MalwareTips: claim-steer.finance was reported as a fake Steer Finance token-allocation page tied to wallet draining
In a post published October 20, 2026, MalwareTips warns of a Steer Finance token allocation scam that uses the project's identity to promote a false reward claim. It says the reported impersonation appeared at claim-s…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
In a post published October 20, 2026, MalwareTips warns of a Steer Finance token allocation scam that uses the project's identity to promote a false reward claim. It says the reported impersonation appeared at claim-steer[.]finance, which is distinct from steer.finance, the genuine project domain (compare docs.steer.finance, a real subdomain). MalwareTips says the false page borrows the project's familiarity to encourage wallet interaction, with a reported cryptocurrency-draining objective. The genuine Steer Protocol is not involved; MalwareTips stresses the warning concerns the counterfeit allocation, not the real protocol or its legitimate reward campaigns. MalwareTips notes that no wallet request was signed or contract tested, that the exact authorization used remains unverified, that the reported domain was unavailable for a current capture, and that its lead image is an illustration rather than a capture of the site. It advises confirming any allocation through independently recognized project channels and checking the actual registered domain before touching a wallet prompt.
How the scam works
MalwareTips says the counterfeit page borrows the familiarity of a real decentralised-finance project to make a reward claim feel routine. A token 'allocation' suggests tokens have already been set aside for the visitor, which encourages them to connect a wallet before checking who is actually making the offer. The address is the clearest test: claim-steer.finance adds a word and a hyphen to the project's name, and is not steer.finance or one of its subdomains such as docs.steer.finance.
Once a wallet is connected, the page can ask for further actions. MalwareTips explains that for compatible tokens an allowance can let another party move covered assets later, and simply disconnecting from a site may leave that spending permission in place; other requests can have different effects. It stresses that it has no verified contract trace showing one identical theft transaction for every visitor, and that the warning concerns the counterfeit allocation, not the real Steer Protocol or any legitimate reward campaign it runs. The safe route is to confirm any allocation through the project's own recognised channels, opened independently, and to read every wallet prompt in the wallet's own interface rather than trusting the page's description. MalwareTips' lead image for its article is an illustration, not a capture of the site.
Source
MalwareTips, "Steer Finance Token Allocation Scam: Fake Claim Page Targets Your Wallet" (published 20 October 2026).
Red flags
- A 'token allocation' or claim page on a domain that adds words to a project's real name.
- An unexpected message saying tokens are reserved for your wallet.
- Pressure to connect your wallet before you can check the offer.
- Approval or signature requests described only as 'verification'.
- Any request for a recovery phrase.
If you were targeted
- 1Don't connect your wallet, sign, or approve anything on the page.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.