Brand protection for web3 projects

Brand protection for web3 projects

ChainPatrol protects chains, foundations and protocols from the impersonation that targets their communities: fake claim pages, drainer sites, fake support admins and cloned apps. We find them, push confirmed phishing sites to wallet and browser blocklists, and take them down at the source.

ChainPatrol protects chains, foundations and protocols from the impersonation that targets their communities: fake claim pages, drainer sites, fake support admins and cloned apps. We find them, push confirmed phishing sites to wallet and browser blocklists, and take them down at the source.

Get a free scan

Get a free scan

Book a demo

Book a demo

claim-acmeprotocol.xyz
claim-acmeprotocol.xyz
DocsEcosystemGovernance
Claim your airdrop
Eligible wallets can claim before the snapshot closes.
Wallet address
Allocation: 2,400 ACME
Claim tokens
Acme WalletMainnet
Connection request
claim-acmeprotocol.xyz
This site wants to view your address and request transaction approvals.
Cancel
Connect
Deceptive site blocked
This site is on a phishing blocklist. Connecting could give it access to your funds.
Source: ChainPatrol blocklist
This site can’t be reached
claim-acmeprotocol.xyz
Removed · confirmed offline
Detected
Blocked in wallets
Taken down

What targets your community

What targets your community

ThreatHow it reaches usersRelated page
Fake airdrop and claim pagesPages that copy your announcements and ask users to connect a wallet to claimWallet and browser blocking
Drainer sitesSites that get users to approve a transaction that empties their walletFake domains
Fake support and adminsImpostors in Discord, Telegram and X who message users offering helpTelegram impersonation takedowns
Cloned docs and app sitesCopies of your docs, dashboard or app on lookalike domainsImpersonation takedown
Malicious token contractsFake contracts that use your name, tracked and shared with blocklists and walletsWallet and browser blocking
Impersonated team membersFake profiles of founders and core contributors used to announce fake launchesEmployee impersonation
Fake airdrop and claim pages
Pages that copy your announcements and ask users to connect a wallet to claim
Wallet and browser blocking
Drainer sites
Sites that get users to approve a transaction that empties their wallet
Fake domains
Fake support and admins
Impostors in Discord, Telegram and X who message users offering help
Telegram impersonation takedowns
Cloned docs and app sites
Copies of your docs, dashboard or app on lookalike domains
Impersonation takedown
Malicious token contracts
Fake contracts that use your name, tracked and shared with blocklists and wallets
Wallet and browser blocking
Impersonated team members
Fake profiles of founders and core contributors used to announce fake launches
Employee impersonation
Fake airdrop and claim pages
Pages that copy your announcements and ask users to connect a wallet to claim
Wallet and browser blocking
Drainer sites
Sites that get users to approve a transaction that empties their wallet
Fake domains
Fake support and admins
Impostors in Discord, Telegram and X who message users offering help
Telegram impersonation takedowns
Cloned docs and app sites
Copies of your docs, dashboard or app on lookalike domains
Impersonation takedown
Malicious token contracts
Fake contracts that use your name, tracked and shared with blocklists and wallets
Wallet and browser blocking
Impersonated team members
Fake profiles of founders and core contributors used to announce fake launches
Employee impersonation

How ChainPatrol handles it

How ChainPatrol handles it

One service covers every step, so your team reviews results instead of working a queue.

One service covers every step, so your team reviews results instead of working a queue.

01

01

Find

We monitor for impersonation of your project across websites, newly registered domains, X, Discord, Telegram, search ads and app stores.

02

02

Block

Once we confirm a phishing or drainer site, it is flagged in 20+ wallets within minutes. Major browsers such as Chrome, Safari, Edge and Firefox typically block it within 1–2 hours through Google Safe Browsing, so users see a warning while the takedown runs. Blocking applies to web domains and URLs. Fake accounts are removed through platform takedowns.

03

03

File

We file takedowns with platforms, hosts and registrars on your behalf, with the evidence each one requires.

04

04

Follow up

We follow up with platforms until we’ve confirmed each case has been removed, and escalate and re-file whenever a provider stalls or rejects.

05

Ongoing reporting and visibility

You can follow every case in the ChainPatrol app, with a timestamped history of each step, and export case data as CSV or through the API.

Blocked where your users sign

While a takedown runs, confirmed phishing and drainer sites are flagged in the places users would land on them.

Confirmed

Reviewed by an analyst

A phishing or drainer site is checked and confirmed before anything is blocked.

Within minutes

Flagged in 20+ wallets

Users get a warning before they connect or sign.

1–2 hours

Blocked in major browsers

Chrome, Safari, Edge and Firefox warn through Google Safe Browsing.

Until offline

Taken down at the source

Filed with the host and registrar and tracked until the site is confirmed offline.

Protection inside your community

Tools for the channels where your users talk to you, and to each other.

Bots

Discord and Telegram bots

Flag or remove scam links posted in your community channels.

Reports

A Security Portal for your users

A branded public page where anyone can report a suspicious link without signing up.

Alerts

Alerts where your team works

New threats and reports arrive in Slack, Discord or Telegram.

Applied to your policy

Scope

Set around your legal standard

Anything that uses your name or logo, or claims to be you, is pursued.

Community

Your community is left alone

Commentary, discussion and fan accounts that don’t claim to be you aren’t touched.

Review

Automation plus people

Automation handles volume. Our operations team handles judgment calls, and decisions that need you come back for a quick approval.

Frequently asked questions

Confirmed phishing and drainer sites are flagged in 20+ wallets within minutes, and in major browsers through Google Safe Browsing typically within 1–2 hours. Blocking applies to domains and URLs.

Smart contracts can’t be removed from a blockchain. We detect and track malicious contracts that use your name, share them with blocklists, wallets and block explorers, and take down the sites and accounts that promote them.

Yes. Impostor admins and support accounts are reported for removal, and our Discord and Telegram bots can flag or remove scam links posted in your channels.

Yes. Your Security Portal is a branded public page where users submit suspicious links without creating an account. Reports go into the same review and takedown process.

Yes. The ChainPatrol API lets you check URLs and addresses against the blocklist and submit reports from your own tools.

A signed Letter of Authorization, so we can file takedowns on your behalf, and a list of your official domains, apps and accounts, so nothing legitimate is reported by mistake. No integration into your systems is needed.

Frequently asked questions

Confirmed phishing and drainer sites are flagged in 20+ wallets within minutes, and in major browsers through Google Safe Browsing typically within 1–2 hours. Blocking applies to domains and URLs.

Smart contracts can’t be removed from a blockchain. We detect and track malicious contracts that use your name, share them with blocklists, wallets and block explorers, and take down the sites and accounts that promote them.

Yes. Impostor admins and support accounts are reported for removal, and our Discord and Telegram bots can flag or remove scam links posted in your channels.

Yes. Your Security Portal is a branded public page where users submit suspicious links without creating an account. Reports go into the same review and takedown process.

Yes. The ChainPatrol API lets you check URLs and addresses against the blocklist and submit reports from your own tools.

A signed Letter of Authorization, so we can file takedowns on your behalf, and a list of your official domains, apps and accounts, so nothing legitimate is reported by mistake. No integration into your systems is needed.

See which fakes are targeting your community

See which fakes are targeting your community

Get a free scan, or book a 30-minute demo.

Get a free scan, or book a 30-minute demo.

Get a free scan

Get a free scan

Book a demo

Book a demo