Fake Uniswap lookalike app-uniswap-fi.net flagged as drainer
Scam Sniffer listed app-uniswap-fi.net, a lookalike of the Uniswap app, as a wallet drainer on October 13, 2026. The real Uniswap web app is at app.uniswap.org.
- First reported
- Reports
- 1
Source: davefinances.com · published
What happened
Dave Finances reported that Scam Sniffer listed app-uniswap-fi.net as a wallet drainer on October 13, 2026, one of five indicators added within about an hour.
The hostname uses the Uniswap name and an "app" prefix that looks like the structure users expect from a DeFi interface. The legitimate Uniswap web application is at app.uniswap.org. Uniswap's own site was impersonated, not involved.
How the scam works
Lookalike DeFi front ends copy a familiar interface on a domain that differs by a few characters or a different ending. When a user connects a wallet and confirms what looks like a normal swap or approval, the drainer requests permissions that let the attacker move tokens.
Dave Finances compared it to a fake Safe wallet advertisement that appeared in Google search results on October 11, which used a lookalike domain and familiar branding to put a fraudulent interface in front of people searching for a real product.
The outlet stresses reading the full hostname before connecting a wallet or signing, and treats this listing as a separate lead, not proof of a coordinated campaign or of confirmed losses.
Source
Dave Finances, "Scam Sniffer adds 5 fresh crypto drainer and seed-phishing indicators after midnight" (October 13, 2026). The article notes there is no public evidence the five indicators belong to the same operator, and no verified losses have yet been tied to them.
Red flags
- A DeFi app address that is not exactly the official domain (app.uniswap.org for Uniswap).
- Extra hyphens or words such as "-fi" added to a brand name, or an unexpected ending like .net.
- Links to trading apps from ads, search results or direct messages instead of a saved bookmark.
If you were targeted
- 1Do not connect a wallet to, or sign anything on, the listed site.
- 2If you already approved a transaction there, revoke token approvals using a reputable approval-checker for your wallet's network, and move remaining funds to a new wallet if you are unsure what you signed.
- 3If you entered a recovery phrase anywhere, treat that wallet as compromised: create a new wallet with a new phrase and move any remaining assets.
- 4Report the site to your wallet provider and to the FBI at ic3.gov (or your national cybercrime agency).