Mimecast: How to Protect Your Crypto from Phishing

Cybercriminals have targeted the cryptocurrency community since bitcoin’s inception, and many crypto owners are falling prey to schemes like phishing.

What is phishing? 

Phishing is a digital crime where cybercriminals aim to steal a user’s private information. Scammers deploy their attack by disguising themselves as trusted organizations or entities to trick a user into mindlessly handing over details like their social security number, credit card information, bank credentials, and in this case, crypto wallet details.

Use Multi-factor authentication 

There is no surefire way to keep cybercriminals from attempting to breach an organization’s system. However, it is possible to make it harder for attackers to succeed in obtaining sensitive information. Multi-factor authentication (MFA) is an easy passive approach for users to secure their crypto wallets.

MFA adds an extra layer of protection on top of passwords for both an organization and an employee. So, a password will not be enough even if a user falls victim to a phishing scam.

Avoid fraudulent emails

Remember, if something looks too good, it probably is. Over 270,000 Ledger wallet users had their emails extracted in 2020. Phishing attacks, like the breach against Ledger users, promise free wallets that are secretly compromised.

Messages that are urgent or prompt a speedy response may also be phishing scams. Other phishing messages may state that if a user does not act now, their account with whatever legitimate organization the attackers are impersonating will be suspended.

Most reliable companies will offer ample time for customers to get their affairs in order. However, it is best to ignore such messages as this is a favorite method for cybercriminals. When in doubt, contact the source directly to clarify the matter instead of interacting with the potentially fraudulent message.

Also, users should scrutinize emails with a sharp eye– especially ones with such grand requests and promises. Keeping an eye on the email’s domain and checking for spelling mistakes could be the telltale signs a user needs to identify the phishing scam.

Keep your private keys secure

Users must keep their private keys, the line of letters and numbers used to access their cryptocurrency that resembles a password, private.