Cybercriminals have been targeting cryptocurrency users with a new phishing scam involving fake “Flare Portal” websites. These fraudulent pages mimic the legitimate portal to trick users into revealing their wallet credentials, leading to irrecoverable crypto losses. In this article, you’ll learn everything you need to know about this threat—from how it works to why it’s dangerous.
Threat Overview
| Attribute | Details |
|---|---|
| Threat type | Phishing / Scam / Social Engineering / Fraud |
| Associated domain | onflr.trustportals[.]net (also possible under other domains) |
| Detection names | N/A (not recognized by anti-malware vendors) |
| Symptoms of infection | Attempting to log into Flare Portal and prompted for seed phrase; manual login request |
| Damage | Theft of wallet credentials leading to loss of funds |
| Distribution methods | Compromised websites, social media spam, malvertising, rogue pop-ups, adware |
| Danger level | High – immediate financial loss and no recovery due to blockchain immutability |
| Removal tool | SpyHunter – https://www.enigmasoftware.com/products/spyhunter/?ref=ywuxmtf |
Detailed Evaluation
How I Got Infected
You may unknowingly land on the fake site via a compromised legitimate website, malicious ad network, or spam link on social media. These methods include:
- Intrusive pop-up ads or redirect scripts
- Typosquatted URL or phishing message
- Misleading social media/DM posts directing to the fake portal
What It Does
Once on the site, you’ll try to connect your crypto wallet. Instead of using the standard wallet connector, the scam triggers an “error” and then prompts you for your wallet’s secret passphrase or log-in credentials. If you submit them, the scammers capture your credentials and drain your wallet—since blockchain transactions can’t be reversed, you’re out of luck.
Should You Be Worried?
Absolutely. Blockchain’s decentralized nature means once your funds leave your wallet, recovery is nearly impossible. Every day, users lose significant amounts due to phishing like this. Don’t let it happen to you.
Scam Message
(Exact phrasing from the fake page for analysis)
“Error detected! Please manually enter your wallet passphrase to reconnect and continue.”
This false prompt is designed to look urgent and legitimate, tricking users into believing they must re-enter sensitive data.
Dealign with Crypto Scams – Method 1: Manual Removal Guide
Follow these steps to manually remove crypto scams and protect your system.
Step 1: Identify the Crypto Scam Source
- Check if you’ve been contacted by a scammer through email, Telegram, Discord, WhatsApp, or social media.
- Identify any malicious software installed on your system, such as fake wallet apps or browser extensions.
- Scan your browser history and emails for phishing links.
Step 2: Report and Freeze Crypto Transactions (If Possible)
- Contact your crypto exchange immediately if you suspect fraud.
- Check if your transaction is pending (some blockchains allow canceling or replacing a transaction).
- Report the scam to authorities such as:
Step 3: Remove Malicious Software and Fake Wallet Apps
- Windows Users:
- Open Control Panel > Programs and Features
- Look for unknown apps related to crypto wallets or trading bots.
- Click Uninstall.
- Mac Users:
- Open Finder > Applications
- Locate suspicious apps and drag them to the Trash.
- On Mobile (Android & iOS):
- Go to Settings > Apps (Android) or General > iPhone Storage (iOS).
- Uninstall any unrecognized crypto wallet apps.
Step 4: Clear Browser Data and Remove Malicious Extensions
- Google Chrome:
- Go to chrome://extensions/
- Remove unfamiliar or suspicious extensions.
- Firefox, Edge, Safari:
- Open settings and remove unauthorized extensions.
- Clear Cache & Cookies:
- Open browser settings → Privacy → Clear browsing data
Step 5: Reset Passwords & Enable Two-Factor Authentication (2FA)
- Change passwords for your crypto exchanges, wallets, and emails.
- Use a strong, unique password for each account.
- Enable 2FA on all critical accounts (Google Authenticator or YubiKey recommended).
Step 6: Scan for Malware and Keyloggers
Even if you removed software manually, some malware can still lurk in your system. Use a security tool to perform a deep scan (see SpyHunter method below for an automatic removal process).
Step 7: Monitor Your Accounts & Funds
- Track your crypto wallet transactions using Etherscan or Blockchain Explorer.
- Keep an eye on email login alerts from suspicious locations.
- Use a hardware wallet (Ledger, Trezor) for better security.
Method 2: Automatic Removal Using SpyHunter
For a fast and reliable way to remove crypto scam-related malware, use SpyHunter.
Step 1: Download SpyHunter
Step 2: Install SpyHunter
- Run the SpyHunter setup file.
- Follow the on-screen installation steps.
- Open SpyHunter once installed.
Step 3: Perform a Full System Scan
- Click on "Start Scan Now" to analyze your system.
- Wait for the scan to detect crypto scam malware, spyware, keyloggers, and phishing trojans.
Step 4: Remove Threats Automatically
- Click "Fix Threats" after the scan completes.
- SpyHunter will eliminate malware, fake apps, and browser hijackers.
Step 5: Protect Your System from Future Crypto Scams
- Enable SpyHunter's Real-Time Protection to block phishing sites and prevent future infections.
- Regularly scan your system for new threats.
Prevention Tips: How to Avoid Crypto Scams in the Future
- Always verify website URLs before logging into exchanges or wallets.
- Avoid unsolicited investment offers on Telegram, Discord, and email.
- Never share your private keys or recovery phrases with anyone.
- Use a hardware wallet instead of online wallets.
- Regularly update your antivirus and anti-malware software.
- Be skeptical of high-return crypto investment schemes.
Conclusion
The fake “Flare Portal” phishing website is a serious threat that targets Flare Network users and other crypto holders by stealing login credentials. Given the irreversible nature of blockchain transactions, victims suffer permanent financial loss.
Don't fall victim. Always double-check the URL, use effective anti-phishing tools like SpyHunter, and never share your private key or passphrase. If in doubt, close your browser and navigate directly from trusted bookmarks.
