We’re aware of a scam involving fake crypto tokens, often mimicking Tether (USDT), being sent to customers. Even though the payment is confirmed on the blockchain, the funds are not received in your Luno wallet.
How it works
It’s not difficult for anyone to create a new cryptocurrency. Scammers can create their own ERC-20 tokens, and they can even name them “Tether” or “USDT”, but these tokens are not the real deal. They don’t originate from Tether and they aren’t pegged to the US dollar. In fact, they aren’t worth anything.
Using their counterfeit supply of “USDT” tokens, scammers can trick you into thinking you’ve received real USDT. The transaction will appear to be legitimate on the surface: if you visit a blockchain explorer and search the provided transaction ID, you’ll see that the send did indeed take place.
The blockchain explorer will show that X amount of “USDT” has been sent and confirmed to your Luno wallet address. However, the USDT does not reflect in your Luno app, even after it was supposedly confirmed on the blockchain. This is because no real USDT was sent to your Luno wallet, just a worthless token disguised as “USDT.”
How to spot fake USDT
-
Visit etherscan.io and in the search bar, enter the transaction ID (also known as a TxID or transaction hash) for the transaction you want to query
-
You’ll see information about the transaction. In the Transaction Action row, select the token’s name to see more information about it.
-
Examine the token’s information page and use the table below to determine if it’s real or fake:
Real token |
Fake token |
Has the correct icon and there’s a verified checkmark next to its name. |
Might not have the correct icon, and no verified checkmark next to its name. |
Has millions of holders and total transfers. |
Has very few holders and total transfers. |
Its price is what you’d expect, and it has high-value market caps. |
Its price and market caps are non-existent, zero, or otherwise extremely low. |
The token contract address is correct. For example, USDT’s token contract is at this address: 0xdAC17F958D2ee523a2206206994597C13D831ec7. |
The token contract address is incorrect. It doesn’t match the address stated by official sources, such as the real token issuer’s documentation. |
You’ll find links to the real token issuer’s official website, social media, whitepaper, etc. |
There are no links to official websites, social media, or the whitepaper associated with the token issuer. |
USDT is not the only token that scammers create fake clones of. You can follow a similar approach as described above to take a closer look at the token being sent to you.
How to avoid fake token scams
-
Be wary of unsolicited offers, for example someone reaching out to sell their crypto to you directly
-
Consider buying crypto on a reputable exchange rather than directly from someone you’ve met online
-
Understand that a transaction confirmed on the blockchain does not necessarily mean that real value has been transferred. Always check the transaction’s value (not how much has been transferred, but what value it’s actually worth), as well as the token’s price
Tip
If you suspect that you’re being scammed or you’ve lost money in a scam, read this article to find out what you should do or follow this link to report it to Luno. For further reading on this topic, see Ethereum’s guide on how to identify scam tokens.