Dunamu Warns of Upbit Account and API Key Rental Scams
Dunamu says social media scams are asking users to lend Upbit accounts or API keys, and it has strengthened API security in response.
Dunamu has issued a warning about scams spreading on social media that ask users to lend their Upbit accounts or API keys, according to techm.kr. The company said it will respond strongly to suspicious acts that demand other people's accounts and API keys through false or exaggerated advertising.
As part of its response, Dunamu said it has strengthened API security features. Withdrawals are now blocked by default even if an API key includes withdrawal permission.
Under the updated setup, Upbit requires users to enable withdrawal permission directly in the mobile app before an actual withdrawal can occur. The exchange also provides KakaoTalk notification alerts when an API call comes from a previously unregistered IP address.
Dunamu has recently been reinforcing security against new scam types such as quishing, or QR code phishing. Upbit's Quotation API, used for general price and market data queries, is a public API that can be used without separate authentication.
Quick answers
What is Upbit doing about API key rental scams?
Dunamu said it has strengthened API security features, blocking withdrawals by default even if an API key includes withdrawal permission, and requires users to enable withdrawal permission directly in the mobile app for a withdrawal to occur.
How does Upbit alert users about API calls from new IP addresses?
Upbit provides KakaoTalk notification alerts when an API call comes from a previously unregistered IP address.
Is Upbit's Quotation API affected by these scam warnings?
Upbit's Quotation API, used for general price and market data queries, is a public API that can be used without separate authentication.