This post was updated on October 12, 2023 with details of a new scam targeting Decrypt readers.
Scammers have created a fraudulent website purporting to offer a fake Decrypt "DCPT" token. The site, decryptokens.co, misrepresents itself as an official Decrypt site and invites readers to connect their wallet—exposing them to wallet attacks that could potentially drain all funds held by the user.
This is the latest development in an ongoing scam that falsely claims a "DCPT" token is live for Decrypt users. We would like to remind Decrypt readers that no such token is being issued by us; DO NOT click on any suspicious links or engage with the content, and please report any such instances to Decrypt immediately. The safety and security of our readers is our top priority.
Always verify communications that claim to be from Decrypt. Our official communications will always come through verified channels, including the official Decrypt website (decrypt.co), Twitter (@decryptmedia), Bluesky (@decrypt.co) and our official Discord channel, which you can find here: https://discord.gg/UC2hUQKTn3.
If you do come across a scam using Decrypt's brand, please report it to us and help to keep fellow Decrypt users informed. And as an added precaution, consider updating your passwords for your Decrypt account and associated email.
Recent scam attempts
This latest attempt to target Decrypt readers follows efforts by scammers to fraudulently use the names of journalists and other employees from Decrypt and other publications, defrauding victims out of millions of dollars.
Posing as journalists and other staff, these scammers tricked crypto and NFT project creators into handing over control of their social media accounts, namely Discord. After gaining access to a target’s Discord account, the scammers then try to lure their target’s community members into subsequent scams.
In reports of scams perpetrated using the Decrypt name, the attackers have engaged their victims with the hopes of gaining access to their Discord server token. Once they do so, they can take over a project’s Discord server, remove the legitimate administrators, and share links for fraudulent NFT or token mints. Such mints are typically “wallet drainer” attacks that can swipe a user’s tokens from a crypto wallet after they sign what they believe to be a legitimate transaction.
Pseudonymous blockchain investigator ZachXBT detailed examples of the attack in a tweet thread posted this morning. He said he’s confirmed the wallet address of one of the attackers and has shared identifying information with victims so that they can pursue legal action.
1/ An investigation into the Canadian phishing scammer known as Soup (Dan) who has helped steal millions in assets by attacking the Discord servers of projects like @Orbiter_Finance @PikaProtocol pic.twitter.com/EtD5FMiG4R
— ZachXBT (@zachxbt) July 17, 2023
To be clear, Decrypt journalists would not and will never approach a project creator and ask them to sign something in exchange for coverage. That's how these scammers are reeling in their victims.
Our editorial coverage does not require consent or signatures, and if we are interested in covering a project, we will simply seek out an interview without a contract or signature needed. Any suggestions otherwise from a purported Decrypt representative should be a red flag.
A legitimate Decrypt journalist will never ask you to download a file or browser extension as part of the process of seeking information and asking questions.
#1 🚨Beware of Discord scams🚨
It’s come to our attention that our journalists are being impersonated by scammers on Discord who are sharing a fake server link. https://t.co/p5USbDN1kD
— Decrypt (@decryptmedia) May 19, 2023
As with anything in the crypto world, be vigilant. Be sure to confirm that any URLs sent are from the official Decrypt website (decrypt.co), that any Twitter messages come from our official account (@decryptmedia), and that any correspondence comes from our official Discord channel, which you can find here: https://discord.gg/UC2hUQKTn3.
After this story's original publication, Discord responded to Decrypt's reports and disabled the copycat server. Furthermore, the fraudulent "decryptmedia.net" website is now inaccessible after being reported. Please remain vigilant, however, as additional phony Discord servers or websites could spring up and be used to facilitate scams.
If you receive a message that appears suspicious from someone who claims to represent Decrypt, please do not hesitate to contact us though the official channels listed on our website.
Editor's note: This story was originally posted on July 17, 2023 and was updated on August 16, 2023 with a new Discord link, plus details on our efforts to to get phony Discord servers and websites shut down. A further update on October 12, 2023 added details of a scam website targeting Decrypt readers.