The Cardano Foundation’s guidance for staying safe from sophisticated scams

The Cardano Foundation’s guidance for staying safe from sophisticated scams

CFLogo

The Cardano Foundation reminds our valued community to remain extremely vigilant in light of a recent rise of fraudulent activity targeting ada holders.

The level of sophistication involved in this most recent fraudulent scheme makes it incredibly difficult to detect. While our team works very hard to deplatform these sites we would like to share further details with you so you may avoid them.

In the most recent scheme, bad actors have convincingly duplicated the https://cardanofoundation.org/ website in an attempt to promote a scam.

This fake website, pictured below, attempts to lure users into joining a stake pool named ‘HyperPool’, which promises high rewards for participants. This stake pool does not exist, and the Cardano Foundation has absolutely no association with it. The Cardano Foundation will never run a stake pool.

Please always make sure you are visiting: https://cardanofoundation.org/. Do not simply rely on the SSL certificate padlock being present next to the URL, as fraudulent individuals can also implement a false SSL. The Cardano Foundation genuine SSL provider is Cloudflare, and we ask that you check this information as well as verifying the URL is correct before you use our site.

To steal your funds, the signup link for the fake pool directs you to a duplicated version of the AdaLite wallet. The URL for the fake wallet uses the domain extension ‘.ORG’ instead of the real wallet which uses a ‘.IO’ domain (https://adalite.io/).

This fake wallet, pictured below, will then prompt you to connect your hardware wallet device, provide a Keystore file, or restore an ada wallet from your mnemonic phrase in order to join the pool. It is at this point your funds will be lost.

We ask our community to be totally aware that any interaction with this fake wallet and stake pool will result in the total loss of your funds with no way to retrieve them. We cannot reverse transactions on the blockchain, and we cannot restore your lost funds should you attempt to interact with this fake wallet and stakepool.

Please read on to find out how you can stay safe, and some general Cardano security rules to remember.

Three golden rules for staying safe

Please always remember these three golden rules, now and in the future:

  1. No Cardano entity, either the Cardano Foundation, EMURGO, or IOHK, will EVER advertise a scheme where you to send funds of ada or any denomination to any address, entity, or individual;

  2. No team member from any Cardano entity will ever ask you to send funds of ada or any denomination to any address, entity, or individual;

  3. The Cardano Foundation does not and will never run a stakepool, and any pools advertising affiliation with the Cardano Foundation are unofficial and should be approached with caution.

You can read more about unofficial giveaways and scams and how you can protect yourself from them here. Please find a complete list of our official channels and websites here.

Thank you and stay vigilant,

The Cardano Foundation

13 Likes

Just got a spam email, claiming to be from Coindesk, promoting this HyperPool scam. :grimacing:

1 Like

Surely the issue is that all likely, relevant domain extensions were NOT purchased.
Do so, and lodge (US) ICANN complaints / FBI online scam reports. Stump up the $5K asap OR use US Federal Court. Such scammers will NOT want to appear in person.

See Claude M Hilton (wayne-kerr) Barcelona.Com on US Ct Appeals article on ‘arse-n-elbow’… a lawyer will tell you more…
BARCELONA.COM: el Ayuntamiento de Barcelona pierde el juicio, Bufet Almeida

The scammers use misspelling and fancy tricks with charsets, there is no way all possible variations could have been purchased.

Please be very careful people, and mods please flag this website.
https://thecardanofoundation.io/en/news/staking-pool-launch/

I take it there is literally no chance to recoup lost ADA? Seem to be a few companies online offering their services for bitcoin lost to scammers, but thinking they may be scammers too.

If it is too good to be true… or spams you direct (how does it ‘know’ your email?)

:poland: For Polish translation, visit here: