Scams and fake sites
A scam copies something you trust, a site, a support agent or a token, to get your seed phrase, a signature or your tokens. This page lists GAMA's real addresses, what GAMA never does, and what to do if something has already gone wrong.
GAMA's only addresses
- https://gama.win: GAMA's website and app.
- https://docs.gama.win: these docs.
- **https://x.com/GamaDotWin**: GAMA's only social account.
- contact@gama.win: GAMA's contact address.
Anything else that calls itself GAMA is not GAMA. To check what happened on chain, use Gamascan, the GIWA explorer.
What GAMA never does
- Ask for your seed phrase or private key. Not on the site, not in a message, not "to verify", "to sync" or "to fix" anything. Anyone who asks is trying to rob you.
- Message you first. Nobody from GAMA will contact you on Telegram, Discord, X, KakaoTalk or anywhere else. Treat any "GAMA support" that writes to you as a scam.
- Ask you to log in. GAMA has no accounts and no passwords. You only connect a wallet.
- Ask you to sign a message. The app asks your wallet only to switch to GIWA Sepolia and to send transactions you started yourself: a trade, an approval, a deposit, a claim, an order. It never asks for a signature on a message.
- Ask for an unlimited approval. Every approval the app asks for is for an exact amount. See Token approvals.
- Offer to recover, refund or unfreeze funds. It can't; see What GAMA can't do.
DANGER
Your seed phrase is the master key to your wallet on every network, not only on GIWA Sepolia. Never type it into a website, and never show it to anyone.
Check the address bar
The domain must be exactly gama.win or docs.gama.win. Fake sites try to come close: a letter swapped or missing, an extra word such as -claim or -support, a different ending such as .com or .app, or the real name in front of another domain, as in gama.win.example.com, which is a page on example.com. A padlock only means the connection is encrypted; fake sites have one too.
Type gama.win yourself once and bookmark it. Links in search ads, messages, replies and token descriptions can lead to copies that look exactly like the real site.
Copied tokens and planted links
Anyone can launch a token on GAMA with any name, image and description, including GAMA's own. Only the real GAMA token shows the seal and the Official badge in the app; see The official seal.
A token's description and social links are written by its creator. The app shows a link under a platform's name only when it really points to that platform, and shows a website's real hostname, but where the link leads is still the creator's choice. A token that says "claim your reward at …" is an advert for someone else's site.
Tokens can also arrive in your wallet without you buying them, with a name that is really a link. Don't visit it and don't trade the token to "claim" anything. Gamascan's Fake tokens and scam airdrops explains how this works.
If it has already happened
- You typed your seed phrase into a site: treat the wallet as lost. Create a new wallet with a new seed phrase and move what is left at once, on every network you use.
- You approved a token on a site you don't trust: revoke the approval. See Token approvals.
- You sent funds to a scammer: nobody can reverse it, not GAMA and not anyone who offers to for a fee.
Related
- The official seal
- Token approvals
- What GAMA can't do
- Phishing and fake sites in the Gamascan docs