(Crypto) Scams on GitHub have gotten out of hand

[TechStudent10]

Select Topic Area

General

Body

Hello esteemed users of GitHub.

I've been mentioned in two issues (on repositories I've had no assosiation with) that turn out to be Binance crypto scams

The issues in question

The "White Window" issue appears to have had the scam be posted twice.

This needs to be stopped, although it might be a minor annoyance for people who are more tech-literate, for someone who created a GitHub account for the sole reason of creating an issue or just having one for the sake of having one (I've met quite a few people like this), of whom may not be as knowledgable about these scams, are more prone to falling for them.

I've noticed something like this happening a couple months ago where new users were spam pinging random accounts. A GitHub employee assured me that they would take action, but it appears that those actions have failed. (#42869)

Please fix.

Edit 1: I'd also like to note the amount of unrelated discussions being started here, from random users most likely on the wrong repo to outright scams being present here, it seems that GitHub isn't moderating content being posted on their site very well.

[Akash1134]

Hi @TechStudent10 , 👋🏻 We really appreciate you flagging this. The best route to get this to the proper GitHub team is to use our abuse reporting tools. Here's all the info:

• Reporting abuse or spam
• Reporting a user
• Reporting an issue or pull request
• Reporting a comment

You can report behavior and content that violates community guidelines and terms. We are going to close this post, but for this and any future incidents, please refer to the links above.

Thank you!

[elvisisvan]

this is absolutely outrageous, somebody gotta do something about it

[feynon]

Getting bombed with them

[theodesp]

I got 50 emails today. It's insane!

[Dante690]

i got too what do the support team with this..?

[yikerman]

Scammers delete their account immediately after spamming people. How is GitHub able to mod this?

[drozdowsky]

Also affects me, I have to disable email on mentions unfortunately

[imtianx]

I also have the problem. How can I block the scam user ？

[nmenezes1]

That is true, this must be looked into.

NM,
www.sqlops.com

[elvisisvan]

this mf is one of the culprits, report him, report them all

[bijoy26]

Already started receiving unsolicited mentions for this scam campaign from like issues from 10 different repos 😖

[imtianx]

Hi,pls focus on this issue.

[imtianx]

Today I've been tagged dozens of times in 9 repos😖

[ettaboyle]

Hi there,

I have noticed a pattern of users tagging jmeridth & Iron-Ham -- neither of these people work on the team that manages our community discussions. Can you share any info on why you've tagged them?

Please note, contacting any member of GitHub Staff via unsolicited mentions or pings is strongly discouraged and may be considered a violation of our prohibition against harassment. Please review our Code of Conduct for more information.

Let's work together to keep GitHub Community a place where people feel safe to participate by being respectful of them and their time.

Any repeat and future violations may result in a temporary or indefinite block from the Community. Thanks for understanding.

[imtianx]

Sorry, I don't know which one to notice. I've been getting many scams lately, so I hope you'll focus this issue and and solve it.

[paulphys]

This is still a pressing issue. Today alone I've been tagged in more than 4 related crypto scam posts

[x-magic]

Same thing here on a newer issue from an empty repo by a non-reputable user:

This is the first time I know that GitHub doesn't have a report feature on repos, issues or replies. As far as I can find there's only an option to report specific user.

Given the fact that most email services won't sent GitHub emails to spam, these scams/spams are quite effective in regard to penetrability 😏

[captn3m0]

There are 21M pull requests and 6.4M issues created by this "Blastoff.zone: Earn 1 ETH" spam. (Writing the title here to keep it searchable).

https://github.com/search?q=%22blastoff.zone%3A+Earn+1+ETH%22&type=issues

[MHIII]

Hi when I go to the official bitcont website link from coinbase and look at cloud mining the links provided for cloud mining all revert to nicehash ? do you know if nicehash is a real cloud mining site or is it a scam? Please and thanks!

[MHIII]

never mind I just looked at trust pilot and they are a scam company! Thanks

[KaganCanSit]

Hello,

Lately I've been receiving emails from Github tagging issues and PR requests opened through various projects. I am aware that these are a phishing attack. But it's getting annoying.

As a society, it would be beneficial for everyone to be informed. We can be absent-minded. Please do not forget;

An organization like Github will not send you this type of email! Be careful when granting permissions to your Github account and the bots, tools, and other content you want to add. Check out the tools.

How can we as a community help you further @github?

Additionally, efforts were made to fulfill the same issue and PR demands through my projects. Is there a way to temporarily turn off the notification email for my own repos?

[theodesp]

I can confirm. I got 50 emails overnight from spam comments. My inbox email is full.

[KaganCanSit]

I think what should be here is to review requests such as issues and PR. Also, plugin stores need to be tightened up. When it is done from my open source projects, the e-mail is sent through my project. That's when I get very uncomfortable. I should be able to intervene.

[waletmaker0]

Select Topic Area

General

Body

Hello esteemed users of GitHub.

I've been mentioned in two issues (on repositories I've had no assosiation with) that turn out to be Binance crypto scams

The issues in question

The "White Window" issue appears to have had the scam be posted twice.

This needs to be stopped, although it might be a minor annoyance for people who are more tech-literate, for someone who created a GitHub account for the sole reason of creating an issue or just having one for the sake of having one (I've met quite a few people like this), of whom may not be as knowledgable about these scams, are more prone to falling for them.

I've noticed something like this happening a couple months ago where new users were spam pinging random accounts. A GitHub employee assured me that they would take action, but it appears that those actions have failed. (#42869)

Please fix.

Edit 1: I'd also like to note the amount of unrelated discussions being started here, from random users most likely on the wrong repo to outright scams being present here, it seems that GitHub isn't moderating content being posted on their site very well.

Hi TechStudent10,

I completely agree with you—these crypto scams on GitHub have become a serious issue. It’s concerning how easily scammers can target users, especially those who are less tech-savvy. GitHub should definitely take stronger measures to moderate this kind of content and protect its users. Hopefully, with more people raising awareness, we’ll see action taken soon to prevent these incidents from continuing.