Advanced Crypto Phishing – Why you should take your time to verify

Advanced, modern day phishing campaigns are using proxy mirrors to allow you to access the desired site, and even communicate with staff, but your connection essentially runs through a malicious third party (the proxy mirror).

Once you try to place an order, or need to send bitcoin to a payment address, the market's payment addresses have been altered by the malicious third party to trick you into sending funds to the phisher's wallets.

Same goes for communication. If the website's staff send you the correct link to the market the phisher could automatically replace it with a phishing link.
If you send them the phishing link the phisher could exchange it for a legit link in an attempt to obfuscate his tracks.

This is how I lost a portion of my funds and quite a lot of other people, according to the reports.
In order to avoid getting phished with this method, always verify the link via PGP (especially onion URLs).