Scam With Security Researcher Luis Carchi Scammer Of GetShield.xyz

A security vulnerability report should end with acknowledgment, communication, and fair handling. Unfortunately, my experience with GetShield.xyz has been the opposite.

I am publishing this post to document my experience after responsibly reporting a vulnerability that was reviewed and acknowledged by the company.

Vulnerability Disclosure

I discovered and responsibly reported a security issue affecting the platform.

After reviewing the report, the issue was acknowledged and I was informed that a reward of 100 USDT would be provided for the finding from luis.

Following their instructions, I submitted my wallet address for payment.

What Happened Next

After providing the payment address:

Communication became extremely limited.
Multiple follow-up emails were sent.
More than 10 days passed without payment.
No clear explanation was provided regarding the delay.
Warning emails requesting clarification were ignored.

At the time of writing this post, I have not received the promised 100 USDT reward.

Why This Matters

Security researchers spend time identifying vulnerabilities and reporting them privately so organizations can fix issues before they are abused.

When companies acknowledge reports and discuss rewards, researchers expect transparent communication regarding payment status and timelines.

The facts are:

A vulnerability was reported.
The report was acknowledged.
A reward of 100 USDT was discussed.
My payment address was provided.
More than 10 days have passed.
Repeated follow-up emails have not resulted in payment or a meaningful response.

Readers can form their own conclusions based on this timeline.