Warning: Crypto wallet drainers & phishing threat
What is the Fake PancakeSwap Website Scam?
Cybercriminals have cloned the popular decentralized exchange PancakeSwap to trick unsuspecting users into connecting their crypto wallets. These fake sites are nearly identical to the real platform and are designed to drain users’ funds via malicious smart contracts. Once you connect your wallet and approve transactions, the attackers can steal your assets — and there’s almost no way to get them back.
Scam Breakdown & Summary
Element | Details |
---|---|
Threat Type | Phishing / Social engineering / Cryptocurrency drainer scam |
Disguise | Fake PancakeSwap site with identical layout and branding |
Fake Domain(s) | Examples include lookalikes like pancakeswap.cam , pancakeswaap.finance , etc. |
Detection Names | Flagged as phishing or malicious by various threat intelligence systems |
How It Works | Wallet connect → approve smart contract → funds transferred to scammer |
Damage | Irretrievable crypto losses |
Distribution Methods | Typosquatting, fake ads, social media spam, compromised websites |
Risk Level | High — funds lost permanently, no central authority to recover |
How the Fake PancakeSwap Website Scam Pulls Victims In
Typosquatting & Lookalike Domains
The scam relies heavily on small changes to the real domain name. For example, swapping .finance
for .cam
or adding an extra letter. Users who type the address manually or follow a shady link are easy targets.
Design That Mirrors the Real Site
Visually, the fake site is nearly indistinguishable from the official PancakeSwap platform. The same fonts, colors, and layout are used to make the user feel safe and familiar.
Spread Through Spam & Ads
Scam links are often distributed via Telegram, Discord, Twitter replies, or fake Google Ads. In some cases, legitimate sites infected with redirect scripts send traffic directly to the fake PancakeSwap domain.
What Happens If You Fall For It
If you connect your wallet and approve the contract shown on the fake site, here’s what happens:
- A smart contract request is triggered that gives the attacker control over your funds.
- The scammer’s wallet address receives your assets in seconds.
- Because these actions happen on-chain, they can’t be reversed — not by you, your wallet provider, or PancakeSwap itself.
Even if you catch the scam immediately, it’s usually too late to stop the transaction.
How to Protect Yourself From This Scam
- Always check the domain – Only use
pancakeswap.finance
. Bookmark it and avoid using search engine results or social media links. - Don’t trust airdrop or giveaway links – Scammers often bait users with free tokens to lure them into the fake site.
- Avoid connecting your wallet unless you’re 100% sure of the site’s authenticity.
- Inspect smart contract approvals – If the site asks you to approve unlimited access to your funds, it’s a red flag.
- Use a hardware wallet or multisig wallet – They add an extra layer of security by requiring manual confirmation.
- Revoke suspicious permissions – Use tools like Revoke.cash to remove contract approvals if you suspect compromise.
- Enable anti-phishing browser extensions – They can warn you before you land on malicious URLs.
What to Do If You’ve Been Scammed
- Disconnect your wallet immediately from the fake site.
- Revoke token approvals using tools like Etherscan or Revoke.cash.
- Transfer any remaining funds to a clean, new wallet as fast as possible.
- Report the scam domain to your wallet provider and a crypto scam reporting platform.
- Stay vigilant – your address may be targeted again if it’s been exposed once.
Unfortunately, funds lost to blockchain scams are rarely recovered. Prevention is your best defense.
Full Text of a Typical Scam Message or Ad
🚨 PancakeSwap Update Required
Connect your wallet to receive the latest airdrop rewards.
✅ Click here to connect
Don’t miss out — tokens expire in 2 hours!
These types of messages are designed to create urgency and push you to act before thinking.
Eliminating Crypto Scam Threats
Step 1: Identify and Report the Scam
- Gather evidence (screenshots, emails, transaction IDs).
- Report the fraud to:
- Your crypto exchange (Binance, Coinbase, Kraken, etc.).
- Law enforcement agencies like the FBI’s IC3 (ic3.gov) or the SEC (sec.gov/tcr).
- The Federal Trade Commission (reportfraud.ftc.gov).
- Blockchain explorers (like Etherscan) to check your wallet transactions.
Step 2: Uninstall Suspicious Software & Apps
- On Windows: Open Control Panel > Programs & Features → Find & Uninstall suspicious programs.
- On macOS:Go to Finder > Applications → Drag unwanted apps to Trash.
- On Android & iOS: Go to Settings > Apps → Uninstall fake crypto wallets or trading apps.
Step 3: Remove Malicious Browser Extensions
- Google Chrome:
- Open
chrome://extensions/
- Remove any unfamiliar or crypto-related suspicious add-ons.
- Open
- Firefox / Edge / Safari:
- Go to browser settings > extensions → Delete suspicious ones.
- Clear browser cache & cookies:
- Open browser settings → Privacy → Clear browsing data.
Step 4: Secure Your Accounts & Wallets
Change passwords immediately for:
- Crypto wallets
- Exchanges
- Email & social media
Enable Two-Factor Authentication (2FA):
- Use Google Authenticator, YubiKey, or Authy.
Move remaining funds to a secure wallet:
- Use a hardware wallet (Ledger, Trezor) instead of online wallets.
Step 5: Scan for Hidden Malware & Keyloggers
Your system may still have spyware, tracking your keystrokes or redirecting you to scam sites. A deep scan is essentialto detect and remove threats.
⏳ For a thorough malware check, use SpyHunter. (See Method 2 below.)
Automatic Removal with SpyHunter
If you suspect hidden malware, SpyHunter can detect and remove crypto scam-related malware, trojans, and browser hijackers.
Step 1: Download SpyHunter
Follow SpyHunter installation instructions here: SpyHunter Download Guide
Step 2: Install and Run SpyHunter
- Run the SpyHunter installer.
- Follow the on-screen installation steps.
- Launch SpyHunter after installation.
Step 3: Perform a Full Malware Scan
- Click “Start Scan Now”.
- Let SpyHunter scan for:
- Crypto-stealing malware
- Browser hijackers redirecting to fake exchanges
- Phishing-related spyware
Step 4: Remove All Detected Threats
- Click “Fix Threats” to eliminate malicious programs.
- Restart your system to complete the cleanup.
Step 5: Enable Real-Time Protection for Future Security
Activate SpyHunter’s real-time protection to:
- Block phishing & scam websites
- Prevent future infections
- Monitor system vulnerabilities
Proactive Prevention: How to Avoid Crypto Scams
- NEVER share your private keys or seed phrases – even with “support teams.”
- Always verify URLs before logging in to exchanges.
- Use only official wallet apps from trusted sources.
- Ignore unsolicited investment offers via Telegram, Discord, and social media.
- Check for HTTPS & security certificates before entering login details.
- Regularly scan your device for hidden malware and spyware.
- Store crypto in a hardware wallet (Ledger, Trezor) rather than online wallets.
Conclusion
The Fake PancakeSwap Website scam is a dangerous phishing campaign targeting crypto users. It exploits the trust users place in familiar interfaces and the decentralized nature of wallet connections. If you're in the crypto space, be hyper-vigilant about the links you click and the contracts you approve. Once funds are stolen, they’re nearly impossible to recover.