A Russian crypto investor lost about $2.1 million after clicking a phishing link that he allegedly received in a ChatGPT response. The Crypto Times reports on the incident, citing an investigation by blockchain researcher VAL.

According to his data, on June 12, a user named Alex asked ChatGPT in Russian where to exchange sFLR tokens for WFLR. Among the suggested resources was a link to a site that outwardly copied the legitimate Sceptre service.

The user mistook the page for genuine, connected his crypto wallet, and confirmed unlimited permission to manage tokens. A few seconds later, the attacker used this access and withdrew about 1.9 million FXRP — at that time, approximately $2.1 million.

According to VAL's estimate, more than $2.2 million was stolen through the infrastructure associated with the attack. Some of the funds were exchanged for DAI and Ethereum, after which 50 ETH were sent via the Tornado Cash crypto mixer.

After the incident, the researcher repeated similar queries to ChatGPT in several languages, but could no longer get the same phishing link. He urged users to separately check the addresses of sites offered by AI chatbots, especially before connecting a crypto wallet or confirming access to assets.