No—the reported withdrawal flow is unsafe.

Revenue FamilyOct 4, 2026, 15:21 UTC

No—the reported withdrawal flow is unsafe

A user who tried to withdraw a Revenue bonus says the flow opened revenuefamms.com and asked them to import their Phantom recovery phrase; another user reported the same prompt. First-hand report, independent warning. Never enter a seed phrase or private key into a website. Do not connect a funded wallet or sign an unexplained transaction in this claim flow.

Revenue’s official X post linked to revenue.family, not the reported lookalike domain, and claimed $7 million distributed to 60,000 users. The public posts reviewed provide no payout transaction receipts to substantiate that claim. Official airdrop link, payout claim. The evidence establishes the dangerous prompt was reported during a withdrawal attempt, but does not establish who controls revenuefamms.com or prove that Revenue itself asked users for seed phrases.

Ask your own

Case file

Revenue Family

Answered Oct 4, 2026, 15:21 UTC

Sources 4

Research trace 36

Latest posts of @RevenueFamily
The official payout announcement is dated today and claims $7 million was distributed to 60,000 users. I’m checking whether the linked X warnings describe a seed-phrase request or a wallet connection, and looking for verifiable payout or wallet instructions on the project’s official channels.
The warnings confirm allegations, but the official account says its airdrop desk is live and claims $7 million went to 60,000 users. I’m checking the linked official site for the actual claim flow and any seed-phrase or wallet-connection requirement before judging the immediate risk.
The official site’s readable text describes its swap service but does not expose the airdrop claim flow, so the seed phrase and wallet connection allegations remain unverified. I’m checking the project’s Telegram announcement and independent reports tied specifically to Revenue’s domain to see what claim instructions users actually received.
The official site’s published text describes a swap service, while independent posts allege that its withdrawal button redirects to other domains and one page requests recovery words. I’m checking whether those domains and claim-flow allegations have independent confirmation before treating the seed-phrase request as established.
The previous results show multiple users alleging the official withdrawal button leads to lookalike domains, one of which asks for recovery words. I’m checking those domains and the project’s Telegram announcement for direct evidence about the claim flow and any payout confirmation.
The lookalike pages are alleged to solicit recovery phrases, but the official site’s static text does not show that flow. I’m checking today’s reports for direct claim-flow evidence and the project’s response before closing the safety assessment.
Today’s X reports consistently allege that a withdraw flow leads to lookalike domains and asks for a recovery phrase, while the official site’s readable content did not expose that flow. I’m checking the official account’s latest response and independent reports about those exact domains to establish whether the warning is still current or has been addressed.
The strongest warning names two lookalike domains and a fake Phantom prompt, while Revenue’s own account still points to revenue.family and claims payouts. I’m checking the alleged phishing domains and the linked on-chain investigation for independently checkable evidence about ownership, token activity, and whether any payout can be verified.
The supplied investigation names two token creators and contracts. I’m checking attribution and current token data for those addresses to assess the claims about two launches and suspicious trading.
The previous findings identify two Revenue-branded tokens and an October 1 statement disowning the Solana $REV token. I’m checking the project’s public statements and posts naming the token contracts to assess whether the second launch was promoted as official and whether the alleged seed-phrase flow is tied to Revenue itself.
The official account announced the airdrop and claimed $7 million was distributed, while users allege recovery-phrase prompts on lookalike sites. I’m checking for an official clarification naming the claim URL or rejecting those sites, and for independent reports of payouts.
Several accounts claim to have received money, but the available posts do not show transaction receipts; meanwhile Revenue claims $7 million was paid out. I’m checking a specific recipient’s post for a verifiable payout detail that could distinguish a credited site balance from funds actually received.
The reported $41 receipt contains no transaction hash or destination, so it does not establish an on-chain payout. I’m checking the project’s official announcement and current site description for any wallet or recovery-phrase instruction, then comparing that with the reported lookalike domains.
The reports identify lookalike claim domains that allegedly request recovery phrases, but they do not establish whether those domains are controlled by Revenue or are part of its official flow. I’m checking for newer first-hand reports and an official response naming the claim domain, since that determines whether the airdrop page itself is unsafe or impersonated.
The earlier results show the project claimed a $7 million payout, while users allege recovery-phrase prompts on lookalike domains and no verified receipt has surfaced. I’m checking the payout page and newer posts for concrete transfer evidence or an official clarification of the claim flow.
Earlier results show multiple users alleging seed-phrase prompts on lookalike domains, but don’t establish whether Revenue itself directs users there. I’m checking for a specific official clarification of its claim domain or wallet flow.
