🎣 Phishing Protection - Avoid Scams
Learn to identify and avoid phishing sites that steal your credentials
Beginner
📖 10 min
What is phishing?
🎣 Phishing = Fake copies of legitimate websites that steal your login info and XMR.
Phishing sites look identical to real Flugsvamp, but:
- They have a DIFFERENT .onion address
- When you "log in" they steal your credentials
- They then drain your real account
How to identify phishing?
✓ Always verify the .onion address
- Compare with our verified links at Mirrors
- Check every character in the .onion address
- Bookmark the real address after verification
⚠️ Warning signs:
- Link shared via Telegram, Reddit or forum
- "New" or "faster" mirror announcement
- Site looks slightly different
- Unusual error messages when logging in
- Site asks for information it shouldn't
Example: Real vs Fake
✓ REAL
flugsvamp4xxxxxxx...onion
Matches our verified links
✗ FAKE
flugsvamp4yyyyyyy...onion
Even one character different = PHISHING
Advanced: PGP Signature Verification
Official Flugsvamp messages and links are signed with PGP. Always verify:
- Get official PGP key from multiple sources
- Check that key matches at each source
- Verify signature on new mirror announcements
- If signature is invalid = PHISHING
Safe practices
Always do:
- ✓ Bookmark verified links in Tor Browser
- ✓ Use only this portal for links
- ✓ Enable 2FA on your account
- ✓ Check address EVERY time before login
Never do:
- ❌ Click links in Telegram/Reddit/forum
- ❌ Trust "new mirrors" from unknown sources
- ❌ Log in without verifying address
- ❌ Share your login credentials with anyone
If you've been phished
Act IMMEDIATELY:
- Log in to REAL site (verified link)
- Change password/PIN immediately
- Withdraw all XMR to your own wallet
- Change 2FA secret if possible
- Report phishing site to community