'Blockchain Vault Protocol' free-crypto emails lead to cryptocurrencyairdrop-ama9.vercel.app phrase-stealing page
MalwareTips reports a Blockchain Vault Protocol scam that starts with free-crypto email bait promising $50 to $500 and leads to cryptocurrencyairdrop-ama9.vercel.app. The page presents 'wallet integration' with a supp…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips reports a Blockchain Vault Protocol scam that starts with free-crypto email bait promising $50 to $500 and leads to cryptocurrencyairdrop-ama9.vercel.app. The page presents 'wallet integration' with a supposed vault as a protective measure and asks for the wallet's recovery phrase. MalwareTips advises never entering recovery words or private keys and treating any disclosed phrase as exposed. The hosting provider is not identified as the operator. MalwareTips notes the deployment no longer shows the vault page.
How the scam works
MalwareTips describes this as phrase theft, not a wallet-connection drainer. The email is bait: a modest giveaway of $50 to $500 in crypto makes opening the offer feel worthwhile. The link leads to cryptocurrencyairdrop-ama9.vercel.app, which introduces an apparently helpful security service, 'wallet integration' with a supposed vault described as a protective measure.
The form asks for the wallet's recovery phrase rather than a normal connection. That is the giveaway: the phrase restores the wallet anywhere, so whoever receives it can act outside the webpage and empty it. MalwareTips says a rejected form or error doesn't mean the words were discarded, and that anyone who typed a phrase should treat it as exposed.
Free-giveaway emails work because the sum is small enough that opening the link feels harmless, and a legitimate-looking 'security' justification then makes the request for the phrase seem sensible. MalwareTips says a genuine service has no need for the words that restore your wallet, whatever reason the page gives.
Vercel is only the hosting service and is not identified as the operator. MalwareTips says the deployment no longer shows the vault page.
Source
MalwareTips, "Blockchain Vault Protocol Scam: Free Crypto Emails Steal Recovery Phrases" (published 26 October 2026).
Red flags
- An email promising $50 to $500 in free crypto.
- A 'Blockchain Vault Protocol' or 'wallet integration' presented as protection.
- A form asking for your recovery phrase or private key.
- A vercel.app address instead of an official project site.
- Urgency or a reward that depends on submitting the phrase.
If you were targeted
- 1Don't connect your wallet, sign, or approve anything on the page.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.