SHOW:
|
|
- or go back to the newest paste.
1 | In this post I'm about to expose a scammer from Lagos, Nigeria, a.k.a. Scammers' Land. | |
2 | ||
3 | Let me just start by saying that I've never believe in HYIPs but a friend of mine told me "Hey, you should really try these! There're HYIPs that pay and those that don't. This does pay!". | |
4 | I ignored him the first 3/4 times because I know these are shady ways to make fast and easy money. But then I tried it because he advised it to me again, and again, and again. | |
5 | So, this is a bot who basically claims: "put X, wait 48hrs, get 150% of X". | |
6 | ||
7 | First time: I put a small amount and everything goes well. | |
8 | Second time: I slighly traise the amount and, still, I regularly get paid. | |
9 | Third time: I put way more and, well, you can guess how it went! No money back! | |
10 | ||
11 | That day the bot (actually, the scammer behind it) magically stopped working and never paid the "investors" who "invested" in it. | |
12 | ||
13 | Oh, it's all clear now: it was a scam, just like I thought. And soon I got a message from my friend who says that I was right and he lost money too. | |
14 | ||
15 | Now, let me tell you a bit about this bot and who's behind it. Because it seems to be connected to sooo many other scam websites and bots. | |
16 | ||
17 | This is the website: https://incrotrade.com/ and here's the Telegram bot: http://telegram.me/Incrotrade_bot | |
18 | https://i.imgur.com/ihgFuLM.png | https://i.imgur.com/pRKwABf.png | |
19 | ||
20 | Now let's take a look at the blockchain. These are the addresses used by the bot: | |
21 | Bitcoin: 1C5h6TYuzm9sEuuShHPR64UhQXPpryeRN9 | |
22 | Ethereum: 0x27a77398d0a8Ad977Eb63C275AFCAdFDf6106Dd0 | |
23 | ||
24 | By taking a look, for example, to the Ethereum address on the blockchain: | |
25 | https://i.imgur.com/CC0Ad5u.png | ETH address used by the scammer (0x27a77398d0a8Ad977Eb63C275AFCAdFDf6106Dd0) | |
26 | ||
27 | The red IN and OUT transactions represents the last paid investment. One person put 1.5 ETH and got his/her 1.5 ETH after 48 hours. | |
28 | All the Ethereum received later, i.e. all the blue-boxed transactions, have never been paid. This is the scammer's loot. | |
29 | The yellow transactions is the scammer moving the scammed money to other addresses of his own. | |
30 | Total scammed: ~ 20 ETH. | |
31 | The scammed funds have been moved to two addresses: | |
32 | 0x0dAE41f4ef79A279B6E3ea6BD116f1BA16FC07b0 (Binance address) | |
33 | 0xef374472F5AD07c3546023FDC03c671793E20B81 | |
34 | ||
35 | The scammed Bitcoins have been moved to this address: | |
36 | 1Hggv6A5zAaahbrvDDjPZ1d14ygE59ctgv | |
37 | ||
38 | Now let's take a closer look at the internal transactions of the ETH address used by the bot: | |
39 | https://i.imgur.com/LIanbwa.png | Internal transactions of the scammer's ETH address. | |
40 | ||
41 | And let's see who they come from: | |
42 | "SCAM ADDRESS USED BY BINOM CORPORATION LIMITED. Please don't send any money to this address and report them for SCAMMING" | |
43 | "how" | |
44 | "Ponzi scheme. Search for Binom Corporation Limited on Google and you'll see. Please report so we keep more people safe. Thanks!" | |
45 | ||
46 | So, it's an address used by BINOM CORPORATION LIMITED, another HYIP that scammed. | |
47 | https://i.imgur.com/JjSKEpBg.png | Binom-corp.com | |
48 | ||
49 | But who's behind all these scams? | |
50 | A Nigerian guy named Afuwape Idris Tunde. | |
51 | ||
52 | https://vimeo.com/307611389 | How I found him | |
53 | ||
54 | By doing a reverse IP lookup for incrotrade.com, here's what I found: | |
55 | https://i.imgur.com/1gE8bMN.png | Other domains created by the scammer | |
56 | ||
57 | If you dig deeper you can easily find that these domains have also been created by him: | |
58 | firsthalifax.com | |
59 | greattd.com | |
60 | harrisonconstructs.com | |
61 | specialmils.com | |
62 | hqirs.com | |
63 | ||
64 | Some details about him: | |
65 | - Full name: Afuwape Idris Tunde | |
66 | - Birth date: 7 April 1993 | |
67 | - Birth place: Abeokuta | |
68 | - Lives in: Lagos, Nigeria | |
69 | - Spoken languages: English, Yoruba | |
70 | - Phones used: Samsung Galaxy A6 Plus, Infinix HOT 4 Lite | |
71 | - E-mails: | |
72 | afuidris@gmail.com (main) | |
73 | davidkoeman96@gmail.com | |
74 | ayindetund@gmail.com | |
75 | tunde2me@hotmail.com | |
76 | idrisshoboyejo@yahoo.com | |
77 | vivian.pump@hotmail.de | |
78 | crazy-moody@hotmail.com | |
79 | april3ram@yahoo.com | |
80 | Kiwimagee93@gmail.com | |
81 | David.Kijewicz@web.de | |
82 | pmjkiwi@aol.com | |
83 | VuongTuVuongTu@yahoo.com | |
84 | - Phone numbers: | |
85 | +234 8164732241 (associated with the Telegram Incrotrade Support account Incrotrade_support1 ) | |
86 | +91 08091630265 | |
87 | +234 08091630265 | |
88 | +1 201377595 | |
89 | +234 09038992070 | |
90 | +91 08135014476 | |
91 | ||
92 | https://vimeo.com/307613746 | Proof of association number-Telegram | |
93 | ||
94 | - Socials: | |
95 | Facebook: https://www.facebook.com/idrisafuwape | |
96 | Medium: https://medium.com/@babatundeafuwape | |
97 | Twitter: https://twitter.com/afuidris | |
98 | Linkedin: https://ng.linkedin.com/in/afuwape-idris-757505115 | |
99 | StackOverflow: https://stackoverflow.com/users/6613198/babatunde-afuwape | |
100 | ||
101 | https://i.imgur.com/09GdvuR.jpg | Here's his WhatsApp (+234 8164732241, number associated with the Telegram Incrotrade Support account Incrotrade_support1) photo. | |
102 | ||
103 | 10 minutes after I contacted him on WhatsApp he removed the photo "for privacy". | |
104 | As soon as I contacted him on Facebook, he deleted his Facebook account as well. I wonder why… | |
105 | And let's look him right in the face: | |
106 | https://imgur.com/a/y0WHTDp | |
107 | ||
108 | Family members: | |
109 | https://www.facebook.com/tella.ebunoluwa <------sister | |
110 | https://www.facebook.com/solomon.daracme <------brother | |
111 | https://www.facebook.com/harbiordun.harfuwarpe <-------brother |