Testnet scams and staying safe

The golden rule #

Testnet coins are free and effectively unlimited. You can get them from a faucet in seconds, or mine them yourself. That single fact defeats most scams before they start: anyone selling testnet coins, doubling them, or promising they'll be worth something later is running a scam. There is nothing to buy, because the whole point is that they have no value. If you're ever unsure why, read why testnet coins have no value.

Fake coin sales and doublers #

The classic version is the "doubler": send 1 coin and get 2 back. You send, and nothing comes back. On testnet this is almost funny, because you could have gotten those coins from a faucet for nothing. But the same trick runs on mainnet with real money, so it's worth spotting the pattern now.

Related versions to ignore:

• Paid "premium" faucets that ask for a deposit or a fee before they'll release coins. Real testnet faucets are free.
• Marketplaces or listings selling testnet coins for real currency. There is no legitimate reason for these to exist.
• Anyone claiming testnet coins will "convert" to mainnet coins one day. They won't, and they can't.

Seed phrase phishing #

This is the most dangerous one because it's the habit that hurts you on mainnet. A fake wallet or faucet site asks you to "import," "verify," or "sync" your wallet by typing in a seed phrase. The moment you do, whoever runs that site has full control of that wallet.

A real service never needs your seed phrase. Faucets only need a receiving address. Wallets generate and store your seed locally. Nobody legitimate will ever ask you to type a seed into a website, a chat, or a form.

Trojaned downloads #

A fake wallet app or node binary can look identical to the real thing and quietly steal keys or coins in the background. On mainnet, a trojaned wallet drains real funds. Practicing safe downloads now keeps you safe later.

• Download only from the official project site. For the browser wallet used across this site, that's testnetwallet.net.
• Be wary of search ads. Scammers buy ads for common wallet names and point them at look-alike domains. Check the address bar carefully.
• Be wary of random GitHub forks and reuploads. A fork can contain modified, malicious code. Stick to the official repository linked from the official site.

Address poisoning #

This one is sneaky. A scammer generates an address that looks like one you use, matching the first few and last few characters, then sends you a tiny amount from it. Now that look-alike address sits in your transaction history. Later, when you copy an address from your history to reuse it, you might grab theirs by mistake and send real coins to the scammer.

The defense is simple: verify the full address, every character, not just the ends. Never trust an address just because it "starts and ends right." When in doubt, look the transaction up on an explorer like testnetscan.com and confirm exactly where funds came from.

Fake support and DMs #

You post a question in a public channel, and within minutes a friendly "support agent" slides into your direct messages offering to help. This is almost always a scam. Fake help desks, cloned support bots, and unsolicited DMs all lead to the same ask: your seed phrase, or a "validation" payment.

Two rules cover most of it:

• Real projects do not DM you first. Help happens in public channels where others can see it.
• No real support agent will ever ask for your keys or seed phrase. If they do, they're a scammer, full stop.

The habit that beats most of it #

Almost every scam above relies on one thing: you moving fast. Slow down, and most of them fall apart. Here's the short checklist that covers the lot:

That is the real value of testnet: you practice these reflexes where a mistake costs nothing, so they are second nature by the time real value is on the line.