User Trêvoid published an investigation warning the crypto community about a possible selective scam on the GoblinSwap and SpectreSwap platforms. The main red flag was the discovery of the same Bitcoin addresses being repeatedly reused to receive funds from different users for completely different orders.

According to Trêvoid, an inspection of GoblinSwap revealed that at least four different Bitcoin addresses are being used to collect deposits on a massive scale. For example, the address bc1qw4kknzu0e20txc7ss0j9ur9kkeey6pyd02wa5c appears in six different orders for amounts ranging from 0.2 to 1 BTC. A similar pattern is observed with the addresses bc1qlvkultns49t3kg6cz87naqj0tsl0rv3vpy564f, bc1qjcsrmw32w3weegv997lyz6ccjw0j83usfyjdeh, and bc1qc8qm3u9yqrq5tcsuarrudrkcqqs0yty6rlreep.

An identical practice was discovered on SpectreSwap. According to Trêvoid, eight different orders (ranging from 0.1 to 2 BTC) with unique URL identifiers were linked to a single wallet: bc1q38quql8xmyv8spm6xq6hc8rcy20htdeg8auln8. Such a practice completely violates the basic principles of privacy and security of cryptocurrency transactions.

Two months later, on June 6, 2026, the thread author published an important update. According to Trêvoid, the MetaMask crypto wallet began officially flagging GoblinSwap as a phishing site. Despite this warning from the popular extension, at the time of the update's publication, both resources continued to operate and were still generating orders linked to the same old addresses.

Address reuse is a critical red flag that in the crypto swap sector often precedes selective scamming. In such schemes, the platform's administration gains the ability to arbitrarily decide whether to process the exchange honestly or pocket the funds, depending on the transaction amount and other factors. Given the continued activity of the platforms and the emergence of phishing warnings, users are strongly advised to avoid making any deposits on GoblinSwap and SpectreSwap.