Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- In this post I'm about to expose a scammer from Lagos, Nigeria, a.k.a. Scammers' Land.
- Let me just start by saying that I've never believe in HYIPs but a friend of mine told me "Hey, you should really try these! There're HYIPs that pay and those that don't. This does pay!".
- I ignored him the first 3/4 times because I know these are shady ways to make fast and easy money. But then I tried it because he advised it to me again, and again, and again.
- So, this is a bot who basically claims: "put X, wait 48hrs, get 150% of X".
- First time: I put a small amount and everything goes well.
- Second time: I slighly traise the amount and, still, I regularly get paid.
- Third time: I put way more and, well, you can guess how it went! No money back!
- That day the bot (actually, the scammer behind it) magically stopped working and never paid the "investors" who "invested" in it.
- Oh, it's all clear now: it was a scam, just like I thought. And soon I got a message from my friend who says that I was right and he lost money too.
- Now, let me tell you a bit about this bot and who's behind it. Because it seems to be connected to sooo many other scam websites and bots.
- This is the website: https://incrotrade.com/ and here's the Telegram bot: http://telegram.me/Incrotrade_bot
- https://i.imgur.com/ihgFuLM.png | https://i.imgur.com/pRKwABf.png
- Now let's take a look at the blockchain. These are the addresses used by the bot:
- Bitcoin: 1C5h6TYuzm9sEuuShHPR64UhQXPpryeRN9
- Ethereum: 0x27a77398d0a8Ad977Eb63C275AFCAdFDf6106Dd0
- By taking a look, for example, to the Ethereum address on the blockchain:
- https://i.imgur.com/CC0Ad5u.png | ETH address used by the scammer (0x27a77398d0a8Ad977Eb63C275AFCAdFDf6106Dd0)
- The red IN and OUT transactions represents the last paid investment. One person put 1.5 ETH and got his/her 1.5 ETH after 48 hours.
- All the Ethereum received later, i.e. all the blue-boxed transactions, have never been paid. This is the scammer's loot.
- The yellow transactions is the scammer moving the scammed money to other addresses of his own.
- Total scammed: ~ 20 ETH.
- The scammed funds have been moved to two addresses:
- 0x0dAE41f4ef79A279B6E3ea6BD116f1BA16FC07b0 (Binance address)
- 0xef374472F5AD07c3546023FDC03c671793E20B81
- The scammed Bitcoins have been moved to this address:
- 1Hggv6A5zAaahbrvDDjPZ1d14ygE59ctgv
- Now let's take a closer look at the internal transactions of the ETH address used by the bot:
- https://i.imgur.com/LIanbwa.png | Internal transactions of the scammer's ETH address.
- And let's see who they come from:
- "SCAM ADDRESS USED BY BINOM CORPORATION LIMITED. Please don't send any money to this address and report them for SCAMMING"
- "how"
- "Ponzi scheme. Search for Binom Corporation Limited on Google and you'll see. Please report so we keep more people safe. Thanks!"
- So, it's an address used by BINOM CORPORATION LIMITED, another HYIP that scammed.
- https://i.imgur.com/JjSKEpBg.png | Binom-corp.com
- But who's behind all these scams?
- A Nigerian guy named Afuwape Idris Tunde.
- https://vimeo.com/307611389 | How I found him
- By doing a reverse IP lookup for incrotrade.com, here's what I found:
- https://i.imgur.com/1gE8bMN.png | Other domains created by the scammer
- If you dig deeper you can easily find that these domains have also been created by him:
- firsthalifax.com
- greattd.com
- harrisonconstructs.com
- specialmils.com
- hqirs.com
- Some details about him:
- - Full name: Afuwape Idris Tunde
- - Birth date: 7 April 1993
- - Birth place: Abeokuta
- - Lives in: Lagos, Nigeria
- - Spoken languages: English, Yoruba
- - Phones used: Samsung Galaxy A6 Plus, Infinix HOT 4 Lite
- - E-mails:
- afuidris@gmail.com (main)
- davidkoeman96@gmail.com
- ayindetund@gmail.com
- tunde2me@hotmail.com
- idrisshoboyejo@yahoo.com
- vivian.pump@hotmail.de
- crazy-moody@hotmail.com
- april3ram@yahoo.com
- Kiwimagee93@gmail.com
- David.Kijewicz@web.de
- pmjkiwi@aol.com
- VuongTuVuongTu@yahoo.com
- - Phone numbers:
- +234 8164732241 (associated with the Telegram Incrotrade Support account Incrotrade_support1 )
- +91 08091630265
- +234 08091630265
- +1 201377595
- +234 09038992070
- +91 08135014476
- https://vimeo.com/307613746 | Proof of association number-Telegram
- - Socials:
- Facebook: https://www.facebook.com/idrisafuwape
- Medium: https://medium.com/@babatundeafuwape
- Twitter: https://twitter.com/afuidris
- Linkedin: https://ng.linkedin.com/in/afuwape-idris-757505115
- StackOverflow: https://stackoverflow.com/users/6613198/babatunde-afuwape
- https://i.imgur.com/09GdvuR.jpg | Here's his WhatsApp (+234 8164732241, number associated with the Telegram Incrotrade Support account Incrotrade_support1) photo.
- 10 minutes after I contacted him on WhatsApp he removed the photo "for privacy".
- As soon as I contacted him on Facebook, he deleted his Facebook account as well. I wonder why…
- And let's look him right in the face:
- https://imgur.com/a/y0WHTDp
- Family members:
- https://www.facebook.com/tella.ebunoluwa <------sister
- https://www.facebook.com/solomon.daracme <------brother
- https://www.facebook.com/harbiordun.harfuwarpe <-------brother
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement