Tomboi exchange - SCAM 100K$

[85pandora]

What happened:: I did a swap of 50 ETH and only received $10 in return. After I contacted support, their website went down. I then reached out through their onion (Tor) site, which also went offline right after I messaged them. Their entire infrastructure now appears to be down., That's kinda weird because i did lot of swaps with them in past, and large amounts and no problems, now i don't understand what happened.

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=904992

Reference Link: https://bitcointalk.org/index.php?topic=5580195.0
Amount Scammed: 100.000$
Payment Method: SWAP - exchange 
Proof of Payment: i can upload everything for admin if will not be solved
PM/Chat Logs: i can upload everything for admin if will not be solved 
Additional Notes: I strongly advise against using this platform until my issue is resolved. I hold all the evidence and am ready to provide it to an admin for verification.

[albon]

I hope this is only a temporary issue and that they will resume operations again, rather than it turning out to be an exit scam.





Both their clearnet website and onion service became unavailable:



Getting only $10 in return for swapping 50 ETH, worth nearly $100,000, is a disaster.

It's good that you pointed out your issue in their announcement thread.

Avoid this website for now

I did a swap of 50 ETH and only received $10 in return. After I contacted support, their website went down. I then reached out through their onion (Tor) site, which also went offline right after I messaged them. Their entire infrastructure now appears to be down.
I strongly advise against using this platform until my issue is resolved. I hold all the evidence and am ready to provide it to an admin for verification.

I'm not an admin, but I am a DT1 member. Could you send me the relevant evidence through forum PMs so I can review and verify it now?

[85pandora]

I hope this is only a temporary issue and that they will resume operations again, rather than it turning out to be an exit scam.





Both their clearnet website and onion service became unavailable:



Getting only $10 in return for swapping 50 ETH, worth nearly $100,000, is a disaster.

It's good that you pointed out your issue in their announcement thread.

Avoid this website for now

I did a swap of 50 ETH and only received $10 in return. After I contacted support, their website went down. I then reached out through their onion (Tor) site, which also went offline right after I messaged them. Their entire infrastructure now appears to be down.
I strongly advise against using this platform until my issue is resolved. I hold all the evidence and am ready to provide it to an admin for verification.

I'm not an admin, but I am a DT1 member. Could you send me the relevant evidence through forum PMs so I can review and verify it now?

I sent u PM

[albon]

I sent u PM

Update:

@85pandora sent me the following evidence via PM:

1. A video showing the transaction on Tomboi. The video shows the page still open when the site went offline.. It also shows that the website displays the same outgoing transaction hash and the same recipient address shown by the OP, while showing an outgoing amount of 50.45421687 ETH.

2. Support chat screenshots from before the shutdown. In the chat, Support said it was probably a mistake and that they would check what happened.. After that, they disappeared completely and stopped responding.

3. The transaction shows that only about $10 was received rather than 50 ETH. Also, the platform's payout address looks like a newly created wallet with only 8 total transactions and was funded approximately 20 hours before the payout transaction.

What I have requested from the OP is the following:
1. The full Monero TXID of the deposit.
2. The transaction private key, if available.
3. The Monero deposit address provided by the platform.
4. Any screenshots, emails, order IDs, or PGP-signed messages related to the transaction -> containing the trade details (amount, addresses, and timestamps).

I'm waiting for his response..

[hugeblack]

Since you received only $10 (and nothing at all), this might indicate a problem. You shouldn't trust any service with that amount; it should be divided into smaller sums.

If nothing else happens, let's hope you can recover at least $10,000.

[albon]

Update:

Based on the available evidence, it appears that tomboi.io / tomboi.exchange failed to fulfill the agreed swap (250 XMR -> 50 ETH). They only sent around $10 in return to @85pandora.

Swap ID: #F7WY1UEVAN

Transaction creation date and time: June 1, 2026, at exactly 09:33:19 UTC.

I verified the outgoing transaction using Feather Wallet:

Txid: c91a94ac69fd9a6f97fea0cf4c14921105848ad1f4e9a45b134860bf85df3af

Target deposit address:
85RW****KExNoU

The result "Proof is valid" was successfully obtained, confirming the receipt of 250 XMR with more than 437 network confirmations, and this shows that the funds were sent from the wallet and appear to have been received by this platform.



