View difference between Paste ID: QwiaYv0X and Gm6rY2ab
SHOW: | | - or go back to the newest paste.
1
In this post I'm about to expose a scammer from Lagos, Nigeria, a.k.a. Scammers' Land.
2
3
Let me just start by saying that I've never believe in HYIPs but a friend of mine told me "Hey, you should really try these! There're HYIPs that pay and those that don't. This does pay!".
4
I ignored him the first 3/4 times because I know these are shady ways to make fast and easy money. But then I tried it because he advised it to me again, and again, and again.
5
So, this is a bot who basically claims: "put X, wait 48hrs, get 150% of X".
6
7
First time: I put a small amount and everything goes well.
8
Second time: I slighly traise the amount and, still, I regularly get paid.
9
Third time: I put way more and, well, you can guess how it went! No money back!
10
11
That day the bot (actually, the scammer behind it) magically stopped working and never paid the "investors" who "invested" in it.
12
13
Oh, it's all clear now: it was a scam, just like I thought. And soon I got a message from my friend who says that I was right and he lost money too.
14
15
Now, let me tell you a bit about this bot and who's behind it. Because it seems to be connected to sooo many other scam websites and bots.
16
17
This is the website: https://incrotrade.com/ and here's the Telegram bot: http://telegram.me/Incrotrade_bot
18
https://i.imgur.com/ihgFuLM.png | https://i.imgur.com/pRKwABf.png
19
20
Now let's take a look at the blockchain. These are the addresses used by the bot:
21
Bitcoin: 1C5h6TYuzm9sEuuShHPR64UhQXPpryeRN9
22
Ethereum: 0x27a77398d0a8Ad977Eb63C275AFCAdFDf6106Dd0
23
24
By taking a look, for example, to the Ethereum address on the blockchain:
25
https://i.imgur.com/CC0Ad5u.png | ETH address used by the scammer (0x27a77398d0a8Ad977Eb63C275AFCAdFDf6106Dd0)
26
27
The red IN and OUT transactions represents the last paid investment. One person put 1.5 ETH and got his/her 1.5 ETH after 48 hours.
28
All the Ethereum received later, i.e. all the blue-boxed transactions, have never been paid. This is the scammer's loot.
29
The yellow transactions is the scammer moving the scammed money to other addresses of his own.
30
Total scammed: ~ 20 ETH.
31
The scammed funds have been moved to two addresses:
32
0x0dAE41f4ef79A279B6E3ea6BD116f1BA16FC07b0 (Binance address)
33
0xef374472F5AD07c3546023FDC03c671793E20B81
34
35
The scammed Bitcoins have been moved to this address:
36
1Hggv6A5zAaahbrvDDjPZ1d14ygE59ctgv
37
38
Now let's take a closer look at the internal transactions of the ETH address used by the bot:
39
https://i.imgur.com/LIanbwa.png | Internal transactions of the scammer's ETH address.
40
41
And let's see who they come from:
42
"SCAM ADDRESS USED BY BINOM CORPORATION LIMITED. Please don't send any money to this address and report them for SCAMMING"
43
"how"
44
"Ponzi scheme. Search for Binom Corporation Limited on Google and you'll see. Please report so we keep more people safe. Thanks!"
45
46
So, it's an address used by BINOM CORPORATION LIMITED, another HYIP that scammed.
47
https://i.imgur.com/JjSKEpBg.png | Binom-corp.com
48
49
But who's behind all these scams?
50
A Nigerian guy named Afuwape Idris Tunde.
51
52
https://vimeo.com/307611389 | How I found him
53
54
By doing a reverse IP lookup for incrotrade.com, here's what I found:
55
https://i.imgur.com/1gE8bMN.png | Other domains created by the scammer
56
57
If you dig deeper you can easily find that these domains have also been created by him:
58
firsthalifax.com
59
greattd.com
60
harrisonconstructs.com
61
specialmils.com
62
hqirs.com
63
64
Some details about him:
65
- Full name: Afuwape Idris Tunde
66
- Birth date: 7 April 1993
67
- Birth place: Abeokuta
68
- Lives in: Lagos, Nigeria
69
- Spoken languages: English, Yoruba
70
- Phones used: Samsung Galaxy A6 Plus, Infinix HOT 4 Lite
71
- E-mails:
72
afuidris@gmail.com (main)
73
davidkoeman96@gmail.com
74
ayindetund@gmail.com
75
tunde2me@hotmail.com
76
idrisshoboyejo@yahoo.com
77
vivian.pump@hotmail.de
78
crazy-moody@hotmail.com
79
april3ram@yahoo.com
80
Kiwimagee93@gmail.com
81
David.Kijewicz@web.de
82
pmjkiwi@aol.com
83
VuongTuVuongTu@yahoo.com
84
- Phone numbers:
85
+234 8164732241 (associated with the Telegram Incrotrade Support account Incrotrade_support1 )
86
+91 08091630265
87
+234 08091630265
88
+1 201377595
89
+234 09038992070
90
+91 08135014476
91
92
https://vimeo.com/307613746 | Proof of association number-Telegram
93
94
- Socials:
95
Facebook: https://www.facebook.com/idrisafuwape
96
Medium: https://medium.com/@babatundeafuwape
97
Twitter: https://twitter.com/afuidris
98
Linkedin: https://ng.linkedin.com/in/afuwape-idris-757505115
99
StackOverflow: https://stackoverflow.com/users/6613198/babatunde-afuwape
100
101
https://i.imgur.com/09GdvuR.jpg | Here's his WhatsApp (+234 8164732241, number associated with the Telegram Incrotrade Support account Incrotrade_support1) photo.
102
103
10 minutes after I contacted him on WhatsApp he removed the photo "for privacy".
104
As soon as I contacted him on Facebook, he deleted his Facebook account as well. I wonder why…
105
And let's look him right in the face:
106
https://imgur.com/a/y0WHTDp
107
108
Family members:
109
https://www.facebook.com/tella.ebunoluwa <------sister
110
https://www.facebook.com/solomon.daracme <------brother
111
https://www.facebook.com/harbiordun.harfuwarpe <-------brother