Seguridad de las criptomonedas

Prevención de hacking y phishing

Tenga en cuenta estos consejos cuando cree o utilice sus cuentas de criptodivisas:

• Utiliza contraseñas diferentes para cada cuenta que utilices para limitar los daños que puedan hacer los hackers.
• Utilice un único correo electrónico al abrir cuentas en cada bolsa y sólo utilice esa dirección de correo electrónico para esa bolsa específica.
• Enable two-factor authentication for your exchange accounts. This adds software to your smartphone which adds extra security to your account. Without two-factor authentication, a hacker only needs your username and password to empty your balance.
• No almacene sus monederos y contraseñas en el mismo lugar o un atacante puede acceder a sus contraseñas y a su monedero al mismo tiempo.
• Nunca menciones qué bolsa o monedero utilizas en las redes sociales o en los foros online. Cualquier información que publiques en línea puede volverse en tu contra.
• Mantenga copias de seguridad de sus carteras de criptomonedas y frases de recuperación para asegurarse de que sus monedas no se pierdan definitivamente si algo le sucede a su dispositivo principal.
• Los discos duros externos, las memorias USB y los archivos de copia de seguridad encriptados pueden utilizarse para asegurar tus opciones de recuperación y programas como VeraCrypt pueden encriptar estos archivos sensibles.

Los diferentes tipos de carteras de criptomonedas

• Desktop Wallet: This is installed on your desktop computer and gives you access to and control over your wallet. This wallet is only accessible from the computer on which it is installed and offers a high level of security. However, it’s at risk if something happens to your computer. Examples of desktop wallets are Exodus, mSigna, and Copay.
• Billetera móvil: Esto se ejecuta desde una aplicación en tu teléfono inteligente para la opción más conveniente pero más vulnerable. Estos monederos deben tener una copia de seguridad; si pierdes tu teléfono, o se ve comprometido, podrías perder tus criptomonedas con él.
• Billetera en línea: Este es un monedero basado en la web, lo que significa que sus datos se almacenan en un servidor en línea, lo que facilita el acceso desde cualquier lugar. Sin embargo, como tus claves privadas se almacenan en línea con este monedero, corren más riesgo de ser pirateadas y robadas. Ejemplos de monederos online son Coinbase y Blockchain.
• Hardware Wallet: Wallets are built to specifically hold cryptocurrency and keep it secure. You can turn them into hot wallets by connecting them to your computer, then take it offline once you’re done. You don’t need a specialized device for a hardware wallet, even USB sticks will do.
• Cartera de papel: La forma más básica de un monedero implica un bolígrafo y un papel. Simplemente escribe tu clave privada y podrás recuperar tu monedero si alguna vez pierdes el acceso a él. También puedes imprimir un código QR tanto para tu clave pública como para la privada, lo que evita almacenar los datos digitalmente, proporcionando un alto nivel de seguridad.

Seguridad de las transacciones

• Wallet Address: Because of the irreversible nature of cryptocurrency transactions, it is very important to ensure that you have entered the correct wallet address. If you send coins to the wrong address, it may not be possible to recover them.
• Special Requirements: When using different cryptocurrencies, it is important to understand how they work before making transactions. Certain cryptocurrencies can have special requirements or safety precautions that should be taken. For example, with IOTA you should always use a new address when you send your cryptos, otherwise, your security is reduced. With Ripple, there can sometimes be two parts to the address: a wallet address and a destination tag. If the proper destination tag is not included, the coins you send can be lost or end up in the wrong account.
• Malware & Viruses: Another risk to watch out for is trojans that have been detected lurking on people’s computers. When the victim copies a cryptocurrency address to send tokens, the trojan will swap the wallet ID that was copied for its own malicious wallet address in payment fields. Therefore, pay careful attention to the cryptocurrency address you are sending your cryptos to.
• Phishing: Phishing attacks, Ponzi schemes, and ransomware are all common types of cyber fraud and theft of cryptocurrencies. There have been reports of cybercriminals sending phishing emails with infected attachments that give the attacker access to the victim’s computer and their wallets. Always be vigilant when dealing with suspicious emails and attachments, especially when you are unsure of their source.

