The process is usually as follows: Scammers target sites like YouTube, Twitter, and Google searches to trap unsuspecting users and create either fake advertisements — such as alluring giveaways — or even create a fake website using domains similar to the original — using “0” instead of “o” or a sneaky misspelling.

Such an attack vector last week saw millions of XRP stolen from a fake Ledger site, with the attackers using a fake domain name and successfully swindling funds.