As a researcher with personal experience in the crypto space, I cannot stress enough the importance of this CISA warning. Impersonation scams are not new, but the fact that they’re now targeting crypto users is a cause for concern. The anonymity and irreversibility of digital assets make them attractive targets for scammers.


The Cybersecurity and Infrastructure Security Agency (CISA) has issued a cautionary notice to cryptocurrency users in the United States regarding an increase in impersonation frauds. In these schemes, con artists pose as federal agents to coerce victims into relinquishing their crypto holdings. This latest trend in scams underscores the lengths criminals will go to steal digital assets.

As a security analyst, I’d like to share some important information with you based on a recent alert from the Cybersecurity and Infrastructure Security Agency (CISA). Scams involving impersonation of government employees are becoming increasingly common. I myself have become aware of individuals claiming to represent CISA but with malicious intent.

Impersonation scams have been effective in swindling people out of their fiat money and gift coupons, but they’re increasingly targeting crypto assets as well. Once a digital transaction is completed, it cannot be undone. Scammers exploit this vulnerability, luring unsuspecting victims into sending cryptocurrencies. The Cybersecurity and Infrastructure Security Agency (CISA) advises against paying impersonators, instead encourages users to jot down the scammer’s details, disconnect the call immediately, and report the incident to CISA.

Instead of merely requesting users to send cryptocurrency, fraudsters employ various tactics to steal crypto from unsuspecting individuals. They may resort to phishing or make use of drainers for this nefarious purpose. Phishing is a method where scammers send out links that direct users to fake websites which resemble the genuine ones. For instance, these can be login pages of digital wallet services. Users are then tricked into providing their wallet credentials, including private keys, which grants the scammers access to all the funds stored in those wallets.

An alternative approach gaining traction is guiding users towards supposed drainer apps on Discord, Telegram, and other social media channels frequented by crypto enthusiasts. Fraudsters exploit their fabricated power to lure users into these platforms under the false pretense of verifying wallets for regulatory compliance or similar reasons. Once users input their wallet information into these malicious applications, the drainer stealthily extracts their funds.

Image by tammon from Pixabay

Read More

2024-06-16 22:05