When I verified the digitally signed message provided by the OP using BitList, it was confirmed to be valid and associated with them:

Verification Successful
Signature verified successfully
Signed by: Origin Exchange Signing Key security@origin[.]local

Also, after the Monero deposit reached full confirmation (10/10 confirmations), the website interface displayed a green notification indicating that the Ethereum payout had been sent with the following transaction ID: 





https://etherscan.io/tx/0x95bb6b8330e48750ec61e9a7e7facd8497ba4ce3b48fea2d03e96f1f50d35c81

However, upon checking this TxID on Etherscan, it shows that only 0.0050454216 ETH [$10] was sent instead of the promised 50 ETH.



This video was recorded by the OP: https://streamable.com/e6f8b0 -> showing the interface after the website had already gone offline while the page was still open.


In the support chat, right after they confirmed the withdrawal of funds, they completely cut off communication.



Around the same time, both the clearnet website and the Tor service became inaccessible. The available evidence strongly points toward an exit scam..

[Trêvoid]

a classic example of "exit scams"

Why would you trust an exchange that's not listed on kycnot.me?



service started operations 1 month ago

I always tell be cautious of newly created services or fake no-KYC exchanges and swap services that pretend to be legitimate but actually they are just resellers!

Don’t fall for their low-rate scams this is a common tactic they use.

I hope it's not an exit scam and that you get your funds back.

Best regards,
— Trêvoid

[AHOYBRAUSE]

Man, that's harsh. Did Tomboi have any kind of reputation before. I am doing smaller swaps sometimes so I was always on the lookout for new sites, yet I have never heared of this one honestly.
Sending 100k worth of coin to a small exchange is such a high risk, I would never ever do that. At least start with small installations or something instead of sending all in one transaction.
But obviously all this advise doesn't help OP with anything since it's already too late. What a shame.

[rat03gopoh]

I wonder if they have a real-time liquidity reflector capable of handling such high order volumes? 50 ETH would net them 90% of the escrow amount if they turn out to be a scam. But I can only hope this isn't an experience that will end badly.

[Jogras]

Tomboi has a $10,000 deposit on KycNotList. Contact the site administrator; they might be able to reimburse you for some of your losses.
https://www.talkimg.com/images/2026/06/02/Uj95k8.png

[hugeblack]

Tomboi has a $10,000 deposit on KycNotList. Contact the site administrator; they might be able to reimburse you for some of your losses.

Unfortunately, these deposits in escrow represent the amount deposited with @LittleMouse.
Edit: Let me verify this information.
Adding a negative trust won't change much. Please create a flag so it will visible to non-registered users.

[Trêvoid]

Tomboi has a $10,000 deposit on KycNotList. Contact the site administrator; they might be able to reimburse you for some of your losses.

Unfortunately, these deposits in escrow represent the amount deposited with @LittleMouse.
Adding a negative trust won't change much. Please create a flag so it will visible to non-registered users.

I believe these users are the same people who run exit scams, they quickly create a new service, deposit a small amount, and lure customers with low fees. I always warn everyone to be careful don’t trust newly launched services advertising low fees like 0.5%, 1%, or 1.5%. It may sound attractive, but it can lead to massive losses.

I'm creating a site where users can check swap services I'm tired of seeing scams, so instead of waiting, I'll build my own recommendation list so it might help some users.

+ create a flag need it.

[examplens]

I believe these users are the same people who run exit scams, they quickly create a new service, deposit a small amount, and lure customers with low fees. I always warn everyone to be careful don’t trust newly launched services advertising low fees like 0.5%, 1%, or 1.5%. It may sound attractive, but it can lead to massive losses.

I'm creating a site where users can check swap services I'm tired of seeing scams, so instead of waiting, I'll build my own recommendation list so it might help some users.

+ create a flag need it.

There is always a vacuum with new services. They have to start with a low service fee in order to attract users. How else to stimulate people to start using their service, and not a previously proven one. Everyone was at the beginning once.
My point is that a service has to go through at least one cycle of at least 8-12 months of operation before it can be considered stable. Although this is not a rule, it is more difficult to expect a scam to spend a year in marketing and all the expenses to make an exit scam at some point.

