37 Scam Reports

Hack - Other

1

I have crypto wallet identified as 0.0.4560705-gootj and nicknamed “BankSocialites” on the phone application “HashPack”. The crypto wallet is a 12 seed phrase wallet which was originally created on CoinBase back in 2022 however I have been using the wallet on HashPack. The wallet contained 1,907,505 Hadera crypto tokens which is valued a $0.1058 cents per a token which made the value of the $201,814.03. On 03 April 2024 at approximately 21:30 I logged into the HashPack wallet 0.0.4560705-gootj to purchase domain names. At approximal 21:35 EST I logged into the website “hashgraph.name” via the link in the HashPack wallet and purchased 5 domain name NFTs. After purchasing the NFTs I exited the website and went back to my HashPack crypto account. After verifying the NFTs were sent to the wallet, I exited the wallet on my phone and spent the rest of the evening watching TV with my wife. The next day on 04 April 2024 at approximately 1230 EST, I logged into the HashPack crypto wallet 0.0.4560705.gootf to check the current value of the wallet. At that time I noticed that the amount of my HBAR token was on 505 HBAR tokens. I though there may be a technical error so I logged out and relogged into the wallet. The amount of HBAR was still only 505 total. I then checked the “history” tab, which shows all transactions on the account, and saw that at 0458 EST that morning an account, identified as 0.0.5275323 (https://hashscan.io/mainnet/transaction/1712221120.835903003) , had been created with my wallet and then at 0500 EST 1,907,000.919 HBAR tokens had been removed from my account, 0.0.4560705-gootf,  and transferred to the account recently created, 0.0.5275323 (https://hashscan.io/mainnet/transaction/1712221249.783057003) . Shortly after noticing this I checked the website “Hashscan.io” which shows all transaction on the Hedera network which is the net work HBAR token is located on. I was able to view the transaction of 1,907,000.919 HBAR tokens transferred from my account, 0.0.4560705-gootj, to 0.0.5275323. By clicking on the 0.0.5275323 account in Hashscan.io, I could see the HBAR token was transferred from 0.0.5275323 to another account 0.0.180409 in two transfers in the amount of 1,000,000 HBAR tokens and 907,000 HBAR tokens (https://hashscan.io/mainnet/account/0.0.5275323?pt=1&ph=1&p1=1&k1=1712222113.183121003 ). I then clicked on the 0.0.180409 account on Hashscan.io and saw that my 1,907,000 HBAR tokens has been transferred there (https://hashscan.io/mainnet/account/0.0.180409?ph=1&pt=1&p1=1&k1=1712430330.607281003 ).

0
1
Reported Addresses
Reported Address
Hedera logo
0.0.4560705
Reported Address
Hedera logo
0.0.4560705

For security reasons and to protect investigations, this report is currently only shared with Law Enforcement Partners.

Phishing Scam

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce pellentesque vulputate iaculis. Integer lacus sapien, auctor quis nisi non, pulvinar accumsan ligula. Vivamus quis odio ut est iaculis lobortis ut eu leo. Nam mattis varius gravida. Vivamus aliquet vestibulum ex et rutrum. Mauris eu tempor mi, ac porttitor magna. Etiam id fermentum orci, et malesuada lacus. Morbi facilisis malesuada hendrerit. Fusce eu magna auctor, fringilla libero eget, sodales elit.

0
Reported Addresses
Reported Address
Ethereum logo
address-1
Reported Address
Ethereum logo
address-2
Reported Address
Ethereum logo
address-3

+ 1 more

Contract Exploit Scam

1

My HashPack wallet hacked while I was watching a video about hearing loss and tinnitus. Approximately $30,000.00 of my HBAR and JAM tokens were stolen from my account in minutes. I have submitted a criminal case complaint to the FBI.

0
1
Reported Addresses and Domains
Reported Address
Hedera logo
0.0.4774682
Reported Domain

https://mainnet-public.mirrornode.hedra.com/api/v1/transacions/0.0.793111-17090.mainnet-public.mirrornode.hedra.com

Phishing Scam

1

I went to log into my Haspack wallet, and came across the website hashpackwallet.com. I clicked on login and it prompted me to enter my seed phrase, which I entered. Then it said error. Then I went to the actual website to login to check my funds, logged in, saw they were all there and was relieved for a moment. Then a few seconds later roughly 11,000 HBAR and 350 SAUCE were transferred out of my account. Hashscan said that the node submitted to was 0.0.5 Florida, US.

0
1
Reported Addresses and Domains
Reported Address
Hedera logo
0.0.456187
Reported Domain

https://hashpackwallet.com/

Phishing Scam

1

Hedera user lost funds through phishing scam.

