With the growing adoption of OKX Wallet, scammers are continuously developing new tactics to deceive users into authorizing wallets or revealing seed phrases or private keys, which may lead to the loss of assets. Please stay vigilant and be cautious at all times.
New scam case: malicious permission changes
Checklist
- How to prevent it?
- To learn more, you can click
Notes
This type of scam most commonly occurs during deposits made via the TRC network. Exploiting users’ desire for low-cost deals, scammers lure users into purchasing items such as fuel cards or gift cards at unusually low prices, or topping up accounts through third-party verification platforms. When users make deposits using the links provided, malicious code is triggered to alter wallet permissions, allowing scammers to obtain signature authorization and ultimately gain control of the user’s wallet address.
Scam Method Overview
Step 1: Scammers often lure users through “bait” such as discounted offers to click third-party links. From the deposit page, users are redirected to their wallet, where malicious code automatically fills in a token contract address.
Step 2: During the transfer process, a warning about permission changes and potential risks will appear. If the user proceeds, wallet permissions are maliciously altered. Subsequent transfer attempts may display error messages, but by this point, control of the wallet address has already been compromised.
Details follow the official OKX help article; this page is a learning checklist, not an official mirror.