I'm primarily referring to instant services like exchanges, mixers, and the like, where transactions are executed within a few minutes to 1-2 hours. Where the service does not have the possibility to collect many large orders at once and come out with a large sum.

[Taskford]

Tomboi has a $10,000 deposit on KycNotList. Contact the site administrator; they might be able to reimburse you for some of your losses.

Unfortunately, these deposits in escrow represent the amount deposited with @LittleMouse.
Edit: Let me verify this information.
Adding a negative trust won't change much. Please create a flag so it will visible to non-registered users.

It seems the value goes down together with current dump happening on the market and in case people want to see the verification post towards that escrow deal made by them here it is https://bitcointalk.org/index.php?topic=5580195.msg66721709#msg66721709

But I don't think funds in escrow can cover up the amount taken to the affected user, since the funds involve is way more bigger.

Crazy to see this happened and this is the reason why its hard to trust new sites like them even if they put some funds on escrow. Because anytime they can take much larger funds then ignore those small deposit they made.

[KycNotList]

Tomboi has a $10,000 deposit on KycNotList. Contact the site administrator; they might be able to reimburse you for some of your losses.

We have already contacted the victim. I have added him to the list of victims eligible for compensation if the exchange does not get in touch within 7 days.

Unfortunately, there are more victims; another victim has also contacted us, having lost $7,000. I have already told him to post on BitcoinTalk to document the number of victims.

[FinneysTrueVision]

https://etherscan.io/tx/0x95bb6b8330e48750ec61e9a7e7facd8497ba4ce3b48fea2d03e96f1f50d35c81

Based on the address this transaction originated from, I believe they might be connected to an obscure, recently launched casino named betKarma. The user betkarma might be their alt account.

betkarma registered some days after tomboi appeared on the forum with the account they took over from a previous owner. The only merits recieved by betkarma are from tomboi. The domains tomboi.io and betkarma.art were both acquired through domain reseller Njalla.

For the onchain connection, I found that the address belonging to tomboi.exchange was using NEAR Intents for liquidity rebalancing. The explorer for NEAR Intents shows that they were using the referral identifier ‘betkarma’.
https://explorer.near-intents.org/?search=0x470e3D115AB20DB88FC87dBc735d886B34DFEbD2

Furthermore, when using the filters on the explorer to search for all transactions using this referral identifier we can find more addresses likely belonging to Tomboi.

These addresses were making large transfers, so liquidity wasn’t a problem. They could have come up with $100k in ETH if they wanted to.

[Perfectbaby]

This is very crazy!
How on earth would they released only 10$ out of 50 ETH swap? I don’t really understand the correlation between 50eth to 10$ Or wait? Were they waiting for the right time to strike after gaining trust from the community for awhile? Well, this is very sympathetic and weird seeing someone swapping 50ETH and back fractions in returns.
This is why you should be applying caution while making used of the swap maybe 1 ETH at a go could help reduce the risk and they have noticed that you often swap higher amounts that is why they targeted you and disappear. Believed me or not they wouldn’t mind rebrand with another name to continue their evil deeds.

[LoyceV]

That's kinda weird because i did lot of swaps with them in past, and large amounts and no problems

The website was barely more than a month old. How can you trust them with "large amounts" many times?

[85pandora]

That's kinda weird because i did lot of swaps with them in past, and large amounts and no problems

The website was barely more than a month old. How can you trust them with "large amounts" many times?

it was few transactions and worked good and after i sent 100k and they disappeared

[LoyceV]

it was few transactions and worked good and after i sent 100k and they disappeared

That's typically how exit scams work: they wait for a large enough deposit, and disappear. I've seen it happening 8 years ago, and unfortunately this will keep happening as long as people trust them with large amounts of money.

That’s exactly why I am not relying on the account itself for credibility and instead focusing on verifiable guarantees:
– $10,000 escrow has been publicly deposited and confirmed

There are not many people on Bitcointalk who I'd trust with $10k, and neither you nor your escrow are on that list.

Two things don't make sense:
-Why return $10?
-Why take the site offline while they could potentially create more victims?