The newer posts point users to revenue.familly.fun as an Airdrop Desk, but that spelling differs from Revenue’s announced revenue.family domain. I’m checking who is promoting that link and what the destination asks users to do before treating it as official.
The lookalike `revenue.familly.fun` link is promoted by third-party posts, while Revenue’s own post points to `revenue.family`. I’m checking the destination’s ownership attribution and whether the project itself has endorsed that exact URL, since this determines whether the risky flow is official or an impersonation.
The last results establish that Revenue itself linked only to revenue.family, while third parties promoted the similar-looking revenue.familly.fun address. I’m checking whether Revenue has since endorsed that exact claim URL or posted a warning about the phrase-requesting lookalike domains.
The latest findings show Revenue’s official post links to revenue.family, while third-party accounts are promoting revenue.familly.fun and claiming it is the Airdrop Desk. I’m checking whether Revenue has publicly endorsed that exact URL or whether independent reports identify it as an impersonation.
Revenue’s official account has linked users to revenue.family, while posts report that withdrawal routes users to lookalike sites asking for recovery phrases. I’m checking for an official clarification of those domains and transaction evidence for the claimed payouts before judging the risk.
Several users report that the withdrawal flow opened a wallet connection or recovery phrase prompt, and the project claims $7 million was distributed. I’m checking detailed first-hand reports and whether any post supplies verifiable payout evidence, since those bear directly on the airdrop’s safety and credibility.
A first-hand report says a claimed $40 withdrawal led to a recovery-phrase prompt, while Revenue claims a $7 million payout. I’m checking whether recipients have provided transaction hashes or destination wallets that verify those payouts.
First-hand reports now specifically describe a Phantom recovery-phrase prompt after selecting a Revenue bonus withdrawal, while Revenue’s own post points users to revenue.family. I’m checking the project’s published safety guidance and the exact official withdrawal instructions to distinguish that reported flow from a lookalike phishing page.
The previous evidence includes a first-hand report of a recovery-phrase prompt on a lookalike domain, while Revenue’s official post directs users to revenue.family. I’m checking for earlier findings on Revenue Family that may clarify its history and point to verifiable payout or token evidence relevant to the safety assessment.
First-hand reports say a bonus withdrawal led to a recovery-phrase prompt on a lookalike domain, while Revenue’s own X post links to revenue.family. I’m checking the official site’s withdrawal instructions, reports of on-chain payout receipts, and any official response to the warnings.
First-hand reports say the withdrawal flow asked for Phantom recovery words, and other users report being unable to withdraw; Revenue claims $7 million distributed. I’m checking whether any alleged payout post includes a transaction or whether the reported withdrawals remain blocked.
First-hand reports already describe a recovery-phrase prompt during the withdrawal flow, which makes that flow unsafe. I’m checking for public payout receipts to assess the project’s separate claim that $7 million was distributed.
The first-hand reports describe a seed-phrase prompt on revenuefamms.com, a lookalike domain; Revenue’s official post instead points to revenue.family. I’m checking whether the claim-flow risk can be tied to the project’s own published site and whether the “two rugs” allegation is independently supported by the token history already surfaced.
The earlier findings identify two Revenue-branded tokens, but don’t by themselves establish that both were rugged. I’m checking current token liquidity and the project’s public statements about the token contracts to assess that allegation.
The prior evidence establishes that users reported a seed phrase prompt and that the official account linked to revenue.family, but does not establish whether both token launches were rugs. I’m checking current independent reporting and the project’s own statements about its tokens to assess that allegation.
The official account disowned the Solana $REV token after saying its social accounts were taken over, while reports describe a recovery-phrase prompt on a lookalike withdrawal site. I’m checking for later independent reporting or official statements that clarify whether the airdrop’s wallet flow is Revenue’s own or an impersonation, and whether the claimed payouts have verifiable receipts.
The prior results include a first-hand account of a recovery-phrase prompt on `revenuefamms.com`, but don’t tie that domain to Revenue. I’m checking for later direct reports or an official clarification, and for stronger evidence behind the alleged token rugs.
The existing evidence makes the claim flow unsafe: users report a recovery phrase prompt after starting a bonus withdrawal, and Revenue’s official post directs users to revenue.family. I’m checking whether the project has since named the exact withdrawal URL or addressed these reports, which could clarify who controls the dangerous flow.
The findings show first-hand reports that a bonus withdrawal led to a recovery-phrase prompt, while Revenue’s official post points to revenue.family and the project has not clarified the reported flow. The key safety question is settled by that credential request: sharing a recovery phrase can give the recipient control of the wallet, so the reported claim flow is unsafe regardless of whether the lookalike domain is project-controlled.