Recently, users have reported that scammers are using fabricated token transfer screenshots to make them believe that funds have been received, prompting them to make payments or hand over goods and ultimately suffer losses.
Please note that screenshots of wallet transaction pages, blockchain explorer pages, and exchange withdrawal records can all be fabricated. Never rely solely on an image provided by the other party to determine whether a transfer has occurred. Instead, verify the transaction against on-chain data using the relevant blockchain explorer.
Case
Jason contacted someone selling USDT in an online community. They agreed that the seller would transfer the USDT first and that Jason would pay only after confirming receipt.
After Jason provided his wallet address, the seller quickly sent him a screenshot of a transaction record. It showed that the transfer was successful and that the recipient address, amount, and token name all matched the agreed details. Seeing that the transaction was marked “Successful,” Jason sent the payment.
However, when Jason checked his wallet, his USDT balance had not increased, and the transfer did not appear in his transaction history. The seller claimed that the transaction was still being processed and told him to keep waiting.
After checking the on-chain records, Jason found no corresponding incoming USDT transfer to his wallet address. He then realized that the seller had sent him a fabricated screenshot and had already made off with his payment.
How to Spot Fake Transfer Screenshots and Confirm Receipt
These scams often begin with claims such as “selling at a discount” or “tokens first, payment later” to lower your guard. The scammer then sends a fabricated “Transfer Successful” screenshot to create the impression that the transfer has been completed. The screenshot may include the transaction status, amount, recipient address, network, sender address, and time, making it appear complete. However, all of these details can be fabricated and must not be treated as proof of receipt.
To confirm that a transfer has been received, check your wallet balance, transaction history, and the records shown on the relevant network’s blockchain explorer. Copy your wallet address and search for it on the explorer to see whether it received the expected asset and amount at the relevant time. You can also ask the other party for the complete transaction hash(TXID) and verify that the transaction status, network, recipient address, amount, and token type all match the agreed details.
Be highly cautious if the funds do not appear in your wallet, no corresponding transaction can be found on the blockchain explorer, or the other party cannot provide a valid transaction hash and instead repeatedly sends screenshots while pressuring you to pay. Do not make any further payments or transfers, click links they provide, or pay any purported activation fee, security deposit, or account-unfreezing fee.
PSA：
1. Check Your Wallet Balance—Do Not Rely on Transfer Screenshots
Never confirm a transfer solely from a screenshot provided by the other party. After receiving a transfer screenshot, first check whether the expected assets appear in your wallet and verify the transaction history. If the expected assets do not appear in your wallet, verify the transfer using on-chain data.
2. Verify the On-Chain Record and Check Key Details
Ask the other party to provide the complete, copyable transaction hash and look it up on the blockchain explorer for the relevant network. Check the following details carefully:
- The transaction exists and its status shows Success.
- The recipient address, network, and amount match the agreed details.
- The token name and contract address are correct.
- The transaction hash corresponds to the transfer you are verifying and matches the agreed details.
3. Stop the Transaction Immediately If There Is No Valid On-Chain Record
If the funds have not appeared in your wallet and no valid incoming transfer can be found for the relevant network, wallet address, and time window, stop the transaction immediately. Do not make any payment, hand over goods, or transfer assets. Never pay any purported activation fee, security deposit, account-unfreezing fee, or verification deposit.
imToken Is Always Protecting Your Token Security
In June, imToken marked a total of 22,563 risky tokens, banned 770 risky DApp websites and flagged 447 risky addresses.
If you encounter any suspicious tokens or DApps, please report them to us at support@token.im to help protect other users.
Closing Thoughts
As scams continue to evolve, it can be difficult for everyday users to prevent them entirely. imToken will continue to monitor new types of scams and share timely risk information and security alerts with the community, helping users reduce losses and manage their digital assets more securely.
We invite you to read and share the imToken Wallet Security Monthly Report, and work with imToken to keep every token safe.