Find
We monitor for impersonation of your brand across websites, social platforms, Telegram, app stores, browser extension stores and search ads, and inside your own Discord through our bot.
Block
Once we confirm a phishing or drainer site, it is flagged in 20+ wallets, including MetaMask and Phantom, within minutes. Major browsers such as Chrome, Safari, Edge and Firefox typically block it within 1–2 hours through Google Safe Browsing, so users see a warning while the takedown runs. Blocking applies to web domains and URLs. Fake support accounts, apps and social profiles are removed through platform takedowns.
File
We file takedowns with platforms, hosts and registrars on your behalf, with the evidence each one requires.
Follow up
We follow up with platforms until we’ve confirmed each case has been removed, and escalate and re-file whenever a provider stalls or rejects.
05
Ongoing reporting and visibility
You can follow every case in the ChainPatrol app, see which threats are still live and which are confirmed offline, and receive regular threat snapshot reports.
Warnings in the wallets your users already have
While a takedown runs, confirmed phishing and drainer sites are flagged in wallets and browsers, so users see a warning before they connect or sign in.
From confirmed to offline
Confirmed
A phishing site is reviewed and confirmed by our team.
Within minutes
Flagged in 20+ wallets, so users get a warning before they connect.
1–2 hours
Blocked in Chrome, Safari, Edge and Firefox through Google Safe Browsing.
Until offline
The takedown is filed with the host and registrar and tracked until the site is confirmed offline.
Where warnings appear
Wallets
MetaMask
Phantom
Coinbase Wallet
Trust Wallet
Rainbow
Ledger Live
WalletConnect
20+ more
Browsers
Chrome
Safari
Edge
Firefox
Blocking covers web domains and URLs. Fake support accounts, apps and social profiles are removed through platform takedowns.
Tools for your security and community teams
Alerts where your team works, a reporting page for your users, and an API for your own product.
Alerts in Slack, Discord and Telegram
New threats and reports land in the channels your team already watches. Our Discord and Telegram bots can also flag or remove scam links posted in your community.
A Security Portal for your users
A branded public page where users report suspicious links without creating an account. Every report goes into the same review and takedown process.
API and SDK
Check URLs, domains and wallet addresses against the ChainPatrol blocklist from your own app, and pull threat data into your own systems.
Applied to your policy
Detection and takedown rules are set around your legal standard. Assets that use your name, logo or claim official affiliation are pursued. Commentary, community discussion and fan accounts that don’t claim to be you are left alone, so your team isn’t policing your own community. Automation handles high-volume threats at scale. Cases that need judgment, such as fan accounts, staff profiles and cases a provider is stalling on, go to our operations team. Decisions that need you come back to you for a quick approval.