Towards a Safer Web3: Protecting Against Cryptoscams With DirtyHash

Crypto has several features that are attractive to scammers. There’s no bank or other centralized authority to flag suspicious transactions and attempt to stop fraud before it happens. Crypto transfers can’t be reversed — once the money’s gone, there’s no getting it back. The problem is aggravated by the simple fact that most people are not well versed with how crypto works.

Total cryptocurrency scam revenue for 2022 currently sits at $1.6 billion [1]. The median individual reported loss is a whopping $2,600 [2].

It’s not only scammers stealing money, but also blackmailers, money launderers, illicit entities backed by nation state actors, terrorist organizations and darknet dealers. The US Department of the Treasury maintains a list of sanctioned entities to which companies and individuals alike have to comply to. While entities like crypto exchanges and banks have access to advanced information and analytics on crypto scams, an individual crypto player has to rely on their own due diligence and luck. Crypto did succeed in decentralizing institutions, but the ability to defend against scams is largely centralized.

With a grand vision to solve this problem and make Web3 safer for everyone, DirtyHash was created as an open source project to defend against Web3 and Crypto frauds, phishing, ransomware, blackmailers and money laundering. With this you can analyze suspicious entities (BTC and ETH wallet addresses, smart contracts, websites, twitter handles, etc.) to detect frauds and scams. You can report scammers and share them with the community.

DirtyHash applies machine learning techniques to detect malicious wallet addresses in realtime, and provides a risk score for a particular wallet address. In addition, it scrapes the internet for malicious entities, uses publicly available crypto scam databases, leverages reports submitted by users, maintains blacklists of malicious entities, and whitelists of known entities. It maps the transaction graphs in blockchains to hunt for related scam entities. DirtyHash also searches for malicious entities as reported in the Sanctions List by the US Treasury Department.

After you report a scam on DirtyHash, it is evaluated further by automated algorithms or by manual screening, and is then added to the DirtyHash reports database. In the near future, if you report a new scam that was not present already in the DirtyHash database, then you will get rewarded in the forms of DirtyHash DAO tokens. There is also a Search and Report API which could be used to bake DirtyHash capabilties into other applications.

Following are some crypto addresses and domains that you can check out on DirtyHash:

Even in the pre-release phase, DirtyHash received a DDoS (Distributed Denial of Service) attack. The service recovered back after a small downtime, but this incident highlights its effectiveness against scammers, thereby protecting crypto users.

As next, the DirtyHash team is working on supporting other popular blockchains like Solana and Flow. It is setting up an incentivization mechanism for users to report scams, in the form of DAO tokens. DirtyHash is in discussions with popular crypto wallet providers to have the risk score integrated in the wallet itself and shown before the transaction approval. The team would also launch a browser extension to alert users and help them defend against crypto scams.

DirtyHash is an open source project, please follow us on Twitter and contribute to the Github repo.