tonscanner.org

Reported crypto scam website

This website was named in 2 public crypto scam reports: Hack. First reported 2026-10-22. Last updated 2026-10-22.

Update: Polkadot Community Foundation case log lists receiving addresses in Fearless Wallet extension losses (Sep 2025 to Sep 2026)

  • Scam type: Hack
  • Project or site name: Fearless Wallet browser extension
  • Incident date: 2025-09-30
  • Reported: 2026-10-22
  • Last updated: 2026-10-22

Update to our earlier report on the Fearless Wallet browser extension and tonscanner[.]org (https://blockint.ai/c3?report=8e9f9247-aa5b-4469-bccf-a5f239e021f4). That report said the victim and receiving addresses had not been published. The Polkadot Community Foundation's case log, "Reported unauthorized transactions from Fearless Wallet users" (https://hackmd.io/@gWEUMERvQZyR5MStsH26g/r1lJdy8nGg), linked from the Foundation's security notice on the Polkadot Forum on 2026-10-21 (https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058), now…

Fearless Wallet browser extension sent users' recovery phrases and keys to tonscanner[.]org (Feb 2025 to Oct 2026)

  • Scam type: Hack
  • Project or site name: Fearless Wallet browser extension
  • Incident date: 2025-02-26
  • Reported: 2026-10-22
  • Last updated: 2026-10-22

The Fearless Wallet browser extension, a third-party Polkadot wallet, contained code that sent users' recovery phrases, keystore files and wallet passwords to tonscanner[.]org when they unlocked the wallet. SlowMist puts the exposure period at February 2025 to October 2026. This report lists the exfiltration domain and the Chrome extension ID that SlowMist flags as malicious. No attacker crypto addresses have been published. Sources: Polkadot on X, 2026-10-21 14:13 UTC (https://x.com/Polkadot/status/2112910039207800970), says an investigation by the Polkadot Technical Fellowship for the…

Report a crypto scam · How to report a crypto scam