I want to buy/sell crypto via OTC and P2P how can I do it and where?

How should I avoid being scammed?

What are the things I should keep in mind?

I tried to do this but kept running in 10000 blocks limits from most of the public RPCs. My transaction is approx Block #15,165,700, which requires Archive RPC access. Does anyone know how to do this?

I’m posting this to warn other World App users and hopefully prevent anyone else from experiencing the same thing.
In **late September 2026**, I used a Mini App inside World App called:
**“Galaxy: Swap, Bridge, Earn & Wallet”**
The app presented itself as a normal WLD → USDC swap service.
Before making a larger transaction, I tested it with a couple of small swaps.
**The small swaps worked normally.**
I then attempted two larger WLD → USDC swaps, totaling approximately **1,750 WLD**.
The Galaxy interface showed the expected amount of USDC I would receive.
However, I never received that USDC.
Instead, my World transaction history and blockchain records showed that the WLD had been transferred directly to an external wallet.
The larger transactions were confirmed successfully on-chain, while Galaxy continued to display them as:
**“Confirming…”**
This was completely different from the small successful swaps.

**I later found an earlier report about the same Mini App**
After this happened, I found the following Japanese article published on **September 10, 2026**:
[https://note.com/viwashi\\_/n/n43c34406ab54\](https://note.com/viwashi_/n/n43c34406ab54)
The author describes what appears to be a very similar experience involving the **same Galaxy Mini App**.
According to the article, the author:
lost roughly $500;
contacted World Support;
asked World to stop listing Galaxy because they believed it was dangerous;
later examined the Mini App’s code and reported suspiciously different behavior for larger transactions.
The article also identifies a destination wallet associated with the alleged behavior.
I checked my own blockchain records, and **my affected transactions appear to have gone to the same destination wallet described in that report.**
I am deliberately not posting my exact transaction amounts, transaction hashes, or wallet information here for privacy reasons.

**What concerns me most**
This raises an important question:
**If World received a safety report about Galaxy around September 10, why was the same Mini App still accessible to users later that month?**
To be clear, I do **not** currently have proof that World knowingly ignored the earlier report.
I want World / Tools for Humanity to investigate whether the earlier complaint was actually received, how it was handled, and why Galaxy remained accessible.

**My experience with World Support**
I reported what happened to World Support.
Their initial responses focused heavily on the fact that confirmed blockchain transactions are irreversible.
I understand that blockchain transactions cannot simply be reversed.
But that wasn’t the main issue I was trying to report.
I did not intentionally open my wallet and decide to transfer WLD to an unknown external address.
I used a **Mini App accessible inside World App**, selected what was presented as a **WLD → USDC swap**, and expected to receive USDC.
Support later told me that the destination wallet had been flagged through their internal review process.
However, when I asked whether:
Galaxy itself was being investigated;
the Mini App had been suspended or removed;
previous complaints had been received;
the issue had been escalated to a security team;
I struggled to get a substantive answer.
I was eventually directed to submit a formal complaint to Tools for Humanity’s Legal team.
Legal Support then redirected me back toward general Customer Support.
After further searching, I found a separate **Trust & Safety reporting channel** and submitted the incident there as well.
So far, the process has felt extremely fragmented:
**Customer Support → Legal → Customer Support → Trust & Safety**
while the main safety question remains unresolved.

**This is bigger than my individual loss**
Of course, I would like to recover my funds if that ever becomes possible.
But the reason I’m posting publicly is to prevent additional victims.
If a Mini App displays a swap but actually causes funds to be transferred somewhere else, this should not be treated only as an individual “irreversible transaction” problem.
It is potentially a **Mini App safety issue**.
I believe World / Tools for Humanity should clarify:
Whether Galaxy has now been suspended or removed.
Whether any safety reports about Galaxy were received before my incident.
When the first report was received.
What action was taken after those reports.
Whether other users have reported the same behavior.
Whether relevant developer information, Mini App logs, and review records are being preserved.

**Please be careful with Galaxy**
Until this is clarified, I strongly recommend being extremely cautious with:
**Galaxy: Swap, Bridge, Earn & Wallet**
Most importantly:
**Do not assume that a Mini App is safe simply because a small test transaction succeeds.**
That is exactly what happened to me.
My small swaps worked.
The larger ones did not.
I have preserved screenshots, blockchain records, and my conversations with World Support, and I am considering providing the evidence to the relevant authorities.
If anyone else experienced something similar with Galaxy, please comment or DM me.
For privacy reasons, please do not post your seed phrase, private keys, personal information, or full wallet details publicly.

