#ScamAlert 🚨 NEW SCAM: How even experienced cryptors are fooled through Google Forms
A well-known Bitcoin developer Jameson Lopp is sounding the alarm. An extremely insidious phishing scheme has appeared that exploits a vulnerability in Google's infrastructure.
What's the trick to the scam?
The scammers are using a legitimate Google form to request backup copies of contacts.
1. The email comes from the official Google domain, so spam filters miss it.
2. In the "Name" field, the attackers insert a huge block of text. It visually shifts the real system content to the bottom.
3. Instead, at the top of the email, the victim sees a fake "security warning" and a link to a phishing site, which (attention!) is also hosted on the official Google Sites platform.
🛑 Top 5 DON'Ts from Jameson Lopp
Because of this incident, Lopp called on the crypto community to enable "zero trust" mode for any incoming messages. The official domain no longer guarantees anything.
Forget about trusting these 5 channels when it comes to "urgent account problems":
• 📧 DON'T BELIEVE EMAILS (even from official brands)
• 📞 DON'T BELIEVE CALLS
• 💬 DON'T BELIEVE SMS
• 📲 DON'T BELIEVE MESSAGES
• 🔔 DON'T BELIEVE ANY INCOMING MESSAGES
🚩 The main rule: Any message that screams that there is a problem with your account and it needs to be fixed urgently is a 100% red flag.
⚠️ Conclusion: The technical literacy of new users is falling, and the methods of hackers are becoming more sophisticated. Don't follow links from "urgent" emails. If you are worried about your account, critical-check it yourself by going to the official website manually.
🛡️ Take care of your keys and turn on your cool head!