Use cold storage:Ledger or Trezor hardware wallet.
Bookmark your crypto sites: Use those bookmarks and only those.
Only send funds to trusted addresses: Double-check what address you're
sending ETH to. Lookup the address at etherscan.io and check the comments tab for people taling about their stolen funds.
Don't trust Discord/Slack/Telegram/Reddit/Twitter posts or messages: Scammers often promise free coins or try to scare you into clicking a link.
How can I join the fight?
See a malicious link being spammed in Telegram? Report it.
Receive a DM from someone asking you to send them coins? Report it.
Hear about someone who had their coins stolen? Tell them to report it.
Tell people to install EtherAddressLookup so they don’t accidentally end up on a known malicious website.
Use this data in your project to prevent people from sending to malicious addresses or visiting malicious URLs.
Contribute your own internal lists to our dataset. See our API.
If you have crypto, donate crypto to us to help cover the costs of upkeep.
If you don’t have any crypto, share some love for us across Twitter.
Yes, you can either download the raw blacklist and whitelist files or take a look at our API.
Reach out to us directly if you have any questions or simply want to share something cool you’ve created using this data!
Are the reports open source? Where do they go?
Team members at MyCrypto do an initial scan of the raw reports before adding a website or address to the dataset. One reason we
protect the raw reports is because they sometimes include sensitive, personal, or irrelevant information.
Why was this database created?
The database was created on July 2017 as EtherScamDB(.info) in response to the rapid proliferation of scams that cropped up in
within the Ethereum community with the network’s rise to popularity. In 2019, we migrated to CryptoScamDB(.org) in order to
indicate our support of the wider cryptocurrency ecosystem. While grouping all the scams won't make
them go away, it will make both identifying them and taking them down easier.
What reasons do we blacklist a website for?
Impersonating popular crypto services.
Impersonating popular crypto personalities.
Sending user-input private keys/secrets to backend services.
Conducting a giveaway that requires participant's pay an advance fee.
Preying on, or lying to, investors of a project which can be proved without doubt.
Pyramid scheme-like language.
What reasons do we blacklist an address for?
Association with a website that has been blacklisted.
Receiving funds from a profiled security event (this includes breaches, ransomware, smart contract hacks, etc).
When do we remove entries from the blacklist?
When the offending action (i.e., private key harvesting) is removed, it has been reported to us by a member of the team associated with the blacklisted entry, and we have had time to review the change-of-status report.
If a genuine mistake is made on our part and has been raised with us by a member of the project’s team.
If you have any other questions and would like to get in contact with us, please shoot us an email at contact@cryptoscamdb.org.