Recently I was called by someone pretending to be Coinbase support, trying to steal bitcoin.

I decided to turn the tables on him and ask him about being a scammer (Junseth style) - and he opened up in a big way.

Presenting: To Catch a Scammer 🕵️‍♂️

https://youtu.be/pskUt4ZjM4M

Have you tried Pimsleur? That was the most effective for me but the lessons were very much a chore every day

I dunno every once in a while I find they come in handy for lazy me not wanting to grab a 25 and a 10

The best way to ensure that all bitcoin doesn't get captured in legacy financial system vehicles is to ensure that people want to use bitcoin as more than a store of value.

Number go up thanks to tradfi adoption is fun, but we can't lose sight of the bigger picture.

Thinking about this in context of the ETF options and the Saif/Saylor discussion from last week.

What routine were you following, or were you working with someone in person?

Still learning how to format posts correctly…this looked great as a long form post on primal web…broken as a post on primal mobile

Curses!

HOW TO SPOT PHISHING IN THE WILD

Our team has noticed a significant uptick recently in phishing attempts on Casa members, friends, and even us.

Phishing is when a scammer contacts you in an attempt to get you to give up precious information, such as login credentials or even a seed phrase. These messages can come via email, DM, or even phone call.

These attacks can sometimes be sneaky good at spoofing legitimate brands you trust. Here’s a breakdown of some emails I received and how you can detect phishing under the hood.



A practiced eye will catch this phishing email, but someone less aware might not. And of course you want to click immediately to see the "Huge Risk of Stablecoins!"



The biggest sign is that the attachment looks weird in the Superhuman email client. When I hovered over the attachment, it turned out to be an external link!



This one is harder to catch in Gmail. The attachment looks pretty normal. So you look for other signs:

- Do I know the sender? (I don't)
- Why forward me an email with no text? Weird.
- The message in the body of the original email is a bit weird, bad grammar/punctuation.



Once you get a whiff of phishy: PAUSE, don't click things.

Here's the trick most people don't know about, and how you can verify whether an email is risky.
Go to the Gmail side menu on the email itself, click on "Show Original."



Then check the SPF, DKIM, and DMARC fields. If any of them say "FAIL," run away.

Some companies haven't set this up yet but it's still a good test for most emails, especially if you don't know the sender.

And in all scenarios, even if those things all PASS — if something seems a bit off or you don't know the sender, don't download attachments or click links.



Here's another example I got this week. All 3 fields were PASS, but I don't know who this is and it looks phishy so: BOOM, REPORTED.

Stay safe out there — there are a lot of people getting targeted for their bitcoin right now. Here are a few other handy tips to avoid taking the bait:
- Don't trust unsolicited communications
- Screen calls from unknown numbers
- Verify claims about account issues yourself
- Never share a seed phrase online or over the phone

If you have more questions or want help protecting against this stuff, our team at Casa can help.

@npub1casac... is not just about Bitcoin Security.

We're about Security for Bitcoiners.

#security #nostr

Interesting, thanks for sending the screenshots. When I look at it in primal web it's broken - doesn't show every response in line

And then does this one thread properly too?

Like if I respond to this, does it prioritize my response?

What are specific sync issues you see?

GM 🌅

What are the hardest parts of Nostr to use (for you specifically)?

#asknostr #nostr