Cointime

Download App
iOS & Android

How To Protect Yourself From NFT Scams

Validated Venture

The crypto ecosystem has rapidly expanded in recent years, with NFTs (“non-fungible tokens”) emerging from a niche technology to a booming market for digital collectables, empowering and democratizing the creator economy. From Bored Apes to NBA Top Shot, NTFs demonstrate not only a compelling mainstream use-case for blockchain technology, but also represent a new era for creators in the digital space, sweeping across art, music, and sports.

But with the rise of NFTs — and the potentially lucrative opportunities for digital collectables — comes the risk of fraud, scams, and theft.

The best way to protect yourself from these kinds of scams is to learn to spot them — and then stay far, far away. Which is why we created this guide. 

So what are some of the common threats? In this report, we’ll go over:

  • Phishing scams
  • Plagiarized listings 
  • Exit scams, or “rug pulls”
  • “Dust attacks”

Phishing scams

Phishing is one of the most common scams. This occurs when attackers send malicious links on various applications and platforms, including Discord, Telegram, Whatsapp, Facebook, and Instagram. The link often brings the victim to a fake NFT minting page, which contains a smart contract that can allow the scammer to drain the victim’s wallet, if signed. This type of scam has many variations, including instances where an official Discord of an NFT project becomes compromised, allowing exploiters to use the official channel to broadcast their malicious "honey pot" link.

Discord scams arise when hackers gain admin-level access to a server (as described above), or by DM-ing members of the Discord community. In other cases, fraudsters will purchase authentic looking domain names, including ENS addresses, and run Google search paid advertising campaigns against it to drive traffic to a fake URL containing a malicious smart contract. In all cases, the goal of a phishing attack is to convince the unsuspecting victim that a fake malicious link is a real one.

How to avoid: Never click on suspicious links, attachments, or pop-ups. Always verify URL domain names, email addresses and social media handles to ensure authenticity. Be vigilant about fake ads and fraudulent email addresses purporting to be customer support. Do not share your seed phrase, credentials or private keys with anyone. Use strong passwords and enable two-factor verification.

Plagiarized listings

Fraudsters have been known to create plagiarized, or fake, websites resembling popular NFT marketplaces or minting sites, purporting to be the official home of a legitimate project, hoping to confuse users into buying them. In some instances, these fake NFT pages misrepresent the relationship the fraudulent page’s creator has with the legitimate NFT page. OpenSea recently said that more than 80% of items created using their shared storefront contract were plagiarized works, fake collections, or spam.

How to avoid: Always confirm verified accounts, identities and website URLs of NFT marketplaces. Look for verification checkmarks on sellers’ social media and Discord accounts. If you’re still in doubt, reach out to the artist or seller on social media to confirm the authenticity of a potential transaction. Don’t rush into purchasing an NFT until you’ve confirmed it is genuine.

Exits scams (also known as “rug pulls”)

Rug pulls are notorious in the NFT space. Commonly referred to by the shorter “rug,” these are scams in which a project’s founder (or founders) market a venture’s purported purpose without any intention of seeing the goals to fruition. Ultimately, the fraudsters raise funds, commonly through NFT mints, and take off with the money (aka “rug pull”), without any attempt to develop the project.

Big Daddy Ape Club is a recent example. The developers raised more than 9,000 SOL before abandoning the project. The pseudonymous nature of blockchain developers, in conjunction with irreversible transactions, create strong incentives for scammers to try to get away with theft. Exit scams can also be subtle — instead of immediately abandoning the project, the developers will “move the goalpost” around the expectations of what will be done with the money raised. 

There are generally three phases to these scams:

  • In the first phase, the developers will raise money through an NFT mint, promising to accomplish a variety of objectives without any intention to do so. 
  • In the second phase, the developers often change timelines and core project initiatives, doing anything that would push out milestones and extend the project’s timeline further and further out. 
  • In phase three, once initial interest in the project subsides, funds raised in phase one are moved into personal wallets, often using mixers to tumble and obfuscate stolen funds.

