(Crypto) Scams on GitHub have gotten out of hand

[TechStudent10]

Select Topic Area

General

Body

Hello esteemed users of GitHub.

I've been mentioned in two issues (on repositories I've had no assosiation with) that turn out to be Binance crypto scams

The issues in question

The "White Window" issue appears to have had the scam be posted twice.

This needs to be stopped, although it might be a minor annoyance for people who are more tech-literate, for someone who created a GitHub account for the sole reason of creating an issue or just having one for the sake of having one (I've met quite a few people like this), of whom may not be as knowledgable about these scams, are more prone to falling for them.

I've noticed something like this happening a couple months ago where new users were spam pinging random accounts. A GitHub employee assured me that they would take action, but it appears that those actions have failed. (#42869)

Please fix.

Edit 1: I'd also like to note the amount of unrelated discussions being started here, from random users most likely on the wrong repo to outright scams being present here, it seems that GitHub isn't moderating content being posted on their site very well.

[Akash1134]

Hi @TechStudent10 , 👋🏻 We really appreciate you flagging this. The best route to get this to the proper GitHub team is to use our abuse reporting tools. Here's all the info:

• Reporting abuse or spam
• Reporting a user
• Reporting an issue or pull request
• Reporting a comment

You can report behavior and content that violates community guidelines and terms. We are going to close this post, but for this and any future incidents, please refer to the links above.

Thank you!

[elvisisvan]

this is absolutely outrageous, somebody gotta do something about it

[feynon]

Getting bombed with them

[theodesp]

I got 50 emails today. It's insane!

[Dante690]

i got too what do the support team with this..?

[yikerman]

Scammers delete their account immediately after spamming people. How is GitHub able to mod this?

[drozdowsky]

Also affects me, I have to disable email on mentions unfortunately

[imtianx]

I also have the problem. How can I block the scam user ？

[nmenezes1]

That is true, this must be looked into.

NM,
www.sqlops.com

[elvisisvan]

this mf is one of the culprits, report him, report them all

[bijoy26]

Already started receiving unsolicited mentions for this scam campaign from like issues from 10 different repos 😖

[smithlarissa176-lang]

How to Recover Stolen Cryptocurrency: A Guide With Infinite Digital Recovery

Losing cryptocurrency to a scam, hack, or fraudulent investment is devastating. Because blockchain transactions are irreversible, many victims don’t know where to begin—or which companies they can trust. While no recovery method can guarantee results, taking the right steps early can significantly increase the chances of tracing your assets, documenting evidence, and pursuing legitimate recovery channels.

This guide explains how crypto theft happens, what immediate actions to take, and how Infinite Digital Recovery supports victims through transparent, professional, and ethical recovery assistance.

What Happens When Cryptocurrency Is Stolen?
Cryptocurrency theft usually involves one of the following:
• Investment scams and fraudulent trading platforms
• Phishing attacks that steal seed phrases or logins
• Fake customer-service impersonators
• Romance investment scams (“pig butchering”)
• Compromised wallets or exchange accounts

Immediate Steps to Take After Your Crypto Is Stolen

1. Secure Your Accounts and Devices
   Change passwords, enable 2FA, and remove suspicious browser extensions or apps.
2. Gather Evidence
   Collect:
   • Transaction IDs (TXIDs)
   • Wallet addresses involved
   • Screenshots of conversations
   • Platform URLs
   • Payment confirmations

This evidence is essential for blockchain tracing.
3. Report the Incident
Notify:
• Infinite Digital Recovery Via Email:   infinitedigitalrecovery@techie.com 
• Global reporting channels (IC3, Action Fraud, etc.)
• The platform where the scammer contacted you (e.g., WhatsApp, Telegram, social media)

Reporting builds a trail that may assist future investigations.

4. Contact a Legitimate Crypto Recovery Professional such as
   Email:  infinitedigitalrecovery@techie.com 
   WHATSAPP:   + 13235543592

Many “recovery agents” online are fake. Avoid anyone who:
• Charges upfront fees for “unlock codes.”
• Claims they can “hack wallets.”
• Asks for your seed phrase

How Infinite Digital Recovery Helps Crypto Theft Victims

Infinite Digital Recovery provides professional, research-based, and transparent assistance to victims of crypto scams. Rather than promising guaranteed returns—which is impossible in legitimate recovery—they focus on:

✔ 1. Blockchain Forensic Analysis
Using advanced tracing tools, analysts help track the movement of stolen crypto across:
• Wallets
• Exchanges
• Blockchains
• Mixers
• Cross-chain platforms

This creates a detailed activity report.

✔ 2. Evidence Documentation
Victims receive properly organized case files containing:
• Transaction mapping
• Suspect wallet identification
• Timeline of events
• Exchange contact points
• Recommended next steps

These files are essential for law enforcement or legal action.

✔ 3. Scam Awareness & Prevention
They also educate victims about:
• Red flags
• Common recovery scams
• Safe ways to store and move crypto
• How to avoid being targeted again

Many victims fall for a second scam when searching for help. Scammers often:
• Find victims on Reddit, Google, and Facebook
• Pretend to be investigators
• Demand upfront charges for “unlocking fees,” “gas fees,” or “private key recovery.

Infinite Digital Recovery emphasizes honesty and transparency—no unrealistic claims, no misleading tactics.

Final Thoughts

Recovering stolen cryptocurrency is challenging, but you are not powerless. By taking the right steps early, gathering strong evidence, and working with legitimate professionals, you can improve your chances of tracing your assets and building a solid case.

