मैंने बचाया SIM स्वैप ठग

मैंने हुआ प्रति

पिछले हफ्ते, मुझे एक सही-जगह SMS मिली: “आपका खाता संदेहास्पद क्रियविधि के कारण प्रति हुआ।” परंतु पहले ही कॉल—एक U.S. संख्या, शांत स्वर, “हाय, मैं मेसन, कॉइनबेस सुरक्षा।” मुझसे मेरा पूरा Naam, email domain, Venmo balance… प्रश्न? मुझसे private key ka pucha nahein…

प्रति-अधिकार

उसने “Coinbase Vault” migration ka vada diya—vault-coinbase.com ek domain ek mahine pe register kiya gaya jiske kisi connection Coinbase Inc. SSL certificate? Logo? Perfect. Parant real exchanges kabhi cold-call nahi karte.

मनोवैज्ञ

उसने urgentness ka upayog kiya: “24-hour lockout”, “FDIC insurance terminated”, “7-day review period.” Crypto mein in sabhi kuch nahi hai. FDIC exchanges ko cover nahi karta.

Tīrth Layer Deception

dusra caller—Texas number—”Tier 3 Investigator” ke naam se call kar raha tha aur SafePal ko legitimate wallet ke roop mein suggest kiya—aik hi phishing link. Classic misdirection: saty ko chhupane ke liye jhooth.

Why It Worked on Me

Maine hazaaron attacks dekhe hain—parant yeh elegant tha: koi demand nahein bas sirf meri security posture ke bare mein sawaal. Encouraging research? Yeh helpful nahi tha—it’s grooming.

Mera Pratikar aur Puna:Pratikar

Maine turant hang up kar diya. Coinbase.com ko browser se direct access kiya (kabhi bhi link par click nahein kiya). Verified no pending requests with official chatbot. Reported all domains aur numbers via formal support portal.

Investors Ke Liye Nika Samajha

Yeh gullible hone ke baare mein nahi hai—it’s cognitive bias in high-stakes environments. Attackers systems hack nahi karte—they hack trust. Wo hum apne conditioned belief ko exploit karte hain jo authority = safety. Agar aap hardware wallets ya multi-sig structures ka upayog nahee karte hain—to secure aap nahi ho sakte.