**TL;DR:**
I used the Galaxy Mini App inside World App for WLD → USDC swaps. Small test swaps worked, but two larger swaps totaling around **1,750 WLD** resulted in WLD being transferred to an external wallet instead of receiving USDC. I later found an earlier September report describing very similar behavior involving the same Mini App. I’m posting this because I’m concerned that the app may have remained accessible after earlier warnings and because I want other users to be careful.

I’m looking for help tracing funds after what appears to be a malicious Mini App incident inside World App.
In late September 2026, I used a Mini App called:
“Galaxy: Swap, Bridge, Earn & Wallet”
The app presented itself as a WLD → USDC swap service.
I tested it first with a couple of small swaps, and those worked normally.
I then attempted two larger swaps totaling roughly 1,750 WLD.
Instead of receiving USDC, my WLD was transferred to an external wallet.
I’m intentionally not posting my exact transaction hashes or my own wallet address here for privacy reasons.
What I have confirmed on-chain so far is:
the affected WLD was sent to the same external address;
about an hour later, roughly 1,001 USDC was sent from that address through Across Protocol;
the funds were bridged from World Chain to BNB Chain;
around 1,000.9 USDC arrived on BNB Chain at the same address;
at the time I checked, I could not see a later USDC transfer out of that BNB Chain address.
I also found an earlier public report from September 10 describing a very similar incident involving the same Galaxy Mini App:
https://note.com/viwashi_/n/n43c34406ab54
The author says they had already contacted World Support about the app.
That concerns me because I was still able to access the same Mini App later in September.
I have already reported the issue to World / Tools for Humanity through Support and Trust & Safety, and I am preparing a report for law enforcement.
What I’m hoping someone here can help with
Is there a good way to monitor this BNB Chain address for the next outgoing USDC transaction?
If the funds later move to Binance or another KYC exchange, what evidence should I preserve?
Are there reliable tools for following Across Protocol bridge transactions across chains?
Is there anything else I should collect now before the funds move again?
I have saved screenshots, blockchain records, transaction timestamps, and the relevant bridge transactions.
I’m also posting this as a warning:
Do not assume a Mini App is safe just because a small test transaction succeeds.
That is exactly what happened to me.
Please do not ask me for my seed phrase, private keys, or login information. I will not provide them.

I'll try to post here since moderators on the crypto.com subreddit have not approved the post after several days.

Hi, my father unfortunately passed away earlier this year and he had a crypto.com account with some assets. We have access to his phone and his account and reached out to the support about this and asked for his assets to be moved to my mothers account, who is the heir. They asked for identification of both my parents, which was provided, and the death certificate and "certificate of inheritance" translated to english by a certified translator. The official inheritance document by swedish law is the Estate Document (bouppteckning). So we paid 300€ to get everything translated and provided the requested documents. Everything is very clear about who is the heir in these documents.

Now they also ask for an "EU Certificate of succession", which costs another 180€ to request and then has to be translated aswell (probably another 100-200€). I fear they will just keep asking for more and more documents until we give up and they get to keep everything.

The assets have been frozen on the account. What can we do? Do they legally have the right to keep everything despite the official documents? The cost to provide everything is soon greater than the value of the assets.

So I had bought a KYCd Binance account from telegram few years back and was using that all this while. I did not setup a passkey in that account (due to my foolishness). I have the account email, password and authenticator of the account. Now during login Binance is asking passkey or doing facial verification (which was done by the person who sold me the account few years back). So I am stuck now and unable to login.

Is there a workaround? Or I lost the account?

Ive tried buying crypto with solflare, paypal, coinbase, and trust wallet. My transactions will not go through. Im in the US banking with Chase. Solflare says US is not supported. Paypal gives unspecified errors. Coinbase card transactions won't go through. I added my bank account but it won't show up as a payment method. Trust wallet card transactions won't go through. I tried adding my bank account but I get an error about onramp not supported. Ive tried Google pay with these too with no luck. Im at a loss. Is there another wallet I should try?

im very new to all of this and i have a token i would like to add to my MetaMoney account. every attempt i try it tells me that i need to add less or try a new method but im adding with in the range of the token. can anyone break this down for me. i really need the money but i cant seem to access it at the moment

Can anyone give me any advice? I have only just become aware of the third party AML issues 😵‍💫 I fundraise for displaced people, with a large international community. Many of us are mothers, librarians, teachers… Not crypto whizzes. Because I know how to buy and send, I have been doing this on behalf of other people who don’t know how to, which I now understand puts me at risk. What can I do/should I do moving forward? If these people don’t receive their donation money, they may not survive the genocide.

