How to spot crypto scams like "SEC Token Refund Airdrop"

What is "SEC Token Refund Airdrop"?

In our investigation of this airdrop, we have discovered that it is a deceptive giveaway advertised through X (Twitter) posts. The account orchestrating this fraudulent activity is posing as the official U.S. Securities and Exchange Commission account. The individuals orchestrating this scheme intend to steal cryptocurrency from unsuspecting individuals.

"SEC Token Refund Airdrop" in detail

The misleading X (Twitter) post purports to express remorse for losses incurred due to unauthorized access to user accounts. It claims that affected individuals can recover their losses by claiming the $SEC token through a provided link: refund-sec[.]com. The post further suggests that users may need to verify their assets as a mandatory step in the purported recovery process.

Following the provided link leads to a fake U.S. SECURITIES AND EXCHANGE COMMISSION website. This site claims to be launching a $SEC Token Refund Airdrop as a measure of support for the community members impacted by unauthorized access incidents. The stated purpose of the airdrop is to provide compensation in the form of $SEC tokens, purportedly aimed at restoring confidence in the digital ecosystem.

In order to participate in the scheme, users are instructed to complete a verification process, which is presented as a means to ensure a fair and transparent distribution of the tokens. Users are expected to click the "Connect Wallet" button and follow the instructions to participate in the fraudulent activity.

Participating in this procedure results in approving a malicious contract intended to execute a cryptocurrency drainer. This drainer is crafted to extract cryptocurrency from wallets. Upon activation, it sends digital currency from the target's wallet to the perpetrators' wallet.

It is essential to acknowledge that cryptocurrency transactions often cannot be reversed, posing challenges in tracing and reclaiming funds after the transfer has taken place.

Threat Summary:

Name	SEC Token Refund Airdrop fake crypto giveaway
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	Individuals are eligible for a token refund or compensation
Disguise	Legitimate aidrop launched by U.S. SECURITIES AND EXCHANGE COMMISSION
Related Domain	refund-sec[.]com
Detection Names	Combo Cleaner (Phishing), Emsisoft (Phishing), Fortinet (Phishing), G-Data (Phishing), Google Safebrowsing (Phishing), Full List Of Detections (VirusTotal)
Symptoms	Lack of official verification, unrealistic claims, too good-to-be-true promises.
Distribution methods	Post on X (Twitter), deceptive websites, rogue online pop-up ads, unwanted applications.
Damage	Loss of sensitive private information, monetary loss, identity theft, possible malware infections.
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Similar scams in general

Fraudulent cryptocurrency giveaways commonly exhibit shared traits, including misleading promotions, deceptive posts, and efforts to entice individuals into participating in deceitful schemes. These schemes frequently entice users with promises of complimentary tokens or rewards, intending to deceive them into undertaking actions that result in financial losses.

More examples of fake websites used to trick users into running crypto drainers are "MultiBit Airdrop", "Less Fees & Gas", and "Jito (JTO) Token Airdrop".

How did I open a scam website?

The described scam is promoted through deceptive posts on Twitter by utilizing a fake account that masquerades as the official U.S. Securities and Exchange Commission (SEC) account. These fraudulent promotions involve misleading tweets expressing apologies for alleged unauthorized access or security breaches, creating a false sense of urgency.

Users may also encounter scam websites by clicking on links or attachments in deceptive emails, misleading advertisements, notifications from untrustworthy websites, and using platforms employing rogue advertising networks, including torrent sites and illegal movie streaming pages.

In some instances, users unintentionally land on unreliable pages due to installed advertising-supported programs.

How to avoid visiting scam pages?

Use well-established search engines such as Google, Bing, or Yahoo. When navigating online, exercise prudence by refraining from engaging with advertisements and pop-ups on questionable websites. Exercise caution against clicking on links in unexpected emails and messages.

Regularly update your browser, antivirus software, and operating system for enhanced security. Make certain to acquire files and applications exclusively from trustworthy sources, like official websites and reputable app stores. As an added security measure, incorporate the practice of conducting regular system scans using a reliable security tool into your regular maintenance routine.

If your computer is already infected with unwanted apps, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate them.

The appearance of "SEC Token Refund Airdrop" scam (GIF):

Fake U.S. Securities and Exchange Commission account on X (Twitter) promoting this scam:

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is SEC Token Refund Airdrop fake crypto giveaway?
• How to identify a pop-up scam?
• How do pop-up scams work?
• How to remove fake pop-ups?
• How to prevent fake pop-ups?
• What to do if you fell for a pop-up scam?

How to identify a pop-up scam?

Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.

While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.

Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:

• Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
• Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
• Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
• Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
• Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.

Example of a pop-up scam:

How do pop-up scams work?

Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.

Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.

How to remove fake pop-ups?

In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.

In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.

How to prevent fake pop-ups?

To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.

To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.

What to do if you fell for a pop-up scam?

This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.

• If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
• If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
• If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
• Help other Internet users: report Internet scams to Federal Trade Commission.

Frequently Asked Questions (FAQ)

What is a fake cryptocurrency giveaway (airdrop)?

A fake cryptocurrency giveaway (airdrop) is a deceptive scheme where scammers falsely promise free tokens or rewards to trick individuals into taking actions that lead to financial losses.

What is the purpose of a giveaway scam?

Scammers aim to deceive individuals in giveaway scams with the intention of extracting sensitive information and cryptocurrency from their victims.

Why do I encounter fake giveaways?

Fraudsters utilize a range of tactics to attract victims, employing fake social media accounts, deceptive websites, misleading advertisements, adware, notifications from untrustworthy websites, and similar avenues. It is common for users to land on scam pages inadvertently.

Will Combo Cleaner protect me from pop-up scams?

Combo Cleaner has the capability to conduct comprehensive scans of each website you visit, effectively recognizing malicious sites, including those linked to scams. The application promptly notifies users and limits access to suspicious websites.

▼ Show Discussion