{"id":24363,"date":"2024-04-22T02:30:07","date_gmt":"2024-04-22T10:30:07","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2024\/04\/22\/news-18093\/"},"modified":"2024-04-22T02:30:07","modified_gmt":"2024-04-22T10:30:07","slug":"news-18093","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2024\/04\/22\/news-18093\/","title":{"rendered":"Cryptocurrency fraud with Toncoin on Telegram | Kaspersky official blog"},"content":{"rendered":"<p><strong>Credit to Author: Olga Svistunova| Date: Mon, 22 Apr 2024 10:00:09 +0000<\/strong><\/p>\n<p>Making money with <a href=\"https:\/\/www.kaspersky.com\/blog\/tag\/cryptocurrency\/\" target=\"_blank\" rel=\"noopener\">cryptocurrency<\/a> is imagined by many to be a sinecure: one lucky trade and you&#8217;re set for life. While theoretically possible, just like winning the lottery, it only happens to an incredibly small number of people. &#8220;Getting rich with crypto&#8221; is more of a meme than reality. Yet self-proclaimed crypto-millionaires flaunt their Lamborghinis, stacks of cash, and watches the price of an apartment \u2014 fueling the dream. However, those cars are often rented, the &#8220;money&#8221; from a prank store, and the watches cheap knock-offs.<\/p>\n<p>These &#8220;crypto gurus&#8221; or &#8220;insiders&#8221; claim anyone can strike it rich with crypto; however, we all know there&#8217;s no such thing as a free lunch. Today, we expose the fraudulent scheme of &#8220;earning with <a href=\"https:\/\/ton.org\/en\" target=\"_blank\" rel=\"nofollow noopener\">Toncoin<\/a>&#8220;, which revolves around a cryptocurrency based on Telegram technologies.<\/p>\n<h2>How the Toncoin &#8220;earning&#8221; scheme works<\/h2>\n<p>Scammers promote a &#8220;super-secret awesome bot&#8221; and referral links as the key to earning Toncoin. In short: you invest your money, buy &#8220;booster&#8221; tariffs, invite friends, and earn commission from every coin invested. The <a href=\"https:\/\/en.wikipedia.org\/wiki\/Pyramid_scheme\" target=\"_blank\" rel=\"nofollow noopener\">pyramid scheme<\/a> incentivizes larger investments with the promise of higher returns.<\/p>\n<p>According to our data, this scam has been active since at least November 2023 \u2014 targeting both Russian and users from other countries. To make it easier to lure in &#8220;potential partners&#8221;, the scammers have recorded instructional videos in both Russian and English, along with detailed manuals and a large number of explanatory screenshots.<\/p>\n<p>Let&#8217;s break this scam down step by step. Get your <a href=\"https:\/\/www.kaspersky.com\/lp\/crypto-security?icid=gl_kdailyplacehold_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team______\" target=\"_blank\">protection<\/a>\u00a0ready, and let&#8217;s dive in!<\/p>\n<h2>Stage one: preparation<\/h2>\n<p>First, the scammers instruct you to register a crypto wallet using an unofficial Telegram bot for storing crypto. Next, you provide your new wallet address to the bot for &#8220;earnings&#8221; through purchasing boosters. What these bots are really needed for, the scammers explain to victims later; initially, their main interest is ensuring you register without asking too many questions.<\/p>\n<div id=\"attachment_51050\" style=\"width: 539px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/04\/22040321\/toncoin-cryptocurrency-scam-01.png\"><img fetchpriority=\"high\" decoding=\"async\" aria-describedby=\"caption-attachment-51050\" class=\"size-full wp-image-51050\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/04\/22040321\/toncoin-cryptocurrency-scam-01.png\" alt=\"Window of the bot for purchasing boosters; registration requires you to enter the address of the wallet previously created in the crypto wallet bot\" width=\"529\" height=\"960\" \/><\/a><\/p>\n<p id=\"caption-attachment-51050\" class=\"wp-caption-text\">Window of the bot for purchasing boosters; registration requires you to enter the address of the wallet previously created in the crypto wallet bot<\/p>\n<\/div>\n<p>Next, you&#8217;re instructed to buy 5.5 to 501 Toncoin (TON), with one TON equivalent to about six U.S. dollars at the time of writing this. They suggest using legitimate tools like <a href=\"https:\/\/en.wikipedia.org\/wiki\/Peer-to-peer\" target=\"_blank\" rel=\"nofollow noopener\">P2P markets<\/a>, crypto exchanges, or <a href=\"https:\/\/t.me\/wallet\" target=\"_blank\" rel=\"nofollow noopener\">the official Telegram bot<\/a> for this purchase. The freshly purchased TON must be immediately transferred to the crypto wallet bot \u2014 supposedly acting as your personal account within the &#8220;earning system&#8221;, which the scammers can control.