<p>LocalBitcoins provides two-factor authentication which protects you against all kinds of phishing attacks. Even if the attacker gains access to your password by phishing link or malware (e.g. infected Windows machine), they cannot access your one time codes needed to login and do transactions.</p>

<p>LocalBitcoins recommends you to enable two-factor authentication on your Wallet page (if you have bitcoins) and every time in your user profile navigation bar unless it is enabled.</p>

<p><img src="https://i.sstatic.net/KYFjU.png" alt="Enable two-factor authentication"></p>

<p>There are two different methods for two-factor authentication</p>

<ul>
<li><p>Mobile app (Google Authenticator) - works on iPhone, Android and other smart phones</p></li>
<li><p>Paper codes (you print a set of one time codes)</p></li>
</ul>

<p>Both options can be enabled from the link shown in the screenshot above, <a href="https://localbitcoins.com/accounts/two_factor/" rel="nofollow noreferrer">or from this direct link</a>. For both options, you need to also make sure you have a proper backup as in the case you lose access to your mobile phone with two-factor authentication app you cannot no longer login to LocalBitcoins. </p>

<p>To receive the email in the question the user probably has published email in an advertisement, LocalBitcoins forums or given it to a malicious trader. LocalBitcoins recommends you do not do communications or trade deals off-site outside LocalBitcoins messaging system.</p>

<p>In the case you have already given your password to a phishing site</p>

<ul>
<li><p>Change your LocalBitcoins password immediately</p></li>
<li><p>Enable two-factor authentication as instructed above</p></li>
</ul>

CC BY-SA 3.0
2013-11-12T09:30:53.680Z
2013-11-12T09:30:53.680Z
LocalBitcoins
<p>Earlier this day, I have received an email saying that there is a buyer for my <a href="https://localbitcoins.com/" rel="nofollow noreferrer">localbitcoins</a> advertisement:</p>

<p><img src="https://i.sstatic.net/5inOf.png" alt="enter image description here"></p>

<p>However, the <a href="https://localbitcoins.com/ads/37726/103702" rel="nofollow noreferrer">https://localbitcoins.com/ads/37726/103702</a> link shown actually links me to:    </p>

<blockquote>
  <p><a href="http://mandrillapp.com/track/click.php?u=30106122&amp;id=8f52703cd0ec4b2b81e069630069dbdc&amp;url=http%3A%2F%2Fllocalbitcoins.com%2Faccounts%2Flogin&amp;url_id=ad428ed9d64304239644387c1388db2f686a98ca" rel="nofollow noreferrer">http://mandrillapp.com/track/click.php?u=30106122&amp;id=8f52703cd0ec4b2b81e069630069dbdc&amp;url=http%3A%2F%2Fllocalbitcoins.com%2Faccounts%2Flogin&amp;url_id=ad428ed9d64304239644387c1388db2f686a98ca</a></p>
</blockquote>

<p>I've accidentally clicked it and it brings me to a phishing website which looks identical to localbitcoins. The phishing website is hosted on <a href="http://llocalbitcoins.com" rel="nofollow noreferrer">http://llocalbitcoins.com</a> (<a href="http://whois.domaintools.com/llocalbitcoins.com" rel="nofollow noreferrer">whois record</a>). Notice that there are two "L"s in the domain name.</p>

<p>Wwhat does the hidden link do? Now that I've clicked the link, what can happen to me?</p>

<p>I've changed my password since then. But what else can I do to protect myself?</p>

<sell-bitcoins><phishing>
What does this phishing website compromise?
Pacerier
# What does this phishing website compromise?

(Asked by: username_0 on 2013-11-12)

Earlier this day, I have received an email saying that there is a buyer for my [username_1](https://username_1.com/) advertisement:

![enter image description here](https://i.sstatic.net/5inOf.png)

However, the <https://username_1.com/ads/37726/103702> link shown actually links me to:

> <http://mandrillapp.com/track/click.php?u=30106122&id=8f52703cd0ec4b2b81e069630069dbdc&url=http%3A%2F%2Fllocalbitcoins.com%2Faccounts%2Flogin&url_id=ad428ed9d64304239644387c1388db2f686a98ca>

I've accidentally clicked it and it brings me to a phishing website which looks identical to username_1. The phishing website is hosted on <http://llocalbitcoins.com> ([whois record](http://whois.domaintools.com/llocalbitcoins.com)). Notice that there are two "L"s in the domain name.

Wwhat does the hidden link do? Now that I've clicked the link, what can happen to me?

I've changed my password since then. But what else can I do to protect myself?

**Tags:** sell-bitcoins, phishing


---

## 1 answers

### Answer by username_1 on 2013-11-12. Score: 1

username_1 provides two-factor authentication which protects you against all kinds of phishing attacks. Even if the attacker gains access to your password by phishing link or malware (e.g. infected Windows machine), they cannot access your one time codes needed to login and do transactions.

username_1 recommends you to enable two-factor authentication on your Wallet page (if you have bitcoins) and every time in your user profile navigation bar unless it is enabled.

![Enable two-factor authentication](https://i.sstatic.net/KYFjU.png)

There are two different methods for two-factor authentication

* Mobile app (Google Authenticator) - works on iPhone, Android and other smart phones
* Paper codes (you print a set of one time codes)

Both options can be enabled from the link shown in the screenshot above, [or from this direct link](https://username_1.com/accounts/two_factor/). For both options, you need to also make sure you have a proper backup as in the case you lose access to your mobile phone with two-factor authentication app you cannot no longer login to username_1.

To receive the email in the question the user probably has published email in an advertisement, username_1 forums or given it to a malicious trader. username_1 recommends you do not do communications or trade deals off-site outside username_1 messaging system.

In the case you have already given your password to a phishing site

* Change your username_1 password immediately
* Enable two-factor authentication as instructed above


---