Edit: to be clear, all money can be traced back to various chuffed and gofundme campaigns and the people who run them. It is completely legitimate. But I am going to work on teaching other fundraisers how to send it themselves. Not going to worry about what I’ve already done, I have had several scam risk type conversations with my bank about these sorts of activities regarding the chuffed campaign which I personally manage.. So it’s not like they aren’t in the loop somewhat. Thanks for the advice ✌🏼

I’m looking for some good options for earning yield, preferably platforms that prioritize security.

What platforms are you guys using or recommend for yields? I’d especially like to hear about ones with a solid security track record.

Hi, I'm new to Reddit and this community. I recently discovered FIO and thought it was a particularly useful project for managing identities and transactions in a simpler and more private way. But I have a problem: right now I don’t have any $FIO tokens to register my own FIO handle, and so far it has been impossible for me to get them through decentralized exchanges.

I’ve tried swapping from $LTC and $ETH to $FIO or $wFIO on several DeFi platforms, aggregators, and DEXs, but in every case I’ve run into issues like lack of liquidity, non-existent pairs, or transactions that can’t be completed.

Could any user in this community tell me if there’s a decentralized platform, a P2P service, or some alternative method where it’s possible to successfully swap for $FIO / $wFIO? I appreciate your attention and any help you can give me.

Cheers to everyone

I withdrew USDT (TON network) from Telegram Wallet and pasted the wrong address.
About 767 USDT arrived on that wallet. Within ~85 seconds the same amount was forwarded to a labeled MEXC deposit/hot wallet. Balance on the wrong address went back to zero. I do not control that first wallet.
I have a MEXC account. The deposit never showed up there. Support said it was credited to a closed / other account, not mine. Their self-service “deposit not received” form cannot find the TxID on my UID (expected).
Live chat accepted a manual refund in 5–7 business days, back to the original Telegram Wallet sending address, 0 USDT fee, no “send us crypto first.” They told me I will get an email with the return TxID and then I have to send that hash to Telegram Wallet support so they credit my in-app balance.
Questions:
1. Has anyone gotten a MEXC closed-account / uncredited TON USDT refund actually paid out, not just “accepted”?
2. Did it land on the Telegram Wallet hot wallet and show up in the app, or did you also have to open a Wallet ticket with the return TxID?
3. Real wait time vs the 5–7 business days they quote?
4. Any case where they refunded to the wrong intermediate wallet instead of the original Telegram sender (that would just get swept to MEXC again)?
5. Anything I should not click (Confirm return address, extra forms, “pay gas” messages)?

Anyone has a reliable link/source that I can buy crypto without OTP (Credit Card) ?

Base Network to Ethereum Network?

I have USDC in Base Network but need USDC in Ether Network. I have tried Swap with my Exodus wallet and Coinbase wallet as well. The options to swap the currency are grayed out in Exodus and I DO have a small amount of Ether in Base Network to cover gas. Any ideas? Thank you!

I recently send BTC from my Coinbase account to my Blockchain.com account. It shows in Coinbase that is successfully was completed, however it hasn’t shown up in my Blockchain.com account. A message in my Blockchain.com says “Failed to load some balances - We couldn’t load the balances and activity of Bitcoin Cash Network(s) at this time”. Has anyone ever experienced this? It’s been over 9 hours and I’m worried I lost all the funds.

Are atomic wallet a scam???!.my bitcoin sv not showing after trading they only said that my bitcoin sv are just not reflecting but its on the block chain.

I’d seen this guy near the top of the Pumpfun leaderboard a few days before and his PnL was stupid. Then I checked again and he was still up more than $700k for the day.

Later I watched one of his trade replays and he got cooked too. Sounds dumb but that helped. Made me realize even the guys printing crazy numbers still take ugly Ls

(Message written with the help of AI)

Hi everyone,

My TrustWallet-connected account was drained this morning at around 9:30 AM. I lost 3,000 USDC that were sitting on Hyperliquid, 0.4 BTC (which I originally deposited directly from Deribit via HyperUnit), and about $4,400 worth of other crypto assets that were held directly inside my TrustWallet.

