X Safety Cheat Sheet 2026

Scammers swap normal letters for visually identical ones from other alphabets (mostly Cyrillic and Greek) so a fake handle looks exactly like the real one. Your eye reads 'elonmusk' but the computer sees a different account entirely.

An account copies a real person's or brand's name, photo, and bio — usually adding 'official', 'support', 'airdrop', or trailing digits — to trick you into clicking, sending crypto, or sharing a code. It's the #1 attack vector on X.

GACS takes what you paste (a profile URL, a website, a wallet address, a token, a phone number) and checks it against 136,000+ confirmed scams, learned fraud patterns, and live community reports. You get a Safe / Caution / Danger verdict with the exact signals that drove it.

Looks identical to the real site (X, Binance, MetaMask, your bank) but the URL is slightly off. Once you type your password or sign a wallet transaction, the scammer takes over.

After you lose money, fake 'recovery agents', 'blockchain forensics experts', or 'asset recovery lawyers' DM you offering to get it back — for an upfront fee. They take the fee and disappear. Real recovery never works this way.

Translated from 'sha zhu pan' (杀猪盘). The scammer befriends or flirts with you for weeks, builds trust, then introduces a 'guaranteed-return' trading platform. The platform shows fake profits until you try to withdraw — and the money is gone.

The contract is written so only the deployer can sell. You watch the chart pump, try to take profit, and the transaction silently fails. Your money is stuck forever.

Hosted on phishing sites disguised as airdrop claims, NFT mints, or token unlocks. The signature you're asked to approve isn't a login — it's permission for the attacker to move every asset out.

Unicode includes characters that render nothing on screen (zero-width space, zero-width joiner, byte-order mark). Scammers paste them inside otherwise-real-looking handles to bypass exact-match blocklists.

Every scan ends with one of three labels: Safe to research (no red flags found), Caution (suspicious patterns — verify before engaging), or Danger (matches a known scam or strong impersonation). The verdict is always followed by the exact signals that produced it — never a black box.

Save any handle, wallet, domain, or keyword to your watchlist. If a new community report comes in that matches, GACS emails you within minutes so you can react before more victims fall for it.