A new scam impersonates Galxe (“dapps‑bridge[.]net”), tempting users to claim Galxe OAT tokens. Once you connect your wallet, malicious code steals your crypto. This phishing‑style scheme is categorized as a cryptocurrency drainer—a particularly dangerous type of scam.
Threat Type Overview
Category | Details |
---|---|
Threat Type | Phishing, Scam, Social Engineering, Fraud, Cryptocurrency Drainer |
Disguise | Looks like official Galxe (galxe.com) |
Fake Claim | Users can claim 1000 Galxe OAT |
Associated Domain | dapps‑bridge[.]net (and potentially others) |
Detection Names | SOCRadar (Phishing), alphaMountain.ai (Suspicious), additional detections on VirusTotal |
Symptoms of Infection | Unexpected crypto transactions, wallets auto-signing, sudden balance drain |
Damage / Distribution | Loss of funds; spread via compromised sites, social media spam, rogue ads, adware |
Danger Level | High (irreversible theft; no recovery) |
Removal Tool | SpyHunter – automatically scans/removes threats Download SpyHunter |
Threat Evaluation
1. How did I get infected?
You likely encountered a deceiving pop-up or ad promising free Galxe OATs and clicked “Connect Wallet.” This signed a malicious contract granting scammers withdrawal access. These scams often spread via malvertising, social media, or typosquatting URLs.
2. What does it do?
Once active, the malicious contract silently reads your balance, automates draining of all assets, and transfers them to the scammer-controlled wallet. Since crypto transactions cannot be reversed, lost funds are gone.
3. Should you be worried?
Yes—this scam allows immediate remote theft. If you’ve connected your wallet, your funds may already be gone. Immediate action is essential to prevent further losses.
Scam Contract Messages
The fake Galxe site prompts wallet connection with wording like:
“Connect your wallet to claim 1000 OAT. Authorize on your wallet to proceed.”
The authorization pop-up includes “Approve unlimited spending” on all assets—granted unknowingly by the victim.
What to Do Now
- Immediately revoke permissions via wallet settings (e.g., Etherscan’s “Revoke Approved Contracts” tool).
- Transfer any remaining funds to a new, secure wallet—do not reuse an old wallet that was connected.
- Scan your device for malware using SpyHunter.
- Enable strong security on future transactions—never approve blanket transactions, always audit contract permissions.
- Report the scam to relevant authorities/platforms (block the scam site, report phishing, etc.).
Dealign with Crypto Scams – Method 1: Manual Removal Guide
Follow these steps to manually remove crypto scams and protect your system.
Step 1: Identify the Crypto Scam Source
- Check if you’ve been contacted by a scammer through email, Telegram, Discord, WhatsApp, or social media.
- Identify any malicious software installed on your system, such as fake wallet apps or browser extensions.
- Scan your browser history and emails for phishing links.
Step 2: Report and Freeze Crypto Transactions (If Possible)
- Contact your crypto exchange immediately if you suspect fraud.
- Check if your transaction is pending (some blockchains allow canceling or replacing a transaction).
- Report the scam to authorities such as:
Step 3: Remove Malicious Software and Fake Wallet Apps
- Windows Users:
- Open Control Panel > Programs and Features
- Look for unknown apps related to crypto wallets or trading bots.
- Click Uninstall.
- Mac Users:
- Open Finder > Applications
- Locate suspicious apps and drag them to the Trash.
- On Mobile (Android & iOS):
- Go to Settings > Apps (Android) or General > iPhone Storage (iOS).
- Uninstall any unrecognized crypto wallet apps.
Step 4: Clear Browser Data and Remove Malicious Extensions
- Google Chrome:
- Go to chrome://extensions/
- Remove unfamiliar or suspicious extensions.
- Firefox, Edge, Safari:
- Open settings and remove unauthorized extensions.
- Clear Cache & Cookies:
- Open browser settings → Privacy → Clear browsing data
Step 5: Reset Passwords & Enable Two-Factor Authentication (2FA)
- Change passwords for your crypto exchanges, wallets, and emails.
- Use a strong, unique password for each account.
- Enable 2FA on all critical accounts (Google Authenticator or YubiKey recommended).
Step 6: Scan for Malware and Keyloggers
Even if you removed software manually, some malware can still lurk in your system. Use a security tool to perform a deep scan (see SpyHunter method below for an automatic removal process).
Step 7: Monitor Your Accounts & Funds
- Track your crypto wallet transactions using Etherscan or Blockchain Explorer.
- Keep an eye on email login alerts from suspicious locations.
- Use a hardware wallet (Ledger, Trezor) for better security.
Method 2: Automatic Removal Using SpyHunter
For a fast and reliable way to remove crypto scam-related malware, use SpyHunter.
Step 1: Download SpyHunter
Step 2: Install SpyHunter
- Run the SpyHunter setup file.
- Follow the on-screen installation steps.
- Open SpyHunter once installed.
Step 3: Perform a Full System Scan
- Click on "Start Scan Now" to analyze your system.
- Wait for the scan to detect crypto scam malware, spyware, keyloggers, and phishing trojans.
Step 4: Remove Threats Automatically
- Click "Fix Threats" after the scan completes.
- SpyHunter will eliminate malware, fake apps, and browser hijackers.
Step 5: Protect Your System from Future Crypto Scams
- Enable SpyHunter's Real-Time Protection to block phishing sites and prevent future infections.
- Regularly scan your system for new threats.
Prevention Tips: How to Avoid Crypto Scams in the Future
- Always verify website URLs before logging into exchanges or wallets.
- Avoid unsolicited investment offers on Telegram, Discord, and email.
- Never share your private keys or recovery phrases with anyone.
- Use a hardware wallet instead of online wallets.
- Regularly update your antivirus and anti-malware software.
- Be skeptical of high-return crypto investment schemes.
Conclusion
The Fake “Galxe” website scam is highly dangerous. It seamlessly tricks users into authorizing wallet access and drains everything. Because crypto transactions are final, lost funds can’t be recovered. Be extremely cautious when receiving airdrop offers—always verify the URL, review wallet permission pop-ups, and only connect wallets to legitimate, official sites.