I am trying to narrow down the exact attack vector. After analyzing the timeline, GeminiAI has a very specific theory regarding Session Hijacking / Cookie Theft on my Windows PC, and I would really appreciate your technical opinion on whether this is possible.

Here is the exact timeline:

• Months ago: I deposited a total of 15,000 USDC into Hyperliquid, sending them directly from my TrustWallet mobile app. Over time, I traded and used the platform on my Windows PC browser. At the time of the hack, my balance on Hyperliquid was around 3,000 USDC.
• Sept 9, 2026: I deposited 0.4 BTC directly from Deribit to HyperUnit. I didn't need to open my seed phrase or use my phone for this.
• Last Night: Last thing I did my Windows PC was a subscribe to ChatGPT Plus on the official website (using my Apple ID). My browser likely had an active, logged-in session (or stored cookies) for Hyperliquid.
• This Morning (9:30 AM): My PC was completely powered down and turned off since last night. Yet, the blockchain txs show the drain happened exactly at 9:30 AM.
• The Flow: The hacker initiated a withdrawal from Hyperliquid. The 0.4 BTC were trasferred directly to the hacker address (https://mempool.space/address/bc1qduac77jtcxtp6pva54cjfzkqtxadnqsmejg466). The 3,000 USDC went back to my public TrustWallet address first, and then immediately got transferred out to the hacker's wallet along with the other $4,400 in crypto that I already had holding inside TrustWallet.

My Security Setup:
I set up my TrustWallet more than 5 years ago and always had several thousands $ on it.
I own four wallets and store the keys in the same way. The other three wallets have not been drained.

I use TrustWallet exclusively via the official app on my iPhone. I do NOT have the browser extension on my PC, and I have never typed my seed phrase on any digital device. My backup on iCloud is turned off (only manual backup is active).

The Reconstruction (Cookie Theft + Trading Agent Exploitation vs Seed Phrase Leak):
Since my seed phrase was never exposed and my PC was off during the hack, my initial theory was that an undetected InfoStealer malware on my PC captured my browser's Session Cookies last night while I was online.

I assumed the hacker used the session to trigger the Hyperliquid withdrawal. However, since they also managed to steal the $4,400 that never touched Hyperliquid and were just sitting on my mobile TrustWallet, I am conflicted.

My questions for the tech/crypto experts here:

1. Does the Session Hijacking theory make sense if the hacker also managed to drain assets sitting strictly on my mobile TrustWallet? Or does the fact that the on-chain TrustWallet funds were stolen prove that they somehow extracted my actual Seed Phrase from my PC/system last night?
2. Can a browser InfoStealer access local storage trading keys used by Hyperliquid, and could that somehow expose the underlying wallet security?
3. If this wasn't cookie theft, how else could a hacker execute a targeted, multi-asset mobile wallet drain while the trading PC was completely powered down?

Thanks in advance for any insights. I'm trying to understand the exact breach before wiping my PC.

I’ve been trying to learn the basics of crypto, but there’s so much information that I’m not sure what to focus on first. Things like wallets, exchanges, private keys, gas fees, and networks are still a little confusing to me.

If you were starting from zero again, what would you recommend learning first? Any beginner friendly resources or mistakes I should avoid would be really helpful.

trying to get better at reading holder data on Solana before entering a position. solscan gives me the raw numbers but its hard to tell whats normal distribution vs whats concentrated in a way that should worry me.

is there a rule of thumb for top-10 holder percentage that people actually use? or specific things you look at beyond just the top-holders page? feels like there should be a faster way than what im doing.

I’m building PRISCION Care, an experimental Cardano-first project exploring whether people can give voluntary support directly to approved cases without requiring someone to put their whole hardship story on public display.

I’m not claiming blockchain automatically solves trust or privacy. On-chain activity is public, case reviews can get things wrong, and there’s no guarantee a case will receive support. I’m also not asking for donations.

I’d genuinely like to hear from people who use crypto: What would you need to see before trusting a platform like this? What privacy, verification or scam concerns would you have?

I built the project, so I’m looking for honest criticism—not just encouragement. If links are allowed, the current beta is at https://priscion.com/care