Phisher tried to scam me today. Could not outsmart a Bank
Ok, it's starts out with me getting a message from "Dang" on Discord. This is already a little suspicious because the real Dang uses Steemit chat, and we have never talked on Discord before, but that's a small point.
When I go check out the Dang's account, he has 13k worth of Steem available, why would he need 500 from me at a high interest rate. And fake Dang's answer wasn't very compelling. I ask for government ID and he balks. To be fair, the real Dang probably wouldn't have wanted too either. This is a delicate situation for me, as the real Dang is a big account that already votes my witness, so I can't just dismiss him lightly.
Fake Dang claims he can comment as proof. Also please note that I wasn't asking Dang to vote my witness there, he already does! But fake Dang was confused.
Regardless I'm ready to write a contract at this point.
Here is where Fake Dang claims to have lost access to his account. This was a shocker for me, and my suspicions are cranked up to eleven. Fake Dang tries to raise the loan to 1000 steem and wants me to send it to Changelly.
Note:
I will never fucking send money directly to an exchange for a loan!
I send the money to the account that signs the contract, period, full stop, mic drop.
I test Fake Dang by asking him a question that real Dang would know, probably not the best question but he flubs it anyway. I flat out tell him I'm suspicious but Fake Dang claims that he can sign as Khoa (another account Dang controls).
So I do ask him to comment as Khoa..and he is able to do this! This throws me for a loop, and I'm lured slightly closer to the trap.
I'm still suspicious though, and insist on sending the money to Khoa, and not Changelly. Fake Dang is insistent that I must send it to Changelly.
I remain firm on not sending the money to Changelly, and finally realize it's because Fake Dang only has Khoa's posting key and not the active key, so he wouldn't have access to the funds.
Fake Dang tries to prove he has Khoa's active key by claiming awards.
You use your posting key to claim rewards. I'm not that dumb!
Fake Dang finally admits that he is a Phisher. We chat a little bit more. He mentions something disturbing:
Dang did change Khoa's keys this morning but somehow the Phisher was still able to use Khoa's posting key. How is this possible? He mentions it may have something to do with either Busy and/or Steemconnect (???!!!)
Conclusions:
- You are going to have to do better then that to trick me. I am Bank!
- If you even suspect that you might have been phished, please change your keys now! Also you may want to revoke permissions on Steem connect
- Be very careful out there.
- This Phisher was fairly clever and he was someone who was pretty familiar with me and Dang. Hmm who could it be?
- I'm still a Bank! Best Bank of the best banks.
Oh Fake Dang's discord is dang#3691
That was masterbot account he also got @anoniam too, i was trying to setup a voting bot and put the wrong key in there. Lucky i got all money out of that account before i start messing around with the voting bot.
It's the wild wild blockchain. @ironshield
when i change the password, it wont update on busy.org that is why he still got the posting key.
You mean busy remember the key? When I tried using busy, I always need to enter my active key via steemconnect daily. Does it happen only to me? or it happens to everyone?
That doesn't happen to me, busy remembers my password.
I'm on private-mode firefox. Whenever I close firefox, it automatically erases my cookies and cache. So everytime I need re-open firefox (like starting a new day), busy ask my password via steemconnect again.
I think this is cool, there is no way to lost your key to phing even if they try to get onto your Pc when you're not there
Oh interesting @anoniam also approached me for a loan, but I refused that one too. Less interesting story though, he just didn't qualify.
Wait are you still making a voting bot? Just had to ask that, i thought you were just a delegation seller
Steemconnect remember key.
Firefox has got super fast so i approve and i assuming the bellyrub incident made you stop doing delegations
No, bellyrub didnt pay his fee, but masterbot bailout on his lease with me so i took his 500steems deposit.
It will be interesting when the real @dang007 chimes in. Imitation is the greatest form of flattery. Especially when phishing for free STEEM. Can't trick the Neoxian bank. The only one like it on Steemit.
And yes, i'm concerned about steemconnect.
@ironshield
He did chime in, see comment above. Dang has control of his accounts now.
Always disappointing when people choose to use there skillsets in a way to be dishonest and steal.
I’m at least thankful Steemit made a change to indicate if a link goes off site. Some people just don’t think before they click or are just too tired to think much of it. Even more so when it comes from a “trusted” source.
This just leaves discords and other places that are a bit risk if people are not thinking or moving too fast to notice something not quite right. I always laugh little bit when someone hits me up in discord for an “upvote” as I’m just a tiny little guy. I tend to use block and move on. I hate to think the massive amount of attempts people try on large accounts. I’m hoping in future we have something to better combat wallet spam/phishing attempts.
I’m glad you least ask questions and want to go the more legal route when it comes to lending out funds. Far to many people are not use to things like having to create or sign contracts when it comes to cryptocurrency world and how “wild west” they like it to be.
I myself much rather work ten times harder if need be for an honest buck. I don't know how some people can sleep at night the way they conduct themselves.
@neoxian You are a bank & no one can scam you with that ease, lol. You are one of the best bank I have ever seen here on steemit. I am just planning to get some loan from you. Just waiting for the right time.
Thanks!
when a person who already have that much money why would he take loan hahah the scammer don't even have a little sight of brain
This is so interesting! Great detective work x
So amazed at how the scammer chatted to you afterwards.
Dang that was quite dangerous. Lol. He even offered the real dang's posting key. It seems that this guy has some talents, why not put it to good use. If he/she could share something beneficial he could earn that 500 steem.
sad but people are lazy and it's easier to steal than to earn, think of risk:reward ratio. It's hard to jail him, it's hard to prove he's a scamy slime, plus earning that 500 steem will take a while.
It's free lunch if you get it, usually they just cash out, the sad part is they are usually screwing over the smaller accounts, basically destroying the work that went into it, imagine it like this, you make 500 steem, some guy just takes it, the blame is on you and you have nothing to show for what you were doing ... he's happy he got his free lunch and goes about his day, scamming more people.
Sometimes the story is different, more complex, but that's rare.
Lolz I really don't know what he was thinking !
He probably had no idea who he really was dealing with ;)
Wow. Unreal! Thanks for taking the time to screen shot everything and explain. Super helpful for us still trying to learn.
Oh my. Scary times... Good thing you're a good and smart bank! Lol. These people just don't have anything better to do. Tsk tsk.