Looking for a Web3 job? You’re about to get scammed!

With the massive layoffs in the crypto ecosystem since 2023, many people are looking for jobs, making them vulnerable to scammers. These scammers decided, “Why not strip off already vulnerable people?”

To do so they use legitimate Web3 job platforms to post fraudulent job offerings, which result in their soon-to-be victims losing the last of what they have.

Pau Bonet on Twitter: "This is how hard Web3 is. You're looking for a job in one of Web3's Job-Seeking portals. You think these job offers are legit. Well, they're not. TLDR, my only funds on Hot Wallets got drained. I'll tag u guys out of desperation @TrustlessState @zachxbt / Twitter"

This is how hard Web3 is. You're looking for a job in one of Web3's Job-Seeking portals. You think these job offers are legit. Well, they're not. TLDR, my only funds on Hot Wallets got drained. I'll tag u guys out of desperation @TrustlessState @zachxbt

You will see their “job offers” on the very front page of platforms like cryptojobs.com.

As the fraudulent project “Eco Land” did by paying for the privilege of scamming you, the sooner the better.

By doing so, they are not only counting on people getting caught faster in their traps, but also jumping straight into them because the apparent legitimacy associated with those websites and the front page lowers their guards, as recounted by one of the victims:

“I was Web3 job-seeking in a classic Web3 job-listing website. The apparent legitimacy of these sites made me remove the “watch out filter”, and boom.”

Their endgame?

Having you download malware that will siphon all of your assets.

The easiest way to trap people into doing so is to pose as a Play-To-Earn (P2E) platform and offer beta testing jobs because it will make sense to the victim to download the malware-filled game file during the recruiting process.

To convince people of the legitimacy of their project, the scammers’ website will be sleek and filled with what you would expect from this kind of project, which will invite trust:

They are using multiple approaches to achieve the desired result:

• A fake verification process through Discord during the interview, which ultimately asks the victim(s) to download the malware to “verify” their IDs.

NFT_Dreww.eth on Twitter: "5/ When we go to "verify" it states we have to go to their website download the launcher to get our ID to submit it in the "Complete the verification" pop up pic.twitter.com/UzhMuOCt9T / Twitter"

5/ When we go to "verify" it states we have to go to their website download the launcher to get our ID to submit it in the "Complete the verification" pop up pic.twitter.com/UzhMuOCt9T

• Tricking their victims into downloading the “game” so they can test their abilities to become a Beta Tester.

Mikku 🐼 on Twitter: "This is what happened to me last night: although I had doubts earlier when I applied, they asked me for my Ethereum address (perhaps to check if I had enough funds). Then, last night, a guy named Oliver approached me for the job, claiming to be the HR of Nori/Ecoland. Everything… pic.twitter.com/KUYBowOBMl / Twitter"

This is what happened to me last night: although I had doubts earlier when I applied, they asked me for my Ethereum address (perhaps to check if I had enough funds). Then, last night, a guy named Oliver approached me for the job, claiming to be the HR of Nori/Ecoland.

The Web3 job scams don’t stop at Web3 job portals; scammers are also directly sliding into people’s DMs on Twitter and LinkedIn, proposing fake job opportunities to unsuspecting people using the same MO.

bruno lopes on Twitter: "I always get "job offers" were people ask me to download their games.I have also been approached on my telegram and email with this shit. pic.twitter.com/LsXJ1LCIma / Twitter"

I always get "job offers" were people ask me to download their games.I have also been approached on my telegram and email with this shit. pic.twitter.com/LsXJ1LCIma

As reported by Zachxbt, it’s not the first time this website has been used as a tool to deploy a scam and ensnare unsuspecting people.

All these scams could allegedly pertain to the same group. When you are a firm navigating the high-risk waters of crypto, which can entail people losing their life savings in the blink of an eye, as Web3 job portals, you have a duty to protect your users by putting in place safeguards to avoid listing scams as well as building awareness among your users!

As a rule of thumb, in Web3, download nothing.

If you have the financial ability, dedicate a computer to your crypto activity and never use it to engage with any other websites than the ones you know and need.

Stay safe!

About us

Nefture is a Web3 real-time security and risk prevention platform that detects on-chain vulnerabilities and protects digital assets, protocols and asset managers from significant losses or threats.

Nefture core services includes Real-Time Transaction Security and a Threat Monitoring Platform that provides accurate exploits detections and fully customized alerts covering hundreds of risk types with a clear expertise in DeFi.

Today, Nefture proudly collaborates with leading projects and asset managers, providing them with unparalleled security solutions.

Book a meeting 🤝 Nefture Calendly

Looking for a Web3 job? You’re about to get scammed! was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.