How Crypto Traders Can Prevent Social Engineering Attacks
Gate and blockchain security firm BlockSec have warned crypto users about the growing risk of social engineering attacks, including account takeovers, phishing, SIM swaps, impersonation and insider theft. The companies said attackers often avoid breaking blockchain infrastructure or cryptography. Instead, they exploit trust to make victims transfer funds, sign malicious transactions, approve tokens or install malware.
BlockSec co-founder and Hong Kong Chinese University associate professor Zhou Yajin highlighted cases involving hijacked Telegram and social media accounts, fake investment platforms and malware disguised as Web3 interview software. One court-documented SIM-swap case allegedly used a compromised Telegram account and an existing Bitcoin trading relationship to steal 15 BTC.
Gate said ordinary users are more frequently targeted than celebrities. Common scams include requests to change payment addresses, fake minting links and messages from fraudulent exchange support agents. Gate recommends checking official verification channels and using an anti-phishing code in every legitimate email.
The security teams advised traders to verify high-risk requests through a separate communication channel, inspect token contracts and liquidity, avoid rushed purchases driven by fear of missing out, and use passkeys, hardware security keys, separate passwords and withdrawal limits. Gate also highlighted withdrawal address cooling periods of 24 to 48 hours, which can delay suspicious withdrawals after security settings change.
If an account is compromised, users should revoke sessions and third-party permissions, secure email and mobile accounts, move exposed wallet assets to a new wallet, contact the exchange immediately and preserve transaction records. The overall market impact is limited, but repeated crypto phishing incidents could weaken user confidence and increase demand for stronger custody and account-security controls.
Neutral
The article is an educational security warning rather than a development that changes cryptocurrency supply, regulation or network fundamentals, so its direct market impact is neutral. It does not provide a bullish catalyst or a broad systemic threat to crypto valuations.
In the short term, individual phishing incidents, compromised influencer accounts or fake token launches could create sharp losses and volatility in the affected assets. Traders may temporarily reduce risk, avoid newly promoted contracts and move funds to exchanges or wallets with stronger security controls. Similar account-hijacking events in crypto have previously caused rapid buying of scam tokens, liquidity collapses and short-lived confidence shocks, but they generally have not produced sustained market-wide declines.
Over the longer term, repeated social engineering attacks could be mildly negative for user confidence, particularly among new participants. However, the response may also support adoption of passkeys, hardware security keys, withdrawal delays, transaction monitoring and institutional custody. These measures could improve market resilience and reduce operational risk. Traders should therefore treat sudden contract promotions, urgent transfer requests and messages from compromised accounts as event-specific risks rather than as reliable signals of a broader bearish trend.