Pranksy and the Fake Banksy NFT: 100 ETH Scam Explained

In late August 2021, an NFT collector who goes by Pranksy bought a token that appeared to be a new Banksy NFT. He paid 100 ETH. Depending on the outlet and the exchange rate used, that was reported as roughly $336,000 to $344,000, or about £244,000.

The token was not made by Banksy. It had been listed after a compromise of the artist's official website, where a link to an auction had appeared. A buyer who followed that link had every reason to believe the sale was real, because the link sat on the one place most people regard as the artist's own.

The case drew wide coverage because of three features:

• The price. A six-figure purchase made in minutes.
• The buyer. Pranksy is one of the best-known collectors in the NFT market, not a newcomer.
• The ending. Within days, the person behind the scam sent the money back, and Pranksy said he thought the hacker may have become scared once the story spread.

That last point is unusual. In most NFT fraud, funds move quickly through new wallets and are not returned. The Pranksy case is better read as a lucky outcome than as a model of how these incidents end.

The lesson is not that Pranksy was careless in a way ordinary buyers would not be. It is that authenticity in NFTs depends on checking who actually controls a drop, and that even a legitimate-looking source can be turned against you. The sections below cover who Pranksy is, how the scam worked, how the refund happened, and a practical checklist you can use before sending money to any high-value listing.

Pranksy is the online name of a prominent NFT collector and trader, active since the early days of the Ethereum NFT boom. He is known for buying early into projects and for being very public about it, which made him an influential voice in the community. Coverage of the incident described him as a Banksy fan, and one report noted he also runs a parody account on Twitter, a detail that gives the headline pun its force: a man named after a prank was pranked.

His profile matters to this story for two reasons.

Speed. Collectors who trade at the top of the market often act fast on drops, since good pieces can sell within moments. Speed rewards decisiveness and punishes verification steps that feel optional.

Visibility. Because he is well known, the loss and the later refund were reported by major news outlets, and the incident became a reference case. Many scams of the same type involve smaller sums and never make headlines.

It also helps to separate the person from the practice. Experienced buyers are not immune to social engineering, because attackers exploit trust in a familiar channel rather than technical weaknesses in the buyer's own wallet. In this case, Pranksy's wallet was never compromised. He sent funds willingly, to a listing he believed was legitimate. That distinction shapes the defensive advice later in this guide: protecting your keys is necessary, but it does not protect you from being persuaded to pay the wrong party.

The scam combined a website compromise with an ordinary NFT sale. The reconstruction below follows what news outlets and security write-ups described at the time.

1. An attacker gained access to Banksy's official website. Reports said the site was compromised, and a page promoting an NFT auction was placed on it.
2. The page pointed to an auction. Coverage described the sale as taking place through OpenSea, the marketplace where the NFT was listed.
3. A buyer saw it and bid. Pranksy placed a winning bid of 100 ETH, believing the link from the artist's site meant the drop was authorised.
4. The page disappeared. After the sale became public, the NFT page vanished from the site, and Banksy's team did not claim the work.

The mechanism relies on one weak assumption: that a link on an official website is proof of authorisation. A website is only a set of files on a server. If someone gains access, they can publish anything on it, and visitors cannot tell the difference from the page alone.

The second weak point is that NFT marketplaces do not decide whether an artwork is real. They list what users create. A smart contract records that a certain wallet minted a token, but it cannot confirm that the wallet belongs to the artist it claims to represent. Verification has to come from outside the sale page: the artist's confirmed social accounts, announcements through several channels, and the wallet history of the seller.

Yes. Reporting from early September 2021 said the hacker sent back the funds shortly after the story broke. Outlets described the returned amount as about £244,000 or roughly $330,000, matching the original sale. Pranksy told reporters he thought the person may have returned the money out of fear after the incident attracted so much attention.

Two cautions apply when reading this part of the story.

It was not a legal recovery. Nobody forced the return. The seller chose to send the ETH back. Transactions on Ethereum cannot be reversed by a bank or a marketplace, so a victim depends on the recipient's decision or on action by law enforcement, which is slow and uncertain.

It was an exception. The case has a happy ending partly because of publicity. A scammer who cannot easily cash out a very large, highly visible transfer, and who is being discussed in newspapers, may have a reason to hand the money back. A smaller scam involving an unknown wallet has no such pressure.

From a risk perspective, this means the right comparison is not the refund. It is the 100 ETH leaving Pranksy's wallet in the first place. If you plan your security around the hope that a thief will become frightened, you have no plan. Plan instead around preventing the payment, using the checks described in the later sections.

The scam worked in part because it fit the character of the artist it imitated. Banksy is an anonymous street artist with a long record of staged surprises. The most cited example is the October 2018 auction in which a framed work partly shredded itself right after it sold for around $1.4 million, an event covered widely as another Banksy prank.

That reputation creates a useful setting for fraud:

• Surprise is normal. A drop with little warning looks consistent with how the artist behaves, so absence of an announcement does not raise alarm.
• Anonymity limits checking. The artist has no public person to call. Authenticity is normally handled by an authentication body or by the artist's own channels, which are harder for a buyer to reach in the middle of an auction.
• Scarcity creates urgency. A timed sale for a famous name pushes buyers to act before they have finished checking.
• Official channels carry weight. When the surprise appears on the artist's real domain, the usual doubts fade.

The broader point applies to any famous name, not only Banksy. The more a drop is about mystery, the less a buyer can rely on the usual signals of professionalism. Treat any sudden high-value release from a famous or anonymous creator as unverified until two separate channels you trust, controlled by the creator or their authorised representatives, say it is real. Silence from those channels is a reason to wait, not a reason to bid.

The incident exposes how NFT authenticity actually works. Understanding the layers helps you see where trust is placed and where it can fail.

