Social-media impersonation scam spike
Falcon Finance's assessment for RD-F-109 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Social-media impersonation scam-spike | Applicable: Yes (active X/@falconfinance, Telegram, Discord) | At least 2 confirmed wallet-drainer impersonation operations: event-falconsfinance[.]com (vote rewards, Oct 2025) and claim-falcon[.]app (airdrop, Sep 2025). Coordinated social amplification confirmed. v2-deferred signal. Would fire at advisory level today.
Detail #
PCRisk documents two distinct Falcon Finance impersonation drainer operations: (1) event-falconsfinance[.]com — Falcon Finance vote rewards drainer impersonating falcon.finance; users invited to 'vote' on reward dates to receive $FF from Treasury Pool Funds; connecting wallet activates drainer. Distribution confirmed via fake/stolen X/Facebook accounts. (2) claim-falcon[.]app — Falcon Finance airdrop drainer; close visual copy of falcon.finance; serving IP 213.111.144.132; published Sep 29, 2025. Both documented as active crypto wallet drainer sites. Meets yellow threshold (multiple confirmed impersonation operations with social amplification). Full red would require confirmed spike in account count >baseline, which requires live social monitoring infrastructure. v2-deferred signal.
Sources #
- URLFalcon Finance Vote Rewards Scam — PCRisk Removal Guidehttps://www.pcrisk.com/removal-guides/34020-falcon-finance-vote-rewards-scamretrieved 2026-05-12
- Falcon Finance Airdrop Scam — PCRisk Removal Guidehttps://www.pcrisk.com/removal-guides/33944-falcon-finance-airdrop-scamretrieved 2026-05-12
Methodology #
Detect a sharp uptick in Discord/Telegram/X accounts impersonating the protocol team or announcing fake airdrops.
See the full factor methodology and distribution across all protocols →