Spoofed Crypto Website and Fake Support Scam
Verdict: Suspicious | Risk Score: 9/10 | Severity: critical
Category: UPI, WhatsApp, Phishing
How Spoofed Crypto Website and Fake Support Scam Works
Overview: The Spoofed Crypto Website and Fake Support Scam preys on Indian crypto enthusiasts by imitating popular exchange websites like Coinbase. Attackers lure victims to look-alike sites with subtle URL differences—or by buying ads that appear above real sites in Google results. If a user attempts to log in or solve an 'account lock' on the phony site, they’ll be contacted (often via WhatsApp or phone calls) by scammers pretending to be exchange support. The scam is highly risky as victims can lose entire crypto holdings from their wallets within minutes. How It Works: The victim stumbles upon a fake exchange website (for instance, coinbasepro.com instead of the legitimate pro.coinbase.com). Upon logging in, a pop-up or banner urgently prompts the user to contact 'customer service' due to supposed account issues or suspicious activity. When the victim calls the provided number, the scammer requests sensitive information, including OTPs and two-factor authentication (2FA) codes, under the guise of verification. As soon as these details are shared, the fraudsters quickly transfer all funds out of the victim's wallet and then disappear. India Angle: Indian investors, particularly those using English-language platforms, are vulnerable because these scams often surface via Google search ads, WhatsApp-forwarded links, or Telegram crypto groups popular in cities like Mumbai, Pune, and Hyderabad. Many victims are tech-savvy but miss tiny differences in website address[ADDRESS_REDACTED]. Fake support numbers are sometimes staffed by Hindi-speaking agents to gain trust, and they pressure victims for UPI or bank details, claiming the need for immediate verification. Real Examples: - A WhatsApp message: 'Dear Coinbase user, your account is under review for suspicious activity. Call 9123xxxxxxx to unlock.' - A Google ad showing 'Coinbase Support: Secure Your Account', leading to a lookalike site. - 'Your withdrawal is on hold—please provide your OTP for verification.' Red Flags: - Website links with misspelled or badly formatted URLs (e.g., missing dots or extra characters). - Requests for 2FA codes or passwords over phone or WhatsApp. - Pushy or urgent customer support calls from unknown numbers. - Websites avoiding standard security (no HTTPS/secured connection). Protective Measures: - Only access exchanges through bookmarked, verified URLs or official mobile apps. - Never share 2FA or OTP codes—no genuine support agent will ever request these. - Use authenticator apps for 2FA, not SMS (which can be intercepted). - Always check for FIU-IND (India's Financial Intelligence Unit) registration on the exchange's website. - If contacted for 'support', end the call and independently verify any request with the exchange's official help desk. If Victimised: - Immediately change all related passwords and revoke linked devices. - Notify your bank, freeze transactions, and secure your crypto wallet. - Report the scam on cybercrime.gov.in or call 1930, providing all details (calls, screenshots, transactions). Related Scams: - Google search ad phishing attacks - Fake wallet recovery services - SIM swap fraud targeting 2FA access
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Spoofed Crypto Website and Fake Support Scam Target?
General public across India
Red Flags — How to Identify Spoofed Crypto Website and Fake Support Scam
- Website URL has typos, extra dots or dashes
- Urgent requests for OTPs or 2FA codes
- Calls from unknown 'support staff' numbers
- No HTTPS (padlock) on exchange site
- Pressure to act immediately to avoid account loss
What To Do If You Encounter Spoofed Crypto Website and Fake Support Scam
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report Spoofed Crypto Website and Fake Support Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is Spoofed Crypto Website and Fake Support Scam?
- Overview: The Spoofed Crypto Website and Fake Support Scam preys on Indian crypto enthusiasts by imitating popular exchange websites like Coinbase. Attackers lure victims to look-alike sites with subtle URL differences—or by buying ads that appear above real sites in Google results. If a user attempts to log in or solve an 'account lock' on the phony site, they’ll be contacted (often via WhatsApp or phone calls) by scammers pretending to be exchange support. The scam is highly risky as victims c
- How does Spoofed Crypto Website and Fake Support Scam work?
- Overview: The Spoofed Crypto Website and Fake Support Scam preys on Indian crypto enthusiasts by imitating popular exchange websites like Coinbase. Attackers lure victims to look-alike sites with subtle URL differences—or by buying ads that appear above real sites in Google results. If a user attempts to log in or solve an 'account lock' on the phony site, they’ll be contacted (often via WhatsApp
- How to protect yourself from Spoofed Crypto Website and Fake Support Scam?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report Spoofed Crypto Website and Fake Support Scam in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.