Protecting Virtual Economies: A Blockchain-Based Anti-Phishing Authentication Protocol for Metaverse Applications
Chien‐Ming Chen, Zhongchao Xiong, Tsu‐Yang Wu, Saru Kumari, Mohammed J. F. Alenazi · IEEE Internet of Things Journal · 2025
Phishing attacks pose significant cybersecurity threats in the metaverse, particularly in virtual gaming environments where sensitive identity information and digital assets are at risk. This paper introduces a blockchain-based anti-phishing authentication protocol that enhances the security and efficiency of virtual game recharge orders. The proposed protocol integrates elliptic curve cryptography, symmetric encryption, and Chebyshev chaotic mapping to establish a robust three-factor authentication mechanism. By leveraging blockchain’s decentralized and tamper-proof properties, the protocol securely stores identity information and authentication keys, enabling users to effectively identify phishing websites and ensure secure cross-platform transactions. Security analysis using the Real-Or-Random (ROR) model demonstrates the protocol’s resistance to phishing attacks, and its provision of forward security and anonymity. Comparative performance evaluation also highlights the protocol’s significant advantages in computational and communication efficiency over existing methods. This study contributes to the advancement of secure virtual transactions, fostering trust and sustainability in the metaverse economy.