How to Spot Scams & Stay Safe in Decentraland
By Decentraland, , in About Decentraland
Scams in Decentraland don’t usually come from someone “breaking in” with advanced hacks. Instead, scammers rely on impersonation and social engineering: copying names, pretending to be trusted people, or sending links that look real but aren’t. The goal is always the same—to get you to hand over access to your account or wallet.
The way you signed up for Decentraland affects what kind of scams you’re most at risk of:
Social sign-on (Google, Discord, etc.) – Your Decentraland account is tied to that login. If someone hacks your email or social account, they can also get into your Decentraland wallet.
Self-custodial wallet (MetaMask, Trust, etc.) – You control your wallet with a seed phrase. Here, the bigger danger is social engineering—scammers tricking you into signing a transaction, connecting to a fake site, downloading a file, or sharing your seed phrase.
Understanding this difference is the first step to protecting your Wearables, Emotes, NAMEs, LAND, and MANA.
Recent Impersonation Scams
Copying usernames. For example, a scammer might create an account called ToxicWaifu#ce4e to look like the well-known user ToxicWaifu. At first glance, the names look almost the same but they are not.
ToxicWaifu is a NAME: a unique identifier registered on the blockchain that only one person can own.
ToxicWaifu#ce4e is not a NAME. It’s an automatically assigned username given to anyone who signs up without registering a NAME. The random letters and numbers at the end make it different.
Scammers often count on people overlooking this small detail and mistaking an unclaimed username for the real thing.
One-letter fakes. A scammer might make accounts like LunoBoy and LunoB0y (with a zero instead of an 'o') to imitate a long-time community member. At first glance the name looks correct, but tiny changes like this are a classic impersonation trick.
Acting strange. A fake account like 'LunoB0y' might introduce themselves as 'new' to people who had actually known the real LunoBoy for years—a clear giveaway. Other times, the signs are more subtle. Maybe the scammer types differently, using words or spelling that don’t match the person’s usual style. Or maybe their avatar shows up in an outfit that seems totally unlike what that person normally wears. These little mismatches can be just as important as spotting a fake name.
Dropping suspicious links. For example, once a scammer builds a little trust, they might start sharing links or email addresses in chat. These often lead to phishing sites designed to steal your login details or wallet access. In some cases, the scammer may also try to get you to download a file, which can install malware on your device and give them another way to compromise your account.
What To Do If Something Feels Off
If a username, outfit, or message doesn’t seem right, it’s always better to pause than to risk losing your assets. Here are some safe steps to take:
Don’t click or sign right away. Slow down. Scammers rely on people rushing.
Verify the person through another channel. If someone claims to be a friend or community member, check with them directly on Discord, X, or another place you normally talk.
Look closely at names and details. Is it a NAME or a username followed by auto-generated numbers? Is the spelling slightly different?
Report suspicious accounts. Use Decentraland’s Support channels, decentraland.org/help and decentraland.org/discord/, to flag impersonators and fake links so they can be dealt with quickly.
Trust your instincts. If the words, tone, or appearance feel 'off,' step back. It’s better to double-check than to act fast and regret it.
Common Types of Scams
Impersonation isn’t the only trick scammers use. Here are other scams to watch out for:
Phishing. This is when scammers send fake emails, DMs, or set up websites designed to look real. They might ask you to log in, share your seed phrase, or click a link that downloads malware. Even one wrong click can hand over your account.
Fake rewards, NFTs, or token airdrops. Offers that sound too good to be true usually are. Scammers may promise free Wearables, tokens, or airdrops that require you to connect your wallet or sign a transaction. These fake offers can drain your assets the moment you interact with them.
Technical attacks. Some scams rely on malicious software rather than conversation. This can include shady browser extensions, fake wallet apps, or even connecting your wallet to a contract designed to steal assets. Public Wi-Fi exploits are also a risk—avoid signing transactions when connected to insecure networks.
