Fake PendleSwap Website Scam

A new crypto phishing scam is targeting users of PendleSwap, a DeFi protocol. Attackers create a fake clone of the official site at pendle‑f[.]finance, tricking users into connecting their wallets. Once connected, a hidden “crypto drainer” steals all the funds inside the wallet. This article breaks down this threat, outlines key indicators, and provides an expert evaluation.

---

Overview of the Threat

Threat Type: Phishing / Scam / Social Engineering / Cryptocurrency Drainer
Associated Domain: pendle‑f[.]finance
Detection Names: Not yet listed on VirusTotal or major antivirus definitions
Symptoms of Infection:

• Unofficial domain name
• Mimics the official PendleSwap user interface
• Prompts unrealistic wallet connections or “airdrop” claims
  Damage & Distribution:
• Immediate crypto theft via draining contracts
• Irreversible loss of digital funds
• Spread via social media clones, rogue ads, and phishing links
  Danger Level: High – victims lose funds instantly
  Removal Tool: SpyHunter — Get SpyHunter

---

Threat Summary Table

Category	Details
Threat Type	Phishing/Scam, Crypto Drainer
Associated Domain	pendle‑f[.]finance
Detection Names	N/A
Symptoms	Fake UI, wallet connect prompts, typosquatting domain
Damage	Complete wallet funds drained
Distribution	Scam ads, social media, pop-ups, rogue sites
Danger Level	🔥 High – immediate irreversible loss
Removal Tool	SpyHunter (linked above)

---

Detailed Evaluation

How I got infected

You clicked a link—often from a compromised social media account, scam ad, or phishing email—that led to a site nearly identical to the real PendleSwap. Believing it was legitimate, you connected your wallet and authorized a token grant. That permission was a crypto drainer, granting scammers access to your entire wallet balance.

What does it do

The fake site executes a malicious smart contract that silently transfers all assets from your wallet to the scammer’s address. These transactions occur instantly on-chain—without notifications or warnings.

Should you be worried?

Absolutely. If you connect your wallet or approve any transaction on that site, you will lose your funds permanently. There is no way to reverse crypto transactions. This isn’t malware on your PC, but authorization fraud. If you fall victim, your assets are already gone.

---

Scam Website Text

Although there’s no ransom note, scam pages often feature copy like:

“Connect your wallet to claim your free PendleSwap rewards.”
“Sign transaction to unlock bonus tokens—limited offer!”

These prompts appear genuine but lead to theft, not rewards.

Eliminating Crypto Scam Threats

Step 1: Identify and Report the Scam

1. Gather evidence (screenshots, emails, transaction IDs).
2. Report the fraud to:
   • Your crypto exchange (Binance, Coinbase, Kraken, etc.).
   • Law enforcement agencies like the FBI’s IC3 (ic3.gov) or the SEC (sec.gov/tcr).
   • The Federal Trade Commission (reportfraud.ftc.gov).
   • Blockchain explorers (like Etherscan) to check your wallet transactions.

Step 2: Uninstall Suspicious Software & Apps

• On Windows: Open Control Panel > Programs & Features → Find & Uninstall suspicious programs.
• On macOS:Go to Finder > Applications → Drag unwanted apps to Trash.
• On Android & iOS: Go to Settings > Apps → Uninstall fake crypto wallets or trading apps.

Step 3: Remove Malicious Browser Extensions

1. Google Chrome:
   • Open chrome://extensions/
   • Remove any unfamiliar or crypto-related suspicious add-ons.
2. Firefox / Edge / Safari:
   • Go to browser settings > extensions → Delete suspicious ones.
3. Clear browser cache & cookies:
   • Open browser settings → Privacy → Clear browsing data.

Step 4: Secure Your Accounts & Wallets

Change passwords immediately for:

• Crypto wallets
• Exchanges
• Email & social media

Enable Two-Factor Authentication (2FA):

• Use Google Authenticator, YubiKey, or Authy.

Move remaining funds to a secure wallet:

• Use a hardware wallet (Ledger, Trezor) instead of online wallets.

Step 5: Scan for Hidden Malware & Keyloggers

Your system may still have spyware, tracking your keystrokes or redirecting you to scam sites. A deep scan is essentialto detect and remove threats.

⏳ For a thorough malware check, use SpyHunter. (See Method 2 below.)

---

Automatic Removal with SpyHunter

If you suspect hidden malware, SpyHunter can detect and remove crypto scam-related malware, trojans, and browser hijackers.

Step 1: Download SpyHunter

Download SpyHunter Here

Follow SpyHunter installation instructions here: SpyHunter Download Guide

Step 2: Install and Run SpyHunter

1. Run the SpyHunter installer.
2. Follow the on-screen installation steps.
3. Launch SpyHunter after installation.

Step 3: Perform a Full Malware Scan

1. Click “Start Scan Now”.
2. Let SpyHunter scan for:
   • Crypto-stealing malware
   • Browser hijackers redirecting to fake exchanges
   • Phishing-related spyware

Step 4: Remove All Detected Threats

• Click “Fix Threats” to eliminate malicious programs.
• Restart your system to complete the cleanup.

Step 5: Enable Real-Time Protection for Future Security

Activate SpyHunter’s real-time protection to:

• Block phishing & scam websites
• Prevent future infections
• Monitor system vulnerabilities

---

Proactive Prevention: How to Avoid Crypto Scams

• NEVER share your private keys or seed phrases – even with “support teams.”
• Always verify URLs before logging in to exchanges.
• Use only official wallet apps from trusted sources.
• Ignore unsolicited investment offers via Telegram, Discord, and social media.
• Check for HTTPS & security certificates before entering login details.
• Regularly scan your device for hidden malware and spyware.
• Store crypto in a hardware wallet (Ledger, Trezor) rather than online wallets.

---

Conclusion

Fake crypto sites are becoming increasingly sophisticated. This PendleSwap clone is a stark reminder: always verify domains, bookmarks, and official channels before connecting wallets. If you’ve interacted with pendle‑f[.]finance, consider your wallet compromised—transfer valid assets to a new wallet and monitor on-chain activity. For system peace of mind, use SpyHunter to remove any related malware and shut off potential scammers.

Stay safe and stay skeptic—DeFi rewards are never real if they require unsolicited wallet approvals.