Identifying Phishing Scams
Keplr is a non-custodial wallet, meaning the moment you’ve created an account, the sole management of the account belongs to you; however, this doesn’t stop us from doing what we can to prevent fraud and help the community be aware of compromising situations.
First, always prioritize the safety of your private key and/or recovery phrase. These are your account master keys… and the prime target for phishing attacks.
Here are some examples of scenarios that are vulnerable for wallet holders:
- Giving away recovery phrase via fraudulent website or fraudulent profile
- Recording a recovery phrase on a publicly viewable space
- Leaving a device with a wallet unattended
- Connecting with a phishing site to receive an airdrop or NFT
As scammers get more sophisticated, it’s important to stay vigilant against any phishing schemes or attacks by guarding your account.
Reporting Scams
Reporting scam proposals
Sometimes, malicious actors submit scam governance proposals since these proposals are exposed to users who are expected to vote. Such proposals often include tempting words like airdrop and may contain scam links that can trick users.
If you come across such a proposal, please find the chain’s name in this repository and submit a PR including the proposal number flagged as a scam.
Reporting malicious websites
If you discover a malicious site, add its URL to this repository and submit a PR.
Reporting malicious X/Twitter accounts
On X (Twitter), scammers often impersonate the Keplr Wallet team, team members, or Keplr HelpDesk. Stay alert and submit a PR here whenever you spot one.