It’s a lot easier with custodial wallets. They can get away with a OTP (One Time Password) code in some cases. How easy is that!?
All you have to do is ask them to sign up for something you control and then ask say Coinbase to send a login code at the same time as they click “Sign up” to your new service. You then ask them on the platform you control to enter the OTP code (which was actually sent from Coinbase) and their phone might even automatically fill it in. Then you have the OTP code and are authenticated into their Coinbase account.
That’s an abstraction as I don’t want to effectively publish a guide on how to scam people but some of these phishing attacks are really sophisticated. Phishing is how the NPM packages recently got hacked to include crypto draining malware. The developers that fell for it really aren’t dumb and I don’t judge them for falling for this. It really could happen to any one of us
Curiio
npub1dt…2x90t
2025-10-12 23:17:01 UTC
in reply to nevent1q…mnc9
Author Public Key
npub1dtzccz2f9kf9dsazystgat6hj6h2cceueq6464awjfl7e0dpdynq22x90tSeen on
wss://nostr.winePublished at
2025-10-12 23:17:01 UTCEvent JSON
{
"id": "e2663764dae82dab2c5bb543ee1b8c079a58907b86679ec970a401f97e0c7008",
"pubkey": "6ac58c09492d9256c3a224168eaf5796aeac633cc8355d57ae927fecbda16926",
"created_at": 1760311021,
"kind": 1,
"tags": [
[
"e",
"3605d7114d32a8edb1e430a510d1b8336bbe2052cceee876e942d174ff8bfbe5",
"",
"root"
],
[
"p",
"0463223adf38df9a22a7fb07999a638fdd42d8437573e0bf19c43e013b14d673"
]
],
"content": "It’s a lot easier with custodial wallets. They can get away with a OTP (One Time Password) code in some cases. How easy is that!? \n\nAll you have to do is ask them to sign up for something you control and then ask say Coinbase to send a login code at the same time as they click “Sign up” to your new service. You then ask them on the platform you control to enter the OTP code (which was actually sent from Coinbase) and their phone might even automatically fill it in. Then you have the OTP code and are authenticated into their Coinbase account. \n\nThat’s an abstraction as I don’t want to effectively publish a guide on how to scam people but some of these phishing attacks are really sophisticated. Phishing is how the NPM packages recently got hacked to include crypto draining malware. The developers that fell for it really aren’t dumb and I don’t judge them for falling for this. It really could happen to any one of us",
"sig": "74256318bdb61514474dff3fdfc533b13a554fc1f1e7eee22609390153bfdde301783188f44d7ccac54a18442687183abe031752b51403e0d99a8bf4c95842fe"
}