Physical phishing. Not all scams happen online. QR codes posted in public spaces, USB sticks handed out at events, or even phone calls from fake 'support staff' can all be attempts to compromise your accounts. It’s also worth being cautious with public USB ports at airports or cafés, or using chargers that you don’t own—these can sometimes be tampered with to steal data from your device.
Fake jobs. Another common tactic is offering fake opportunities—like paid gigs, partnerships, or exclusive access'—that require you to connect your wallet or send funds upfront. Legitimate roles will never ask you for money or wallet access.
Golden Rules For Safety
Check the name. A NAME is unique and permanent, while automatically assigned usernames always have random letters or numbers at the end. Look closely—scammers often rely on people missing this difference.
Know how real support works. Decentraland Support will never DM you first. If someone messages you privately claiming to be Support, it’s a scam. The only safe places to reach support are:
The official help chat at decentraland.org/help
The official Discord at decentraland.org/discord/, where support staff are clearly tagged with ‘Support’ and ‘Foundation.’ If you’re in doubt, check tags carefully—scammers may copy usernames, but they cannot fake the official ‘Support’ tag on Discord profiles.
Be careful when signing. Signing means approving an action with your wallet. It isn’t always financial—logging in, assigning a NAME, or buying something all require signing. It’s safe on official Decentraland sites (website, Marketplace, Builder), but be extra cautious in-world scenes or external links.
Even if a link looks official, avoid clicking it directly—scammers can disguise links to make them look like they go to decentraland.org. Instead, type decentraland.org, decentraland.org/marketplace, or decentraland.org/builder directly into your browser or use saved bookmarks. If in doubt, double-check with Support before proceeding.
Never share your seed phrase. Whoever has it, owns your wallet. Don’t store it on your computer. The safest method is to write it down on paper and keep it somewhere secure.
Watch out for fake websites. Scammers often create websites and emails that look almost identical to official ones. The differences can be tiny—a single letter in the URL, a different domain ending, or a fake link hidden in a message. Official Decentraland emails only ever come from hello@decentraland.org and the official websites use decentraland.org. Always double-check before clicking, signing in, or downloading anything, even one wrong letter can mean a scam.
Be cautious with downloads. Decentraland will never send files by email. Only download from the official website. Turn off automatic downloads in your browser and consider using antivirus software.
Use a hardware wallet for long-term storage. Hardware wallets keep your private keys offline. To transact, you plug them in and approve with a PIN, but the keys never leave the device. This makes them one of the safest ways to protect valuable assets.
Trust your instincts. If something feels off—the tone, the avatar, the urgency—stop and double-check.
If Your Account Is Compromised
Move any remaining assets. Create a new wallet on a clean device first, then transfer your remaining assets into it. If your current device is infected, moving assets to a new wallet on the same machine could result in them being drained again.
Clean your device. If you clicked on a suspicious link or downloaded a file, scan your computer for malware and remove it before using any new wallet. If in doubt, fully reformatting your device can give you peace of mind that everything is clean.
Stop using the compromised wallet. Once it’s exposed, it can’t be trusted again.
Report the scam. Flag the incident to Decentraland Support by opening a ticket at decentraland.org/help or using the #report-scam channel in the official Discord. Sharing what happened helps prevent others from falling victim.
Consider filing a police report. In some cases, authorities may be able to help trace or flag compromised assets.
Closing Reminder
Scammers thrive on speed and confusion. The best defense is to slow down, look closely, and double-check before taking action. Whether it’s a suspicious username, an unexpected link, or an offer that seems too good to be true, trusting your instincts can save your assets.
Staying safe isn’t just about protecting yourself—it also protects the wider Decentraland community. Every time someone pauses, reports a scam, or shares a warning, it makes the space stronger for everyone.
Enjoy Decentraland for what it’s meant to be: a place to connect, create, and explore—with confidence that your digital life is secure.