Ethereum

DeFi

Venus

Phishing scams, attacks disguised as legitimate communication or websites designed to steal funds and sensitive information, cost crypto users over $12 million in August, up 72% from July, Web3 anti-scam service Scam Sniffer reported on Saturday.
<a href="https://cointelegraph.com/learn/articles/what-is-a-phishing-attack-in-crypto-and-how-to-prevent-it" rel="noopener noreferrer nofollow">Crypto phishing scams</a> impacted 15,230 victims in August, a 67% increase from July, with the single largest loss costing one user over $3 million, <a href="https://x.com/realScamSniffer/status/1964235400593178793" rel="noopener noreferrer nofollow" target="_blank">according</a> to Scam Sniffer.
The Scam Sniffer team also noted a “sharp escalation” in EIP-7702 signature scams. <a href="https://eips.ethereum.org/EIPS/eip-7702" rel="noopener noreferrer nofollow" target="_blank">EIP-7702</a> is an Ethereum Improvement Proposal that allows Externally Owned Accounts to act as smart contract wallets that can execute transactions and shift funds.
<figure>
 <img alt="Phishing, Cybersecurity, Scams" src="https://s3.cointelegraph.com/uploads/2025-09/019920ae-d5c4-790d-a4e8-e2de35478ede" title="">
 <figcaption style="text-align: center;">
 August 2025 phishing attack numbers. Source: <a href="https://x.com/realScamSniffer/status/1964235400593178793" rel="noopener noreferrer nofollow" target="_blank">Scam Sniffer</a>
 </figcaption>
</figure>
Scammers and hackers <a href="https://cointelegraph.com/news/wlfi-token-holders-falling-prey-classic-wallet-exploit" rel="noopener noreferrer nofollow">exploiting this functionality</a> drained over $5.6 million in August through three separate attacks, Scam Sniffer said.
Scams and cybersecurity exploits continue to be a problem in crypto, with over <a href="https://cointelegraph.com/news/crypto-hacks-august-2025-bitcoiner-btcturk-losses" rel="noopener noreferrer nofollow">$163 million stolen in August</a> through malicious activity. The persistent threat is a reminder for crypto users to remain vigilant and practice good anti-phishing and anti-scam security measures.
Related: <a href="https://cointelegraph.com/news/venus-protocol-recovers-13-5m-stolen-phishing-attack" rel="noopener noreferrer nofollow">Venus Protocol recovers user’s $13.5M stolen in phishing attack</a>
<h2 id="good-practices-for-staying-safe-against-phishing-scams">Good practices for staying safe against phishing scams</h2>
Losses from crypto hacks and scams <a href="https://cointelegraph.com/news/crypto-losses-hit-3-1b-in-2025-as-access-control-fails" rel="noopener noreferrer nofollow">crossed $3.1 billion</a> in the first half of 2025 amid increasingly sophisticated attack methods.
Scammers often target users by posing as legitimate and well-known cryptocurrency exchanges, either setting up fake websites with similar URL addresses to legitimate exchanges or sending fake communications to users.<iframe width="100%" height="315" src="https://www.youtube.com/embed/t06mVWz6ngM?start=10" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen loading="lazy" sandbox="allow-scripts allow-same-origin allow-popups allow-forms"></iframe>
These communications include emails, text messages, and even <a href="https://cointelegraph.com/news/industry-exec-alarm-ledger-phishing-letter-usps" rel="noopener noreferrer nofollow">physical letters sent through the mail</a>, designed to steal sensitive user information, including seed phrases for crypto wallets and passwords to online accounts.&nbsp;
Typically, the scammers will pretend to be customer service agents from reputable exchanges, claiming that the user’s account is facing some sort of threat or cybersecurity issue and demand personal information from the user, including seed phrases.
Good <a href="https://cointelegraph.com/news/crypto-phishing-scams-how-users-can-stay-protected" rel="noopener noreferrer nofollow">practices to avoid phishing scams</a> include checking URLs for tiny mistakes and bookmarking pages instead of using search engines or the search bar to access websites every time, verifying website links, and avoiding downloading attachments or clicking links from unknown sources.&nbsp;
Phishing scams often contain misspelled words or grammatical errors, and any of these mistakes is a red flag; users should read through messages carefully to detect such errors.
Crypto and Web3 users should also use virtual private networks (VPNs) to mask their IP addresses and physical locations, never give out seed phrases or passwords, and enable two-factor authentication for sensitive online accounts.
Magazine: <a href="https://cointelegraph.com/magazine/crypto-sec-defi-phishing-malware-hackathon/" rel="noopener noreferrer nofollow">$55M DeFi Saver phish, copy2pwn hijacks your clipboard: Crypto Sec</a>

Phishing scams cost users over $12M in August — Here’s how to stay safe

Table of Contents

Cointelegraph

Other articles published on Sep 6, 2025

Join our free newsletter for daily crypto updates!