World, formerly Worldcoin, announced its expansion into the United States, launching operations in six major cities: San Francisco, Los Angeles, Atlanta, Austin, Miami, and Nashville. The initiative, led by Tools for Humanity and co-founded by Sam Altman, opened flagship retail locations where individuals can scan their irises using Orb devices to create a World ID, […]

Biometric Crypto ID Project World Expands to US With Visa Card Partnership and Tinder Verification Pilot

Bitcoin hovered between $95,977 to $96,169 over the last hour with a market 
capitalization of $1.90 trillion and a 24-hour trading volume of $29.88 
billion. Trading occurred within a tight intraday range between $93,333 and 
$96,244, as the market showed signs of both upward momentum and cautious 
consolidation. Bitcoin The daily chart indicates a strong […]

Bitcoin Price Watch: Bulls Eye $97K as Momentum Builds

## What is a Google subpoena scam?
_The Google subpoena scam is a type of phishing attack where fraudsters 
impersonate Google to create a false sense of urgency and fear. _
Typically, you will receive an email that appears to come from no- 
reply@google.com, claiming to inform you of a subpoena, a formal legal 
request. The email will often have a subject line like &#8220;Security Alert&#8221; or 
&#8220;Notice of Subpoena,&#8221; making it seem urgent and legitimate. These scammers 
prey on your natural concern about legal matters and data privacy, hoping to 
trigger a reaction.
Inside the email, the scammers falsely claim that Google has been served with 
a subpoena requiring the company to turn over your account data, such as 
emails, documents or search history. The email will then urge you to click on 
a link to view your &#8220;case materials.&#8221; This link typically leads to a 
fraudulent website, often hosted on Google Sites, which is designed to look 
like a genuine Google support page. This added layer of legitimacy can easily 
trick users into believing the request is real.
The most concerning part of this scam is that attackers are skilled at 
spoofing Google&#8217;s email addresses and mimicking the company&#8217;s official 
content. By doing so, they can bypass common security checks, such as 
DomainKeys Identified Mail (DKIM), which normally verifies the authenticity of 
an email. With this approach, the scam appears convincingly legitimate, making 
it easy for unsuspecting users to act impulsively &#8212; potentially exposing 
sensitive data or inadvertently installing malware.
_**Did you know?** DomainKeys Identified Mail (DKIM) is an email security 
standard that verifies whether a message really comes from the domain it 
claims to be from. It uses cryptographic signatures to protect against email 
spoofing and phishing attacks &#8212; making your inbox just a little safer every 
day._
## How the Google subpoena scam works
_Software firm EasyDMARCexplained that attackers exploited legitimate Google 
services to bypass traditional spam filters. They used &#8220;OAuth&#8221; applications 
combined with DKIM workarounds to create emails that could fool even careful 
users._
A DKIM replay attack exploits the way email authentication works, specifically 
using DomainKeys Identified Mail, which adds a digital signature to an email 
to verify its authenticity.
Steps of the attack:
 1. **Attacker receives a legitimate Google email:** The attacker intercepts a legitimate email from Google that has a valid DKIM signature, which proves it came from Google. 
 2. **Preparing the replay:** The attacker saves this email, keeping the DKIM signature intact, and replays it. Since DKIM checks only the email headers and body (if unchanged), the attacker can forward the exact email with its signature intact without modification. 
 3. **Sending the spoofed email:** The attacker then sends this saved email from a different account (e.g., Outlook), making it look like it&#8217;s from the original sender (Google). 
 4. **Relaying through other servers:** The email goes through multiple servers, each adding their own DKIM signature, but the original Google DKIM signature remains untouched and valid. 
 5. **Final delivery:** The email reaches the victim&#8217;s inbox, appearing legitimate. Despite being relayed through several servers, the email passes SPF, DKIM and DMARC checks, which makes it look like a valid Google email.