Pagar con criptomoneda

• If you're thinking about paying with cryptocurrency, know that it's different from paying with a credit card or other traditional payment methods.
• Cryptocurrency payments do not come with legal protections. Credit cards and debit cards have legal protections if something goes wrong. For example, if you need to dispute a purchase, your credit card company has a process to help you get your money back. Cryptocurrencies typically do not.
• Cryptocurrency payments typically are not reversible. Once you pay with cryptocurrency, you can usually only get your money back if the person you paid sends it back. Before you buy something with cryptocurrency, know the seller's reputation, where the seller is located, and how to contact someone if there is a problem. Confirm these details by doing some research before you pay.
• Some information about your transactions will likely be public. People talk about cryptocurrency transactions as anonymous. But the truth is not that simple. Some cryptocurrencies record some transaction details on a public ledger called a "blockchain." That's a public list of every cryptocurrency transaction — both the payment and receipt sides. Depending on the cryptocurrency, the information added to the blockchain can include details like the transaction amount and the sender's and recipient's wallet addresses. A wallet address is a long string of numbers and letters linked to your digital wallet. Even though you can use a fake name to register your digital wallet, it's possible to use transaction and wallet information to identify the people involved in a specific transaction. And when you buy something from a seller who collects other information about you, like a shipping address, that information can be used to identify you later on.

Cryptocurrency ATMs and Fraud

Cryptocurrency ATMs, often referred to as “Bitcoin ATMs,” and virtual currency kiosks are found in grocery stores, gas stations, convenience stores, and malls. Regardless of the name, they look and operate like traditional bank ATMs. However, these ATMs allow individuals to purchase and send virtual currencies, like Bitcoin, Ether, and Tether, to other parties anywhere in the world instantaneously.

Cryptocurrency Fraud

Traditionally, a fraudster would convince an unsuspecting victim to send fiat currency via wire transfers, gift cards, P2P digital transfer, etc. Now, fraudsters direct victims to send virtual currency via cryptocurrency ATMs. The fraudster typically instructs the victim to withdraw fiat currency from their financial institution and deposit it into a cryptocurrency ATM, providing the victim with a QR code linked to a wallet controlled by the fraudster. As noted above, tactics may vary, but the goal is to gain a victim’s trust, create a false sense of security, and fabricate an urgent situation that requires the victim’s help or demands payment. The fraudster directs the victim to deposit cash into a virtual currency ATM and purchase virtual currency, which is then sent to the fraudsters’ virtual currency wallet.

Once this is done, the money is essentially gone. Therefore, it is crucial to understand the difference between making a cash deposit at a traditional financial institution ATM and at a cryptocurrency ATM. A traditional fiat currency deposit goes directly into a known party's bank account (controlled by a financial institution) or even into your own account. However, in this fraud, the cryptocurrency ATM deposit goes into an anonymous or un-hosted wallet address controlled by an unknown party. If using a cryptocurrency ATM, the user must only deposit funds into a wallet controlled by the user to avoid becoming a victim.

