Inside a Suspected Fake CoinDesk Podcast Funnel Targeting Web3 Founders

On August 15, 2026, a LinkedIn message was received claiming to be from a Venture Scout at TheForms Ventures, inviting a discussion about a personal crypto journey for a supposed CoinDesk podcast. The initial message seemed legitimate, with a polished profile, a simple pitch, and no suspicious downloads or phishing pages. However, as the conversation progressed, red flags emerged.

The conversation shifted to language barriers, promising AI translation, and eventually discussing operating-system compatibility. Evidence was preserved and published in a redacted incident report. The LinkedIn account used the name Denys Kovalov and claimed to be a Venture Scout at TheForms Ventures. The podcast was titled "Why Crypto Became Personal," a title that closely matched a previously reported case.

The booking was made through a TheForms Calendly page, and the meeting was scheduled for a Google Meet. The meeting was genuine, but the promised translation did not work as expected. The conversation then shifted to Windows, macOS, and Linux, which is a common tactic used by cybercriminals to gain access to a victim's computer.

No malware was delivered in this specific interaction, but the case is significant as it is linked to a previously reported incident. CoinDesk independently confirmed the phishing attempt, stating that the series and podcast did not exist. This investigation documents a pre-compromise social-engineering chain, not a completed theft.