The Web3 space is brimming with opportunities, but it’s also becoming a hotbed for scammers preying on unsuspecting professionals. These scams are becoming more sophisticated, often involving fake job offers, phishing attempts, and advanced deception tactics. Here’s an overview of these schemes, the red flags to watch for, and tips to protect yourself.
Common Web3 Job Scams
1. Fake Job Offers Leading to Malware
Scammers create convincing job offers for roles in blockchain development, marketing, or consulting. They often:
Conduct elaborate Zoom interviews to appear legitimate.
Redirect candidates to messaging platforms like Telegram or WhatsApp.
Share links to fake websites or phishing pages, urging you to install malicious software.
For example, a recent scam involved a fake WeChat website. The scammers asked me to install WeChat via a Mac terminal command. This disguised malware was to be installed and then grant access to my machine remotely, be especially watchful for popups requesting for password access.
the fake wechat site
2. Sophisticated Deepfake Calls
Using AI-powered tools, scammers mimic the voices and appearances of company executives. In one instance, an account professional joined a Zoom call and was deceived into believing they were speaking with their boss. The scammers used this to authorize a fraudulent payment for a fictitious transaction.
3. Phishing for Wallet or System Access
Many scams target professionals’ cryptocurrency wallets or development environments. They might ask candidates to:
Test a “code snippet” that contains malicious scripts.
Share their private keys under the guise of verifying technical skills.
These tactics compromise wallets, systems, and even organizational networks. Ever since the Russian double network hack, this means that now hackers can get into one network and jump onto the next one. All they need is compromised devices.
the real wechat site
Red Flags to Watch For
Unprofessional Communication Channels: Legitimate employers use official emails, LinkedIn, or Slack. Be wary if recruiters insist on using Telegram, WhatsApp, or similar platforms for interviews or tasks.
Requests for Software Installation: Any request to install applications or run scripts, especially from unverified sources, is a significant red flag.
Pressure to Act Quickly: Scammers often push you to make hasty decisions, leaving little time for verification.
Lack of Verifiable Information: Check if the company has a robust online presence, including LinkedIn profiles, an operational website, and employee reviews.
How to Protect Yourself
1. Verify the Employer
Research the company thoroughly.
Check for LinkedIn profiles of employees and confirm their legitimacy.
Avoid companies that lack a professional website or domain email addresses.
2. Use Secure Systems
Always test unfamiliar code or applications in a sandboxed or virtual environment.
Avoid entering your system password unless you’re confident in the application’s authenticity.
3. Be Cautious with Communication
Avoid moving discussions to platforms like Telegram or WhatsApp.
If a recruiter insists on these platforms, cross-check their credentials.
4. Guard Your Wallets
Never share your private keys or seed phrases.
Be cautious of job offers requiring you to connect your wallet or sign transactions.
5. Seek Community Support
Use trusted Web3 job boards like Gitcoin or AngelList, they are also infiltrating these sites.
Join Web3 professional communities to share experiences and verify opportunities.
What to Do If You’re Targeted
Stop Communication: Cease contact with the scammers immediately.
Report the Incident: File a report with your local cybercrime authority and alert platforms like LinkedIn or job boards about the scam.
Secure Your Devices: Run malware scans, update your passwords, and, if necessary, wipe and restore your devices.
Warn Others: Share your experience to help others in the community avoid similar traps.
Conclusion
While Web3 holds immense potential, the increasing sophistication of job scams is a sobering reminder to stay vigilant. Always prioritize your safety, verify opportunities thoroughly, and use secure practices when engaging with potential employers. By staying informed and cautious, you can navigate the Web3 landscape without falling victim to these elaborate schemes.
