Crypto Crime

SudoSwap Scams

Oct 23, 2022

Sudoswap is a decentralized NFT marketplace on the Ethereum network where you can swap your NFT with one another.


The new trend is that they would "try" to use genuine valuable NFT to swap with you, only to fail the transaction. And then retry the transaction with a fake NFT that has the same picture.


Chances are that you would be cautious and verify everything in your first transaction, the scammer is hoping that you would let your guard down on the retry.


All along there have been Scammers trying to "swap" NFTs or draining people's NFTs wallets with malicious "websites" that could very well pretend to be a legitimate websites too.


It's SudoSwap.xyz

For the new generations of tech companies, they seem to prefer other domain extensions to .com. They usually use .io, .xyz, etc.


Previously there have been cases where scammers lead people to fake versions of SudoSwap and drain their wallets.


For example in the picture below. The domain/website name is actually xyz.trade with a Subdomain, "sudoswap". Where the dots lies make a world of differences.


Understanding Website Structure is Your Best Defence

Similarly, I was sharing in my YouTube video how to identify a genuine website when my dear Singaporeans fell for a fake bank website scam.

Scammers can copy every graphic and rebuild a totally identical website, but they can never use the original domain which is ocbc.com in this case. Anything DOT ocbc.com belongs to ocbc.com, which will be authentic.


Without the DOT, you could very well be in the middle of a scam asking for your username, password, and OTP like a normal login process would. And while you are submitting your details to them, they are accessing your bank.


Understanding where the DOT position is, is just as important in identifying a legitimate website.

If only they knew the structure of a website name aka domain name well, such misfortune would have been avoided.


For more details on SudoSwap Scams, visit Twitter with the search term: https://twitter.com/search?q=SudoSwap%20scam&src=typed_query&f=top