Posing as
“Ledger Support”
via Email · SMS · phone
The real Ledger never calls, emails or DMs you first — and never needs your 24-word recovery phrase. Anyone who asks for it is stealing your wallet.
Vol. IThe Crypto Fraud DespatchJune 22, 2026
The crypto fraud hotline
Before you send.Before you pick up.Before you trust “support” —you vett it first.
Vett is the second opinion you reach for in the moment of decision. Forward the deal, the wallet request, or the caller claiming to be Ledger, Coinbase or Kraken “support” — a real investigator looks at it and tells you, plainly, whether it’s safe. Before a single dollar moves.
A reply in10minutes— or your money back —
Reviewed by a human
analyst. Never a bot.
$9.3B
lost to crypto fraud last year
FBI IC3, 2024 — verify before publishing
$0
client funds lost on our watch
we just opened the desk
10 min
guaranteed response, or your money back
during business hours
The promise
Ten minutes.
Or you don’t pay.
Scammers win on speed — the urgent call, the closing window, the “act now or lose your funds.” So we move faster. Reach the Vett desk during business hours and an analyst responds within ten minutes. If we miss it, your review is free. No arguments.
10:00or a full refund
How the line works
- 1
Reach us in the moment
The second something feels off — mid-call, mid-chat, mid-transfer — you contact the desk. That’s exactly when it matters.
- 2
A human picks it up
Not a chatbot, not a knowledge base. A real analyst who investigates crypto fraud for a living reads your situation.
- 3
You get a verdict you can act on
Clear, plain-English: safe, caution, or stop. With the reasoning, so you can act with confidence — not a guess.
The ten-minute guarantee applies during posted business hours. Outside them, we respond first thing — and we’ll always tell you if something can’t wait.
The rogues’ gallery
They’ll say they’re support.
Impersonation is the fastest-moving scam in crypto — a calm voice or a clean-looking email wearing a brand you trust. Here’s who they pretend to be, and the truth that gives them away. When in doubt, don’t argue with them. Vett them.
Not real
Posing as
“Coinbase Security”
via Phone call
Coinbase won’t call to “secure your account” or move funds to a “safe wallet.” That safe wallet is theirs. Hang up and check the app yourself.
Posing as
“Kraken Support”
via Cold call · live chat
No real exchange cold-calls you, and none will ever ask for your password, 2FA code or seed phrase. The moment they do, it’s a theft in progress.
Posing as
“Wallet verification”
via Pop-up · airdrop site
That window asking you to “verify,” “sync,” or re-enter your Secret Recovery Phrase is a drainer. One paste and the wallet empties in seconds.
Vett is independent and not affiliated with these companies. We name them because it’s their customers being targeted.
The beat
What we catch.
If it’s angling for your money or your keys, it’s our beat. Forward the link, the chat, the screenshots — whatever you’ve got.
- 01
Pig butchering
The slow-built “relationship” that ends at a fake trading platform.
- 02
Fake support
Ledger, Coinbase, Kraken impostors on the phone or in your inbox.
- 03
Wallet drainers
“Connect” or “verify” pop-ups that empty a wallet in one click.
- 04
Recovery scams
Strangers promising to claw back what you already lost — for a fee.
- 05
Fake mentors
Signals groups and trading coaches selling a guaranteed-return lie.
- 06
Romance scams
The partner you’ve never met who needs you in crypto, urgently.
- 07
Rug pulls
Tokens and projects engineered to vanish the moment you’re in.
- 08
Fake exchanges
Polished platforms that take deposits and block every withdrawal.
- 09
Giveaway scams
“Send 1, get 2 back” — the oldest trick, freshly painted.
- 10
Job & task scams
Easy crypto “work” that quietly turns into you paying them.
- 11
Phishing sites
Pixel-perfect clones built to harvest your logins and keys.
- 12
Anything else
If someone’s steering you toward a transaction, send it to us.
The procedure
Three steps, no jargon.
IStep
Send us the case
Paste the link, forward the email, screenshot the chat or the caller ID. Tell us what they want you to do.
IIStep
We investigate
A human analyst traces the domain, the wallet, the contract, the people and the script — against everything we’ve seen before.
IIIStep
You get the verdict
A plain-English ruling — safe, caution, or stop — with the evidence behind it. Inside ten minutes, in business hours.
The method
We look where the money hides.
Scammers are good at the surface — the website, the testimonials, the confident voice on the call. We check the layers underneath, the ones they’re betting you’ll never look at.
- 01
Domain & infrastructure
When the site was really registered, who’s behind it, and whether it’s a clone.
- 02
Company & registration
Whether the entity, licenses and named team exist — or are stock photos.
- 03
Wallet history
On-chain tracing of the receiving addresses and their links to flagged ones.
- 04
Smart contracts
Whether the code can drain you, mint endlessly, or block withdrawals.
- 05
Social footprint
Account age, follower authenticity, and hype that outruns the track record.
- 06
Scam-report cross-check
Names, wallets and domains matched against fraud databases and our own files.
- 07
Communication patterns
The pressure scripts and urgency cues behind pig-butchering and recovery scams.
- 08
Return-claim sanity check
Whether the promised yield is mathematically possible — or the oldest lie.
The deliverable
This is what lands in your inbox.
Not a score out of ten. A written ruling you could hand to a partner, a lawyer, or your own gut — and act on with confidence.
High Risk
VettFraud Desk
Case File / 4127
Prepared for client
Subject of review
Aurum Yield Finance
aurum-yield.finance · “8% daily” staking
Findings
- 01
Domain registered 12 days ago
CRITICALaurum-yield.finance was created on a privacy-shielded registrar two weeks before outreach began. Legitimate funds do not launch this way.
- 02
Team identities are unverifiable
CRITICALThree of four “founders” use reverse-image-matched stock photos. The named CTO’s profile was created last month with zero shared connections.
- 03
Receiving wallet linked to prior reports
CRITICALThe deposit address carries two existing scam reports and forwarded funds to a mixer within minutes — a hallmark of pig-butchering operations.
- 04
Returns are mathematically impossible
SEVERE“8% daily, compounding” implies over 1,400× a year. No legitimate strategy sustains this; it is the structure of a Ponzi.
Recommendation
Do not send funds. Do not connect your wallet.
Every independent signal points to a coordinated fraud. If you’ve already deposited, stop now and preserve every message — it materially helps any recovery attempt.
Reviewed by human analystVett · independent review
Illustrative example. Details fictionalised to show the format.
The rate card
Less than the smallest scam.
Founding rates, held for everyone on the waitlist. No charge today.
Single Review
One situation, fully investigated.
$99one-time
- One case, start to finish
- Written verdict with evidence
- 10-minute response guarantee
- One follow-up question
Membership
Most chosenThe hotline on call, whenever you need it.
$199per month
- Unlimited reviews
- Front of the queue, always
- Direct line to your analyst
- Ongoing scam alerts for your space
Annual Protection
A year of cover. Two months saved.
$999per year
- Everything in Membership
- Best rate — ~$83 / month
- Your case history on file
- Priority on every call
The waitlist reserves your place and your rate. Payment comes later.
Join the waitlist
Get a second opinion before it costs you.
Tell us roughly what you’re facing. We’ll hold your place, lock your founding rate, and reach out the moment the hotline opens.
- No payment today
- We never ask you to connect a wallet
- Your details stay private