The number of malware frauds targeting crypto investors on Telegram has increased dramatically, exceeding the level of traditional phishing attacks. This was reported by blockchain security company Scam Sniffer, The Block reports. According to the company, the number of such attacks increased by 2000% between November 2024 and January 2025.
Unlike the usual phishing attacks that rely on fake websites, the new wave of scams uses more sophisticated methods. Attackers are infiltrating legitimate cryptocurrency communities on Telegram by disguising themselves as reputable participants and sending seemingly safe invitations. The goal is to deceive users through fake verification processes.
“These aren’t your typical ‘connect wallet’ scams,” Scam Sniffer explains. “Attackers are distributing sophisticated malware through fake verification bots, fake trading groups, fake airdrop groups [and] ‘exclusive’ alpha groups.”
As soon as the victim passes the fake verification, malicious code is injected into their clipboard, which downloads malware. This allows attackers to access passwords, crypto wallets, and browser data.
Experts note that fraudsters have changed their tactics as crypto users have become more cautious about traditional fraud schemes. Thanks to Telegram, which is widely used in cryptocurrency communities, attackers are significantly expanding their reach.
“Remember: No legitimate crypto service will ever ask you to execute commands, install verification software, run scripts from your clipboard,” Scam Sniffer warns.
Chainalysis data emphasizes the scale of the threat. Losses from fraud and hacker attacks in the cryptocurrency sector reached $2.2 billion in 2024, which is 24% more than in the previous year. Decentralized financial platforms (DeFi) account for the bulk of these illegal activities. Experts urge crypto investors to be vigilant, especially on platforms such as Telegram.