Woofun AI reports that the Digital Asset Exchange Alliance (DAXA) issued a critical alert on July 8 regarding phishing websites impersonating legitimate won-based cryptocurrency exchanges in South Korea. The core threat vector involves fraudulent sites actively promoted through advertisements on social media platforms, particularly Facebook, targeting users within this specific regional market.

The scam mechanism relies on deceiving victims into downloading and installing a program under the false pretense of facilitating trading or enhancing account security. DAXA explicitly clarified that legitimate won-based exchanges in South Korea do not offer separate PC-installable trading software. Consequently, any request to install such a program serves as a definitive indicator of a scam, exploiting user trust in familiar digital interfaces.

Per Woofun AI, the warning underscores the vulnerability of South Korea’s crypto market, a global hub for digital asset trading where sophisticated phishing operations frequently target investors. The consequences extend beyond immediate financial loss; installing these fraudulent programs can lead to the theft of personal information, including login credentials and private keys. This compromise results in the total loss of a user’s digital asset portfolio, affecting traders on major platforms represented by DAXA, such as Upbit, Bithumb, and Coinone.

To mitigate these risks, users are advised to access exchanges exclusively through official websites or verified mobile apps. Vigilance against unsolicited requests to install trading software remains the most effective defense against these evolving scams. This incident marks another escalation in cybercriminal tactics targeting high-volume trading regions.