“撤销”总是安全的，对吗？

加密用户认为，撤销批准时的安全性是安全的，但是骗子已经发现了一种利用此功能的方法。

"Revoke" is always safe, right? Most crypto users would say so, especially since it's often touted as a key part of Web3 wallet hygiene. But while users believe they are safe when they cancel or "revoke" token approvals, scammers have discovered a way to exploit this feature with devastating efficiency. They create fake approval scams to trick users into personally paying an expensive gas price to secure their wallets.

“撤销”总是安全的，对吗？大多数加密用户会这样说，尤其是因为它通常被吹捧为Web3钱包卫生的关键部分。但是，尽管用户认为他们在取消或“撤销”令牌批准时是安全的，但骗子已经发现了一种以毁灭性效率来利用此功能的方法。他们创建了伪造的批准骗局，以诱使用户亲自支付昂贵的汽油价格以确保其钱包。

In their previous Web3 Wallet Security blogs, they discussed the dangers of approving smart contract transactions without fully understanding the implications, and we've also written about the importance of checking your token approvals regularly to prevent any misuse of your funds. Today, we'll be examining a new variant of crypto scam and how to avoid it.

在他们以前的Web3钱包安全博客中，他们讨论了批准智能合约交易的危险，而无需完全理解含义，我们还写了关于定期检查您的令牌批准以防止任何滥用资金的重要性。今天，我们将检查加密骗局​​的新变体以及如何避免它。

What are fake approval scams?

什么是假批准骗局？

Binance explains that false approval frauds use the word "revoke" to deceive customers into thinking they are reversing transaction rights granted to unfamiliar platforms or smart contracts. When customers attempt this action, they end up paying an unusually high "gas fee" to complete the transaction.

Binance解释说，虚假的批准欺诈使用“撤销”一词来欺骗客户认为他们正在逆转授予不熟悉平台或智能合约的交易权。当客户尝试此操作时，他们最终会支付异常高的“汽油费”来完成交易。

The Lure: While casually browsing their token approvals on a blockchain explorer like Etherscan or inside their wallet, the user spots an unfamiliar approval for a token they don't recognize. It looks like some unknown contract has been granted access to their valuable assets. Panic sets in as the user instinctively rushes to revoke the approval, believing they are saving their crypto from theft.

诱饵：虽然随便在像etherscan这样的区块链探险家或钱包内浏览其代币批准，但用户发现对他们不认识的代币的不熟悉的批准。看来一些未知合同已被授予获得其宝贵资产的访问权。当用户本能地急于撤销认可时，恐​​慌出现了，他们认为他们正在将加密货币从盗窃中保存下来。

The "revoke" transaction the user triggers is real; it's a legitimate action on the blockchain, but it's designed to cost them an arm and a leg in transaction fees. The scammer, in anticipation of the user's desperate move, profits massively from these inflated transaction costs, which they planned to use for minting new tokens or another malicious action under their control. Ultimately, what the user thought was a protective move turns into an expensive mistake. The fake approval was merely bait to lure them into paying for nothing.

用户触发的“撤销”交易是真实的；这是对区块链的合法动作，但旨在使他们付出一支手臂和交易费用的腿。诈骗者预计用户的拼命举动，从这些膨胀的交易成本中大量获利，他们计划将其用于造成新的代币或其他恶意行动。最终，用户认为的是保护性举动变成了一个昂贵的错误。伪造的批准只是诱饵是为了吸引他们一无所获。

While these scams don's directly steal funds, they exploit the user by draining their wallet through outrageously high gas fees, leaving the rest of their assets untouched. The scammer had no intention of stealing the user’s tokens in the first place.

尽管这些骗局直接窃取了资金，但他们通过耗尽高昂的汽油费来利用用户，而其余资产则未受到影响。骗子首先无意窃取用户的令牌。

How to Spot and Avoid These Scams

如何发现并避免这些骗局

Stay calm

保持冷静

Scammers rely on fear and urgency to make you act quickly and foolishly. If something seems off, take a step back, breathe, and fully assess the situation before reacting. A clear head is your best weapon against being tricked by their deceptive tactics.

骗子依靠恐惧和紧迫性使您迅速而愚蠢地行事。如果似乎有些不对劲，请退后一步，呼吸并充分评估情况。明确的头是您最好的武器，不要被他们的欺骗性策略所欺骗。

Double-Check before you click

单击之前双检查

Before approving any transaction, take a moment to review the details. Does the amount look right? Do you recognize the contract address? Are there any odd warnings or unusual fees? If something feels off, triple-check with trusted sources, like the official website of the platform or community forums, to verify the transaction details.

在批准任何交易之前，请花点时间查看详细信息。金额看起来正确吗？您认识合同地址吗？是否有任何奇怪的警告或不寻常的费用？如果有什么感觉，可以通过可信赖的来源（例如平台或社区论坛的官方网站）进行三次检查，以验证交易详细信息。

Know your fees

知道您的费用

Familiarize yourself with the average size of gas fees on the chains you use. If a transaction fee seems suspiciously high or unusual for the network at the time, it could be a red flag. Use tools like Etherscan's Gas Tracker, GasNow, or Blocknative's Gas Estimator to monitor real-time gas prices and estimate the expected costs before proceeding.

熟悉您使用的链条上的平均汽油费用。如果当时网络的交易费似乎是可疑的或不寻常的，那可能是一个危险信号。使用Etherscan的气体跟踪器，Gasnow或阻滞剂估算器等工具来监视实时气价，并在进行前估计预期成本。

Constantly educate yourself

不断教育自己

Scammers are constantly devising new tricks, but knowledge is your strongest defense. The more you understand about emerging threats and best practices for online safety, the better equipped you are to spot red flags and avoid these scams. Stay updated with Binance Academy for the latest information and tips. You can also delve into our Web3 Wallet Security series for deeper insights into the latest scams and how to stay safe.

骗子一直在设计新技巧，但知识是您最强大的防御。您对在线安全的新兴威胁和最佳实践了解越多，您就可以发现危险信号并避免这些骗局的能力越大。请访问Binance Academy的最新信息和提示。您还可以深入了解我们的Web3钱包安全系列，以更深入了解最新的骗局以及如何保持安全。

Scammers thrive on urgency, but a little vigilance goes a long way. The best defense against these deceptive tactics isn't just knowing they exist, but staying one step ahead in the ever-evolving landscape of Web3 security.

诈骗者在紧迫的情况下蓬勃发展，但警惕很长一段路。对这些欺骗性策略的最佳防御不仅仅是知道它们存在，而且在不断发展的Web3安全景观中领先一步。