In crypto slang a Sybil attack (named after the multiple-personality story Sybil) is simple: one operator pretends to be many independent users. Hundreds of wallets make tiny swaps. Dozens of Discord accounts cheer the same token. A governance vote looks contested until you notice the addresses were funded from one hub.
Projects that promise tokens to “active users” invite this behaviour. So do decentralised autonomous organisation (DAO) votes that count wallets instead of people, and launch pages that brag about follower counts nobody audited. The crowd you think you are joining may be a costume.
For a retail reader the defensive habit is to distrust vanity metrics. Prefer distributions that need meaningful history you cannot clone cheaply, and assume Telegram hype is marketing until you can name who holds supply and who can change the contract. If someone sells you a “Sybil-proof farm pack” of ready wallets, that is not education — it is an invitation to join the fake crowd.
If this already cost you money, start at Get help.
This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.