Guides for crypto teams under impersonation attack

Guides

• Discord setup guide

  Connect the FakeWatch bot to your Discord server, send alerts to a private moderators' channel and test it in about five minutes.

  Read

• Public page guide

  Publish one page with your project's official website, accounts and contracts, so anyone can check whether a link is really yours.

  Read

• Registrar abuse contacts

  Abuse emails and report forms of the registrars most often used for crypto phishing domains, with what to include in a report. Checked by hand.

  Read

• Hosting platform abuse contacts

  Abuse contacts of free hosting platforms that crypto phishing sites use (vercel.app, pages.dev, web.app, github.io and more), checked by hand.

  Read

• Someone is impersonating my project

  A first-hour checklist for crypto teams: warn your community, collect evidence, report fake sites, Telegram channels, X and Discord accounts, and stop the next one.

  Read

• Take down a phishing site

  Step by step: find the registrar and host of a fake crypto site, send reports that get acted on, trigger browser and wallet warnings, and escalate to ICANN.

  Read

• Takedown request template

  Copy-ready takedown request for a registrar or host about a crypto phishing domain, with the evidence ICANN calls actionable and a follow-up template.

  Read

• Report a fake Telegram channel

  Report a fake Telegram channel, group, bot or admin account: @NoToScam, in-app reports, [email protected], and how to protect your group from fake admins.

  Read

• Stop fake admins on Telegram

  Fake admins DM your members with 'support' links. Telegram settings that stop them: hide members, aggressive anti-spam, admin titles, pinned rules and a bot.

  Read

• Report X impersonation

  Report a fake X account copying your crypto project or team: the impersonation form, the trademark route, what counts as parody, and what X does after.

  Read

• Report Discord impersonation

  Report fake Discord servers, moderators and DM scams that copy your crypto project, use the trademark form, and set AutoMod to block look-alike names.

  Read

• Report phishing to wallets

  Get a drainer site blocked in wallets: MetaMask's eth-phishing-detect, ScamSniffer, Blockaid, Chainabuse and SEAL 911, with what each one needs.

  Read

• Abuse contact lookup

  Free tool: enter a phishing domain and get its registrar, the registrar's abuse email or form, and the hosting platform to report it to. No sign-up.

  Read

• Lookalike domain checker

  Free tool: enter your domain and see which typo, homoglyph and keyword variants of it are already registered. No sign-up.

  Read

• DMARC check

  Free tool: enter your domain and see whether scammers can send email that looks like it comes from it, and the DMARC record that stops them. No sign-up.

  Read

• URL check API

  Free JSON API: send a URL, get Safe, Suspicious, Malicious or Unknown, the crypto project it imitates and its official domain. No key, the URL is never opened.

  Read