Infinite Digital Recovery provides victims with honest guidance, blockchain analysis, and professional support—without false promises or risky tactics. Reach out to Infinite Digital Recovery to start your recovery process.

Email:  infinitedigitalrecovery@techie.com 
WHATSAPP:   + 13235543592

[imtianx]

Hi,pls focus on this issue.

[imtianx]

Today I've been tagged dozens of times in 9 repos😖

[ettaboyle]

Hi there,

I have noticed a pattern of users tagging jmeridth & Iron-Ham -- neither of these people work on the team that manages our community discussions. Can you share any info on why you've tagged them?

Please note, contacting any member of GitHub Staff via unsolicited mentions or pings is strongly discouraged and may be considered a violation of our prohibition against harassment. Please review our Code of Conduct for more information.

Let's work together to keep GitHub Community a place where people feel safe to participate by being respectful of them and their time.

Any repeat and future violations may result in a temporary or indefinite block from the Community. Thanks for understanding.

[imtianx]

Sorry, I don't know which one to notice. I've been getting many scams lately, so I hope you'll focus this issue and and solve it.

[eigenpaul]

This is still a pressing issue. Today alone I've been tagged in more than 4 related crypto scam posts

[x-magic]

Same thing here on a newer issue from an empty repo by a non-reputable user:

This is the first time I know that GitHub doesn't have a report feature on repos, issues or replies. As far as I can find there's only an option to report specific user.

Given the fact that most email services won't sent GitHub emails to spam, these scams/spams are quite effective in regard to penetrability 😏

[captn3m0]

There are 21M pull requests and 6.4M issues created by this "Blastoff.zone: Earn 1 ETH" spam. (Writing the title here to keep it searchable).

https://github.com/search?q=%22blastoff.zone%3A+Earn+1+ETH%22&type=issues

[MHIII]

Hi when I go to the official bitcont website link from coinbase and look at cloud mining the links provided for cloud mining all revert to nicehash ? do you know if nicehash is a real cloud mining site or is it a scam? Please and thanks!

[MHIII]

never mind I just looked at trust pilot and they are a scam company! Thanks

[KaganCanSit]

Hello,

Lately I've been receiving emails from Github tagging issues and PR requests opened through various projects. I am aware that these are a phishing attack. But it's getting annoying.

As a society, it would be beneficial for everyone to be informed. We can be absent-minded. Please do not forget;

An organization like Github will not send you this type of email! Be careful when granting permissions to your Github account and the bots, tools, and other content you want to add. Check out the tools.

How can we as a community help you further @github?

Additionally, efforts were made to fulfill the same issue and PR demands through my projects. Is there a way to temporarily turn off the notification email for my own repos?

[theodesp]

I can confirm. I got 50 emails overnight from spam comments. My inbox email is full.

[KaganCanSit]

I think what should be here is to review requests such as issues and PR. Also, plugin stores need to be tightened up. When it is done from my open source projects, the e-mail is sent through my project. That's when I get very uncomfortable. I should be able to intervene.

[richardlouis3201-create]

THE MOST CREDIBLE CRYPTO RECOVERY: TOP RECOVERY EXPERT

TOP RECOVERY EXPERT is a reliable and legitimate company that can help recover lost cryptocurrency assets. After weeks of wondering if my lost BTC could ever be restored, I realized how frequent cryptocurrency scams have become. When dealing with individuals online, especially regarding money, caution is essential. Recovering stolen cryptocurrency is possible, but it’s important not to fall victim to another scam—there are many fake “recovery companies” worldwide. I personally experienced multiple scams while desperately seeking help to recover my lost funds. Finally, a friend introduced me to TOP RECOVERY EXPERT, a trustworthy and discreet team. They handle everything from securing personal or company websites to recovering cryptocurrency assets. With their help, I successfully recovered $680,000 worth of USDT in just over a week. Their professionalism, discretion, and prompt service were outstanding. If you’ve been compromised, don’t lose hope—and be careful of fraudsters posing as saviors. TOP RECOVERY EXPERT are real professionals in crypto recovery. I am living proof of their effectiveness. you can reach them by email: Toprecoveryexpert@consultant.com OR you contact their Phone Call/Text: +1 (346) 980-9102

[richardlouis3201-create]

THE MOST CREDIBLE CRYPTO RECOVERY: TOP RECOVERY EXPERT

TOP RECOVERY EXPERT is a reliable and legitimate company that can help recover lost cryptocurrency assets. After weeks of wondering if my lost BTC could ever be restored, I realized how frequent cryptocurrency scams have become. When dealing with individuals online, especially regarding money, caution is essential. Recovering stolen cryptocurrency is possible, but it’s important not to fall victim to another scam—there are many fake “recovery companies” worldwide. Real hackers work discreetly and do not advertise themselves in such obvious ways. I personally experienced multiple scams while desperately seeking help to recover my lost funds. Finally, a friend introduced me to TOP RECOVERY EXPERT, a trustworthy and discreet team. They handle everything from securing personal or company websites to recovering cryptocurrency assets. With their help, I successfully recovered $680,000 worth of USDT in just over a week. Their professionalism, discretion, and prompt service were outstanding. If you’ve been compromised, don’t lose hope—and be careful of fraudsters posing as saviors. TOP RECOVERY EXPERT are real professionals in crypto recovery. I am living proof of their effectiveness. you can reach them by email: Toprecoveryexpert@consultant.com OR you contact their Phone Call/Text: +1 (346) 980-9102
you can visit website:https://toprecoveryexpert2.wixsite.com/consultant