Before depositing, download letter_of_guarante and then verify the signature to ensure you are depositing to an eXch address. I wonder why eXch doesn't add it to the Q&A to avoid phishing links or at least help reduce them.
When I use exch, I am basically a macro. I don't really think, I just do. This is what was clever about the scam. There were really no irregularities with the fake exch and the real one. By the time I realized something was up, my transaction was already confirmed and it was too late. If there were irregularities or I noticed the different domain before I sent, I would have checked the letter of guarantee. This in fact, was how I verified they were a scam (of course, exch cc had a fake signature).
Unfortunately in my case, I don't think anything could have prevented the loss. I was on semi autopilot, and I mistook the domain, the rest is history.
Maybe that is the silver lining from this situation? Anyone know how to build a basic add-on that indexes official sites (maybe on github or something where the public can contribute) that can be open sourced and added to the firefox store? You might be solving a huge problem by doing so.
OrangeFren created an open source add-on like this a few weeks ago, but as far as I know, for now it's only available for Chromium based browsers actually... He told me that he's open to build a Firefox version, hopefully we will have it available soon.
Today we're launching the
OrangeFren Plugin!
It's an extension for Chromium-based browsers that exists to
safe-guard users from accessing phishing scams aimed against the users of exchanges listed on
OrangeFren.comIt downloads a list of known phishing domains from
OrangeFren.com once an hour, as well as self-generates possible phishing domains and compares the websites you access against them. The extension is open-source and it does not save or transmit any of your activity.
You can get it here:
https://github.com/orangefren/OrangeFren-Plugin/releases/tag/v0.2
This is great and I will be supporting this! Thank you for sharing.