0
1
Reported Addresses
Reported Address
Hedera logo
0.0.4703643
Reported Address
Hedera logo
0.0.4729941
Reported Address
Hedera logo
0.0.4703643

+ 1 more

NFT Airdrop Scam

1

I got scammed by airdrop and money was taken out of my haspack wallet. i can provide account info on which my tokens were transferred along with transaction hashes

0
1
Reported Addresses and Domains
Reported Address
Hedera logo
0.0.4230084
Reported Domain

Hbarairdrop.org

Reported Address
Hedera logo
0.0.4230084

+ 1 more

Hack - Other

1

Good day , Thank you for taking the time to look at this situation .it all started on the 25 of august the scam . I had some hbar that i converted in hbarx (61,995.708) or 77,882.969 hbar for some time now (since sept 2022). It was placed with staterlabs.com /hedera/stake . I wanted to take a look on the 3 of january and i couln t see my hbarx balance and took a look at my hystory to realise it transfert in hbar and also transfert to another account . I sent you the picture of the transaction s. I can also give you acces to my hashpack account(0.0.84750) if needed because i will never use them again . Thank you again and have a nice day Denis

0
1
Reported Addresses
Reported Address
Hedera logo
0.0.3197707
Reported Address
Hedera logo
0.0.1303586
Reported Address
Hedera logo
0.0.3045981

+ 13 more

Phishing Scam

1

I ask for support about stacking rewards and I follow the instructions of the « Haspack support » and then all my hbars gone to another account

0
1
Reported Addresses and Domains
Reported Address
Hedera logo
0.0.4317819
Reported Domain

https://hashpackapp.org/en

Reported Address
Hedera logo
0.0.4317819

+ 1 more

Phishing Scam

1

I went to website to try and import wallet cause my mobile app was not letting my in. It ask for my key put it in and it said failed and my account was locked and to contact customer support ASAP. Do went to their chat put my email and number and then they called me and from there they got in my wallet with information I have them they sent me a magic everything looked legit but be I know I got in my wallet I forget they got to download some app call awe something it connected them to my computer long story short as soon as I got in with out there help my coins where gone so if you go to the website an put import wallet the put wrong code you can get them to call you and maybe trace there location

0
1
Reported Addresses and Domains
Reported Address
Hedera logo
0.0.3939222
Reported Address
Hedera logo
0.0.180409
Reported Domain

Https://hashpackwallet.com

NFT Airdrop Scam

1

In hedera network I received a transaction at my wallet with a memo saying "Airdrop reward is waiting for you - claimhbar. org". I manually entered this address and opened an identical hedera site with a blog post. This blog post was describing the way to get the rewards. Part of the process was to open a fake hedera wallet and add the passphrase.

0
1
Reported Addresses
Reported Address
Hedera logo
0.0.3919062
Reported Address
Hedera logo
0.0.2964717

Contract Exploit Scam

2

The creator of the token (Ayylmao, since the exploit/theft people have said he is a known serial scammer on Hedera formerly known in Discord community as 'bheing') said he's made a coinflip Dapp for his Sauceinu token (refer to screenshots uploaded of DMs). People who used it had to approve a very large allowance for the token they are playing with, and those who questioned how secure it was were told its very secure by him as hes done similar stuff on Etherium chain. He releases the Dapp a few days before his announcement that a new devleoper has joined their team (out of the blue, no one knew this, and he use to say to keep costs down, hes going to be the main developer). Then a couple weeks later anyone who connected and apporved allowance to play the game had all the tokens they approved stolen from their wallet exploiting the high allowance approval coded into the Dapp by Ayylmao (but Ayylmao fabricated a story that the new dev went behind his back and changed code to have that exploit and a 'taketoken' function added into the source code). After stealing the tookens from many people, the thief dumped/sold all tokens on Saucerswap for Hbar and then cashed out through Gate.io (this is where most of my losses have occurred as the dump has tanked the vlaue of the token and hence my remaning investmet held in another account). You can follow the transactions on Hashscan (he used 2 or 3 accounts to conduct the theft). The new dev has apparantly been doxxed by Ayy (within a day of the exploit and theft) as being someone by the name of Alberto Mira (not sure if this is a real person or an Alias of his - https://es.linkedin.com/in/alberto-mira-5089ba269 ). Ayylmao's story is that he gave Alberto an ultimatum to return the stolen USD value of the funds back to him so he can return it to the people affected. Which obviously never happened, and Ayylmao now says hes working with Spanish Authorities to find Alberto (even if Albertos Linkedin says hes working in the USA.....) Some people have been reimbursed by Ayylmao in the Sauceinu tokens they had stolen, but that does not equate to the USD value lost and stolen from them.

0
2
Reported Address
Reported Address
Hedera logo
0.0.3396063

For security reasons and to protect investigations, this report is currently only shared with Law Enforcement Partners.

