Significant Losses in Cryptocurrency Due to Phishing Scams
A staggering loss of nearly $1 million occurred for a crypto investor after inadvertently sanctioning a fraudulent Ethereum transaction, which allowed scammers to empty nearly their entire wallet. This incident contributes to a troubling trend observed this year, where phishing schemes have cost victims hundreds of millions in total.
Details of the Incident
On Wednesday, the affected individual fell victim to a phishing token approval scam, losing 999,999 Tether (USDT), as reported by Scam Sniffer, a blockchain security entity. The wallet in question, identified as 0x8c949361b49320c48a51f4b1c6f9f83862530f89, became a target after the user unwittingly signed a malicious approval request.
Initial attempts by the attackers to withdraw approximately $1 million through a series of multicall transactions failed since the wallet held a slightly lesser amount. However, within moments, the fraudsters refined their approach, executing a script that allowed them to siphon off the wallet’s exact remaining balance, which Scam Sniffer highlighted in their findings.
Prevalence of Approval Phishing
Experts point out that approval phishing continues to be one of the prevalent forms of social engineering attacks in the cryptocurrency space. Users often grant unwittingly broad spending permissions while believing they are authorizing a benign transaction, making them vulnerable to such scams.
The blockchain security firm CertiK has estimated that phishing scams have accounted for $723 million in losses across 248 documented incidents so far in 2025. Victims are frequently misled into approving harmful token transactions, which facilitate attackers in transferring funds without the need for additional consent.
Recent Related Incidents
This latest crypto loss comes hot on the heels of another significant wallet breach that occurred recently, costing another investor around $1.65 million. In that instance, the loss stemmed from a connection to a fraudulent exchange and signing a harmful smart contract. The approval in that scenario gave attackers unrestricted access, enabling an automated process to extract funds.
In a separate incident this week, a trader faced a loss nearing $2 million due to transaction routing issues on a decentralized exchange, highlighting another layer of risk for crypto users. GoPlus Security reported that this was an outcome of transaction routing rather than phishing, advising users to carefully examine execution paths prior to finalizing on-chain transactions.
Recommendations for Users
Scam Sniffer cautions that as these threats grow, users should meticulously analyze every signature request, avoid hasty approvals, and leverage scam detection resources or browser extensions to safeguard their wallet transactions.
