⚫️ Recently, we came across a message in a TON-related chat that said: “We offer safe earnings in the crypto space.” It looked very suspicious—after all, that’s a common tactic used to lure people into scams. But we wanted to understand exactly how these schemes work so we can warn you. And if it turned out to be legitimate, we wanted to know the details. So, we decided to dig deeper and respond to the message.
⚫️ A pleasant female voice explained: “We’re a Binance partner and can offer favorable staking conditions. If you register through our offer, you’ll earn about 20% monthly on your savings. The offer will be sent from Binance’s official email address, and you’ll be able to verify its authenticity using Binance Verify.”
⚫️ A 20% monthly return on staking sounded unrealistic, which only strengthened our suspicion of fraud. But how could scammers bypass Binance Verify? We were curious and decided to investigate further. Before sending the offer, the woman asked us to prove we had at least 100 USDT on the Binance Smart Chain—so we temporarily converted that amount from our beloved TON to USDT BEP-20.
⚫️ Then we did receive an email, which looked as if it came directly from Binance. But the main link—“Binance DeFi Staking”—led not to Binance, but to a website with a random string of characters in the URL. At this point, the scam was obvious, and we didn’t interact with the site. But the verification issue still puzzled us.
⚫️ The sender’s address in the email was listed as
do-not-reply@post.binance.com. When we entered it into Binance Verify, the site displayed a large green checkmark and the message “Verified Email.” However, in smaller text below, it also noted that the sender’s email address can be spoofed and that there are more reliable methods to verify authenticity. We tried those methods, and the email failed verification based on the parameters in the EML file. Apparently, the real sender address was different.💡 So the scheme is clear: scammers exploit the fact that Binance Verify still shows “Verified Email” even when the address is spoofed. Many users see the big green checkmark and reassuring message and stop there—without reading the fine print below. It’s unclear why Binance chose to display such a comforting message in a scenario that isn’t fully trustworthy. But now you know what to watch out for.
@thedailyton