Yeah, the scam now looks to be the common one now after the infamous multisignature scam. I am yet to see such an exploit on POW networks (I stand to be corrected) all i see are POS networks

People also ought to copy addresses from the exchange or wallet they are sending funds not and no necessarily block explorers. Copying from a block explorer exposes on to a higher risk of getting scammed.

fully agree with you I see that member that was scammed 100K asked to share this on Reddit because he can't so would be great if somebody can do it to spread the word further

doesn't matter if that was his mistake that he used this address, this is scam and he was scammed, not important that in the end if you fell for this you are responsible because you haven't be careful enough, this is still scam

and despite everything not so stupid one as we see people lost already a lot of money

What's important to see in this situation is that you don't need to panic if you have correctly made sure that your private keys are safe and you know that you haven't installed anything malicious on your device etc., you should be safe. Something that could go wrong here is that you need to check the transferring address thoroughly.

The part where the user "thinks" that their wallet is compromised is when the attacker grabs the opportunity to steal/rob the user from redownloading.

They can initiate TransferFrom function of the token contract that does not require approval only if the transaction amount is zero. Read the documentation on how the TransferFrom function works. All networks with smart contract functionality are susceptible to this type of "attack". So suchmoon is right. This can be toned down—it's nothing new.

No one can steal anything from your wallet using this method without you making a stupid mistake (such as copying the recipient's address from blockchain explorer). It's basically the same as fake airdrops.

In my opinion we need to share this as much possible to warn people, even experienced users make mistakes when send transactions, I am the best example, so this scam is not so stupid and takes advantage of that. As we can see they already succeed and scammed for sure many people one of them reported 100K lost to this.

Despite we call that trick, or attack that don't deserve to be called like that, is not important, let's call it simply what it is - SCAM.
People loose money all the time, even as we speak and I am really surprised to see some opinions that this is our fault that we don't check addresses very carefully.

there are many situations in real life when yes, indeed you are in hurry or make simple error and copy paste one of many scam addresses that are targeting every incoming transaction in wallet. They count exactly on that one small mistake we all can do because we are humans, don't forget that few first and last numbers match the correct address. This is why this scam is so brilliant and as we see effective, despite is not the most sophisticated one.


Yes scammers can send only ZERO VALUE transactions from our wallets and this is already added in my post. When I check TRON explorer and incoming transactions, I see that this TransferFrom Zero Transfer Scam is executed on multiple transactions.

Few days ago it was visible but I need some time to find them, today I had no problem finding them in the flow of newly sent transactions, literally every third of fourth was marked with warning message, looks like this keeps spreading, they are gaining momentum.

I hope that this is enough for developers to look at that, if they could implement such update that at least will hide/remove/mark such a ZERO VALUE transactions properly, that could resolve that problem at least to to some extend.

You're diluting the issue by insisting that the problem is elsewhere: "users blindly copying addresses from untrusted sources".

Sending crypto transactions was never easy and that was/is always the first obstacle for any new  crypto user, especially today with so many chains, contracts, bridges this is even more advanced task

looks like you don't know how hard sending transactions in real life is? Have you ever done ATM withdrawal, have you ever dealt P2P?

if not then believe me you can be distracted and such scam transactions in our wallets, despite sent or not doesn't help, even more, they are there on purpose as you know because scammers are really clever and take advantage on our bad behavior

Real life example

by ATM withdrawal from known service, one receives QR code to scan the address where to send crypto, of course when one scan it see something like LTC33KS4f948484kfjjf8988:300$ depends on amount and crypto of choice it can be even more complicated, of course whiteout indication which chain to use!!! then one need to manually delete what is not correct, and paste where it needs to be pasted, of course don't know that from start, one think have the correct address, all starts when try to send it and see message :"address not correct" or something similar, immediately start to be nervous, if we add that one is on phone, need to check addresses, explorers back and forth, there are many things that can go wrong even in peaceful environment, where one is super focused, don't mention small local store, when there is 40 degrees outside...

I need to add that scanned address from QR code is not visible right away, it needs to be pasted somewhere like notepad to be able to decipher it, when copy pasted into tiny place in some wallet withdrawal tab all one see is bunch of numbers and later message "wrong address" when hit send

believe me experienced user that have done transactions multiple times on many chains, using all kinds of bridges and wrapped coins, have hard time to figure everything out and do that correctly,  this is only one simple example where such fake 0 value transactions in our wallets are like ticking bomb and are placed there exactly for that purpose

Maybe I am diluting the issue and partially i am doing that on purpose as I have told few times only for one reason to make it sound more alarming, but saying that this is only because "users blindly copying addresses from untrusted sources" is also "diluted"

the only person that undermine importance of this "non existed thread" is you @suchmoon

explain that to ordinary people when they see this in their wallets



and to the user that lost 100K that talking about "non-existent threat" is not important

ok @suchmoon wish you a nice day further, as always happy you join my threads

This is totally not true what you are implying here.


My goal was to get the attention of others, I haven't thought about "fearmongering" anybody

For sure undermining importance of this scam and blaming users that are victim is at least odd


for me is clear that you never send many transactions, day after day, when you have to do it multiple times P2P or in not friendly environment were is easy to get distracted, and that you will keep diluting anything I write about this scam, this is why I feel like kicking with a horse and want to end this conversation, from other side our discussion keep this thread on top of this board, so is seen by many more users each hour (which is my goal) so keep it rolling

I'm not implying anything, just making an observation on your OP and providing a quote that led me to said observation. If you think it's not acceptable to copy from past transactions and/or users should go to the actual destination to get the address - then perhaps you should state so in the OP.

Also you're saying "check addresses very carefully" and "check it fully" but what are you checking the address against? Presumably some known good/trusted source? So why not use that to begin with?