Unstoppable Domains — Get your daily AI drops report

alert Bitcoin Escrow Scam

NamecheapNamecheap
Watch
Impact
1,101
Hello all, just to warn the community here that I've received suspicious Flippa offers recently.

I've played around one of them to learn more about the structure of the scam. Replied to the offer and took screnshots during the negociation that followed to document the process.

I had in mind that I may write a small step-by-step for all to learn how to detect scams.

Here is what happened.

1. Offer (suspicious!)

Context:
MusiqueClassique .com is listed as Make offer > $1,000 on Flippa
(means "Classical Music" in french).

I've received many lowball offers during the years so I've put a 4 figures min offer to stop these.

Here is the message I received.

upload_2020-7-28_16-58-9.png


Why is it suspicious?

  • Comes from a brand new user (Flippa account created a few days before message). 0 transactions yet.
  • "Kan JUn" seems like an Asian name, the domain is a 2 french words one MusiqueClassique .com and is quite niche. Agreed a French user could want it and create a fake account to hide his ID, but I think he would chose a French name or pseudo.
My reply "BIN is $9,995, ready to consider any 4 figure offers".


2. Negociation (very suspicious!!)


He comes back with "I'm ready to offer $5,700 but payment has to be in Bit-coin because I am from china and international payment is difficult".
  • He confirms that he is from China and interested in this french niche domain. OK, it could happen, but seriously... I love this domain because I'm a musician and I still dream of developping it into a nice website someday, but I'm not sure it's a sound investment for someone willing to pay thousands of dollars in a discreet way from China...
  • No negociation, already offering a sum > half BIN. Whereas my min offer is $1,000.
  • We will have to move out of the platform as Flippa doesn't offer BTC payment.
I'm not opposed to BTC payments, and since these are final (you can't recover a BTC payment), then there is only one way to secure payment for the buyer: go through a Bitcoin Escrow service.

(Because if the buyer sends BTC directly to the seller, once it is in the seller's wallet, nothing can force him to honour the sale and transfer the domain).

My reply "I'm happy to accept your offer as it is very reasonnable. Flippa doesn't allow BTC payment I think, what do you suggest?"

Let's see where that takes us...


3. Follow me down the rabbit hole (highly very beaucoup très suspicious!!!!)

He offers we follow up on Telegram, gives me the @Amidamary1900 contact which leads to a "Han Chao" profile. Why not!
  • Telegram means anonymous / non traceable if you take the right precautions
  • We are now "out of platform", so there no third party to turn to if anything bad happens.
Still giving this joke a chance, I decide to act as I would do in a legit transaction. Thus I suggest we go through a BTC-Escrow. There happens to be at least one registrar that can play that role: Epik. Here is my first message on Telegram:


upload_2020-7-28_17-36-25.png

If he agrees to that, then it's Christmas! I'm ready to transfer the domain and we can conclude that transaction the same day. But of course, he has his own Escrow solution in mind.

upload_2020-7-28_17-37-43.png

4. The BTC-Escrow so suspicious that it's not even fun anymore.

Now we are at the heart of the scam.

What's gonna happen is
  • I agree,
  • I create an account on the website http://cryptodaxex.xyz,
  • wait for "Kan JUn", now "Han", to send his 0,55 BTC or so (BTC on the rise today!).
  • I will soon enough receive an email stating that "the funds are secured and I can now transfer the domain safely".
  • Once the domain transfered out of my registrar I'll ask for the BTC to be transfer to my wallet. Which will never happen because... http://cryptodaxex.xyz is a scam!!

How do I know? I've done some due dilligence.

"cryptodaxex.xyz" gives only 8 or so results! Well, for an Escrow service, you need TRUST and recognition. 8 results is bad...

One of the google results leads to an article about the death of cryptodaxex 3 years ago :xf.eek::xf.eek::xf.eek:

upload_2020-7-28_17-56-51.png


Another leads to TrustedsReviews.xyz which gives a few reviews of cryptodaxex, the oldest one being 3 days old! (By "Justin Sun", which is hilarious to those knowing a bit about crypto!)​

upload_2020-7-28_17-53-45.png


Looking at the whois of cryptodaxex.xyz and TrustedsReviews.xyz is even funnier...

upload_2020-7-28_17-59-53.png



upload_2020-7-28_18-0-27.png


Both sites are only a few days old. The scammers managed to rank the review site on Google in a few days and started rolling out scam sites that have "reviews"...

With all that data, I decide to have a bit fun and ask my buyer a few questions...

upload_2020-7-28_18-4-26.png

upload_2020-7-28_18-5-10.png

upload_2020-7-28_18-5-29.png


Of course, got no replies after that.

That was fun for me, but remember that scam happens and that you need a secure payment solution... And that YOU need to make sure it is really secure!

Best of luck in this wild world...


PS. can't find the conversation in my flippa account anymore, I guess Flippa did detect and suppress the fake account.
 
Last edited:
51
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
GoDaddyGoDaddy
Hello , I am Rabiul.
Thanks for this informations.
 
0
•••
Nick "Jan Lean", is it right? :), he sent me "Hi again, I can offer $ 15500 on the condition that we conduct a transaction via bitcoin, the fact is that I live in China and in my country, there are problems with paying abroad due to the policy in my country"

And finally, he said: "only crypto escrow cryptodust. us"
The same kinda person contacted me too and the lines were exactly the same, unfortunately, I got scammed and lost my domain, he contacted me on facebook.
 