The result: The victim is tricked into thinking it&#8217;s a legitimate message, 
potentially leading to harmful actions like clicking malicious links or 
providing sensitive information. This type of attack plays on the trust people 
place in email authentication methods and shows how attackers can exploit 
them.
Here&#8217;s how fake Google emails and DKIM replay attacks trick you:
 * **Spoofed Google support pages:** Clicking the link in the email takes you to a fake Google support page, often hosted on Google Sites, adding another layer of false credibility. The website will urge you to log in to view your &#8220;case materials.&#8221; 
 * **Phishing for credentials:** If you proceed, you&#8217;re asked to enter your Google username and password. Once entered, the attackers can gain full access to your account. 
 * **Psychological tricks:** Scammers use fear-based tactics &#8212; mentioning lawsuits, law enforcement involvement or threats of account suspension. The urgency they create is designed to make you bypass your usual caution.
_**Did you know?** Google Sites lets anyone with a Google account create 
websites under the trusted &#8220;sites.google.com&#8221; domain. Attackers exploit this 
by crafting fake login pages and phishing forms, using Google&#8217;s SSL and brand 
reputation to deceive users into revealing sensitive information._
## Key signs you&#8217;re facing a Google subpoena scam
_Even though the Google subpoena scam is highly sophisticated, there are still 
clear red flags you can look for if you know what to watch out for. _
By recognizing these signs, you can protect yourself from falling victim to 
phishing attacks:
 * **Fake or spoofed sender addresses:** The first thing you should do is examine the sender&#8217;s email address carefully. Even though these scams may appear to come from a legitimate Google address, small differences in the sender&#8217;s domain or name can indicate that the email is a spoof. For instance, a Google email may have slight alterations, such as &#8220;goog1e.com&#8221; instead of &#8220;google.com,&#8221; which are often overlooked by unsuspecting users. 
 * **Urgent language and threats:** Scammers will often try to pressure you into acting quickly by using urgent language and threats of legal action. They may claim that your account is at risk of being suspended or that you must act immediately to avoid severe consequences. Google does not use scare tactics like this in emails. 
 * **Requests for sensitive information:** One of the biggest signs of a phishing attempt is a request for sensitive information, such as your Google account password, two-factor authentication (2FA) code or personal financial details. Google will never ask for this information via email. 
 * **Poor grammar or formatting:** While scammers have gotten better at mimicking official communication, many still make mistakes. Look for inconsistent wording, odd phrasing or formatting errors. These can often reveal a scam. 
 * **Suspicious links:** Before clicking any link in an email, hover over it with your mouse to preview the URL. If the link looks suspicious or unfamiliar, don&#8217;t click on it. Often, scammers use disguised URLs that lead to fake websites. 
 * **Lack of proper legal process:** Real subpoenas are issued through proper legal channels. They are never delivered via an email that asks for personal information or a quick action.
## Received a Google subpoena email? Here&#8217;s how to stay safe
_If you receive an email that claims to be from Google about a legal subpoena 
or any other suspicious notification, it &#8216;s important to remain calm and avoid 
reacting hastily. _
Phishing attacks, like the Google subpoena scam, often rely on creating a 
sense of urgency to trick users into making mistakes. Here&#8217;s what you should 
do immediately to protect your personal information and accounts:
 * **Do not click any links:** Avoid interacting with the email. Don&#8217;t open attachments, click links or reply. 
 * **Verify the request:** Visit Google&#8217;s support site directly (not through any link in the email) and check if there are any notifications related to your account. 