How to avoid: Research the background of the teams behind NFT projects on social media platforms like Linkedin and Twitter. Even anonymous artists and developers can be well known and trusted by the crypto community, but it is still important to closely review social-media follower counts and engagement. Examine a project’s road-map and consider whether it is realistic. If possible, leverage the wisdom of the crowd by seeing what veterans of the NFT community think of the project, and whether it has received any verifiable noteworthy endorsements from individuals or organizations.

Dust attacks

A dust attack occurs when a victim mints a legitimate NFT, but then finds a random, new NFT in their wallet. If the victim interacts with this unknown NFT, including listing it for sale, they may be signing a smart contract that results in their wallets being drained. Unfortunately, this scam does not only happen to popular NFT project minters. Bad actors also send malicious NFTs to random wallets in the hope of catching new users unaware.

How to avoid:  

Monitor your wallet as much as possible. If you do find an unknown NFT in your wallet, do not interact with it in any way.

Read more: https://www.coinbase.com/learn/wallet/how-to-protect-yourself-from-nft-scams

Get the latest news here: Cointime channel — https://t.me/cointime_en

NFT
Comments

All Comments

Recommended for you

  • Walsh: Federal Reserve Meeting Schedule to Change Next Fall, No Rate Vote in 2027

    On October 29, Federal Reserve Chair Walsh stated that the schedule for the Federal Open Market Committee will begin to change next fall. In 2027, there will be one meeting that will neither conduct a rate vote nor issue a policy statement. It is expected that there will be two FOMC meetings in 2028 that will not conduct a rate vote.

  • BTC Surpasses $81,000

    Market data shows that BTC has surpassed $81,000, currently priced at $81,001.26, with a 24-hour increase of 0.54%. The market is highly volatile, so please ensure proper risk management.

  • Bank of Canada Raises Interest Rate by 25 Basis Points as Expected

    On October 28, the Bank of Canada raised its benchmark interest rate from 2.25% to 2.50%, marking the first rate hike in over three years and aligning with market expectations.

  • Tether Launches FASE Foundation with 11 Partners

    On October 28, Tether announced the establishment of the FASE (Financial Access and Systemic Empowerment Foundation) in Switzerland, a nonprofit multi-stakeholder foundation focused on four key pillars: financial security, financial freedom and inclusion, connectivity and clean energy, and access to end medical resources, as well as responsible AI and robotics. Founding stakeholders include Anchorage Digital, Bitfury, Bybit, Chainalysis, Fasanara Capital, Kraken, Opera, Pave Bank, Prosper Global (formerly Mercy Corps), Solana Foundation, and Tether, with technical consulting provided by the United Nations Office on Drugs and Crime (UNODC). The first three projects include: forming a global youth alliance with the social enterprise Goodwall to provide digital education and fraud prevention tools to up to 10 million young people in high-risk areas in Africa, Latin America, and Southeast Asia; piloting stablecoin humanitarian aid with Prosper Global, initially covering up to 1 million people as a template for future crisis response; and expanding cybercrime prevention networks in Africa, Asia, and Central America based on existing collaboration with UNODC, along with partnering with the United Nations Trust Fund for Victims of Trafficking to fund NGOs that assist survivors of human trafficking. Tether CEO Paolo Ardoino stated that the most vulnerable populations have long been overlooked by traditional financial systems. Prior to the official launch, the founding members held a meeting in Lugano, Switzerland, to establish strategic priorities.

  • Morgan Stanley Warns S&P 500 May Drop Another 8%

    On October 28, Mike Wilson, Chief U.S. Equity Strategist at Morgan Stanley, stated in a client report that a combination of AI financing pressures, the U.S. midterm elections on November 3, and tightening financial conditions could push the S&P 500 index down to around 7100 points in the coming weeks, representing a decline of about 8% from recent levels. This would mark the largest adjustment since the market turmoil triggered by the Iran war earlier this year. The firm noted that approximately 60% of the Russell 3000 index components have fallen over 20% from their peaks since early June, and about 96% of semiconductor stocks have also declined by more than 20%. They anticipate that the semiconductor sector may drop an additional 10% to 15% before mid-November. Credit spreads on bonds related to data centers have widened, with CoreWeave's debt entering distressed territory this month. The Federal Reserve raised interest rates to 3.75% to 4.00% in September, leading to rising bond yields. The firm maintains a year-end target of 8000 points for the S&P 500 and a fundamental target of 8300 points over the next 12 months, noting that markets typically perform better after midterm elections, with data from 1950 to 2022 showing an average increase of about 8% in the three months following elections.

