DWC NewsFriday, 28 August 2026Crypto · .COM & domains · scam alerts
Scam desk

Crypto scam alerts and phishing warnings

Wallet drainers, fake Telegram investment channels, malicious contract approvals, domain spoofing and phishing campaigns — what happened, how the mechanism works, and what to check before you sign.

Three rules that stop most of it

Read the URL character by character. Homograph attacks swap a Latin 'a' for a Cyrillic 'а'; the two are indistinguishable at reading speed.
Never sign typed data you have not decoded. Run it through the Permit2 / EIP-712 inspector first — an unlimited allowance looks like any other signature request.
Treat an unsolicited DM as hostile. A legitimate project does not message you first asking you to connect a wallet.

Documented incidents and advisories