NFT marketplace account takeover

The digital marketplace for NFTs grew to an estimated $22bn last year, but companies face new frauds challenges every day. Recently fraudsters are able to perform a successful fraud using the account takeover  in the NFT marketplace.

There are different methods that fraudsters can use to hijack an account. For example, credentials stuffing, phishing, social engineering, and SIM swap for high-profile accounts are the key account takeover methods. Fraudsters use stolen usernames and passwords on login forms to steal the NFT non-fungible token or NFT arts by employing credential stuffing. The NFT marketplace login forms are constantly hit by bots and automated scripts which involves very less cost to initiate the attack for the fraudster.

NFT account takeover becomes a nightmare for the victim and also destroys the marketplace reputation, customer trust, strain on operations teams, customer loyalty and retention, financial impact, and the future of the marketplace becomes dark.

Some of the recent attacks on the NFT marketplaces are given below. You can find the list of stolen NFT arts in the example. Victims are rushing to review and revoke your token approvals for dApp using ETH token approval checker.

https://twitter.com/KeyboardMonkey3/status/1371300334501515264?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1371300334501515264%7Ctwgr%5E%7Ctwcon%5Es1_c10&ref_url=https%3A%2F%2Fdecrypt.co%2F61444%2Fhackers-reportedly-target-nft-marketplace-nifty-gateway-users

Account takeover fraud prevention for NFT marketplace

Before applying any prevention measure, ensure the customer is not facing high frictions on the login. Below are the some actionable implementations that can be done. However, it does adds the friction when logging in.

  • Rate Limiting on the Authentication
  • Identifying the high risk IP addresses such as TOR, VPN and proxies
  • Identifying the Bots authentication.
  • Learning user behavior based on the historical non-PII data
  • Usual authentication fail or successful spikes
  • Send users notifications for account suspicious behavior

To learn more about how account takeover works, check our insights page here.

Account takeover fraud prevention for NFT Marketplace NFT account takeover NFT fraud prevention NFT marketplace account takeover

Leave a Reply

Your email address will not be published. Required fields are marked *

1,613 replies on “Account takeover: Combating NFT marketplace with frauds”

Search
All Tags
Account Takeover Fraud Account Takeover Frauds Account Takeover Prevention Account Takeover tips ATO detection ATO Threats bad Bots Block Malicious IPs Bot Attack prevention Bot Attacks bot traffic Brute Force Attacks Credential Stuffing Credential Stuffing attacks defense in depth E-commerce ecommerce Account Takeover ecommerce Account Takeover Frauds error log fortified authentication system good Bots High failed login rate How do credential-stuffing attacks work? identify good bots and bad bots IP safety Malicious IPs Monitor Malicious IPs multifactor authentication netstat password manager Proactive defense system rate limiting security updates Setup A fortified authentication system' SNMP Techniques to identify bad devices telnet types of Account Takeover Frauds Web application firewall Webiste Bot Attacks Website Account Takeover What is Account Takeover what is credential stuffing WHMCS Account Takeover WHMCS Fraud Protection Plugin

Related Posts

E-commerce account takeover
Account Takeover Account Takeover Fraud E-Commerce Account Takeover E-Commerce Account Takeover Fraud
8 Simple Steps To Secure E-commerce Customers Against Account Takeover Frauds
Website Account Takeover Frauds
Account Takeover Account Takeover Fraud Account Takeover Prevention Website Account Takeover
8 Signals Indicating A Rise In Website Account Takeover Frauds
types of account takeover frauds
Account Takeover Account Takeover Fraud
8 Ways Fraudsters Can Commit Account Takeover Frauds
Identify Bad Devices
Account Takeover Account Takeover Prevention Bad Devices
8 Simple Techniques To Identify Bad Devices

General

Contact

Social Media

About AuthSafe

AuthSafe is to predict, detect, prevent, and respond to online fraud attacks in real-time using our cognitive engine. Authsafe’s technology helps to prevent all manners of Account Takeover efforts and new online fraud account registration attack. Through manual attempts or automated tools methods, including credential stuffing.

© 2024 authsafe, All Rights Reserved.