet<\/h3>\n\n\n
\n
In plain terms: how to verify a wallet before you install it<\/summary>\n
ICO\u8a50\u6b3a<\/strong><\/h2>\n\n\n
<\/figure>\n\n\n\nICO\u8a50\u6b3a\u3092\u56de\u907f\u3059\u308b\u65b9\u6cd5<\/h3>\n\n\n
\u30d1\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a<\/strong><\/h2>\n\n\n
<\/figure>\n\n\n\n\u30dd\u30f3\u30d7\u30fb\u30a2\u30f3\u30c9\u30fb\u30c0\u30f3\u30d7\u8a50\u6b3a\u3092\u56de\u907f\u3059\u308b\u65b9\u6cd5<\/h3>\n\n\n
\u30dd\u30f3\u30b8\u30fc\u30fb\u30af\u30ea\u30d7\u30c8\u30fb\u30b9\u30ad\u30fc\u30e0<\/strong><\/h2>\n\n\n
<\/figure>\n\n\n\n\u306d\u305a\u307f\u8b1b\u306e\u898b\u5206\u3051\u65b9<\/h2>\n\n\n
\n
\n