Approval phishing scams ‘a much bigger problem’ than first thought

Approval phishing scams have become a much larger issue than previously anticipated, with a staggering $2.7 billion lost to these attacks since May 2021. Approval phishing involves tricking unsuspecting individuals into signing a malicious blockchain transaction, typically through a fake cryptocurrency app. Once the transaction is completed, scammers have the ability to spend tokens within their wallet as they please, potentially leading to the loss of someone’s life savings. In response to this growing problem, blockchain analytics firm Chainalysis has launched “Operation Spincaster.” This operation aims to identify compromised wallets before any significant damage occurs. The operation, which involved collaboration across six countries, resulted in the identification of over 7,000 leads and approximately $162 million in losses. One particularly remarkable development was when a victim was alerted in the middle of a scam, allowing them to revoke the approval given to the attacker and prevent the theft of hundreds of thousands of dollars worth of cryptocurrency. Law enforcement agencies are increasingly using blockchain analytics to monitor the flow of illicit funds, as demonstrated by Operation Spincaster. The National Crime Agency has identified 230 British victims and has pledged to bring offenders to justice regardless of their location. While some police forces are starting to hire crypto investigators, collaborations with crypto exchanges and operations like Operation Spincaster provide law enforcement agencies with additional resources to combat scam activities. Binance was involved in Operation Spincaster and plans to expand the initiative to more countries. Educating crypto users is seen as a crucial step in preventing scams, as even experienced investors can fall victim to phishing attacks. Chainalysis emphasizes the importance of proactive transaction monitoring and robust risk management strategies for cryptocurrency exchanges. To protect themselves from approval phishing, crypto owners are advised to be cautious when urgently asked to send money or provide personal information, and to verify requests through independent research. It is clear that cybercriminals are adapting their tactics as awareness of their methods grows, posing a significant challenge to the wider global adoption of cryptocurrency.