Recently, we’ve observed scammers spreading fake campaigns—such as “imToken launches IMCOIN mining”—on social media platforms like WhatsApp and Telegram to trick users into depositing tokens on phishing websites.
These scammers frequently change their domain names, for example from web.im.token-app.ac to web.im.token-beta.cfd. Once a domain is blocked, they quickly create new ones to continue their fraud.
If users mistakenly sign authorization transactions on these sites, the scammers gain control over their tokens and transfer them away. To lure users into investing more, they also display fake earnings or returns on the websites.
When users attempt to withdraw funds, they find it impossible to do so. The scammers then claim the account is “under risk control,” demand “fund verification” or “tax/unfreezing fees,” and even impersonate wallet customer service to extract more assets.
PSA:
- Be cautious of any high-return investment schemes and avoid trusting financial advice from unverified sources.
- The imToken DApp browser enables access to third-party websites, but this does not indicate any partnership or endorsement by imToken. Please carefully assess the risks before interacting with these sites.
- Your mnemonic phrase and private key give full control over your assets. Keep them safe and never share them with anyone under any circumstances.
If you suspect that a project you’ve interacted with shows signs of fraud, stop all activity immediately and report it to your local police or law enforcement authorities.
If you have any questions, please click "Support and Feedback" within the App to contact us.
imToken Team
2025.10.17 SGT