What the blockchain proves. It shows that a specific wallet minted a token, who owns it now, and the full transfer history. It does not show that the minting wallet belongs to a particular artist.

What a marketplace proves. Some marketplaces add verification badges or curate creators, but a listing page is still created by a user. A badge helps, but it is only as reliable as the platform's process and your reading of it.

What a website proves. A website tells you what its owner, or whoever controls it, chose to publish. In this case, a third party controlled the page.

What the artist's team proves. Only direct confirmation from the creator's real accounts or representatives closes the loop.

So the gap is between ownership records, which are strong, and attribution, which is weak. Fraudsters work in that gap. They mint a convincing token and attach a famous name to it using a trusted-looking channel.

Three related points are worth knowing:

• Copies and impersonations are common, and marketplace takedowns happen after the sale, not before.
• A removed listing does not undo a completed on-chain payment.
• The same weakness exists in reverse: a real artist's work can be mistaken for a fake if the buyer cannot confirm the wallet.

Treat attribution as something you must verify yourself, not as something the platform guarantees.

These steps cost a few minutes and would have caught this kind of scam. Use them before any purchase large enough that losing it would hurt.

1. Confirm through two independent channels. Look for the same announcement on accounts you already knew belonged to the creator before the drop, not on a link you were just sent. If one channel is a website, check a second one that does not share its login or hosting.
2. Check the minting wallet. Compare the wallet or contract that created the NFT against addresses the creator has publicly used. A brand-new wallet with no history that claims to be a famous artist is a warning.
3. Look at the collection history. A legitimate release by an established name usually has a trail: earlier works, announcements, and community discussion. A first appearance with no trail needs more proof.
4. Be wary of urgency. Auctions with short timers and sudden appearances are designed to reduce your checking time. If you cannot verify before the timer ends, skip it.
5. Test before you commit. For a large sale, ask the creator's team for confirmation directly, or wait a few hours to see whether they dispute the listing.
6. Use a separate wallet. Keep a small purchasing wallet with only what you intend to spend, and store the rest in a hardware wallet.
7. Read the transaction before signing. Confirm the recipient address and amount in your wallet prompt.

No checklist removes risk completely, but together these steps make a successful impersonation much harder.

Different marketplaces handle verification differently, so it helps to know what you are looking at. This table summarises the types of platform on our site and what to ask of each. Features change, so confirm current details on the platform itself.

Platform type	Examples	What to verify
Curated art marketplace	Foundation	Whether the creator was invited or vetted, and whether the platform is still operating. Foundation was taken offline indefinitely on April 27, 2026.
General multichain marketplace	AtomicHub, Stargaze	Collection verification status, creator account history, and the contract address of the collection.
Pool-based NFT trading	NFTX	The collection behind a vault token, since vaults trade at floor price and do not confirm any single item's authenticity.
Physical collectibles marketplace	Courtyard	Custody, insurance and grading details for the real-world item behind the token.

Three practical points follow.

A marketplace is not an authenticator. Even where it applies verification, it covers the account or collection and not necessarily the claim that an item is a specific famous work.

Check the platform's status. Marketplaces can change, pause or close. Foundation's indefinite shutdown shows that a place that hosted art in 2021 may no longer exist in the same form, so check a platform's current state before you rely on it for a purchase or for provenance records.

Cross-check on-chain. Whatever platform you use, you can read the token's contract and history through a blockchain explorer, which gives you facts independent of any one marketplace page.

If you realise you have paid for a fake or sent funds to an impersonator, speed and documentation matter more than anything else. The advice below is defensive and general; it is not legal advice.

1. Stop further transactions. Do not send more funds to "fix" the situation, and ignore anyone who contacts you offering recovery for a fee. Recovery scams target victims of earlier scams.
2. Record everything. Save the listing page, the transaction hash, the seller's wallet address, the contract address, screenshots of the announcement, and the time you paid.
3. Alert the marketplace. Report the listing and the wallet through the platform's support or trust and safety channel. They may be able to remove the listing and flag the account.
4. Notify the real creator or their team. If the scam used a real person's name, they have a strong interest in warning others and may be able to confirm the fraud publicly.
5. Check your wallet permissions. If you also signed any approvals while interacting with the page, revoke them using a reputable permissions tool and consider moving remaining assets to a fresh wallet.
6. Report it. File a report with your local police or national fraud reporting service. Blockchain evidence can help investigators even when recovery is uncertain.

Expect that funds may not return. The refund in the Pranksy case was a rare outcome, and reporting is mainly about stopping the same scheme from catching others and creating a record if authorities can later trace the wallet.

The Pranksy episode is now several years old, and public sources that matter are stable: a compromised official website promoted a fake Banksy NFT, a well-known collector paid 100 ETH, and the money was returned days later. Dollar values quoted in old articles reflect the ETH price at that moment and should not be treated as current.

What has not changed is the underlying risk. Attackers still impersonate artists, hijack accounts and websites, and use urgency to push large purchases. Some of the tactics have moved to social media takeovers, fake mint pages and wallet-draining links, but the root problem is identical: a buyer trusts a channel that has been compromised.

Keep these principles:

• Treat every channel as fallible, including official ones. Require a second, independent confirmation.
• Match the wallet, not the name. Famous names are easy to copy; wallet histories are harder to fake.
• Size your caution to the amount. The larger the payment, the more verification is worth the delay.
• Do not rely on a refund. Plan so that you never need one.
• Check current status. For any platform or collection you use, confirm it is still active and who runs it.

NFT trading carries financial risk beyond fraud, including price swings and illiquidity, and you should only spend what you can afford to lose. The case is best remembered not as a story about one unlucky buyer, but as a clear example of why authenticity in NFTs has to be checked, not assumed.