During a recent routine investigation, cybersecurity researchers uncovered a deceptive phishing campaign masquerading as a promotional “Beraborrow ($BERA) Rewards” page. This fraudulent operation imitates the official Beraborrow platform — a legitimate decentralized lending system — in a bid to exploit unsuspecting users and drain their cryptocurrency wallets.
What Is the Fake “Beraborrow ($BERA) Rewards” Scam?
The scam is hosted on beraborrow[.]claims, a domain crafted to closely resemble the official beraborrow.com website. It lures users by offering fake crypto rewards in exchange for participating in a poll. Once users click the “Vote Now” button, they are prompted to connect their cryptocurrency wallet. What seems like a harmless interaction is actually the signing of a malicious smart contract.
This contract authorizes the transfer of funds from the victim’s wallet to one controlled by cybercriminals. Some crypto drainers are even capable of estimating the value of digital assets, enabling them to prioritize and steal the most valuable holdings first. Since blockchain transactions are irreversible, there is no way for victims to recover stolen funds.
It’s critical to note that this scam has no affiliation with the real Beraborrow project or its development team.
Fake “Beraborrow ($BERA) Rewards” Scam Summary Table
Category | Details |
---|---|
Threat Name | “Beraborrow ($BERA) Rewards” Crypto Drainer |
Threat Type | Phishing, Scam, Social Engineering, Cryptocurrency Drainer |
Fake Claim | Users receive rewards for participating in a poll |
Disguise | Imitates Beraborrow (beraborrow.com) |
Fraudulent Domain | beraborrow[.]claims |
Detection Names | CRDF (Malicious), G-Data (Phishing), alphaMountain.ai (Suspicious), Certego (Suspicious) |
Symptoms | Unexpected wallet activity, unauthorized crypto transactions, rapid balance depletion |
Associated Emails | Not identified |
Serving IP Address | 172.67.221.88 |
Distribution Methods | Compromised websites, social media scams, rogue ads, pop-ups, potentially unwanted applications (PUAs) |
Damage | Monetary loss via crypto theft |
Danger Level | High |
Recommended Tool | SpyHunter — recommended for removing associated malware or PUA threats |
Why This Threat Is Particularly Dangerous
This phishing campaign’s greatest strength lies in its visual mimicry of the official Beraborrow platform. The design is almost indistinguishable from the original, which gives users a false sense of legitimacy. Furthermore, the crypto drainer contract operates silently in the background, often unnoticed until it’s too late. Victims typically realize the scam only after their wallets are emptied.
The FTC reports that since early 2021, more than 46,000 people have lost over $1 billion in cryptocurrency-related scams. This fake “Beraborrow Rewards” page is part of that rising trend — using psychological manipulation and social engineering to trick people into opening their digital wallets to criminals.
Dealign with Crypto Scams – Method 1: Manual Removal Guide
Follow these steps to manually remove crypto scams and protect your system.
Step 1: Identify the Crypto Scam Source
- Check if you’ve been contacted by a scammer through email, Telegram, Discord, WhatsApp, or social media.
- Identify any malicious software installed on your system, such as fake wallet apps or browser extensions.
- Scan your browser history and emails for phishing links.
Step 2: Report and Freeze Crypto Transactions (If Possible)
- Contact your crypto exchange immediately if you suspect fraud.
- Check if your transaction is pending (some blockchains allow canceling or replacing a transaction).
- Report the scam to authorities such as:
Step 3: Remove Malicious Software and Fake Wallet Apps
- Windows Users:
- Open Control Panel > Programs and Features
- Look for unknown apps related to crypto wallets or trading bots.
- Click Uninstall.
- Mac Users:
- Open Finder > Applications
- Locate suspicious apps and drag them to the Trash.
- On Mobile (Android & iOS):
- Go to Settings > Apps (Android) or General > iPhone Storage (iOS).
- Uninstall any unrecognized crypto wallet apps.
Step 4: Clear Browser Data and Remove Malicious Extensions
- Google Chrome:
- Go to chrome://extensions/
- Remove unfamiliar or suspicious extensions.
- Firefox, Edge, Safari:
- Open settings and remove unauthorized extensions.
- Clear Cache & Cookies:
- Open browser settings → Privacy → Clear browsing data
Step 5: Reset Passwords & Enable Two-Factor Authentication (2FA)
- Change passwords for your crypto exchanges, wallets, and emails.
- Use a strong, unique password for each account.
- Enable 2FA on all critical accounts (Google Authenticator or YubiKey recommended).
Step 6: Scan for Malware and Keyloggers
Even if you removed software manually, some malware can still lurk in your system. Use a security tool to perform a deep scan (see SpyHunter method below for an automatic removal process).
Step 7: Monitor Your Accounts & Funds
- Track your crypto wallet transactions using Etherscan or Blockchain Explorer.
- Keep an eye on email login alerts from suspicious locations.
- Use a hardware wallet (Ledger, Trezor) for better security.
Method 2: Automatic Removal Using SpyHunter
For a fast and reliable way to remove crypto scam-related malware, use SpyHunter.
Step 1: Download SpyHunter
Step 2: Install SpyHunter
- Run the SpyHunter setup file.
- Follow the on-screen installation steps.
- Open SpyHunter once installed.
Step 3: Perform a Full System Scan
- Click on “Start Scan Now” to analyze your system.
- Wait for the scan to detect crypto scam malware, spyware, keyloggers, and phishing trojans.
Step 4: Remove Threats Automatically
- Click “Fix Threats” after the scan completes.
- SpyHunter will eliminate malware, fake apps, and browser hijackers.
Step 5: Protect Your System from Future Crypto Scams
- Enable SpyHunter’s Real-Time Protection to block phishing sites and prevent future infections.
- Regularly scan your system for new threats.
Prevention Tips: How to Avoid Crypto Scams in the Future
- Always verify website URLs before logging into exchanges or wallets.
- Avoid unsolicited investment offers on Telegram, Discord, and email.
- Never share your private keys or recovery phrases with anyone.
- Use a hardware wallet instead of online wallets.
- Regularly update your antivirus and anti-malware software.
- Be skeptical of high-return crypto investment schemes.
Conclusion
The fake “Beraborrow ($BERA) Rewards” page is a clear-cut example of a phishing and cryptocurrency draining scheme. While the official Beraborrow project remains legitimate, scammers are exploiting its name and interface to deceive users. If you’ve engaged with a suspicious site like beraborrow[.]claims, it’s crucial to scan your device for malware and assess your wallet activity.
To remove any potential threats linked to this scam (such as browser hijackers or malicious scripts that may have been injected into your system), you can use SpyHunter — a trusted malware removal tool. Click here to download SpyHunter.