Social-media impersonation scam spike

Evidence summary #

Social-media impersonation scam spike | Applicable: Yes — high-value target; confirmed post-exploit impersonation | Post-November 2025 exploit: phishing campaigns launched within hours with fraudulent accounts posing as Balancer representatives offering fake white-hat bounty programs (documented in Yahoo Finance scam alert). balancer-fi.website confirmed scam domain (ScamAdviser). Post-Balancer Labs wind-down (March 2026): governance transition creates additional impersonation surface (fake emergency compensation or migration scams common in wind-down scenarios). pcrisk.com documents a specific Balancer scam pattern targeting users. No single coordinated spike ≥5 accounts confirmed with certainty in the 30-day assessment window, but persistent elevated post-exploit impersonation environment is documented. Yellow reflects sustained impersonation risk rather than an acute spike. | Threshold: Coordinated impersonation campaign ≥5 accounts or verified drain reports via impersonation | Woul

Sources #

Methodology #

Detect a sharp uptick in Discord/Telegram/X accounts impersonating the protocol team or announcing fake airdrops.

See the full factor methodology and distribution across all protocols →