Preventative Measures

• Invest with reputable exchanges and wallets with a long user history.
• Do not deposit cash in a crypto ATM in exchange for a QR code.
• Do not permanently link cryptocurrency brokerage accounts to traditional bank accounts.
• Do not respond to unsolicited messages about investing in cryptocurrency.
• Enable multi-factor authentication on accounts associated with crypto wallets or exchange platforms.
• Be wary of the personal information you post online, and constantly update your privacy settings on all social media platforms.
• Use strong password management and set up two-factor authentication.
• Understand that there are no get-rich-quick schemes; if it sounds too good to be true, it is.
• Genuine investment companies will never call you, so be extremely cautious with anyone you do not know who calls with an opportunity to increase your wealth.
• Before investing in any type of opportunity, take the time to research and talk to people you trust, such as family, friends, or advisors.
• Never send money to someone you have never met in person, and always seek advice from someone you trust before sending money to someone you recently met or started a relationship with online, especially if the relationship is remote or primarily through text/chat app/phone.
• Be wary of anyone asking you to receive money on their behalf and then later transfer it.
• You cannot win a lottery you have not entered, and legitimate lotteries will never ask for money upfront.
• Do not trust people who promise you can quickly or easily make money in the cryptocurrency markets.
• If you meet someone on a dating site, app, or social media, and they want to show you how to invest in crypto or ask you to send them cryptocurrency, it is a fraud.
• Beware of fraudulent schemes leveraging cryptocurrency ATMs and QR codes to facilitate payment.
• No envíe un pago a una persona con la que sólo ha hablado por Internet, aunque crea que ha establecido una relación con ella.
• No siga las instrucciones de alguien que no conoce para escanear un código QR y enviar el pago a través de un cajero automático de criptomonedas físico.
• Do not respond to a caller claiming to be a representative of a company where you are an account holder and who requests personal information or demands cryptocurrency. Contact the number listed on your card or the entity directly for verification.
• Do not respond to a caller from an unknown telephone number who identifies as a person you know and requests cryptocurrency.
• Tenga cuidado cuando una entidad declare que sólo puede aceptar criptomonedas y se identifique como el gobierno, las fuerzas del orden, una oficina legal o una empresa de servicios públicos. Es probable que estas entidades no le indiquen que transfiera fondos, envíe cheques, envíe dinero al extranjero o haga depósitos en cuentas de personas desconocidas.
• Evite los cajeros automáticos de criptomonedas que anuncian el anonimato y que sólo requieren un número de teléfono o un correo electrónico. Estos cajeros automáticos de criptodivisas pueden no cumplir con la normativa federal estadounidense y pueden facilitar el blanqueo de dinero. Las instrucciones para utilizar cajeros automáticos de criptodivisas con estas características específicas son un importante indicador de fraude.
• Si está utilizando un cajero automático de criptomoneda y el operador del cajero le llama para explicarle que sus transacciones son compatibles con el fraude y le aconseja que deje de enviar dinero, debe detener o cancelar la transacción.

Tácticas de inversión en criptodivisas a tener en cuenta:

• Promises that you can earn lots of money in a short time and achieve financial freedom.  If they promise you'll make a profit, that's a scam. Even if there's a celebrity endorsement or testimonial.  Nobody can guarantee a set return, say, double your money. Much less in a short time.
• Having to pay in cryptocurrency for the right to recruit others into a program. If you do, they say, you'll get recruitment rewards paid in cryptocurrency. The more cryptocurrency you pay, the more money they promise you'll make. But these are all fake promises and false guarantees.
• Ofertas no solicitadas de supuestos "gestores de inversiones". Estos estafadores dicen que pueden ayudarte a hacer crecer tu dinero si les das la criptomoneda que has comprado. Pero una vez que acceda a la "cuenta de inversión" que han abierto, descubrirá que no puede retirar su dinero a menos que pague comisiones.
• Ofertas de trabajo no solicitadas para ayudar a reclutar inversores en criptodivisas, vender criptodivisas, minar criptodivisas o ayudar a convertir dinero en efectivo en bitcoin.
• Una promesa libre de dinero. Lo prometerán en efectivo o en criptomoneda, pero las promesas de dinero gratis siempre son falsas.
• Grandes afirmaciones sin detalles ni explicaciones. Los empresarios inteligentes quieren entender cómo funciona su inversión y a dónde va su dinero. Y los buenos asesores de inversiones quieren compartir esa información.

Otras estafas que hay que evitar

• Blackmail emails - Scammers will often send emails that say they have embarrassing or compromising photos, videos, or personal information about you. Then, they threaten to make it public unless you pay them in cryptocurrency. Don't do it. This is blackmail and a criminal extortion attempt. Report it to the FBI immediately.
• Social media scams - If you read a tweet, text, email, or get a message on social media that tells you to send cryptocurrency, it's a scam. That's true even if the message came from someone you know, or was posted by a celebrity you follow. Their social media accounts might have been hacked. 

• El estafador se dirige a una víctima en una aplicación de citas como Tinder, iniciando una relación romántica exclusivamente en línea.
• A través de los chats en línea, se establece un nivel de confianza.
• Inevitablemente, el "amante" anima a su objetivo a invertir en criptodivisas, normalmente dirigiéndolo a un sitio web o una aplicación falsos que están controlados secretamente por el estafador.
• Después de que la víctima haya aceptado invertir algo de dinero en la plataforma falsa, el amante desaparece (junto con el dinero), para no volver a ser visto.
• Una vez que la víctima empieza a mostrarse escéptica o intenta retirar sus fondos, a menudo se le dice que tiene que pagar impuestos sobre las ganancias antes de poder desbloquear los fondos.

Estos son algunos de los elementos comunes de una estafa de carnicería de cerdos:

He aquí cómo protegerse: