Trending events and crypto scams: what controls actually hold up?

TL;DR: A sharp rise in malicious dApps and investment scams built around Elon Musk-related news and the 2026 FIFA World Cup was tracked, according to Blockaid research, showing how attackers use trending events to drive victims to lookalike sites, wallet connections, and deposits that trigger theft. Static blocklists and history-based fraud scoring are too slow for disposable domains and fresh scam addresses.

Editorial analysis by NHI Mgmt Group, based on content published by Blockaid: “Wallet Drainers and Investment Scams Impersonating SpaceX and the FIFA World Cup”.

By the numbers:

• April was the worst month for crypto theft on record, with over $629 million drained across more than 20 incidents.

Key questions

Q: What breaks when crypto scams rely on disposable domains and fresh wallet addresses?

A: Static blocklists and history-based fraud scoring fail because they depend on prior reputation.

Q: Why do trending events make wallet-drainer and investment scams more effective?

A: Trending events create urgency, borrowed trust, and distraction at the same time.

Q: How can security teams tell whether a scam control is actually working?

A: A control is working only if it catches new domains, new tokens, and new destination addresses before users act.

Practitioner guidance

• Harden wallet-connection checkpoints Require real-time risk scoring before a user connects a wallet to a new dApp, especially when the site is tied to a trending event or token claim.
• Screen deposits for scam intent at the transfer edge Apply behavioural and onchain screening to destination addresses during deposit and withdrawal flows, not after funds leave the platform.
• Treat trending-event campaigns as ephemeral threats Add response playbooks for fast-moving event bait, including rapid takedown triage, token verification, and social channel monitoring.

Bottom line: Event-driven crypto scams succeed because they merge borrowed trust with disposable infrastructure, which defeats controls built around known bad names.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →