A scammer named lawrence2276 tried pulling off a bitcoin trading scam on me. I pretended that the websites he sent were broken (using inspect element), until he finally told me to send directly to his address. I asked him if he could do a test tx where I send him 0.001 BTC and he sends it back. He agreed.

I sent this TX:

https://live.blockcypher.com/btc/tx/687fe72c6173f1ed2d9b4929ee4e4a1b85dd6d5e2f8773ed9ebab52a6e568295/

and the guy sent me back 0.001 BTC without waiting for confirmations:

https://blockchair.com/bitcoin/address/12CPhvSp88sv7QnwnzanzxV3bjm5m51TPx.

He didn’t notice that I had RBF on. From here, it was simple to double spend the funds back into my own wallet.

https://live.blockcypher.com/btc/tx/d4dff793d00588b9fe33c8b95c7a056573d224b8028760519b4c3d83f03f9182/

Here’s the double spend.

This is why you shouldn’t accept zero confirmation transactions (especially ones with RBF enabled). If you want to know whether RBF is enabled, enter your txid on blockchair.com

submitted by /u/cometothecaml
[link] [comments]