Impersonation Scam

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce pellentesque vulputate iaculis. Integer lacus sapien, auctor quis nisi non, pulvinar accumsan ligula. Vivamus quis odio ut est iaculis lobortis ut eu leo. Nam mattis varius gravida. Vivamus aliquet vestibulum ex et rutrum. Mauris eu tempor mi, ac porttitor magna. Etiam id fermentum orci, et malesuada lacus. Morbi facilisis malesuada hendrerit. Fusce eu magna auctor, fringilla libero eget, sodales elit.

0
Reported Addresses
Reported Address
Ethereum logo
address-1
Reported Address
Ethereum logo
address-2
Reported Address
Ethereum logo
address-3

+ 1 more

Impersonation Scam

1

I staked Hbar on StaderLabs.com beginning April 5th 2022. I didn't unstake the HbarX I received until July 5th 2023. When I unstaked July 5th, and it said that I should wait 24 hrs before being able to withdraw my HbarX tokens turned Hbar tokens. So I waited 24 hrs & returned to the site but didn't notice anything that would allow me to withdraw so the next day I checked again to discover that the 'Unstake' tab showed how I can initiate the withdrawal so I initiated the 'withdrawal'. The withdrawal tab then began processing with a spinning circle. This processing continued for days and I began searching for how to speak with someone at Stader to help me resolve it. It was difficult to find how to speak with anyone. I concluded it must be the Telegram(TG) support group that is the means to resolve an issue like this. I dwnlded TG on my desktop & I already had it on my phone but rarely use it. I joined the "Stader Labs Hedera Official" TG Group the same day I was trying to fix this issue. I didn't get my bearings within the TG interface before being barraged with TG users who contacted me via direct messages (DM) and then also phone calls through the TG app. I was contacted by @bondman first who did not seem like proper Stader help bc he had a bear pic. Post-theft I realized one of the legit Stader admins is @Bondman0 so the guy who contacted me was just a scam impersonator. Then 'StaderLabs Admin Support' contacted me with whom I exchanged a few messages Both tried to call me, but they still couldn't hear me bc my mic wasn't working. Dialogue didn't go well - it was chaotic, but the 2nd person had an official looking Stader pic so it seemed more legit. Then 'Stader Labs Hedera Official' interrupted who told me to block others and that he had been designated to help me. He also had a Stader graphic. I began typing with him and he called me but couldn't hear me either. I typed back while he spoke over my speakers. He said he understood my issue and sent me a link to use to resolve it. He is the scammer who stole my Hbar and HbarX. He deleted the chat immediately after he got my passphrase and emptied my wallet, so I don't have his text to share, but he said the same thing 'StaderLabs Admin Support' said so I will paste that. “Okay you will need to manually integrate your HashPack on the mainNET hub for undelegation withdrawal”,”I understand your problem it is a known error”, “It is due to incomplete sync on the Hedera dApps mainNET from work. After unstaking the undelegated HBARx keeps showing unable to complete withdraw on the interface right?” The link required me to click a HashPack icon and then a 'withdrawal' icon. The next window req'd my passphrase to proceed. I input it I now know these 3 were scammers. I was supposed to just type with the Admin qualified users in the 'Stader Labs Hedera Official' GROUP but that was not clear to me when I first got on TG and was bombarded by impersonators as soon as I first typed a note to the GROUP.

0
1
Reported Addresses and Domains
Reported Domain

https://www.staderlabs.com/hedera/

Reported Address
Hedera logo
1st Address HbarX sent
0.0.1412465
Reported Address
Hedera logo
2nd Address HbarX sent
0.0.1412503

+ 3 more

Phishing Scam

0

I got an airdrop to my Hashpack wallet which stated "Your airdrop reward is waiting for you - rewardhbar.org". I visited the website and it provided a link. to a MyHbarWallet (https://myhbarwallet.org/). Everything looked exactly like the MyHbarWallet, so I trusted it. Once I entered my key phrase, my account balance appeared exactly as it did on my HashPack account. Minutes later, my 13,234.99585746 hbar was transferred to account id 0.0.2804953-fbbnf. According to Hash Scan, the funds still remain in his account.

0
0
Reported Address
Reported Address
Hedera logo
0.0.2804953

Hack - Other

1

this is a follow up on the report made a few minutes ago, The scammer is now listing my nft on marketplace : https://sentx.io/nft-marketplace/0.0.2173899/16838 the photos enclosed should help you.

0
1
Reported Addresses
Reported Address
Ethereum logo
0x00000000000000000000000000000000001e63cc
Reported Address
Hedera logo
0.0.1991628

Reports by Category

Backed By
TRM logoSolana logoCircle logoOpensea logoAave logoBinance logoCivic logoHedera logoRasomwhe.re logo
Backed By
TRM logoSolana logoCircle logoOpensea logoAave logoBinance logoCivic logoHedera logoRasomwhe.re logo