Lido.fi is a decentralized platform that provides liquid staking services for various blockchain networks, most notably Ethereum. Instead of locking up their staked tokens, users receive a derivative token (e.g., stETH for Ethereum) that represents their staked assets and can be used in other decentralized finance (DeFi) applications.

The scam begins with an email that appears to be an official communication from Lido.fi, promising users eligibility for a new stETH airdrop. The "Claim My stETH" button in the email redirects to a phishing website that looks like the official Lido.fi site.

This is a classic phishing scam, designed to steal sensitive information from unsuspecting victims. Seed phrases and private keys are the secret codes that grant access to a user's cryptocurrency wallet, so if a scammer is able to obtain this information, they can easily steal the victim's funds. 

No Legitimate Platform Will Ever Ask For Your Seed Phrase.

To protect yourself from this and other email scams, always verify the sender's email address and look for spelling and grammar errors in the message. If you are unsure whether an email is legitimate, contact the company's support team directly through their official website or social media channels. 

While verifying the sender’s email I noticed something I haven’t seen before. The Sender’s Address was a “No-reply” email.

Being a little hungover, I actually was questioning if this could be a real email. In my experience, when checking the sender’s address for scam emails like these, they are normally something like a personal email or a “burner” if you will. I’ve never used Lido before, which is the first Red Flag. Second being the generic “Hello” greeting.

The obvious next step would be to verify is “Lido.com” is legit or a scam website. I simply google searched “Lido Crypto” and found the actual site is named Lido.Fi

So always remember:

• Verify the Source: Always check the sender’s email address and compare it to official communications

• Avoid Clicking Links: Instead of using the link in the email, visit the official website directly by typing the URL into your browser, or googling the name like I showed above

• Be Skeptical: Most legitimate airdrops do not require you to provide sensitive information or connect your wallet to claim tokens.

Keep Your Crypto Safe!