Crypto Phishing Scams Aur Bachao Ki Checklist

Crypto phishing aksar exchange ko hack karke shuru nahin hoti. Scammer user se password, 2FA code, wallet approval ya transfer khud karwata hai. Official website ka design copy karke saath mein urgency add ki jati hai: account freeze hone wala hai, withdrawal verify karein, ya offer das minute mein khatam ho raha hai.

Website Binance jaisi dikhna proof nahin ke domain Binance ka hai. Message mein aap ka naam hona bhi sender ko genuine nahin banata. Public social profile, leaked email list ya purani data breach se scammer enough details le sakta hai ke message personal lage.

Fake login page account kaise leti hai

Common entry points search ads, fake support messages, emails, SMS aur QR codes hain. Fake domain mein sirf ek letter badla ho sakta hai ya aisa subdomain use hota hai jo pehli nazar mein official lage. Page Binance ke colors, logo aur login form ko copy karta hai.

Aap credentials enter karte hain to attacker unhein real Binance login par foran use kar sakta hai. Fake page phir 2FA code maangta hai. Aap ko lagta hai verification fail hui, lekin code attacker ke real login ko approve kar raha hota hai.

Browser ka HTTPS lock sirf encrypted connection dikhata hai. Fake website bhi HTTPS certificate le sakti hai. Full domain, saved bookmark aur official app zyada reliable checks hain.

Fake support agent ke common scripts

Scammer khud contact karke keh sakta hai:

• Account freeze ho gaya hai ya KYC fail hui hai.
• Withdrawal release karne ke liye tax ya unlock fee chahiye.
• Stolen funds ek recovery tool se wapas aa sakte hain.
• Remote inspection ke liye screen sharing ya control app install karein.

Normal support process ko password, 2FA code, private key ya seed phrase ki zaroorat nahin. Funds ko kisi so-called safe address par transfer karna bhi legitimate verification nahin. Agar agent pehle aap ko message kare, secrecy maange ya jaldi ka pressure de to conversation band karein. Binance official app ya apne bookmark se Support Center khol kar naya case start karein.

Fake airdrop aur malicious wallet approvals

Kuch scams login password nahin maangti. Website wallet connect karwa kar unclear message ya token approval sign karwati hai. Screen par free airdrop, NFT mint ya account verification likha hota hai, lekin approval contract ko tokens move karne ki permission de sakta hai.

Signature free action nahin samjhein. Immediate transfer na ho to bhi approval baad mein exploit ho sakti hai. Sign se pehle domain, contract, asset scope aur spending amount dekhein. Message samajh na aaye to cancel karein; countdown timer ko decision na banne dein.

Suspicious approval sign ho chuki ho to trusted blockchain explorer ya wallet tool se permissions check aur revoke karein. Valuable assets ko new secure wallet mein move karna zaroori ho sakta hai, lekin pehle device aur seed phrase ki safety confirm karein.

Address poisoning ka trap

Attacker aisa wallet address generate karta hai jis ke first aur last characters aap ke regular address se milte hain. Phir woh zero-value ya tiny transaction bhejta hai, taake fake address transaction history mein aa jaye. Agli transfer par history se address copy kiya to funds attacker ko ja sakte hain.

Sirf pehle aur aakhri four characters check karna kafi nahin. Address trusted source se dobara lein, poora compare karein aur labeled address book ya withdrawal allowlist use karein. Bari amount se pehle small test transfer bhej kar receipt confirm karein.

Fake promotions aur deepfake video

Scam livestream purani celebrity video ya AI-generated voice aur face use karke keh sakti hai ke ek coin bhejein aur do wapas milein ge. Fake social account comments mein limited-time campaign link post kar sakta hai.

Legitimate promotion aap se unknown address par crypto bhejne ke badlay double return ka wada nahin karti. Blue tick, follower count aur video face final proof nahin; account compromise aur media manipulation dono mumkin hain. Binance official website se campaign khud search karein. Details match na karein to participate na karein.

Aisi security routine jo pressure mein bhi chale

1. Binance official URL bookmark karein; login sirf bookmark ya official app se karein.
2. Binance aur linked email ke liye different passwords use karein aur password manager mein save karein.
3. Dono accounts par 2FA lagayein; authenticator ya security key ko priority dein.
4. Binance anti-phishing code set karein. Email mein correct code na ho to usay suspicious samjhein.
5. Login devices, API keys, withdrawal addresses aur account activity review karein.
6. Public Wi-Fi par login ya withdrawal na karein aur stranger ki remote-control app install na karein.
7. Regular withdrawal addresses ko allowlist mein save karein; change par full verification dobara karein.

Ek layer fail ho sakti hai, is liye multiple layers chahiye. Password leak ho to 2FA extra barrier hai. Email convincing ho to bookmark aur anti-phishing code aap ko rukne ka signal de sakte hain.

Incident ho chuka ho to kya karein

Link khola lekin details enter nahin ki

Page band karein aur koi file download na karein. Browser download history aur extensions check karein. Official site bookmark se kholein. Suspicious page ko notification permission di thi to permission remove karein.

Password ya 2FA enter kiya

Clean device se official Binance website kholein, password change karein aur unknown sessions revoke karein. Linked email ka password bhi change karein. API keys, withdrawal addresses, orders aur transaction history check karein. Binance official Support se foran rabta karein.

Wallet approval sign ya funds transfer kiye

Suspicious approvals revoke karein. Transaction hash, domain, chat aur wallet addresses save karein. Funds recovery ka wada karne wale naye agent ko payment na karein; recovery scam aksar pehli theft ke baad aati hai. Remaining assets ko secure wallet mein move karne ka plan banayein. Bari loss ya crime ki surat mein local law enforcement ko report karein.

Urgent message par chaar sawal

• Contact main ne start kiya tha ya sender khud aaya?
• URL mere bookmark ka hai ya message button ka?
• Kya password, code, remote access ya pehle payment maangi ja rahi hai?
• Agar main das minute ruk kar independent check karun to asal mein kya lose hoga?

Scammer aap ki speed chahta hai. Verification usi ke diye huay number ya link se na karein. Official app, bookmark ya known Support Center se naya contact start karein.

Official reading: Binance Academy Crypto Security Guide, Address Poisoning Guide, aur Binance Support Center.