⚠️JUST IN: Over $83M was stolen from 106,106 victims in 2025 due to phishing and wallet draining attacks.

In comparison, 2024 saw $494M lost to similar schemes. 2025 marks the first year where less than $100M was stolen due to phishing and draining, as crypto exchanges continue to upgrade their security.

@scammed / @DWCusers

⚠️JUST IN: A victim lost 12 BTC (~$1M) after falling victim to a fake exchange website.

The wallet had been holding BTC for a year before being redirected to a phishing site, where a signature was approved and the funds were drained.

@scammed / @DWCusers

⚠️JUST IN: Over ~36,000 Trust Wallet users were impacted during a recent exploit.

The attacker is believed to have exported seed phrases and is monitoring the compromised wallets, waiting for deposits. Trust Wallet has since locked all affected wallets.

@scammed @DWCusers

⚠️JUST IN: Cold MM allegedly fell victim to an address poisoning attack during an MM deal, resulting in a ~$10,000 loss.

The victim has since posted a DD on OGU detailing how the address poisoning occurred. Nothing has been confirmed yet as the DD is currently live.

NOTE: Having an open DD does not instantly make him a scammer.

@scammed / @DWCusers

⚠️JUST IN: An elderly victim was social engineered out of 50 ETH ($150K) on Base, the network built by Coinbase.

The victim later left an on-chain message asking the attacker to return the $150K, stating he planned to start a family and buy a home.

@scammed / @DWCusers

⚠️JUST IN: MetaMask has suffered a data breach, resulting in users receiving phishing emails.

Attackers are sending users emails impersonating MetaMask, redirecting users to a phishing site that asks for wallet recovery phrases.

@scammed / @DWCusers

⚠️BREAKING: Ledger experienced another data breach via its payment processor Global-e, resulting in the exposure of customer personal data

Earlier today, affected customers received an email regarding the incident. Ledger is investigating the breach with external security experts.

@scammed / @DWCusers

⚠️JUST IN: A wallet compromised in 2022 was fully exploited in 2025, with ~$17M in ETH drained.

The victim originally lost 5,544 ETH (~$6.5M in 2022) + ~$396K in other assets after their private keys were compromised. The attacker retained control of the wallet and remained silent.

By November 2025, the attackers came back and withdrew ~$17M from the victim’s wallet after 3 years of waiting, laundering it via Tornado Cash.

@scammed / @DWCusers

⚠️JUST IN: ZachXBT is warning against buying Ledger wallets after today’s data breach.

Whenever a cold wallet suffers a breach, attackers usually follow up with phishing emails and social engineering attempts. Back in August, a Trezor user lost 783 BTC ( $91M ) after receiving a call from fake Trezor support.

@scammed / @DWCusers

⚠️UPDATE: Cold MM won the dispute regarding the $10k scam claim.

During the transaction, $10,000 was sent to a poisoned address and are now lost, but Cold was cleared in the dispute. The original claim was found to have inconsistencies & lack of proof.

@scammed / @DWCusers

⚠️UPDATE: Threat actors behind the Ledger breach are already sending phishing emails & calls to users.

Victims from yesterday’s data breach are now receiving phishing emails. Targeted users with higher crypto balances are receiving Ledger support impersonation calls.

@scammed / @DWCusers

⚠️JUST IN: A victim lost $229,951 in BTC and WETH after signing multiple phishing signatures.

The victim was drained of 1.1 BTC ( ~$100K ) and 40 ETH ( ~$130K+ ) after being redirected to a fake exchange website, where the attackers obtained wallet access via malicious approvals.

@scammed / @DWCusers

⚠️JUST IN: Ledger has issued an official announcement warning customers to remain cautious of phishing emails and scam calls.

This follows another Ledger data breach that resulted in customer information being leaked, with many users now being targeted by scammers and impersonation calls.

@scammed / @DWCusers

⚠️JUST IN: Famous YouTuber Tommy G has released a documentary on caller scams, crypto-related online theft, and the “com” scene.

In the documentary, a Coinbase security chief is interviewed, alongside alleged real callers who appear on camera flexing their crypto balances after hitting “licks.”

@scammed / @DWCusers

⚠️JUST IN: UXLink exploiter has stolen 248 BTC ($23M) and swapped it to DAI.

This follows a Sept. 22 hack, where the attacker was given access to mint billions of unauthorized tokens and drain tens of millions in crypto. He instantly bought 250+ BTC with the stolen funds and has now moved it into DAI.

@scammed / @DWCusers