>>> Scam Alert <<<< SMS Scam of 9.8 BTC Deposited - binancial.io

[shahzadafzal]

(In progress, because they haven't asked me to deposit any BTC or pay them to withdraw my bitcoins)

Wow I'm really impressed these scammers have really geared up. I just received below message and it goes like this.

So apparently you receive a message like this, claiming your bitcoins deposited, with web address of a valid exchange (almost) and userid and password.



Of course I'm not John but this 9.8 BTC is so tempting so let's check and verify.. a quick verification process..

1. BTC to USD amount? pretty accurate... ✔
2. Exchange Web site? looks legitimate... ✔
3. Login userid and password? yeah it works...  ✔
4. Login successful and you see your 9.8 BTC ...  ✔




Wow this is one amazing portfolio... and on the exchange every thing is working, no broken links.

Now can I withdraw may 9.8BTC please?

Ok let's try.. so yes I can withdraw... but wait there is some limit for my own safety of course, it says...

"FIRST WITHDRAWAL LIMITATION:
To reduce cases of error withdrawals from new portfolios, we limit your initial withdrawal amount to 0.00011 BTC. You may withdraw any amount after successful completion of your first withdrawal. "

Fine, i will withdraw 0.00011 BTC only ok ok



So there's an OTP, pretty very secure han? oh by my bad the phone number mentioned is wrong. That's not my number... ok let me try random OTP digits.. nope its not working!!!

Hmm so i think I should update my mobile number in my profile.



Nope. There is no option you can update your name of course from "Private User" to any thing, you can change email... but phone no

So what option do i left with? oh there is Inbox and message option.. let me contact support to change my mobile number awesome!

So I sent message at 9:33AM



and I got immediate reply at 9:38AM that's pretty fast amazing customer service.



I explained the reason why i want to change my number



and got reply at 9:44AM



well, ok they can change my number. Since they already have my number from first step when they sent me message so i guess no harm in giving them back my number again.



and reply is totally unexpected....



wow they have changed my mobile number... that's perfect.

Ok now let's go and withdraw the damn BTC...

Let's try with 1BTC... nope still i should withdraw 0.00011 BTC first...

oh no... looks like my mobile number still not updated

sent them another message to please update my mobile number again... waiting now..

Feel free to login and play around, and  please help me to get 9.8BTC and yes half is your if you able to withdraw successfully.

Code:

https://binancial.io/
userID: 25621152 
Pass: bighy76

Disclaimer: Try at your own risk... and I trust you bitcointalk so please don't change the password



Edit:
I really don't know how but the original password they sent was bighy76 but some how it's not working any more... but then i randomly tried bighy766 and it worked.

Edit 2:
Shocked!!!!!!!!!!!!, transaction is in progress on blockchain.com.... WTH is this sorcery?
https://www.blockchain.com/btc/address/1LxLitf3CehvywuxEPnQXnDCdZJzhy6Sgq

Hiding some details... don't ask me why!!!!!


Update-1:
another good news number is update successfully


and now when I tried to withdraw, I did receive the OTP on my number



what is going on here? This is OTP isn't free... as far as i know scammer won't spend a single penny... why would they send me valid OTP.

and it's working and BTC are on it's way... or i think so... because there no link to transaction it self just these messages..





let's wait for BTC to arrive



Update-2:

I have received the funds +0.00010992 BTC ~ $6.57, damn it... so where is the scam? i'm still figuring out...



Update-3:

So here is the scam ...

[aioc]

This is something new I log in on the details you've sent here, and I have a similar experience like yours I checked the site traffic and it's a new site because there is not enough information on itit, you did not mention that they are asking funds so they can unlock or change the phone, but once they do ask, we can consider this as similar to those airdrops where you will need to send them funds first before they will grant your request.

Looking for more updates coming from you, so we can see if it is a new scheme meant to scam people.

[shahzadafzal]

So, mobile number is updated and I did receive the SMS... this is strange..

Update the in OP and I tried to withdraw 0.00011 BTC, and it's in progress check Update-1 in OP

[shahzadafzal]

Shocked!!!!!!!!!!!!, transaction is in progress on blockchain.com.... WTH is this sorcery?
https://www.blockchain.com/btc/address/1LxLitf3CehvywuxEPnQXnDCdZJzhy6Sgq

Can some one please explain what is going on? Any one have any idea about it?

Edit:

BTC received.... update in Update-2 in OP..