 * **Report the scam:** In the UK, forward the suspicious email to report@phishing.gov.uk or Google&#8217;s own reporting channels, and in the US, notify the Federal Trade Commission (FTC) at reportfraud.ftc.gov or forward to spam@uce.gov. 
 * **Update your security settings:** Immediately change your Google account password and enable 2FA or passkeys for an extra layer of protection. 
 * **Contact your bank:** If you shared any financial details (e.g., credit card numbers, bank account information or payment credentials), act quickly. Call your bank or financial institution using the official number on the back of your card or its verified website. Inform them of the potential scam and any compromised information. Request to monitor your account for suspicious activity, freeze or cancel affected cards, or issue new ones if necessary. Review recent transactions for unauthorized charges and dispute any fraudulent activity promptly. 
 * **Report to authorities:** If you believe you have fallen victim, report the incident to Action Fraud or call 101 if you&#8217;re based in the UK. File a complaint with the FTC at www.ftc.gov/complaint or report to the Federal Bureau of Investigation&#8217;s Internet Crime Complaint Center (IC3) at www.ic3.gov if you are based in the US.
## How Google notifies users about legal requests
_When it comes to legal requests such as subpoenas, court orders or search 
warrants, Google takes privacy and security seriously. The company has a 
strict procedure in place to ensure that requests for user data are valid, 
lawful and processed through proper channels. _
Unlike the tactics employed by scammers, Google&#8217;s approach is both transparent 
and secure. Here&#8217;s how the real process works when it comes to legal requests 
for your data:
 * **Google checks the request carefully:** If law enforcement (e.g., police or court) requests your data, Google thoroughly reviews the request to ensure it&#8217;s valid and lawful. 
 * **Google may notify you:** Unless they&#8217;re not allowed (e.g., due to a court order), Google will let you know before sharing your information. This notice won&#8217;t come in a random email asking for your password. 
 * **Official notifications only:** If there&#8217;s a real legal issue, you&#8217;ll see a message in your Google Account dashboard (like in the &#8220;Security&#8221; section when you log in) or through an official Google email from a verified address, not a suspicious or random one.
_**Did you know?** Government agencies worldwide request user data from 
Google, but each request is carefully reviewed to ensure it complies with the 
law. Google shares details of these requests in its Transparency Report, and 
how they respond depends on whether your service provider is Google LLC (US) 
or Google Ireland Limited (Ireland)._
## How to avoid falling victim to Google subpoena scams
_To avoid falling victim to Google subpoena scams, stay calm, avoid clicking 
any links or attachments, and verify any legal claims directly through Google 
&#8216;s official support channels._
Phishing scams are constantly evolving, but you can significantly reduce your 
risk by following some best practices, including:
 * **Stay skeptical:** Always question unexpected emails, especially those involving legal action or urgent threats. 
 * **Inspect carefully:** Click the dropdown next to the sender&#8217;s name to see the full email address and domain. 
 * **Hover before clicking:** Hover your cursor over any links to preview the URL without actually clicking. 
 * **Enable 2FA:** Adding an extra layer of security to your Google account can stop scammers even if they steal your password. 
 * **Use advanced spam filters:** Tools like spam blockers, domain verification tools (like Who.is) and secure email gateways can help flag suspicious emails. 
 * **Regular security audits:** Periodically review your Google Account&#8217;s security settings and connected third-party apps. 
 * **Stay updated:** Subscribe to trusted cybersecurity newsletters or Google&#8217;s security updates to stay informed about new threats. 
 * **Educate yourself and others:** Sharing knowledge about scams with friends, family and coworkers can help build a collective defense.

