More users lose funds and accounts to phishing than any other attack. Fake market sites look identical to real ones but steal your credentials and funds.
How Phishing Works
- Attacker creates a fake site that looks identical to the real market
- Fake links are spread through forums, messages, and search results
- Victim enters credentials on the fake site
- Attacker captures credentials and logs into real market
- Attacker steals funds, changes password, locks out victim
How to Identify Phishing Sites
🚨 Red Flags
- URL doesn't match verified links
- Site looks slightly different than usual
- Unusual errors or slow loading
- Login always "fails" (capturing retries)
- Asks for unusual information
- No working 2FA challenge
✅ Safety Signs
- URL matches your bookmarked link exactly
- PGP 2FA challenge works normally
- Site behavior is consistent
- Login works on first try (if creds correct)
- Balance and history are correct
Protection Strategies
1. Bookmark Verified Links
Save verified mirror links to your Tor Browser bookmarks. Only access markets through these bookmarks—never through links in messages or search results.
2. Enable PGP 2FA
This is your ultimate protection. Even if you enter credentials on a phishing site, attackers can't complete login without your private key.
Set Up 2FA →3. Verify PGP Signatures
Official mirror lists are PGP signed. Verify the signature before trusting new links.
4. Check Multiple Sources
Verify links from multiple trusted sources before using them. If a link only appears in one place, be suspicious.
5. Never Click Links in Messages
Don't click any links sent to you via market messages, email, or forums. Always type or use bookmarks.
What to Do If You've Been Phished
- Act immediately - Time is critical
- Access real market via verified bookmark
- Change password immediately
- Withdraw any funds to personal wallet
- Check order history for unauthorized activity
- Update your PGP key if you shared your private key
- Warn others about the phishing link
Common Phishing Tactics
| Tactic | How to Spot |
|---|---|
| Similar URLs | Check every character - phishers use lookalikes (0 vs O, l vs I) |
| Fake mirror lists | Verify PGP signatures, check multiple sources |
| "Support" messages with links | Real support never sends login links |
| Fake login errors | Site always says "wrong password" to capture retries |
| SEO manipulation | Never use clearnet search for onion links |
Stay Safe: Use Our Verified Mirrors
We monitor and verify all Catharsis Market links. Bookmark our mirror page for safe access.
View Verified Mirrors