  • Israeli Parliamentary Election Vote Counting Completed, Netanyahu's Camp Currently Leads

    On the 28th local time, according to Israeli sources, the vote counting for this round of Israeli parliamentary elections has been completed. The Likud party, led by current Prime Minister Netanyahu, remains in the lead with the highest percentage of valid votes counted so far. The Likud party continues to be the largest party in the parliament. However, there is a deadlock in the allocation of seats between Netanyahu's right-wing camp and the opposition camp led by Esenkot, with no single camp able to directly reach the majority of seats required to form a government.

  • Anthropic IPO Filing Warns of Risks from Trump Administration Retaliation

    On October 28, Bloomberg reported that in its IPO filing, Anthropic warned that its public advocacy for AI safety regulation and statements from executives could expose the company to risks such as government pressure and selective scrutiny. The document stated that even if other similarly situated companies are not treated equally, Anthropic could still become a target for specific government agencies, a risk associated with the company's multiple conflicts with the Trump administration: one stemming from disputes over the requirement for the U.S. Department of Defense to set safety limits when using its AI technology, and another related to disagreements over the safety and export controls of the Mythos model. The filing also indicated that future government interventions, export restrictions, and cybersecurity or biosafety incidents triggered by AI models could affect its product deployment, international expansion, and business growth. Furthermore, if the regulatory measures advocated by the company are implemented, compliance costs would rise, product development and release would be restricted, and its growth could slow down. Anthropic publicly submitted its S-1 filing on October 26, intending to list on Nasdaq under the ticker ANT.

  • AI Simulation System Sim Fed Previews October Rate Meeting: Seven Votes, Five for Pause

    On October 28, ahead of the Federal Reserve's upcoming interest rate decision, an AI simulation decision-making system called Sim Fed completed seven simulated votes: five opted to maintain the current interest rate, while two supported a rate hike, aligning closely with the market's mainstream expectation of a pause this week. The system was developed by Tara Sinclair, chair of the economics department at George Washington University, and Sophia Kazinnik, a research scientist at Stanford University's Digital Economy Lab. The two invested approximately a year and a half into the project, with a preliminary research paper set to be published by the end of 2025. Researchers clarified that the aforementioned votes are results of a simulation experiment and do not reflect the Federal Reserve's actual decisions; the real monetary policy decision is expected to be announced at 2 AM Beijing time on October 29.

  • Casap Completes $56 Million Series B Funding Led by Base10 Partners

    On October 28, Fortune reported that financial AI startup Casap announced the completion of $56 million in Series B funding, led by Base10 Partners, with Synchrony and Experian participating as strategic investors. The company's total funding has reached $90 million. Founded in 2023, Casap's AI tools assist banks and credit card companies in handling disputes and chargebacks. The company disclosed that clients using the tool have seen first-party fraud losses reduced by up to 51%, with chargeback win rates increasing to 96%, compared to the industry average of 60%. The average dispute resolution time has been shortened to 8 days, while traditional methods can take up to 90 days. The valuation for this round has not been disclosed.

  • Kalshi Plans to Tighten Deposit Restrictions for Users Under 21

    On October 28, Bloomberg reported that Kalshi CEO Tarek Mansour stated that the prediction market platform is discussing increased user protection measures with U.S. regulators due to research showing that most users are in a losing position. Kalshi is willing to accept raising the participation age threshold to 21 years. The specific measures include a monthly deposit limit of $2,500 for users under 21 and the establishment of special accounts to curb high-risk trading. Mansour noted that Kalshi is an exchange regulated by the U.S. Commodity Futures Trading Commission (CFTC) and does not directly act as a counterparty for user trades, with users' lost funds flowing to other traders. However, he also acknowledged the need for the platform to work with regulators to establish protective rules to address existing regulatory gaps.