Abstract:The prosperity of Ethereum attracts many users to send transactions and trade crypto assets. However, this has also given rise to a new form of transaction-based phishing scam, named TXPHISH. Specifically, tempted by high profits, users are tricked into visiting fake websites and signing transactions that enable scammers to steal their crypto assets. The past year has witnessed 11 large-scale TXPHISH incidents causing a total loss of more than $70 million. In this paper, we conduct the first empirical study of TXPHISH on Ethereum, encompassing the process of a TXPHISH campaign and details of phishing transactions. To detect TXPHISH websites and extract phishing accounts automatically, we present TxPhishScope, which dynamically visits the suspicious websites, triggers transactions, and simulates results. Between November 25, 2022, and July 31, 2023, we successfully detected and reported 26,333 TXPHISH websites and 3,486 phishing accounts. Among all of documented TXPHISH websites, 78.9% of them were first reported by us, making TxPhishScope the largest TXPHISH website detection system. Moreover, we provided criminal evidence of four phishing accounts and their fund flow totaling $1.5 million to aid in the recovery of funds for the victims. In addition, we identified bugs in six Ethereum projects and received appreciation. Based on the detection results, we perform a comprehensive study of TXPHISH websites and phishing accounts. Our study reveals that TXPHISH websites have a short lifespan, low cost, and fast update frequency. Besides, Our analysis of phishing fund flow demonstrates that 54.0% of phishing funds ($43.7 million) flowed into centralized exchanges, where the identity of owners could be traced. Our research can serve as a valuable reference for Ethereum service providers to safeguard their users against TXPHISH and assist in the recovery of victims' crypto assets.

TaxThemis: Interactive Mining and Exploration of Suspicious Tax Evasion Groups

TaxThemis: Interactive Mining and Exploration of Suspicious Tax Evasion Group

Mining Suspicious Tax Evasion Groups in Big Data.

Identifying Suspicious Groups of Affiliated-Transaction-based Tax Evasion in Big Data.

ATTENet: Detecting and Explaining Suspicious Tax Evasion Groups

Role Recognition of Illegal Online Gambling Participants Using Monetary Transaction Data.

A Novel Tax Evasion Detection Framework Via Fused Transaction Network Representation

Mining Suspicious Tax Evasion Groups in a Corporate Governance Network.

Combining Network Visualization and Data Mining for Tax Risk Assessment

T-Egat: A Temporal Edge Enhanced Graph Attention Network For Tax Evasion Detection

A Survey of Tax Risk Detection Using Data Mining Techniques

TxPhishScope: Towards Detecting and Understanding Transaction-based Phishing on Ethereum

Find the Most Suspicious Tax Evasion Groups from a Taxpayer Interest Interacted Network.

Irted-Tl: An Inter-Region Tax Evasion Detection Method Based On Transfer Learning

Detecting Transaction-based Tax Evasion Activities on Social Media Platforms Using Multi-modal Deep Neural Networks

Identifying tax evasion in Mexico with tools from network science and machine learning

TEDM-PU: A Tax Evasion Detection Method Based on Positive and Unlabeled Learning.

An Edge Feature Aware Heterogeneous Graph Neural Network Model to Support Tax Evasion Detection

TTED-PU:A Transferable Tax Evasion Detection Method Based on Positive and Unlabeled Learning

Application of Data Mining in Tax System

NEUD-TRI: Network Embedding Based on Upstream and Downstream for Transaction Risk Identification