Fake $ETHFI Vote Rewards and Kinetiq Vote Rewards pages are crypto wallet-drainer scams, not legitimate governance or staking rewards. The known lures use domains such as vote-ethfi.app and reward-kinetiq.xyz to push a wallet connection, token approval, or signature request. Do not connect a wallet, do not approve transactions, and never enter a seed phrase or private key.
If you already connected a wallet, treat the wallet as exposed until you have checked approvals. Disconnecting the site is useful, but it does not cancel token approvals by itself. Revoke suspicious approvals from a trusted wallet or block-explorer flow, move remaining valuable assets to a fresh wallet if you signed a broad approval, and scan the device if you installed any helper, extension, or claim app from the fake page.
Quick check
| What you see | Risk and safe action |
|---|---|
vote-ethfi.app offering $ETHFI voting rewards |
This is not the official ether.fi voting path. Close the page and open ether.fi resources manually from a saved bookmark or official channel. |
reward-kinetiq.xyz offering a 1.25x Kinetiq rewards multiplier |
Treat it as a Kinetiq impersonation lure. Do not connect your wallet from an ad, social post, direct message, or search result. |
| A wallet prompt asks for approval, signature, or token spending access | Cancel it. A drainer does not need your seed phrase if you grant a malicious approval or sign the wrong request. |
| You already approved something | Revoke the approval, move remaining assets if needed, save transaction hashes, and report the scam. Do not pay recovery services. |
Why this page is dangerous
These scams borrow a believable Web3 pattern: real projects do run votes, staking campaigns, and rewards programs. The fake page then adds urgency, a multiplier, or a governance claim so the wallet prompt feels normal. The risky moment is not only the first wallet connection. The dangerous step is the approval or signature that gives a malicious contract permission to move tokens.
That is why the right response is different from a normal website scam. Closing the tab stops new clicks, but it does not automatically undo an on-chain approval. If the approval remains active, the malicious contract may still be able to use the permission later, depending on the token, chain, and request you signed.
Red flags before connecting a wallet
- The domain is not official. A brand name inside a new domain does not make it safe. Check the project website, governance portal, and social channels manually.
- The reward is framed as urgent. Limited-time multipliers, instant voting bonuses, and surprise eligibility claims are common pressure tactics.
- The wallet prompt is broader than the visible action. A simple vote should not require unlimited token spending or unclear contract access.
- The page came from an ad, DM, reply, or repost. Scammers often use fake profiles, compromised accounts, and sponsored-looking placements to make the lure appear current.
- The page asks for a seed phrase or private key. That is always a scam. No real vote or staking reward needs those secrets.
What to do if you connected your wallet
- Do not sign more prompts. Close the page and stop interacting with the site.
- Disconnect the dapp in your wallet. This removes the visible connection, but do not stop there.
- Review active token approvals and spending caps. Use your wallet’s trusted approval controls or the relevant chain’s official block explorer. Revoke suspicious allowances, especially unlimited approvals.
- Move remaining valuable assets to a fresh wallet when exposure is plausible. Do this after revoking what you can, and use a clean device and official wallet app.
- Save evidence. Keep the fake domain, wallet address, transaction hashes, screenshots, social posts, and any contract addresses.
- Report the scam. Report it to the impersonated project, wallet provider, ad or social platform, and the relevant fraud reporting channel in your country.
- Check the device if you installed anything. If the fake page pushed a browser extension, wallet helper, claim app, or downloaded file, run a full security scan before using that device for wallets again. Gridinsoft Anti-Malware can help check Windows for unwanted apps, suspicious extensions, and malware that may have arrived with the scam.
Do not fall for recovery scammers
After a wallet-drainer incident, scammers may contact victims again as “recovery agents”, investigators, blockchain specialists, or support staff. Be careful with anyone who promises to reverse a blockchain transfer for an upfront fee. In most cases, the realistic goals are to stop further loss, preserve evidence, report the wallet and contract addresses, and secure the rest of your accounts.
If you reused passwords, installed a browser extension, or entered credentials on a fake support page, treat that as a separate account-security problem. Change passwords from the official sites, enable MFA, revoke unknown sessions, and check email recovery settings.
Why one guide covers both lures
The two scam names target different project communities, but the user problem is the same: a fake vote rewards page tries to turn wallet trust into a drainer approval. Splitting this into two thin pages would repeat the same recovery advice and make it harder for readers to see the shared pattern. This page keeps the exact $ETHFI and Kinetiq details while explaining the wallet-drainer flow behind both.
For nearby cases, see our guides to crypto draining attacks, fake SOL drops and wallet drainers, crypto scams in 2026, and crypto recovery scams.
FAQ
Is $ETHFI Vote Rewards real?
The scam page using vote-ethfi.app should be treated as fake. Check ether.fi voting and governance only through official ether.fi resources that you open manually.
Is Kinetiq Vote Rewards real?
The lure using reward-kinetiq.xyz should be treated as fake. Do not connect a wallet to a reward page promoted through ads, social replies, or direct messages.
Can a wallet drainer steal funds without my seed phrase?
Yes. A malicious approval or signature can give a contract permission to move tokens. That is why a seed phrase warning is not the only safety check.
Is disconnecting my wallet enough?
No. Disconnecting removes the dapp connection in the wallet interface, but it does not automatically revoke token approvals. Review and revoke suspicious approvals separately.
Can stolen crypto be recovered?
Usually not by a private “recovery” service. Preserve evidence, report the scam, secure remaining assets, and avoid anyone asking for an upfront recovery fee.
References
- MetaMask Help Center. “Disconnect wallet from a dapp.” MetaMask, accessed June 11, 2026. https://support.metamask.io/more-web3/dapps/disconnect-wallet-from-a-dapp/
- MetaMask Help Center. “How to revoke smart contract allowances/token approvals.” MetaMask, accessed June 11, 2026. https://support.metamask.io/more-web3/learn/how-to-revoke-smart-contract-allowances-token-approvals/
- Federal Trade Commission. “What To Know About Cryptocurrency and Scams.” FTC Consumer Advice, accessed June 11, 2026. https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-scams
