Fake Polygon QuickSwap page connect-layer3.com invites wallet connections tied to a drainer
MalwareTips reports a fake Polygon QuickSwap scam that uses an imitation exchange page at connect-layer3.com, which is not an authenticated QuickSwap application route, to invite visitors to 'join' and connect a walle…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips reports a fake Polygon QuickSwap scam that uses an imitation exchange page at connect-layer3.com, which is not an authenticated QuickSwap application route, to invite visitors to 'join' and connect a wallet. MalwareTips says the page was associated with a wallet-draining mechanism. QuickSwap is a genuine decentralized exchange being impersonated and is not accused. MalwareTips notes no wallet or transaction was used to reproduce the page's payload.
How the scam works
Wallet-drainer lures copy a familiar crypto brand and offer something free: a vote reward, an airdrop, an early-supporter allocation or a trading bonus. The visitor is directed to a 'Connect Wallet' button. Connecting alone usually only shares a public address, but the next prompts can ask for a signature, a token approval or a transfer, and these may be labelled as a claim or vote. An approval or signed permission can let the operator move tokens later without asking again, and blockchain transfers are rarely reversible.
MalwareTips says the right response depends on what was actually approved. Someone who only viewed the page has less to do than someone who signed a transaction or typed a recovery phrase. Check your wallet history or a blockchain explorer, revoke any token permissions you don't recognise, and if a recovery phrase was entered, move the remaining funds to a new wallet. Find claims and events only through a project's official website and verified accounts.
The domain mixes 'connect' and 'layer3', terms that sound technical but have nothing to do with QuickSwap's own address. QuickSwap is impersonated and is not involved.
Source
MalwareTips, "Fake Polygon QuickSwap Scam" (published 25 October 2026).
Red flags
- A reward, airdrop or event page on connect-layer3.com rather than QuickSwap's official site.
- A 'Connect Wallet' button as the first step to claim.
- Signature or approval requests that don't clearly match a simple claim.
- Requests for a recovery phrase or private key.
- Urgency, countdowns or limited allocations.
If you were targeted
- 1Don't connect a wallet to connect-layer3.com or sign anything there.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.