मैं सिम स्वैप हमला गया

मैं लक्ष्य था

गत पिछले हफ़्त, 3:15 PM EST पर, मुझे SMS मिली—जिसमें Venmo की ‘संदेहास्पद’गति’ कीबाती। पछले WhatsApp पर 1-बार कोड माँगा। कुछ ही मिनट में,और Call: Caller ID Coinbase Support के रूप में स्पूफड़।आवाज? American English।नाम? ‘Mason’।खतरा? 24घंटे में Account Lock—अगर main assets ‘Coinbase Vault’ पर vault-coinbase.com पर हटाए।

स्क्रिप्ट प्रसार

उनहोंने seed phrase सीधे पूछा? Too crude.इसकीजगह half-truths: partial SSN digits, verified email domains ([email protected]), TradingView aur MetaMask jaise real services—भरोसवसदि Trust build karne ke liye trap snap shut hua.

Trap Door

डोमेन? Ek mahine pe register kiya gaya. SSL cert? Valid—but third-party CA ne Coinbase ke infrastructure ko impersonate kiya. Jab WHOIS data check kiya: zero association Coinbase Inc ke saath. Koi official app redirection nahi. Koi legitimate API linkage nahi.

The Real Red Flags

• Kabhi bhi pehle call nahi karein: Legit exchanges contact nahi shuru karte. • Kabhi bhi personal phone lines security alerts ke liye use nahi karein. • Kabhi bhi off-platform push nahi karein ‘better’ solutions ke liye. • Fake case numbers real tickets nahi hain—they’re psychological anchors. • SafePal? Ek real wallet—par ek plausible cover weaponized kiya gaya.

Mera Countermove

Main hang up kar diya. Phir Coinbase.com par direct login kiya—bookmarked URL se, search engine results se nahi. True support confirm: no breach, no pending reset, aisa case number exist hi nahi. Main sab third-party API keys revoke kar diye aur har asset pe transaction-level MFA enable kar diya. Ab main abhi cold wallets hi >$10K holdings ke liye—offline non-negotiable hai.