<\/p>\n<h2>Stage two: take action<\/h2>\n<p>With accounts registered and coins purchased and transferred to the bot, it&#8217;s time to start &#8220;earning&#8221;. The scammers then ask you to &#8220;activate the second bot&#8221; \u2014 by choosing a booster tariff: &#8220;bike&#8221;, &#8220;car&#8221;, &#8220;train&#8221;, &#8220;plane&#8221;, or &#8220;rocket&#8221;. The fancier the tariff, the higher the commission percentage \u2014 &#8220;bike&#8221; costs 5 TON and offers 30% commission, while &#8220;rocket&#8221; is 500 TON for 70%. However, the choice is irrelevant, because whatever tariff the victim chooses, the money will be irretrievably lost.<\/p>\n<div id=\"attachment_51051\" style=\"width: 291px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/04\/22040359\/toncoin-cryptocurrency-scam-02.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-51051\" class=\"size-full wp-image-51051\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/04\/22040359\/toncoin-cryptocurrency-scam-02.jpg\" alt=\"Window with tariff selection in the booster bot\" width=\"281\" height=\"521\" \/><\/a><\/p>\n<p id=\"caption-attachment-51051\" class=\"wp-caption-text\">Window with tariff selection in the booster bot<\/p>\n<\/div>\n<p>Following the scammers&#8217; instructions, you create a private Telegram group and post several instructional videos about the &#8220;earning&#8221; scheme, along with your generated referral link. The abundance of these videos online indicates a significant number of victims have fallen for this scam.<\/p>\n<h2>Stage three: earn!<\/h2>\n<p>So, how do you actually earn something? With the help of your friends and acquaintances, of course! They will also need to buy TON, transfer it to the crypto wallet, and &#8220;activate the booster bot&#8221;. The scammers strongly advise inviting at least five friends to your private group. &#8220;The number of invitations is unlimited, and the more people you attract, the better for you. Remember: you won&#8217;t earn until at least five people activate the booster bot!&#8221;. All very tempting. They even recommend calling each friend to personally explain this &#8220;incredible earning scheme&#8221;.<\/p>\n<p>The scammers promise earnings from two sources:<\/p>\n<ol>\n<li>A fixed payment of 25 TON for each invited friend.<\/li>\n<li>Commission based on the booster tariff purchased by your referrals.<\/li>\n<\/ol>\n<p>It turns out to be a classic pyramid scheme, where each participant is &#8220;a partner rather than a freeloader&#8221;. Sadly, nobody profits except the scammers, and all &#8220;partners&#8221; lose their investments.<\/p>\n<h2>How to avoid crypto scams<\/h2>\n<ul>\n<li>Don&#8217;t fall for get-rich-quick schemes \u2014 even if promoted by friends or family. They might be victims themselves, unaware of the scam.<\/li>\n<li>Never transfer cryptocurrency to unknown or obscure wallets. This scam uses a confusing sequence of instructions, making it easy to overlook the suspicious transfer of money from the <a href=\"https:\/\/t.me\/wallet\" target=\"_blank\" rel=\"nofollow noopener\">official @wallet bot<\/a> to a third-party one.<\/li>\n<li>Use <a href=\"https:\/\/www.kaspersky.com\/lp\/crypto-security?icid=gl_kdailyplacehold_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team______\" target=\"_blank\">maximum protection<\/a>\u00a0for your crypto assets. This will securely store your wallet data, warn you about suspicious websites, block crypto-phishing links and scams, and protect you from miners and other threats.<\/li>\n<li>Read our <a href=\"https:\/\/www.kaspersky.com\/blog\/tag\/cryptocurrency\/\" target=\"_blank\" rel=\"nofollow noopener\">posts about crypto scammers<\/a> to stay informed about all the latest fraudulent schemes, and don&#8217;t forget to share them with friends and family \u2014 especially those who still aren&#8217;t all that internet-savvy.<\/li>\n<\/ul>\n<p> <input type=\"hidden\" class=\"category_for_banner\" value=\"premium-crypto-fraud\" \/> <br \/><a href=\"https:\/\/www.kaspersky.com\/blog\/toncoin-cryptocurrency-scam\/51042\/\" target=\"bwo\" >https:\/\/blog.kaspersky.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/04\/22040054\/toncoin-cryptocurrency-scam-featured.jpg\"\/><\/p>\n<p><strong>Credit to Author: Olga Svistunova| Date: Mon, 22 Apr 2024 10:00:09 +0000<\/strong><\/p>\n<p>Cryptocurrency scammers have devised a new &quot;earning&quot; scheme: they encourage users to buy Toncoin, invite friends through referral links, and then make big profits from their investments.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10425,10378],"tags":[14147,9751,32,3985,11642,10428,31298,11532],"class_list":["post-24363","post","type-post","status-publish","format-standard","hentry","category-kaspersky","category-security","tag-cryptocurrencies","tag-fraud","tag-news","tag-scam","tag-telegram","tag-tips","tag-toncoin","tag-trends"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/24363","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=24363"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/24363\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=24363"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=24363"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=24363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}