Beware - keyfund.io Airdrop is a Phishing Scam to Steal Your Ethereum

I saw an announcement for the keyfund.io airdrop, promising 5000 KEY tokens valued at $.03 each. The announcement looked legit: sign up, complete the tasks, get tokens worth $150 USD.

A few days after joining their telegram channel and registering for the airdrop, a post directing users to complete the KYC process showed up in the telegram channel.

I clicked on the link to begin the process and everything looked professional and legitimate. Enter first and last names, email address, ETH address and then a prompt to sign-in and verify with a shortened bit.ly link. I used https://unshorten.me/ to check this before opening and saw what looked like a phishing link.

Opened the link on a secure browser to see what happened and saw what looked to be the typical MyEtherWallet sign-in page, however check out the strange characters in the address bar. Had I proceeded, I am sure that my wallet would have been emptied very soon. As always when dealing with crypto, beware of what is going on, double and triple check addresses, never use a link to access myetherwallet.com and always keep your systems updated and secured!

Recently, the MEW addon in chrome has recognized keyfund.io to be a scam and warns you when trying to access that site. Thankfully the community is looking out for others.

Hopefully this helps keep everyone safe!