Google subpoena scam: What it looks like and how to avoid it

Bitcoin is trading above $95,000, moving closer to the psychologically 
significant $100,000 price level. This recovery follows several weeks of 
steady gains, although the asset remains approximately 12.6% below its all- 
time high recorded in January. Some analysts are now focusing on underlying 
trends across both spot and derivatives platforms to evaluate the 
sustainability of the current momentum. Recent data highlights notable 
movements of Bitcoin away from exchanges, particularly from Coinbase, a trend 
that typically signals a reduced available supply and potentially reduced 
selling pressure. In parallel, derivatives market activity has also picked up, 
suggesting an increase in leveraged positioning that could support ongoing 
upward momentum. The convergence of both accumulation signals and growing open 
interest has analysts watching closely for a continuation of the rally or a 
breakout attempt beyond recent highs. Related Reading: Is Bitcoin Demand 
Returning? Active Address Trend May Suggest So 8,000 Bitcoin Pulled From 
Coinbase Signals What? Amr Taha, a contributor on CryptoQuant’s QuickTake 
platform, recently observed that over 8,000 BTC—worth approximately $763 
million—was withdrawn from Coinbase on two separate occasions within five 
days. This activity, visible on exchange netflow data, represents one of the 
largest Bitcoin outflow events recorded in recent weeks. Taha pointed out that 
the withdrawals occurred on April 24 and again on April 29, suggesting 
deliberate actions rather than random user activity. According to the 
analysis, large outflows from exchanges typically indicate that holders are 
transferring assets into cold wallets for long-term storage. This behavior 
often aligns with accumulation phases, as investors seek to remove their 
assets from trading platforms, thereby reducing immediate sell-side liquidity. 
Taha concluded, noting: Historically, significant Bitcoin outflows from 
exchanges — especially from major platforms like Coinbase — have often 
preceded strong bullish price movements. These outflows signal reduced 
immediate sell pressure and a tightening of available supply. Such dynamics 
have repeatedly aligned with periods of increased hedge fund activity, as 
institutional players reposition in anticipation of upside momentum. Binance 
Open Interest Climbs $2.2 Billion as Futures Activity Rebounds In a separate 
analysis, another CryptoQuant analyst, Burak Kesmeci, reported a surge in 
Binance’s Bitcoin Open Interest (OI) over the last 20 days. After declining 
from $11.9 billion in January to $7.5 billion in early April, a drop of nearly 
37%, OI has since rebounded by 29.3%, reaching $9.7 billion. This increase in 
open interest corresponds with Bitcoin’s 23.7% price rise from $76,000 to over 
$94,000 during the same period. Rising open interest in derivatives markets 
typically indicates growing participation by leveraged traders and is often 
interpreted as a sign of increasing confidence or speculation. Related 
Reading: Bitcoin Supply in Profit Rises Above 85%— Is Euphoria Setting In? 
Kesmeci’s analysis suggests that the uptick in OI, when viewed alongside 
declining exchange reserves, may reinforce a bullish structure in the current 
market cycle. If momentum continues and funding conditions remain favorable, 
Bitcoin could push closer toward the $100K threshold in the short term. 
Featured image created with DALL-E, Chart from TradingView

Coinbase Sees Major Bitcoin Withdrawals as Binance Derivatives Activity Rebounds

Project Open was presented to the SEC as a pilot program to test the issuance 
of equity securities on public blockchains. By leveraging the zero settlement 
times and transparency of these blockchains, Project Open aims to lower the 
costs of issuance and trading simultaneously. Project Open Presented by Solana 
Policy Institute, Superstate, and Orca The […]

Solana Policy Institute, Superstate, and Orca Unveil Project Open: A Proposal to Move Equity Trading Onchain

Banking giant Morgan Stanley reportedly plans to list cryptocurrencies on its 
E*Trade investment brokerage and trading platform.
According to a May 1 Bloomberg report, the firm intends to list crypto assets 
on E*Trade in 2026. The plan is still in early development, and the bank is 
said to be exploring partnerships with established crypto firms to power the 
service. Internal discussions about cryptocurrency support reportedly began in 
late 2024.
_E*Trade homepage. Source:__E*Trade_
This would not be Morgan Stanley&#8217;s first exposure to digital assets. The 
bank&#8217;s wealthiest clients have had access to crypto exchange-traded funds 
(ETFs) and futures for some time, with the firm&#8217;s advisers allowed to pitch 
Bitcoin ETFs since August 2024.
_**Related:**__**Morgan Stanley to explore crypto offerings for clients &#8212; 
CEO**_
## Regulatory tailwinds push crypto forward
The news follows previous reports that Morgan Stanley was considering adding 
cryptocurrency trading to its E*Trade online brokerage platform in early 
January. The reports at the time cited the expectations of a friendlier crypto 
regulatory environment.
The move comes amid an increasingly favorable regulatory environment in the 
United States following the election of President Donald Trump, who campaigned 
on a pro-crypto platform and is personally involved in several blockchain 
ventures.
_**Related:**__**Morgan Stanley discloses $188M in BlackRock Bitcoin ETF 
holdings**_
The first 30 days of the Trump administration brought significant changes to 
the local crypto industry. More recently, US crypto proponents have shown 
optimism following the swearing-in of pro-crypto Securities and Exchange 
Commission Chair Paul Atkins.
The SEC had significantly changed its stance even before Atkins took office. 
In late February, the agency had already paused multiple cryptocurrency 
enforcement cases with imminent deadlines.
_**Magazine:**__**ZK-proofs are bringing smart contracts to Bitcoin &#8212; 
BitcoinOS and Starknet**_