Binance co-founder Changpeng Zhao joined a number of crypto users mocking fake Web3 job offers after scammers increasingly used LinkedIn, Telegram, and fake GitHub projects to target developers and traders.
The joke spreading across X followed a familiar scam pattern where recruiters offer massive crypto salaries before asking victims to install “verification software” during fake interviews.
CZ reacted to a viral joke post by investor Anndy Lian claiming he had been hired as the CEO of a crypto unicorn project for $44,000 a month after installing “verification software” during a Zoom interview. The punchline was the impossible start date: June 31. CZ said many people still fall for similar “crypto interview hacking” scams on LinkedIn and Telegram.
The post quickly spread across crypto Twitter as traders and developers used sarcasm to highlight how common the scam has become.
Fake Recruiters Target Crypto Users
Other users joked about receiving $54,000-a-month community lead roles or being told to connect wallets and share passwords for “verification.”
One viral post sarcastically claimed official crypto teams would “always DM you first” and may need passwords to confirm identity.
Behind the jokes is a growing security issue across the crypto industry. Attackers have increasingly used fake job interviews to distribute malware, wallet drainers, remote access tools, and credential stealers.
Targets are often developers, traders, or employees already working in blockchain companies because attackers assume they are more likely to hold crypto assets or access credentials.
Many scams begin through LinkedIn or Telegram before moving victims toward GitHub repositories, fake software downloads, or malicious wallet connection requests.
Fake GitHub Repositories Become a Common Trap
Warnings about fake crypto interview repositories have circulated for months across Reddit and security forums.
One Reddit user working in the blockchain sector described receiving multiple suspicious interview requests offering extremely high pay rates. According to the post, recruiters repeatedly pushed candidates to download GitHub-hosted projects and run them locally.
Other developers responded by warning that many of those repositories contain malware payloads hidden inside scripts or fake applications. Some users advised running unknown projects only inside virtual machines or isolated Docker containers.
Related: Football Ticket Scams Surge Ahead of 2026 World Cup, Raising New Concerns for Fans