HELP !!!! I THINK SHAPESHIFT STOLE 30 LTC (LITECOINS)

[Aleks]

Hi Friends, 

2 days ago i tried converting 30 Litecoin to XRP. I use ShapeShift to convert them to my GateHub wallet. The Litecoin transaction was delayed so long that the time on the ShapeShift Order Screen barely expired. The funds sent from my wallet and never came back like they usually do. I contacted customer support at ShapeShift. A few days went by and i got a reply that said that the money was never sent to the address provided by the ShapeShift order page. In his email, Elliott, the ShapeShift representative, attached a URL link to (supposedly) my order. The order opened fine and i began looking a bit closer.  I instantly noticed that the SEND TO ADDRESS on the order was slightly different. I think something fishy is going on so, i need HELP. 

First i have multiple photos to prove what im saying is true . 

1. I have a picture that i took of the ShapeShift order screen exactly 24 seconds in to the transaction. 

 

2. I have a picture that shows the sent transaction. 

 

3. I have a photo of the link that Elliot provided where you will see that the SEND TO ADDRESS was somehow changed. 

4. I also have a photo of a link that i sent to my friend of this transaction. This link now leads to a ShapeShift page where it says  "THE TRANSACTION HAS BEEN SUSPENDED" 

 

CAN SOMEONE PLEASE HELP ME ?????? DID I GET ROBBED BY SHAPESHIFT ? 

Edited September 29, 2017 by Aleks

[wiredless1]

I don't think you've been robbed. It does look like someone tried to take your XRP, though. If it were me, I'd use customer service at Shape again to confirm the "time remaining expired" notification in the transaction attempted to the wrong address. It seems to me that a transfer to the incorrect address was caught and that the discrepency between your original and the altered attempt is being investigated. I can understand why Shape may have suspended the account: they likely need to get to their understanding of any root cause for the "switch" that might be happening inside their (or your) connection. Call to ask if this is what's happening, then adjust your privacy / authentication settings on the wallet (or create a new wallet) for security purposes.

This is where I'd start.

[Aleks]

44 minutes ago, wiredless1 said:

I don't think you've been robbed. It does look like someone tried to take your XRP, though. If it were me, I'd use customer service at Shape again to confirm the "time remaining expired" notification in the transaction attempted to the wrong address. It seems to me that a transfer to the incorrect address was caught and that the discrepency between your original and the altered attempt is being investigated. I can understand why Shape may have suspended the account: they likely need to get to their understanding of any root cause for the "switch" that might be happening inside their (or your) connection. Call to ask if this is what's happening, then adjust your privacy / authentication settings on the wallet (or create a new wallet) for security purposes.

This is where I'd start.

I have a picture of the screen when it first expiered and its a different address lol . My account wasn’t suspended . It was the order page. They clearly changed the second letter from T to Y on the send to address that’s on the order page.

Edited September 29, 2017 by Aleks

[Khaleesi]

53 minutes ago, Aleks said:

I have a picture of the screen when it first expiered and its a different address lol . My account wasn’t suspended . It was the order page. They clearly changed the second letter from T to Y on the send to address that’s on the order page.

Yes it shows the deposit litecoin address was altered. How did you input it, did you use the QR code, copy and paste or manually typed? I recall reading to never completely trust copy paste and QR codes because some programs have a copy faults so always double check no matter what. Is the ripple receiving address correct?

[cmbartley]

There is more of a change than from T to Y. The entire address is different. Are you sure the original site you when to was shapshift.io? How did you navigate to it. Others have accidentally gone to shapesshift.io which emulates the real site and ultimately redirects you back to the real site to obfuscate the theft. Can you check your browser history to see if you've ever gone to the incorrect site? Have looked at what happened to the 30LTC in a litecoin explorer.

[Kiir]

Just to spread the info, in case someone doesn't know.
If you google "gatehub", first sponsored (!) link is getahub, with an "a". 

That's a FAKE, phishing site as far as I've read.

Be VERY cautios what you click!

[bb101]

From the 1st image you posted it looks like you used the wrong url for shapeshift. The i in shapeshift looks like an l to me.

The last picture you posted is very clear.

[Aleks]

10 hours ago, Khaleesi said:

Yes it shows the deposit litecoin address was altered. How did you input it, did you use the QR code, copy and paste or manually typed? I recall reading to never completely trust copy paste and QR codes because some programs have a copy faults so always double check no matter what. Is the ripple receiving address correct?

I copied and pasted, nothing abnormal happened. Ive done dozens of these transactions before and everything was fine. 

[Aleks]

5 hours ago, cmbartley said:

There is more of a change than from T to Y. The entire address is different. Are you sure the original site you when to was shapshift.io? How did you navigate to it. Others have accidentally gone to shapesshift.io which emulates the real site and ultimately redirects you back to the real site to obfuscate the theft. Can you check your browser history to see if you've ever gone to the incorrect site? Have looked at what happened to the 30LTC in a litecoin explorer.

@cmbartley Im 100% sure that i entered the correct ShapeShift URL. im supper **** about that stuff so i checked on purpose because of the large sum of money i was sending.  Please see picture # 3 where the ShapeShift URL is correct and the SEND TO ADDRESS. Once i contacted customer support, the URL that i have now leads to a suspended ACCOUNT screen (SEE PIC #4). As ive mentioned before, ive done many transactions through ShapeShift, i always check and everything has been fine until now. 

[Aleks]

3 hours ago, bb101 said:

From the 1st image you posted it looks like you used the wrong url for shapeshift. The i in shapeshift looks like an l to me.

The last picture you posted is very clear.

What does this mean???? a lower case i vs. upper case I makes a difference ? That doesn't explain the fact that the ShapeShift URL i saved of this transaction now comes up as a SUSPENDED ACCOUNT.

[Xrphunter]

You should contact the support of shapeshift 

[tulo]

That seems the correct website...no phishing, but they might have had some internal problem. The best way is to contact them. I don't think they are scammers, they steal already enough $ with their fees

Edited September 29, 2017 by tulo

[cmbartley]

Did you enter the destination address into a litecoin explorer? Where are your funds now?

[Khaleesi]

8 hours ago, bb101 said:

From the 1st image you posted it looks like you used the wrong url for shapeshift. The i in shapeshift looks like an l to me.

The last picture you posted is very clear.

I see the same thing shapeshlft is there..not shapeshift...

unfortunately you might have been phished but as an overlay on the real site?it seems the real site was there but somehow when you got to the order screen it changed to the phishing one...meanwhile your real order screen timed out ??   I think shapeshift itself has been hacked...or it’s an inside job.

Edited September 29, 2017 by Khaleesi