In July 2025, a vicious phishing campaign hit Bitget Wallet users, draining $6.3 million in crypto through fake airdrop scams. Attackers leveraged social engineering to steal seed phrases, exposing vulnerabilities even in non-custodial wallets. This article unpacks the Bitget phishing scam, its impact, and how investors can stay safe.
The Bitget phishing scam exploded in early July 2025, with scammers impersonating Bitget’s official website to promote a fraudulent BWB token airdrop. According to Scam Sniffer, attackers used phishing sites mimicking bitget.com, tricking users into connecting wallets and approving malicious transactions. Over 4,000 victims lost assets, with one Ethereum wallet drained of $1.2 million in ETH alone PCRisk.
These scams spread via Telegram and X, where fake accounts posed as Bitget support or influencers, urging users to claim “free tokens.” A New Jersey trader lost $50,000 after scanning a QR code from a Telegram bot, which prompted a fake wallet update. The sites used drainer-as-a-service tools like Inferno Drainer, enabling rapid theft across blockchains. Bitget’s Anti-Scam Month, launched in June, warned of such tactics, but the campaign’s scale overwhelmed many users GlobeNewswire.
The Bitget phishing scam thrived on deception, not technical exploits. Fraudulent sites mimicked Bitget’s branding, using subtle URL misspellings like “bitg3t.com” to fool users. Once connected, victims approved transactions that gave scammers access to seed phrases, draining wallets instantly. SlowMist’s 2025 report notes that 40% of crypto scams now use social engineering, with Telegram as a key vector Morningstar.

(Image via PCRisk)
Unlike the 2024 Bybit hack, which exploited a hot wallet flaw, this attack targeted user trust. Scammers exploited FOMO with promises of high-value airdrops, bypassing even 2FA-protected wallets. A single compromised seed phrase can empty a wallet, as transactions are irreversible. The scam’s sophistication—using AI-generated fake videos of Bitget’s CEO Gracy Chen—made it harder to spot, costing users millions in Bitcoin, ETH, and stablecoins.
The fallout from the Bitget phishing scam hit hard. Losses averaged $1,500 per victim, with high-net-worth users losing up to $500,000. A Florida-based investor saw her DeFi portfolio wiped out after clicking a phishing link on X, highlighting the personal toll. The scam also dented Bitget’s reputation, despite its $500M Protection Fund and efforts to trace funds via Elliptic Morningstar. A similar pattern of misplaced trust was seen in the Free VPN Data Leak Exposes Millions in China (2025), where users assumed their activity was safe, only to find their private info siphoned and exposed.
Businesses using Bitget Wallet for payroll or client payments faced disruptions, with some pausing operations to audit security. Social media erupted with complaints, echoing 2023 Reddit threads accusing Bitget of mishandling funds, though the exchange clarified these scams were unrelated to their systems Reddit. The incident underscores the growing threat of AI-driven scams, which Bitget’s report pegged at $4.6 billion in 2024 losses.
Blockchain investors can shield themselves from the Bitget phishing scam with vigilance. Use hardware wallets like Ledger for cold storage, keeping seed phrases offline. Verify airdrop links only through official channels, like Bitget’s verified X account or website. Browser extensions like MetaMask’s phishing protection can flag malicious sites. Bitget’s Anti-Scam Hub offers real-time scam alerts.
For businesses, train staff to spot fake URLs and avoid unsolicited Telegram messages. Use multi-signature wallets for high-value transactions to limit single-point failures. Regularly audit wallet activity with tools like Etherscan, and report suspicious links to Bitget’s support. The 2023 Inferno Drainer scam showed how user caution stopped $80 million in losses. Staying proactive keeps your funds secure.
The Bitget phishing scam of July 2025, costing users $6.3 million, exposes the dangers of fake airdrops and social engineering. Protect your wallet with hardware storage, verified links, and sharp skepticism.