So where is the scam??? help me to find out :p

[zanezane]

I guess you just scammed the scammer out of their bait money, I am pretty sure that the next time is going to be where they are going to put the trap, be careful with this one though as they might be trying to get some sort of remote access of your device, that is why they want to entice you with the free money.

[dihari]

Please give an updated on this

"FIRST WITHDRAWAL LIMITATION:
To reduce cases of error withdrawals from new portfolios, we limit your initial withdrawal amount to 0.00011 BTC. You may withdraw any amount after successful completion of your first withdrawal. "

After your successful first withdraw, you should be able to withdraw the next bigger one. Or in my prediction, they will ask you to send some btc to be able to withdraw the rest of btc in that account.

[shahzadafzal]

Please give an updated on this

"FIRST WITHDRAWAL LIMITATION:
To reduce cases of error withdrawals from new portfolios, we limit your initial withdrawal amount to 0.00011 BTC. You may withdraw any amount after successful completion of your first withdrawal. "

After your successful first withdraw, you should be able to withdraw the next bigger one. Or in my prediction, they will ask you to send some btc to be able to withdraw the rest of btc in that account.

Well i have been trying since that time... looks like some kind strange message and limit

if the amount is less then 9.811889 BTC this is the message



and if amount is > 9.811889 BTC i get this message



and when I try to withdraw same amount as limit 9.811889

then i have to deposit 0.01199892 BTC to proceed... good good...


So here is the scam....  they sent me +0.00010992 ~$6.57 BTC FREEEE

and now I have to deposit 0.01199892 BTC ~ $715.28 USD to withdraw my 9.8 BTC.


Another fun part, i can deposit any amount BTC, even if it's more than 21 million

Here i'm trying to deposit 2.1 Billion BTC yes BTC no USD :p

[BitcoinGirl.Club]

So here is the scam....  they sent me +0.00010992 ~$6.57 BTC FREEEE

and now I have to deposit 0.01199892 BTC ~ $715.28 USD to withdraw my 9.8 BTC.

This was meant to be happened.

Now imagine someone with no idea of cryptocurrency scams will puzzle themselves once they will receive the small amount in their address. They will then think it's all legit and will desperately look to buy the ask amount in BTC and deposit it to that platform.

I have seen you post in WO an hour before about it and I wanted to log in to that system but found the wrong credential. Even users like us were confused until you made your last post. We knew something wrong and it was possible that they sent a message to you instead of a person x (in case of legit things). Imagine a reputable crypto exchange sent an OTP to the wrong phone number and somehow from that number the wrong guy figured to log in the system and stole the money or say withdraw the money.

Anyway, scammers are still making money using this kind of ninja techniques.

[khaled0111]

I have received the funds +0.00010992 BTC ~ $6.57, damn it... so where is the scam? i'm still figuring out...

This is exactly what they want! They want you to believe they are not trying to scam you and to think that all of this is just due to a bug in their system or something like that.
This is a smart and well thought out scam, imo. All other similar scams, that I know of, will not let you withdraw any thing. They will just ask you to make a small deposit before you can withdraw the whole amount but in this one they clearly don't mind spending few bucks in order to gain their victims trust.

[shahzadafzal]

Since I figured out the scam:

You can try your luck too, here is login details...

Code:

https://binancial.io/
userID: 25621152 
Pass: bighy766

Again please don't change the password

[shahzadafzal]

This is exactly what they want! They want you to believe they are not trying to scam you and to think that all of this is just due to a bug in their system or something like that.
This is a smart and well thought out scam, imo. All other similar scams, that I know of, will not let you withdraw any thing. They will just ask you to make a small deposit before you can withdraw the whole amount but in this one they clearly don't mind spending few bucks in order to gain their victims trust.

That's true and I'm really impressed how much effort they put to plan all this... definitely they have spent money building this working portal + they paying for international SMS and someone really sitting and replying to your messages. 

But other then the money the effort they have put and the idea I would say 10/10.... this can fool any one very easily.

This site has been up for just 5 days... i'm afraid they goin to scam many people... they just need the mobile number and thanks to fb like leaks now our personal information is available to hackers for free.

Whois Record for BinAncial.io
Dates   5 days old
Created on 2021-04-06

Stay safe and stay vigilant every one!!

[shahzadafzal]

I have seen you post in WO an hour before about it and I wanted to log in to that system but found the wrong credential.

I opened the credentials again you can try if you want
userID: 25621152
Pass: bighy766

[LoyceV]

You can try your luck too, here is login details...

