Scammers Exploit Telegram Users in Sophisticated Toncoin Theft Scheme
Scammers have recently been employing a sophisticated tactic to steal Toncoins (TON) from Telegram users worldwide, as reported by researchers at Kaspersky. This scheme, which has been in operation since November 2023, takes advantage of the increasing popularity of both TON and the messaging platform Telegram.
How the Scheme Works
Victims from various regions have been targeted by fraudsters who lure unsuspecting Telegram users through a referral system. They promise an “exclusive earning program” shared via contacts in the victims’ networks. Once lured in, victims are directed to join an unofficial Telegram bot that supposedly stores cryptocurrency and link it to a legitimate wallet. They are then instructed to acquire Toncoins through official channels like the Telegram bot, P2P markets, or cryptocurrency exchanges, creating a false sense of security.
Subsequently, victims are pressured into purchasing “boosters” through a separate bot. These boosters, named as “bike,” “car,” “train,” “plane,” or “rocket,” come with varying costs ranging from 5 to 500 Toncoins, depending on the selected tariff. The scammers advertise these boosters as tools that can help users earn on their coins, similar to boosters in online games.
Further Escalation of the Scheme
The scheme intensifies as victims are urged to create private Telegram groups with friends, sharing referral links and instructional videos pre-recorded by the scammers. This manipulation tactic preys on the victims’ trust in their social circles to further the fraudulent scheme.
Protecting Against Scams
With the Telegram Open Network (TON) reportedly boasting 900 million monthly users, it has become a prime target for fraudulent activities. In light of these developments, Kaspersky experts advise users to be cautious of promises of quick riches and to remain vigilant when engaging in cryptocurrency transactions. They recommend implementing comprehensive security measures to protect against scams and staying informed about evolving fraudulent schemes.
For more information on threats targeting cryptocurrency, you can also read about the recent cloud attack that targets Crypto CDN Meson ahead of its launch.