Fake Espresso (ESP) token-claim portals claim-espresso.app and two lookalikes linked to wallet drainer
MalwareTips reports a Claim Espresso ESP scam in which unofficial token-collection pages present themselves as belonging to the real Espresso blockchain project. Reported imitation addresses include claim-espresso.app…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips reports a Claim Espresso ESP scam in which unofficial token-collection pages present themselves as belonging to the real Espresso blockchain project. Reported imitation addresses include claim-espresso.app, claim-espressofoundation.org and register-espresso.com. MalwareTips says the portals solicit wallet activity and have been associated with a cryptocurrency drainer, and advises verifying claim programs only through Espresso's official website and announcements. Espresso itself is a genuine project and is not accused. MalwareTips notes no wallet interaction was performed and the exact contract and network were not reproduced.
How the scam works
MalwareTips describes the same sequence in these wallet-drainer scams. A link to a claim or checker page arrives through an advertisement, message, post or compromised account. The page asks you to connect a wallet before showing an allocation or a result, which seems routine. Connecting an address doesn't by itself move assets, but the page can then request a signature, token approval or transaction, and those requests can reach beyond the advertised reward. Some signatures carry consequences without looking like a normal payment, and the permission can remain active after you leave the page.
Here the hook is an allocation of Espresso's ESP token that a visitor is told they can claim. The page borrows the real project's name, and a familiar name proves nothing about who runs it. MalwareTips says Espresso is a genuine project and isn't accused, and that the lead image in its article is a fictional interface, not the original portal. It did not interact with a wallet, so the exact contract and network were not reproduced.
Its advice is to start from Espresso's official website and independently verified announcements, not from the page's own links.
Source
MalwareTips, "Claim Espresso ESP Scam Exposed: Fake Token Portals And Wallet Access Risks" (published 26 October 2026).
Red flags
- An unexpected invitation to 'claim' ESP tokens.
- Domains such as claim-espresso.app or register-espresso.com that aren't Espresso's official website.
- A claim page that asks you to connect a funded wallet.
- A transaction or approval request that has nothing to do with the reward.
- A page that asks for your recovery phrase.
If you were targeted
- 1Don't connect your wallet, sign, or approve anything on the page.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.