It's not loading on Tor (and I'm not willing to go less private than that).

this can fool any one very easily.

Only if they ignore the basic rule: never pay to receive money.

Can you withdraw 0.00011 BTC again?

[khaled0111]

It's not loading on Tor (and I'm not willing to go less private than that).

You have to have JavaScript enabled in your browser to access the website. Not worth the hassle, imo

I opened the credentials again you can try if you want
userID: 25621152
Pass: bighy766

I got the credentials earlier from the unedited post on LoyceV's website and after logging in and trying to withdraw I got the low balance error message.

Can you withdraw 0.00011 BTC again?

No, at least not from the same account!

[shahzadafzal]

Can you withdraw 0.00011 BTC again?

Yeah I tried it’s not working...  I was trying different methods too and tried to inspect element and changed some values here and there... I noticed portfolio ids are sequenced so I’m still suspecting may be you can withdraw from some other accounts.

Well one thing still I could not figure out was the password... they sent me “bighy76” and it worked for the first few times. But later it was not working and I randomly tried “ bighy766” and it worked. How?

May be someone from Bitcointalk who read my post and changed the password?

[Lucius]

But other then the money the effort they have put and the idea I would say 10/10.... this can fool any one very easily.

Did you at any point even think that someone would give you almost 10 BTC? This is just a more insidious version of the scam that has already become a classic "in order to withdraw send coins to this address to prove your identity". Of course, some will really think that their happy day has come, but they belong to the category of people who will believe in anything and everything - but some things still exist only in fairy tales or SF movies.

What you need to worry about more is the fact that someone has your mobile number and knows that you have connections with cryptocurrencies which poses a security risk, but not only the one involving phishing SMS/e-Mail, but also the physical one. As for SMS and e-mail spam, the first is easily solved by blocking all unknown numbers, and the second by marking e-mails as spam.

Another thing that can help others, if you have a telecommunications regulatory agency in your country, you can report your case to them - and the end result could be blocking that number or the entire service at the national level.

[RickDeckard]

This in a really interesting investigation OP, congratulations! At the end of the day you were the one that end up winning around $7 USD, so be happy! If 100 people end up doing the same in depth analysis of the exchange we're talking about $700 lost from there scammers... The sad thing, however, is that you went ahead to this exchange already with your scam detection radar 100 % turned on. I'm most sure that the way that they've built this "scam" will for sure generate in a lot of income from people that are new to crypto and exchanges in general.

Hell even I became surprised when they actually sent you that money, I can't even imagine what an average Joe may think about whenever they see this kind of "legit" activity. I've report this website and I encourage anyone to do the same, we're talking about something that could for sure take a lot of money from people that aren't as informed as we are.

[shahzadafzal]

What you need to worry about more is the fact that someone has your mobile number and knows that you have connections with cryptocurrencies which poses a security risk, but not only the one involving phishing SMS/e-Mail, but also the physical one. As for SMS and e-mail spam, the first is easily solved by blocking all unknown numbers, and the second by marking e-mails as spam.

Another thing that can help others, if you have a telecommunications regulatory agency in your country, you can report your case to them - and the end result could be blocking that number or the entire service at the national level.

Well you right and I’m worried about it and it's true I have been receiving phone calls form different exchanges and trading agents and all calls were from foreign counties like UK +44, US +1 and recently +26, +22 (of course no I’m not picking any unknown calls).  So it's quite obvious it has been and linked to me as protentional trading or crypto investor or bitcoin user.

On the second hand I’m still ok that this is not my primary number... I have used this number whenever I suspected the website and I will admit in 2017-2018 when I was new to Bitcoin and was still not sure if Bitcoin is a scam or not. And I did use this number on shady exchanges like Yobit, HitBTC and I don’t even remember the names. It was time when exchanges and crypto coins were popping out like wildfire and were spreading like coronavirus.

So during that time...I suspect any of those website specially this Yobit might have leaked this data.

Yes I did report to local Telecommunication Authority here in my country. Thank you for you advice.

[shahzadafzal]

Hell even I became surprised when they actually sent you that money, I can't even imagine what an average Joe may think about whenever they see this kind of "legit" activity. I've report this website and I encourage anyone to do the same, we're talking about something that could for sure take a lot of money from people that aren't as informed as we are.

Yes there are a lots of Joe and Johns wo want to get get rich quickly and are ready to risk their hard earn money.

I have updated the title to include the website name so google search can pick it up.