0
•••
Hi all

Unfortunately being new to BTC but not new to online trading but I have fallen for this scam as well.
I was targeted on flippa as well.
I've only lost the domain, haven't lost any funds.
Same operation as the examples above, transfer site looked legit but not knowing too much about BTC I fell for it.
Tried to withdraw but site asked for a deposit from your destination BTC address to "verify" first.
This seemed suspicious to me so I decided to research before transferring any funds in.
Lucky found this thread before continuing and didn't lose any money.
Lost the domain tho.
Fake exchange site was changedeal.com which has now been taken down.
I'm normally really good at fishing out scams but I guess an unfamiliar payment method has rattled me a bit and I've let my guard down.
Scammers 🖕
 
1
•••
0
•••
I have come here to add my 2p and express extreme disappointment with Flippa

Someone who called themselves Sam Chou tried this on me. I knew from the instant they offered me a large sum no questions asked, it was a scam. However researching the scam lead me to this thread.

I followed through with all their suggestions and played dumb. You know, what is bitcoin? how does this work? type of dumb questions.

They asked me to register at dealchange dot net

A quick whois lookup revealed the domain was about a week old. However I did register as I was curious but used TOR to access the site and a throwaway email address.

Eventually they gave up with my dumb questions and cancelled the deal after supposedly putting bitcoins into the wallet. I did a quick wallet check and there was no actual bitcoin in the wallet however their website claimed there was $2700 in there.

The website was also buggy as hell as well.

So I wasted a little bit of their time and learnt a little bit myself.

Now to the disappointing part.

The disappointing part was when I reported it to Flippa they actually suggested I go through with the deal but if I was unsure to tell them to stay on flippa.

They denied any knowledge on what appears to be a common scam. My first time on Flippa and within 2 days I was targeted.

This is an excerpt of the email From Flippa Support.

Having read your comms i dont se that they have tried to scam you.
They have simply offered a means of paying that we dont accept or service on platform,

...

If you are not interested in proceeding with them in a sale then i would advise you to tell them that you wont be proceeding or doing business with them unless it is via Flippa's services where protection can be provided.

We will be reaching out to Sam to discuss this and educate them as to how things work and what is expected of them when using Flippa.
(The spelling mistakes are theirs)

Given the discussion thread here it is inconceivable to me they are not aware of this scam. If they aren't then it shows a complete lack of regard for their customers, if they are then that response shows a complete lack of regard for their customers.
 
Last edited:
1
•••
An update
A reply from Flippa.

This is the first time i have been made aware of this and like i noted they are suspended so cannot make offers or buy/sell currently. We appreciate our users raising concerns directly with us so that it can be investigated. Had those forum posters contacted us or followed our processes etc there is no way to be scammed via Flippa.
Clearly this mob is just trying to deny the truth.

People on this forum (I gave Flippa the link) have contacted them. and in his first email he had not suspended the account of the perpetrator but instead suggested I go forward with the sale but on their site.

This is the first and last time I will use Flippa. I suggest it is the last time anyone else does as well. It saddens me that I paid them (Flippa) and their responses at best could be described as flippant.
 
0
•••
This a very Organized SCAM FROM Escrow LONDON ltd

Please watch out. Escrowlondonltd is a very organized Crypto scam. I just lost my $1000 to them. It's so organized that you won't have a clue until you send your money.

They even ask for your verification and your ID card. I'm afraid they won't use my ID for fraud.

Here's the kind of thing they say: "You can withdraw your funds only to address, which is registered and verified with your account. You have to make a deposit from that address to verify your address with your account. The minimal amount of the deposit is 0.019 BTC. The deposited amount is completely refundable and you will be able to withdraw it back all together with your current balance immediately."

And once you do that, they will try to get you to pay more saying this`:

"Dear customer, the System sees that you didn't cover the Insurance trading deposit, which is a mandatory option for every customer, who uses the service of cryptocurrency. You have to make an insurance payment to withdraw your funds. This insurance payment will be refunded in 7 days to your external wallet if you have no complaints. This rule is introduced according to the Article of the Fourth EU Money Laundering Directive for every customer. The amount of insurance is 0.05 BTC."

Don't trust them. They are a Big Fraud.
 
1
•••
I appreciate your helpful, step-by-step instructions. Your thorough analysis makes navigating the complicated world of online frauds simple for everyone. Since knowledge and education are essential instruments in the battle against scams, I applaud the emphasis on these areas. It is evident from the useful advice and real-world examples given that being vigilant is essential. I'm looking forward to putting these tactics into practice to keep myself and others safe from scammers. Bravo for arming us with the knowledge we need to stay safe online!
 
0
•••
@FickleCell,
Never send your ID to any online company including the most known, most reputable ones. KYC is a must only when you open a bank account or want a debit/credit card. Never send your ID documents online to any company.

As to bitcoin, I have never been scammed for accepting/paying in bitcoin, despite the numerous deals since 10 years. I don't count a scammer here on NP forums who scammed me for $10 or less. Bitcoin and other crypto currencies are the most secure way to pay or to get paid.
 
Last edited:
0
•••
Dynadot — .com TransferDynadot — .com Transfer
Appraise.net

We're social

Escrow.com
Spaceship
Rexus Domain
CryptoExchange.com
Domain Recover
CatchDoms
DomDB
NameFit
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back